$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json) Hash identifier: MduP5VHgtWuQYZx+nE4YAN1MnEKJ0z6Y/6Zc3iP0gDg= Subject key identifier: B2:FB:3E:A1:C5:83:2F:3D:95:9E:8B:59:1F:58:B5:6C:84:8D:58:AE Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Certificate serial: 0C0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft Manifest number: 0C09 Signing time: Sun 24 Aug 2025 18:42:39 +0000 Manifest this update: Sun 24 Aug 2025 18:42:39 +0000 Manifest next update: Sun 31 Aug 2025 18:42:39 +0000 Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: Lz5LdAP8IElpGb8wgQ/uJeJOOCtiHhrMjJuuQ1+vGpc=) 2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Kec3OJ0yXeD5eottWlXfmKbDVOHd3PQe3ZSjrmCo8jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Validity Not Before: Aug 24 18:42:39 2025 GMT Not After : Aug 31 18:42:39 2025 GMT Subject: CN=68ab5d1f-3463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e8:90:b6:36:69:15:2d:09:68:22:4b:db:40: 94:94:8f:23:45:2d:c8:34:11:8f:43:ee:db:9f:04: 8a:2e:21:2d:cd:23:16:80:c2:75:79:f3:e9:a4:a9: 95:5d:63:9a:7c:20:e5:02:d8:2d:93:bb:ce:db:a3: 11:d0:27:5f:ff:9c:81:1e:6f:ee:b8:55:63:cc:f1: af:ae:67:70:2b:2f:80:e7:53:53:b0:bc:98:34:8c: 32:74:92:25:f4:5b:a1:06:a9:07:da:fe:5c:d3:c4: f1:40:55:52:c9:84:dd:12:35:23:f6:fa:3b:30:20: b4:95:e1:4f:95:3a:e5:b8:1a:3d:d8:29:a5:9a:cc: b6:ad:e4:db:09:9b:73:5b:d3:92:0b:9e:9b:78:b6: a9:70:92:01:f6:4e:68:16:05:3f:17:08:cf:b7:a0: 4d:37:49:67:17:49:ac:d2:bc:75:9b:03:bd:fd:8b: b7:57:47:c3:b9:d5:86:c6:58:98:89:76:c7:46:29: 82:b2:d3:91:80:d6:1f:43:21:b5:00:a7:7d:33:da: 0a:2b:b2:60:b1:af:62:96:fb:33:69:92:65:b5:b3: 45:ca:4f:1e:b0:a9:e9:c4:98:0b:53:ca:1d:66:ea: 29:a3:a7:69:42:93:81:01:2f:35:b4:eb:1d:59:3b: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:3E:A1:C5:83:2F:3D:95:9E:8B:59:1F:58:B5:6C:84:8D:58:AE X509v3 Authority Key Identifier: keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:30:32:fc:a7:5b:71:6f:1a:6e:e2:90:1b:7b:04:bf:44:b6: 0b:b2:25:6d:52:ab:02:66:8f:30:f9:9f:ed:68:33:22:80:17: 89:95:38:69:26:23:31:e3:a1:02:d2:2b:e2:b8:6d:4d:e2:ba: a8:b3:42:fd:8a:5a:0e:b5:c3:9c:0f:57:bb:cf:d8:6a:7b:2a: 81:d2:ea:59:db:a2:20:56:fc:36:fa:2a:b0:0c:d0:fb:c4:9e: d1:14:35:96:f1:10:f3:1c:66:30:9a:3e:40:9d:65:7a:cb:49: 63:7c:c4:3b:10:f2:1d:39:a7:f9:63:51:e0:11:5c:74:ba:82: 9b:e2:a4:56:45:a0:2d:cd:90:3d:a1:b0:27:e5:ca:8e:92:5c: 51:18:95:be:47:37:10:0c:f9:bc:61:b2:64:9e:1f:9f:81:7f: ee:a3:fd:5b:cd:d1:05:1a:4a:1a:43:4a:54:1b:e3:ed:31:cb: 2d:3d:c5:aa:1a:11:2e:ea:5a:88:55:41:97:ac:d3:77:81:7b: ba:5f:f7:bd:f8:e5:d3:31:9e:a8:b3:dd:d6:10:fc:23:f8:9e: f4:39:3b:2d:1b:90:42:da:5a:65:b4:74:e4:18:f1:fa:d3:be: 65:bb:9b:c2:d5:2d:46:9e:4f:6c:6a:9e:59:14:55:ae:72:29: 45:54:84:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG RjhDMDg5RTMwHhcNMjUwODI0MTg0MjM5WhcNMjUwODMxMTg0MjM5WjAYMRYwFAYD VQQDEw02OGFiNWQxZi0zNDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uiQtjZpFS0JaCJL20CUlI8jRS3INBGPQ+7bnwSKLiEtzSMWgMJ1efPppKmV XWOafCDlAtgtk7vO26MR0Cdf/5yBHm/uuFVjzPGvrmdwKy+A51NTsLyYNIwydJIl 9FuhBqkH2v5c08TxQFVSyYTdEjUj9vo7MCC0leFPlTrluBo92Cmlmsy2reTbCZtz W9OSC56beLapcJIB9k5oFgU/FwjPt6BNN0lnF0ms0rx1mwO9/Yu3V0fDudWGxliY iXbHRimCstORgNYfQyG1AKd9M9oKK7Jgsa9ilvszaZJltbNFyk8esKnpxJgLU8od Zuopo6dpQpOBAS81tOsdWTvFKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLL7PqHF gy89lZ6LWR9YtWyEjViuMB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4 MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5 c043alhxVFAwdlhfakFpZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjMDL8p1txbxpu4pAbewS/RLYLsiVtUqsCZo8w+Z/taDMigBeJlThp JiMx46EC0iviuG1N4rqos0L9iloOtcOcD1e7z9hqeyqB0upZ26IgVvw2+iqwDND7 xJ7RFDWW8RDzHGYwmj5AnWV6y0ljfMQ7EPIdOaf5Y1HgEVx0uoKb4qRWRaAtzZA9 obAn5cqOklxRGJW+RzcQDPm8YbJknh+fgX/uo/1bzdEFGkoaQ0pUG+PtMcstPcWq GhEu6lqIVUGXrNN3gXu6X/e9+OXTMZ6os93WEPwj+J70OTstG5BC2lpltHTkGPH6 075lu5vC1S1Gnk9sap5ZFFWucilFVIT6 -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:36 2025 by rpki-client