$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: 3Y0xWErYyz/JdhoIOaTwPAEYDUBeHtHvutszs0V7oVw= Subject key identifier: FC:48:3F:92:0A:C6:2B:43:77:CF:78:41:67:B6:95:31:D1:94:FD:BB Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 0573 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 0567 Signing time: Thu 04 Sep 2025 23:36:50 +0000 Manifest this update: Thu 04 Sep 2025 23:36:49 +0000 Manifest next update: Thu 11 Sep 2025 23:36:49 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: FTSeVcHVsY6ByQU47whsF0ZUcqOFvzZ2VcGFnQmdPLc=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Sep 4 23:36:49 2025 GMT Not After : Sep 11 23:36:49 2025 GMT Subject: CN=68ba2292-da13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:07:b5:8e:ac:df:04:c4:6a:68:fa:1e:ec: 49:1d:76:04:84:bd:66:c9:a4:4d:6d:29:a6:62:ba: aa:ed:0f:c0:57:5c:cc:4e:52:89:9e:0b:d6:ef:b8: e3:7a:9c:ae:e5:78:19:a1:ce:08:23:0b:70:d2:de: ca:88:69:fa:d6:ba:6d:5f:44:6f:42:53:2a:13:fe: c6:7d:f3:d0:22:fa:7e:57:ba:59:29:e3:3c:fc:12: 2e:07:46:94:3f:17:6f:53:c2:3e:d2:34:33:cc:2a: 9b:f5:f7:25:42:03:83:e3:10:a5:b3:8f:d2:fe:c1: 37:1f:b2:2a:5f:43:8b:6d:b7:23:39:83:2a:fb:ef: 58:45:3b:b6:74:56:d5:b4:d0:2b:3b:d2:5d:92:15: 44:f0:9f:3c:d8:5f:67:4d:a7:85:05:17:dd:88:39: 0b:2e:d9:12:73:bd:32:a7:25:fa:eb:23:bc:71:47: b4:be:20:f1:25:65:36:67:ca:fd:9b:a5:d2:09:d7: 4b:f8:64:4b:d5:5d:fb:35:3b:26:9b:d9:8a:cf:a8: 52:ba:08:52:ab:73:18:33:8c:72:7f:c6:25:e3:19: a7:3c:5e:a7:1a:ba:d6:14:32:ac:34:ee:0c:dd:b0: 14:55:c2:39:50:0b:ec:ff:9c:d2:b5:5e:26:7e:b2: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:48:3F:92:0A:C6:2B:43:77:CF:78:41:67:B6:95:31:D1:94:FD:BB X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:37:75:25:cf:f8:7e:14:8b:f6:23:2a:f1:07:50:de:9e:99: 4c:af:d4:68:e1:02:88:b4:1c:76:85:0e:28:19:54:dd:20:bf: f8:00:d2:d4:50:68:f4:bf:c4:0e:f5:98:ff:a4:3d:67:f4:47: 6e:4c:34:1a:a1:3c:7b:10:cd:87:f3:cf:34:5c:be:95:c9:33: fd:8f:33:bd:45:35:a6:bd:f1:82:3b:a7:c0:73:a7:ee:06:e7: 64:80:db:c9:1a:9c:c0:f6:e9:bc:93:8d:b9:d1:d6:9b:eb:69: ea:1f:93:c1:6e:19:cb:de:a9:6d:21:ef:63:11:fd:05:bb:5a: 06:da:e7:ac:f0:04:fc:04:1e:04:97:c9:62:d4:c3:66:f3:9f: e2:92:ed:a1:b3:6f:7d:fd:2a:99:a5:4e:6e:12:a1:03:ce:c9: 3c:e6:f5:26:1c:07:4a:9b:a6:4b:e3:cf:87:02:6e:ce:d6:20: 8a:3d:c6:a6:a4:11:ec:44:9d:d4:3e:d6:bd:9e:11:11:c1:5e: 3b:35:a5:74:93:3e:34:f5:3d:13:57:7e:a7:be:29:d8:70:64: 91:e4:20:11:2f:da:19:a5:33:bf:cd:a5:4e:31:44:13:71:f3: af:0d:10:35:a2:1d:65:86:44:79:11:c5:93:a0:99:99:1e:3b: bf:f6:9d:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUwOTA0MjMzNjQ5WhcNMjUwOTExMjMzNjQ5WjAYMRYwFAYD VQQDEw02OGJhMjI5Mi1kYTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OEHtY6s3wTEamj6HuxJHXYEhL1myaRNbSmmYrqq7Q/AV1zMTlKJngvW77jj epyu5XgZoc4IIwtw0t7KiGn61rptX0RvQlMqE/7GffPQIvp+V7pZKeM8/BIuB0aU PxdvU8I+0jQzzCqb9fclQgOD4xCls4/S/sE3H7IqX0OLbbcjOYMq++9YRTu2dFbV tNArO9JdkhVE8J882F9nTaeFBRfdiDkLLtkSc70ypyX66yO8cUe0viDxJWU2Z8r9 m6XSCddL+GRL1V37NTsmm9mKz6hSughSq3MYM4xyf8Yl4xmnPF6nGrrWFDKsNO4M 3bAUVcI5UAvs/5zStV4mfrIdvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxIP5IK xitDd894QWe2lTHRlP27MB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0N3Ulz/h+FIv2IyrxB1DenplMr9Ro4QKItBx2hQ4oGVTdIL/4ANLU UGj0v8QO9Zj/pD1n9EduTDQaoTx7EM2H8880XL6VyTP9jzO9RTWmvfGCO6fAc6fu BudkgNvJGpzA9um8k4250dab62nqH5PBbhnL3qltIe9jEf0Fu1oG2ues8AT8BB4E l8li1MNm85/iku2hs299/SqZpU5uEqEDzsk85vUmHAdKm6ZL48+HAm7O1iCKPcam pBHsRJ3UPta9nhERwV47NaV0kz409T0TV36nvinYcGSR5CARL9oZpTO/zaVOMUQT cfOvDRA1oh1lhkR5EcWToJmZHju/9p0R -----END CERTIFICATE-----Generated at Sat Sep 6 13:45:24 2025 by rpki-client