$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: ElBJmlA+AkfWjh6s8256lElCqyZV7264eLNItGU/7P0= Subject key identifier: 4B:95:93:7F:B0:71:14:10:E3:40:65:5F:41:08:47:88:36:B4:AD:4C Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 04E0 Signing time: Sun 07 Sep 2025 00:08:12 +0000 Manifest this update: Sun 07 Sep 2025 00:08:11 +0000 Manifest next update: Sun 14 Sep 2025 00:08:11 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: NO2O3BxhP2AuHALKZJMQWVMF6u0DSzro1cRbytnSvpk=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Sep 7 00:08:11 2025 GMT Not After : Sep 14 00:08:11 2025 GMT Subject: CN=68bccceb-8324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:00:61:f6:87:35:3d:67:58:58:b1:3a:9c: 85:21:01:dc:79:1d:c6:3e:62:61:49:9d:f2:d1:92: f4:5a:24:ce:9b:bd:12:f5:6e:bb:f6:3e:e2:50:24: ad:c2:d0:1b:52:66:7e:d9:28:c3:02:2c:72:c7:a0: 20:87:78:24:39:5e:d0:89:84:d7:76:3f:42:43:17: d1:8c:c2:58:86:5d:31:4a:8a:e7:96:3d:34:28:63: 8a:81:03:03:ee:52:8e:30:2b:4f:35:b6:78:b7:42: cc:40:3b:03:05:87:3c:1a:3a:63:a0:4a:8d:fa:6d: 3a:68:87:16:45:53:1e:a5:09:8d:5b:47:d2:80:86: 89:6b:2e:27:91:34:a1:cd:d0:12:6d:68:29:0e:a1: 49:24:9e:e1:8b:2b:ec:54:b9:35:e9:07:fc:33:a1: a5:0c:42:8e:d6:0d:cb:68:48:7c:d2:5e:60:97:80: ce:b9:37:36:43:8a:ba:95:e7:d1:40:5c:8d:2b:a2: cc:b4:38:14:9c:d2:5f:09:c9:0c:b1:d0:ce:27:c7: 8f:47:d6:7c:97:65:4f:a8:e2:8b:5a:f4:40:c9:50: 6f:ad:db:cf:30:31:fb:de:61:d7:e5:90:57:1d:38: b7:45:8f:80:89:9d:50:eb:a1:00:3d:05:c0:30:3d: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:95:93:7F:B0:71:14:10:E3:40:65:5F:41:08:47:88:36:B4:AD:4C X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:30:f2:d4:ea:b3:9e:ad:ee:28:06:f5:5d:45:50:fa:b2:e5: f4:e7:16:c9:b4:b1:1a:59:5d:9c:89:bf:f5:02:47:45:0a:16: 8f:11:bf:26:f7:08:11:31:dc:b6:43:a3:72:e0:18:9f:df:b3: b7:72:b6:2b:fa:39:f8:1f:3b:d7:89:53:35:98:c9:4f:a9:24: a9:ec:77:dc:01:b0:68:d5:ed:10:e3:65:63:a7:25:11:84:51: 5c:22:95:a0:b3:8a:8e:1c:d8:40:99:b0:f0:3e:4c:13:01:36: de:88:8d:ca:31:c8:e6:1a:19:b4:93:5a:73:b3:f2:4a:05:05: 6b:35:bd:1f:0c:d3:fe:ec:ec:a7:f4:01:a8:95:e6:a6:ae:0c: 60:e4:57:32:ec:86:db:e8:b5:55:29:2f:0b:e3:2b:9e:e6:cf: 9c:d5:26:88:4b:d3:e6:d5:43:a6:5a:63:36:95:61:1b:f0:98: 2c:59:8c:63:cc:ba:d2:f2:2a:c1:ff:24:6a:a8:a3:7e:32:47: 9d:78:93:3b:a1:87:b7:1f:cf:a0:69:d2:e3:c8:5b:be:b3:95: 35:ac:21:67:b9:91:be:d8:56:f5:d0:a6:a0:05:11:9f:98:16: 27:c6:1c:23:1b:11:f0:b5:9a:74:0e:46:72:96:ae:31:4e:6f: 2e:df:86:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUwOTA3MDAwODExWhcNMjUwOTE0MDAwODExWjAYMRYwFAYD VQQDEw02OGJjY2NlYi04MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUkAYfaHNT1nWFixOpyFIQHceR3GPmJhSZ3y0ZL0WiTOm70S9W679j7iUCSt wtAbUmZ+2SjDAixyx6Agh3gkOV7QiYTXdj9CQxfRjMJYhl0xSornlj00KGOKgQMD 7lKOMCtPNbZ4t0LMQDsDBYc8GjpjoEqN+m06aIcWRVMepQmNW0fSgIaJay4nkTSh zdASbWgpDqFJJJ7hiyvsVLk16Qf8M6GlDEKO1g3LaEh80l5gl4DOuTc2Q4q6lefR QFyNK6LMtDgUnNJfCckMsdDOJ8ePR9Z8l2VPqOKLWvRAyVBvrdvPMDH73mHX5ZBX HTi3RY+AiZ1Q66EAPQXAMD0UxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuVk3+w cRQQ40BlX0EIR4g2tK1MMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSMPLU6rOere4oBvVdRVD6suX05xbJtLEaWV2cib/1AkdFChaPEb8m 9wgRMdy2Q6Ny4Bif37O3crYr+jn4HzvXiVM1mMlPqSSp7HfcAbBo1e0Q42VjpyUR hFFcIpWgs4qOHNhAmbDwPkwTATbeiI3KMcjmGhm0k1pzs/JKBQVrNb0fDNP+7Oyn 9AGoleamrgxg5Fcy7Ibb6LVVKS8L4yue5s+c1SaIS9Pm1UOmWmM2lWEb8JgsWYxj zLrS8irB/yRqqKN+MkedeJM7oYe3H8+gadLjyFu+s5U1rCFnuZG+2Fb10KagBRGf mBYnxhwjGxHwtZp0DkZylq4xTm8u34b6 -----END CERTIFICATE-----Generated at Mon Sep 8 08:43:31 2025 by rpki-client