$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: /rAIQCVMfybCO+THT5uw+CnkH2iqTYbMSPag+aIHAnc= Subject key identifier: 24:FA:EB:A2:37:FA:8C:8E:B4:D8:B2:A1:89:CC:27:F1:BB:7C:0E:02 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 0375 Signing time: Sun 07 Sep 2025 01:17:06 +0000 Manifest this update: Sun 07 Sep 2025 01:17:05 +0000 Manifest next update: Sun 14 Sep 2025 01:17:05 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: w05p6d3Ur7lgUXXtBACj2Pe2xhichKFzjX6AYvECIxE=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Sep 7 01:17:05 2025 GMT Not After : Sep 14 01:17:05 2025 GMT Subject: CN=68bcdd12-cb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:ad:63:11:33:66:58:74:10:1b:b1:38:9f: b4:2f:de:1c:81:68:02:f0:eb:94:5b:54:54:78:96: 6c:29:a2:61:fb:b6:f1:62:ae:e5:94:06:90:70:8e: 2c:87:c4:a3:7d:66:60:e9:59:28:3c:84:23:4a:8c: 0a:94:6d:40:8e:07:29:50:b5:79:e5:1d:64:c6:dd: 4b:74:09:3d:54:e2:5b:65:4d:12:bd:ea:f0:ac:51: 8d:cf:c5:23:8b:62:da:cb:fa:79:09:f3:1f:52:e1: ad:e9:a1:58:c0:c5:46:10:6d:c8:de:bb:ef:77:79: 9f:1a:1c:0e:19:b2:40:4b:78:1a:8e:58:a0:11:57: 61:66:8b:e7:99:73:70:37:52:10:4a:4b:9f:dd:24: ab:e3:38:40:c2:10:5f:91:b7:b7:0f:6a:73:85:8b: e0:41:4f:57:a9:35:df:5c:44:21:c1:77:72:7e:54: 60:2f:fb:35:fe:97:8f:39:85:51:0b:c4:c5:e1:b8: 2a:62:d2:b8:d0:5f:70:aa:b2:b0:8f:a9:f6:db:cc: 47:75:64:42:2a:6a:8e:08:8d:c6:ff:6c:9a:dd:a3: b3:48:a0:17:a0:3e:45:8c:e1:91:32:be:b6:65:29: 11:17:ff:cc:ea:28:65:5d:60:77:81:e4:b6:d8:c0: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:EB:A2:37:FA:8C:8E:B4:D8:B2:A1:89:CC:27:F1:BB:7C:0E:02 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bd:01:31:96:0f:ec:c7:26:64:e1:86:ad:dd:b3:ee:b7:4d: bd:73:65:ea:0d:95:93:d2:7e:f3:19:77:2f:0d:0a:78:59:8a: 2f:2e:ae:6c:38:a2:6b:30:53:26:ac:25:2c:4b:b6:48:2f:64: dc:22:3d:ba:f0:c8:3b:95:c5:16:74:d9:a1:eb:4e:8c:fa:3b: c5:76:3c:3e:c7:dd:13:b8:ef:cb:6a:a6:ae:27:30:ea:95:36: a8:58:4b:33:3a:62:ec:55:d8:39:e4:1e:21:9c:e4:b4:7e:fb: 1c:81:cc:8f:f7:72:80:5a:9c:78:0b:b3:3d:7d:d7:a5:01:5f: ee:52:ea:c1:82:50:70:3e:52:10:a4:c0:f5:06:46:09:1d:a9: df:e6:ba:ce:61:58:3b:cd:ff:79:dc:43:fe:fa:98:a1:97:3d: 08:b7:da:bf:bf:38:70:28:42:55:83:17:1c:49:d7:36:8d:4d: 86:e5:f4:1c:f4:5e:d1:b6:d9:ca:8c:17:f1:a8:3a:b3:92:d4: fa:87:cf:91:4c:23:fb:37:b2:5e:b2:de:d8:a4:ad:5c:6f:ab: 5d:c4:16:47:6c:40:34:64:7f:2a:a2:18:98:e5:20:05:63:07: b4:32:50:1c:f2:c4:a9:87:0c:71:0b:df:e9:c8:4c:f9:3d:74: f4:34:f8:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwOTA3MDExNzA1WhcNMjUwOTE0MDExNzA1WjAYMRYwFAYD VQQDEw02OGJjZGQxMi1jYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPmtYxEzZlh0EBuxOJ+0L94cgWgC8OuUW1RUeJZsKaJh+7bxYq7llAaQcI4s h8SjfWZg6VkoPIQjSowKlG1AjgcpULV55R1kxt1LdAk9VOJbZU0SverwrFGNz8Uj i2Lay/p5CfMfUuGt6aFYwMVGEG3I3rvvd3mfGhwOGbJAS3gajligEVdhZovnmXNw N1IQSkuf3SSr4zhAwhBfkbe3D2pzhYvgQU9XqTXfXEQhwXdyflRgL/s1/pePOYVR C8TF4bgqYtK40F9wqrKwj6n228xHdWRCKmqOCI3G/2ya3aOzSKAXoD5FjOGRMr62 ZSkRF//M6ihlXWB3geS22MCqLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT666I3 +oyOtNiyoYnMJ/G7fA4CMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdvQExlg/sxyZk4Yat3bPut029c2XqDZWT0n7zGXcvDQp4WYovLq5s OKJrMFMmrCUsS7ZIL2TcIj268Mg7lcUWdNmh606M+jvFdjw+x90TuO/LaqauJzDq lTaoWEszOmLsVdg55B4hnOS0fvscgcyP93KAWpx4C7M9fdelAV/uUurBglBwPlIQ pMD1BkYJHanf5rrOYVg7zf953EP++pihlz0It9q/vzhwKEJVgxccSdc2jU2G5fQc 9F7RttnKjBfxqDqzktT6h8+RTCP7N7Jest7YpK1cb6tdxBZHbEA0ZH8qohiY5SAF Ywe0MlAc8sSphwxxC9/pyEz5PXT0NPgI -----END CERTIFICATE-----Generated at Sun Sep 7 14:32:03 2025 by rpki-client