$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: rptDiyWKZbpON595RcB7lnblCbzzhoQ5SurOQO1qrEo= Subject key identifier: 98:AE:CC:23:E8:66:22:B7:D9:EB:DA:E0:87:70:DC:59:74:37:BC:99 Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 0134 Signing time: Sun 07 Sep 2025 05:00:43 +0000 Manifest this update: Sun 07 Sep 2025 05:00:43 +0000 Manifest next update: Sun 14 Sep 2025 05:00:43 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: CP8UTK25zXURTs8liOu1rwnVRn9upad9hOAqLj5T544=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Sep 7 05:00:43 2025 GMT Not After : Sep 14 05:00:43 2025 GMT Subject: CN=68bd117b-c6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:dc:1a:c5:37:dc:be:33:b0:e9:61:ea:8b: 4e:7f:bc:b7:37:37:65:26:7d:87:59:f8:41:9d:2b: 4b:ec:23:a2:45:35:22:9b:89:33:1f:f7:e1:aa:17: f0:a5:7d:69:19:4b:9f:70:c7:57:af:16:fa:f3:44: 02:3c:67:3f:ee:70:b8:18:73:e7:d1:08:55:fd:7c: 52:2b:ec:1b:d0:85:55:73:14:f4:a0:96:ed:92:8d: 71:bd:f3:da:6c:3d:7f:d1:42:6d:bd:3a:d8:55:49: 0a:de:d0:c2:91:e3:21:e4:32:f8:84:88:a2:5b:14: 25:89:16:13:b9:da:1c:bc:23:20:d1:9b:72:7f:46: da:0b:e0:ee:65:81:3e:97:03:aa:10:bb:79:b3:10: d4:79:db:8b:06:f5:16:fe:17:ce:81:59:c7:8e:92: f8:f5:8b:c3:0d:94:70:a8:6d:2b:34:00:31:73:f4: 44:d7:84:79:0b:4c:a4:da:40:6d:57:f8:e9:c5:b9: 51:17:87:d4:0f:6d:b3:ad:63:cc:23:c6:92:63:39: 06:6d:ef:db:b0:da:68:39:51:0d:c1:bf:24:60:02: 30:37:e8:e8:b2:59:a4:fd:1c:e2:33:05:73:db:79: 26:ed:d6:8d:68:52:fb:21:e6:67:29:63:88:97:a9: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AE:CC:23:E8:66:22:B7:D9:EB:DA:E0:87:70:DC:59:74:37:BC:99 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:74:b3:9c:65:14:4f:fc:ca:74:0c:e5:97:f2:88:cf:99:03: 80:f9:4f:65:17:0a:5c:4e:4b:df:48:80:48:c9:57:c6:a7:37: 58:ef:86:ba:b3:5e:33:78:b6:f9:5e:b3:eb:6c:19:ef:6a:5c: 25:e4:46:97:4a:41:ed:48:ef:f6:cc:25:d2:0c:d1:d2:4c:46: b4:8c:11:75:9b:4f:68:31:3e:2b:58:3f:70:db:52:39:3a:68: 6c:7c:d0:46:47:49:98:ac:f3:4f:a8:38:cd:53:75:ef:36:3e: f3:7b:07:cc:e9:ee:c1:37:35:f2:c9:21:12:c2:1d:03:41:95: b2:e1:56:9c:7e:06:3f:8a:49:50:8d:ee:20:90:f5:67:22:91: 20:e0:29:a4:16:ae:15:d4:56:fa:58:06:48:b6:9b:e2:55:6c: 84:1c:0e:fa:33:6c:95:0c:96:06:f7:2c:5a:70:cf:47:d5:29: ac:99:93:e5:01:19:1e:43:36:a5:32:6f:da:20:82:46:bb:d6: d8:de:0f:80:5b:36:fd:0d:cd:9e:c8:30:1b:75:0c:8a:da:b9: 01:d8:7a:10:bd:27:cd:67:71:d1:7c:a6:d6:9c:52:c9:4b:f1: 23:41:74:d6:2c:d2:db:88:bb:bc:5f:cc:ca:78:d8:5c:89:5f: c1:a2:66:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjUwOTA3MDUwMDQzWhcNMjUwOTE0MDUwMDQzWjAYMRYwFAYD VQQDEw02OGJkMTE3Yi1jNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9HcGsU33L4zsOlh6otOf7y3NzdlJn2HWfhBnStL7COiRTUim4kzH/fhqhfw pX1pGUufcMdXrxb680QCPGc/7nC4GHPn0QhV/XxSK+wb0IVVcxT0oJbtko1xvfPa bD1/0UJtvTrYVUkK3tDCkeMh5DL4hIiiWxQliRYTudocvCMg0Ztyf0baC+DuZYE+ lwOqELt5sxDUeduLBvUW/hfOgVnHjpL49YvDDZRwqG0rNAAxc/RE14R5C0yk2kBt V/jpxblRF4fUD22zrWPMI8aSYzkGbe/bsNpoOVENwb8kYAIwN+joslmk/RziMwVz 23km7daNaFL7IeZnKWOIl6k9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiuzCPo ZiK32eva4Idw3Fl0N7yZMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFdLOcZRRP/Mp0DOWX8ojPmQOA+U9lFwpcTkvfSIBIyVfGpzdY74a6 s14zeLb5XrPrbBnvalwl5EaXSkHtSO/2zCXSDNHSTEa0jBF1m09oMT4rWD9w21I5 OmhsfNBGR0mYrPNPqDjNU3XvNj7zewfM6e7BNzXyySESwh0DQZWy4VacfgY/iklQ je4gkPVnIpEg4CmkFq4V1Fb6WAZItpviVWyEHA76M2yVDJYG9yxacM9H1SmsmZPl ARkeQzalMm/aIIJGu9bY3g+AWzb9Dc2eyDAbdQyK2rkB2HoQvSfNZ3HRfKbWnFLJ S/EjQXTWLNLbiLu8X8zKeNhciV/BomZD -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:47 2025 by rpki-client