$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: gQN53z7LHI0P6VVR1sJ8cPM2e/FJWkhAjQh27q/UtiI= Subject key identifier: 5B:53:53:41:2C:9C:F7:8F:77:F5:6C:F6:D0:01:CB:D9:32:4D:E3:26 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 0784 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 06FC Signing time: Thu 04 Sep 2025 22:40:25 +0000 Manifest this update: Thu 04 Sep 2025 22:40:25 +0000 Manifest next update: Thu 11 Sep 2025 22:40:25 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: lZVp/hf/nm20DmfBXxabREAQcRHjVhO3p5tvKZkNfn0=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: j0xrsPerWvAmq5TrfXCCAXxhmW7uoVGvVR9TrXHmI/c=) 3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) 4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) 7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: IjGCmqfeR6dWCwkTJerprQJ5jh4UJlY6ZGEM3z029yo=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: I8a2tYdChMy0m+hYeHyoEloBcDOZ+JhPIXTugtfIp8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Sep 4 22:40:25 2025 GMT Not After : Sep 11 22:40:25 2025 GMT Subject: CN=68ba1559-16e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:47:95:b8:06:26:aa:86:89:7f:b0:1f:f4:53: 3f:46:a3:b2:ca:83:93:93:2b:69:b6:c2:2f:21:a2: ae:c4:69:d3:9c:ac:8b:0b:c4:eb:0e:4e:e1:01:65: 0c:7b:29:13:aa:d3:5a:26:58:2d:30:44:ba:e9:af: 58:43:90:c7:b2:ec:bf:fd:9c:57:a5:58:b4:84:73: 9a:c0:64:37:b7:96:4f:01:0e:65:95:f2:08:b8:a5: f1:fa:ee:52:99:b4:30:d5:50:b8:3a:3e:2e:1f:ad: d9:bb:4f:41:00:92:b3:ec:51:03:a3:b0:b2:c1:b5: 4d:d2:3d:58:4d:0b:81:f2:ff:7e:c1:40:2f:0f:6b: ee:35:70:e1:ce:4b:94:e3:bb:68:f8:0c:ac:ca:0b: 46:b3:4a:45:6a:55:e0:4d:6d:ae:a1:7a:d9:83:2c: 99:1b:31:84:db:dc:9e:c4:d0:c5:03:21:12:4f:75: 60:91:54:9e:44:7a:04:d6:a1:04:a0:1b:20:6c:63: 9a:eb:e4:2c:a9:b7:67:0c:da:ca:ef:aa:42:9f:71: a5:69:3b:89:ef:ff:a7:e6:8c:af:f6:08:37:51:bf: 01:7e:23:8f:4a:39:4e:01:74:e5:07:f8:ae:12:b0: 45:2a:e5:77:f0:09:2a:50:9b:67:44:5c:8e:94:f3: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:53:53:41:2C:9C:F7:8F:77:F5:6C:F6:D0:01:CB:D9:32:4D:E3:26 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:5a:d3:47:c0:da:9d:4b:f8:da:fe:81:97:08:72:c5:6a:1e: fa:89:7e:81:2b:cb:72:01:50:ab:2c:80:79:fe:11:be:b7:1f: 00:c1:21:c9:5a:55:c6:63:d6:06:1c:19:b6:03:34:08:22:96: 50:bb:25:1e:13:69:e2:d8:60:63:b0:f8:b0:22:11:c9:2a:45: a9:9a:fe:33:0d:ad:e9:99:c8:a5:6a:d1:9e:a0:ea:fb:b1:9f: 7e:83:f6:fe:4c:fd:d3:67:04:c1:57:77:33:19:14:df:ca:cb: 79:39:8a:5d:31:9d:f4:6f:b7:c4:7f:0c:ca:8c:24:7f:7d:9c: bb:ab:f6:19:f5:53:4a:a4:a8:9e:8d:f5:a2:6d:8f:a1:3d:f5: 28:a4:e0:ec:ce:54:53:5c:56:7f:60:ec:92:93:56:55:a9:bd: e3:70:a2:0c:9e:3f:95:4e:78:10:a6:8f:89:bf:c9:28:55:a5: 65:95:72:55:40:da:61:11:9e:9d:47:76:94:b7:54:21:de:d8: 4e:b5:80:2a:67:23:79:55:57:fd:db:21:f0:2e:63:9d:6f:b8: 99:87:64:23:67:b1:b4:68:71:7f:8f:c3:2c:17:4f:21:39:13: 75:4c:3e:7c:53:a6:3d:af:f6:3e:44:2d:bf:21:c6:6e:67:3c: 45:b2:fa:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwOTA0MjI0MDI1WhcNMjUwOTExMjI0MDI1WjAYMRYwFAYD VQQDEw02OGJhMTU1OS0xNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EeVuAYmqoaJf7Af9FM/RqOyyoOTkytptsIvIaKuxGnTnKyLC8TrDk7hAWUM eykTqtNaJlgtMES66a9YQ5DHsuy//ZxXpVi0hHOawGQ3t5ZPAQ5llfIIuKXx+u5S mbQw1VC4Oj4uH63Zu09BAJKz7FEDo7CywbVN0j1YTQuB8v9+wUAvD2vuNXDhzkuU 47to+AysygtGs0pFalXgTW2uoXrZgyyZGzGE29yexNDFAyEST3VgkVSeRHoE1qEE oBsgbGOa6+QsqbdnDNrK76pCn3GlaTuJ7/+n5oyv9gg3Ub8BfiOPSjlOAXTlB/iu ErBFKuV38AkqUJtnRFyOlPOQMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtTU0Es nPePd/Vs9tABy9kyTeMmMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFWtNHwNqdS/ja/oGXCHLFah76iX6BK8tyAVCrLIB5/hG+tx8AwSHJ WlXGY9YGHBm2AzQIIpZQuyUeE2ni2GBjsPiwIhHJKkWpmv4zDa3pmcilatGeoOr7 sZ9+g/b+TP3TZwTBV3czGRTfyst5OYpdMZ30b7fEfwzKjCR/fZy7q/YZ9VNKpKie jfWibY+hPfUopODszlRTXFZ/YOySk1ZVqb3jcKIMnj+VTngQpo+Jv8koVaVllXJV QNphEZ6dR3aUt1Qh3thOtYAqZyN5VVf92yHwLmOdb7iZh2QjZ7G0aHF/j8MsF08h ORN1TD58U6Y9r/Y+RC2/IcZuZzxFsvp9 -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:21 2025 by rpki-client