$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: kaD9a2ISzirjj5dQxiP+9Zxe07lTuO8YY0nMOAF0sMY= Subject key identifier: D7:CC:04:FA:D7:32:8B:98:B1:ED:42:67:30:6E:C5:53:9C:6E:11:46 Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 190D Signing time: Sat 02 Aug 2025 16:35:22 +0000 Manifest this update: Sat 02 Aug 2025 16:35:22 +0000 Manifest next update: Sat 09 Aug 2025 16:35:22 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: T2JkZJGi/jmg0A3vRbw9bYN7aaxUMPBYjxIoHGysY+U=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: CS+09tEdeSx7uIOBkaLSiPeVYQX/xw7ybPJk0cnYVHY=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: mbcYtTY7pzkjLAPzzBYkqLR1semAFFI9aiFhIVq/OQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6423 (0x1917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Aug 2 16:35:22 2025 GMT Not After : Aug 9 16:35:22 2025 GMT Subject: CN=688e3e4a-979f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:ff:15:52:6d:a1:0c:e2:a5:2a:75:dc:ea: 06:49:30:34:dc:a5:ee:6b:eb:07:7e:89:43:d6:41: 7c:f1:af:b1:bc:b8:cf:73:7f:b2:cf:9a:85:6f:bd: b4:1c:a4:b3:c4:cc:74:05:1b:0e:91:cf:99:14:ce: b7:15:49:d9:55:db:8c:cb:7a:a3:7c:fa:97:02:71: 6a:0e:05:b6:e9:a2:a7:80:81:33:ce:59:92:b3:a1: 96:a2:81:45:46:06:0c:ef:89:3a:fa:0a:0b:7c:3f: f8:98:3f:a8:ec:8c:0e:51:5c:53:4e:1f:1f:80:81: 6d:63:b7:bf:50:1f:bc:e8:13:03:01:75:46:ff:94: c6:cd:2d:6c:47:5b:5a:cf:3e:27:32:db:2b:df:85: 00:9f:a1:45:75:d1:cf:ba:51:69:2f:f1:99:cc:01: b0:b1:2e:4a:9d:21:3e:e4:63:95:19:79:29:5c:67: 81:4b:e3:71:2b:35:21:dd:e9:3e:2b:9e:9a:b3:31: e3:e4:4e:9e:94:ee:96:0c:db:e4:a7:1d:a9:d8:70: 92:8b:d0:49:2a:95:0d:9c:7f:af:63:8b:48:3c:9e: 9e:26:ca:ff:b5:bc:09:59:14:c7:43:a3:7f:79:f6: 1d:3c:58:25:10:4d:85:e2:95:9b:46:8c:4d:a8:e3: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CC:04:FA:D7:32:8B:98:B1:ED:42:67:30:6E:C5:53:9C:6E:11:46 X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f0:b9:bb:a8:68:1d:45:8a:93:18:66:da:04:b1:7e:5e:5e: 02:4a:af:1c:9f:67:ba:29:04:35:dd:90:46:6a:00:2b:d6:7b: 6a:a3:a2:bd:89:8d:6e:18:87:8d:a9:3f:39:3e:74:5c:12:83: b7:bf:7a:bd:cc:f7:64:24:2d:a5:ae:94:9d:a2:04:81:08:81: a5:51:7d:c1:39:43:3c:f0:ce:95:10:43:cd:ce:51:40:1c:8b: 8b:ae:a5:8c:4c:ba:28:71:be:fd:a9:5a:ed:d3:68:40:d1:51: f7:21:d0:4b:c9:61:5f:09:b9:70:94:2a:27:08:f7:1e:3e:cd: 2e:92:74:c7:39:09:06:c5:9a:82:f1:7c:2f:aa:06:69:d5:fa: 29:88:86:e8:b2:0b:17:05:0e:4c:43:04:d5:15:59:d0:3d:df: a0:76:d8:5a:f3:b0:a0:3e:6e:94:4c:80:98:e4:b2:f8:16:82: ae:9b:b1:55:0f:f1:47:9b:78:5b:4d:f2:2c:81:f2:b7:bc:a4: c6:57:76:22:94:6c:9c:ee:23:81:88:a4:72:4d:d2:78:ca:61: b2:12:af:61:be:00:f8:11:a3:75:ce:ba:bd:0f:e0:54:4e:00: 6b:dd:b0:ed:11:31:68:28:ab:6f:2f:f5:09:a0:3f:88:a1:e2: 6a:e6:81:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUwODAyMTYzNTIyWhcNMjUwODA5MTYzNTIyWjAYMRYwFAYD VQQDEw02ODhlM2U0YS05NzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqr/FVJtoQzipSp13OoGSTA03KXua+sHfolD1kF88a+xvLjPc3+yz5qFb720 HKSzxMx0BRsOkc+ZFM63FUnZVduMy3qjfPqXAnFqDgW26aKngIEzzlmSs6GWooFF RgYM74k6+goLfD/4mD+o7IwOUVxTTh8fgIFtY7e/UB+86BMDAXVG/5TGzS1sR1ta zz4nMtsr34UAn6FFddHPulFpL/GZzAGwsS5KnSE+5GOVGXkpXGeBS+NxKzUh3ek+ K56aszHj5E6elO6WDNvkpx2p2HCSi9BJKpUNnH+vY4tIPJ6eJsr/tbwJWRTHQ6N/ efYdPFglEE2F4pWbRoxNqOMcPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfMBPrX MouYse1CZzBuxVOcbhFGMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc8Lm7qGgdRYqTGGbaBLF+Xl4CSq8cn2e6KQQ13ZBGagAr1ntqo6K9 iY1uGIeNqT85PnRcEoO3v3q9zPdkJC2lrpSdogSBCIGlUX3BOUM88M6VEEPNzlFA HIuLrqWMTLoocb79qVrt02hA0VH3IdBLyWFfCblwlConCPcePs0uknTHOQkGxZqC 8XwvqgZp1fopiIbosgsXBQ5MQwTVFVnQPd+gdtha87CgPm6UTICY5LL4FoKum7FV D/FHm3hbTfIsgfK3vKTGV3YilGyc7iOBiKRyTdJ4ymGyEq9hvgD4EaN1zrq9D+BU TgBr3bDtETFoKKtvL/UJoD+IoeJq5oG3 -----END CERTIFICATE-----Generated at Sun Aug 3 00:51:29 2025 by rpki-client