$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: YDAEm9LaetOfU9oPkfc407ZMzYqtYozQ6KjDI2UTk3I= Subject key identifier: 2B:E3:EB:54:30:CE:49:AE:84:01:41:1B:05:72:61:25:E4:40:FF:16 Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 0521 Signing time: Tue 16 Sep 2025 23:56:27 +0000 Manifest this update: Tue 16 Sep 2025 23:56:27 +0000 Manifest next update: Tue 23 Sep 2025 23:56:27 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: MAFvuNBEbwfuJTYT7nixZ5P7kt6JVG+7lLdAZFSPqtU=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: Sep 16 23:56:27 2025 GMT Not After : Sep 23 23:56:27 2025 GMT Subject: CN=68c9f92b-e4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:fc:7c:d8:ef:71:14:29:9a:bf:a6:68:d6: 9a:0f:ef:c6:c1:a4:50:52:ab:b3:a9:fd:ce:6a:2f: 8b:77:bf:23:a2:79:6f:54:0b:3d:75:ab:ad:c5:f1: 11:9d:a6:f1:5f:36:6f:6a:cf:e1:eb:0b:9d:3a:c0: 49:52:f0:51:fb:39:d3:00:fe:19:48:71:1b:bd:1d: 57:50:5a:26:cb:dc:b2:ab:7b:42:45:89:0e:c6:dc: 9b:a0:bb:f0:b5:66:c5:81:d7:f7:2f:0b:d4:29:f7: 5f:d8:70:4b:16:a6:40:99:f1:44:d1:a2:2a:dc:4f: 3e:25:9e:1c:96:de:6f:7d:27:c9:19:94:bb:f6:fd: f1:8b:ef:1a:89:02:dd:e0:56:66:3c:57:dd:91:89: 7d:9c:87:bd:4f:45:07:5e:e1:e3:01:e3:d6:e5:2b: a9:c3:1b:a2:6f:0d:64:24:d6:f5:85:db:fd:ad:43: 87:37:21:71:08:c6:48:d4:46:84:23:98:62:5a:3a: 4a:1d:0d:ba:c2:c7:5a:df:49:09:b6:35:23:ac:da: 58:d3:43:95:01:8e:32:33:65:6a:31:ba:d4:82:f7: ae:cf:42:36:f8:48:af:14:34:e6:9e:6f:57:d0:fc: 00:d9:74:eb:dd:cc:dc:f8:ce:47:69:2c:a6:68:c9: ac:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:EB:54:30:CE:49:AE:84:01:41:1B:05:72:61:25:E4:40:FF:16 X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:04:73:7b:1c:50:59:f2:c3:c9:17:70:cc:e2:73:06:f1:41: 78:ec:ab:49:1b:cc:10:72:35:c6:27:58:d2:3d:10:11:6f:bf: 77:1e:a1:9b:f3:e6:1a:af:75:0b:97:d5:bd:ef:aa:18:24:9c: e9:d9:2c:02:4e:c6:b2:21:f4:1b:f4:b8:ef:e9:e4:d0:29:89: a2:5e:99:c6:98:86:a7:c4:ff:2e:a3:5e:d6:d2:27:15:41:fc: c6:c8:b7:20:a5:da:8f:93:ce:46:50:4d:0a:30:76:4a:d1:b5: 7a:e0:a8:b5:bb:c2:1d:a1:9e:f4:d1:b8:2b:64:88:b3:b9:10: 9c:07:41:29:2d:f7:e7:38:e8:09:c9:d1:5d:d1:f8:c3:ea:ac: 8e:7e:20:35:15:0f:ea:63:1e:e8:39:7e:3b:f6:f7:eb:82:63: 5b:6c:c0:c6:7d:60:ec:08:d0:a0:8c:11:40:2c:b7:fd:d9:48: 2e:35:80:0a:b5:ad:fa:49:63:47:25:6e:48:7d:5f:d7:a2:cf: 66:18:71:15:f6:17:46:4b:a4:b1:6f:ec:49:db:f3:65:89:be: 70:c7:48:fa:62:2c:52:8b:6f:76:f8:ec:a0:4a:36:37:20:4d: b6:b9:d2:be:96:2b:5c:fb:d1:82:ed:36:70:88:9f:c7:51:d4: 0c:0d:d3:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUwOTE2MjM1NjI3WhcNMjUwOTIzMjM1NjI3WjAYMRYwFAYD VQQDEw02OGM5ZjkyYi1lNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx38fNjvcRQpmr+maNaaD+/GwaRQUquzqf3Oai+Ld78jonlvVAs9dautxfER nabxXzZvas/h6wudOsBJUvBR+znTAP4ZSHEbvR1XUFomy9yyq3tCRYkOxtyboLvw tWbFgdf3LwvUKfdf2HBLFqZAmfFE0aIq3E8+JZ4clt5vfSfJGZS79v3xi+8aiQLd 4FZmPFfdkYl9nIe9T0UHXuHjAePW5Supwxuibw1kJNb1hdv9rUOHNyFxCMZI1EaE I5hiWjpKHQ26wsda30kJtjUjrNpY00OVAY4yM2VqMbrUgveuz0I2+EivFDTmnm9X 0PwA2XTr3czc+M5HaSymaMms8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvj61Qw zkmuhAFBGwVyYSXkQP8WMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQBHN7HFBZ8sPJF3DM4nMG8UF47KtJG8wQcjXGJ1jSPRARb793HqGb 8+Yar3ULl9W976oYJJzp2SwCTsayIfQb9Ljv6eTQKYmiXpnGmIanxP8uo17W0icV QfzGyLcgpdqPk85GUE0KMHZK0bV64Ki1u8IdoZ700bgrZIizuRCcB0EpLffnOOgJ ydFd0fjD6qyOfiA1FQ/qYx7oOX479vfrgmNbbMDGfWDsCNCgjBFALLf92UguNYAK ta36SWNHJW5IfV/Xos9mGHEV9hdGS6Sxb+xJ2/Nlib5wx0j6YixSi292+OygSjY3 IE22udK+litc+9GC7TZwiJ/HUdQMDdP1 -----END CERTIFICATE-----Generated at Thu Sep 18 19:12:30 2025 by rpki-client