$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: G1S0+qvrKMy7tvi2/KgdPSw+4aoStJLu4822LL5OFmw= Subject key identifier: 6E:07:9A:BD:FC:79:60:E9:81:BE:32:50:87:0C:AB:B7:3E:58:2F:83 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 0887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 0852 Signing time: Thu 04 Sep 2025 21:03:19 +0000 Manifest this update: Thu 04 Sep 2025 21:03:18 +0000 Manifest next update: Thu 11 Sep 2025 21:03:18 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: p3j3XNaNjfvwNXXSG4pr++7GJeEa0NytO7Q2yQ0yWTE=) 2: EF40C4AC404611EFA2014651C4F9AE02.roa (hash: czaYuAZrmltxjeFq6mD06OZKMChDyKz2TsFDBFMIxYw=) 3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: IR0gL9HuGQPasCSDeDXOONGQSnX5FqddD0h9jerJFTk=) 4: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: RgPF5melWGZf5AFZ9hv+NJPKC/EOsjcNRxGMLnUAhvk=) 5: 35D16082404911EFBC4C610EC4F9AE02.roa (hash: CZyYnpg8fZRv7/01XkAyfUiNYVCaEIGt11t+Ww7CLyk=) 6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: 5tsj3TAsFxb8qTqVXGn9He+Eq077vpR4YIaSiSHaTqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Sep 4 21:03:18 2025 GMT Not After : Sep 11 21:03:18 2025 GMT Subject: CN=68b9fe96-5364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:ac:97:01:eb:2b:fe:12:d7:8c:60:58:99: 3b:a6:8f:bd:42:4b:12:d1:b5:10:72:47:43:ca:a5: 0a:ce:d4:ec:f2:97:b1:63:79:a4:ce:a3:0d:c7:62: a8:a1:63:7c:d6:7f:ba:97:69:83:51:cc:47:8c:19: f1:59:04:26:52:11:9e:a1:5e:f7:ca:7e:e3:57:48: 7e:15:7a:f6:48:0c:66:d2:bf:d8:f5:0b:e8:de:4c: 9c:57:c5:12:b0:5d:da:dc:24:49:27:71:b1:c8:dd: cf:59:e6:b9:3f:5a:05:f3:f6:86:9d:eb:bb:3b:f5: 35:fe:53:b5:ab:82:df:8f:09:5b:ce:83:85:4c:a6: c8:f3:94:bc:b0:e8:61:1d:d1:64:81:0f:2a:b8:46: 48:67:f2:bb:b1:78:e0:93:5c:76:cd:fe:b2:59:36: fe:70:18:8a:b0:2f:52:36:d2:ff:b4:66:08:a0:0e: d0:35:76:04:90:03:21:d0:27:d1:32:1b:3a:11:51: 5c:f1:1b:c1:17:45:9c:f6:2b:7b:cf:df:05:ca:96: 03:7e:f7:26:7f:23:32:ca:2f:d9:8d:ce:f2:ba:d2: fc:77:da:a2:96:7b:d0:e6:e7:87:f3:96:d2:6a:3c: cb:5f:c6:77:96:64:3f:20:19:aa:1a:ef:90:0c:fe: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:07:9A:BD:FC:79:60:E9:81:BE:32:50:87:0C:AB:B7:3E:58:2F:83 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:30:db:cc:04:9d:af:75:53:ac:5b:29:a7:81:0c:16:d3:e3: 68:f6:aa:55:a1:f1:80:3b:99:08:d9:ab:8f:b6:75:53:0b:3e: a1:f8:3a:3d:e6:12:cd:f5:e1:e5:ac:74:63:02:a7:e2:73:78: 0e:db:db:54:ac:c6:71:9b:6f:ca:87:a3:47:76:1c:54:20:d2: ac:08:9f:26:f8:90:39:bc:ba:3a:be:9d:28:cc:fe:18:cc:bf: be:d8:01:7a:6d:64:b7:49:70:a6:e7:a1:43:ed:b3:c9:65:dc: be:a8:32:61:0a:7d:fe:5e:f3:3d:08:f1:fc:24:13:61:8c:2a: b0:5a:3c:75:2f:42:f5:64:14:39:9c:23:80:bb:f3:e4:f5:b6: 24:79:a1:5a:a2:ee:e8:76:85:fc:10:4b:9a:fd:c3:91:8d:13: 4b:50:d6:0e:27:32:e8:34:dd:f6:e9:b3:33:38:56:f3:57:ff: 47:a7:8d:29:e5:a2:f8:bc:39:51:6e:ac:44:3c:16:44:4e:bd: 99:bb:ef:1e:84:85:22:7a:44:46:42:70:7e:6c:b9:cc:14:62: 2d:bf:50:2e:60:4f:4b:68:bb:9a:1f:bc:75:52:69:6d:71:09: 26:78:ce:59:1c:d8:8e:e8:99:cd:6d:7d:1f:3e:71:60:64:16: a5:bc:b1:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUwOTA0MjEwMzE4WhcNMjUwOTExMjEwMzE4WjAYMRYwFAYD VQQDEw02OGI5ZmU5Ni01MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9qslwHrK/4S14xgWJk7po+9QksS0bUQckdDyqUKztTs8pexY3mkzqMNx2Ko oWN81n+6l2mDUcxHjBnxWQQmUhGeoV73yn7jV0h+FXr2SAxm0r/Y9Qvo3kycV8US sF3a3CRJJ3GxyN3PWea5P1oF8/aGneu7O/U1/lO1q4LfjwlbzoOFTKbI85S8sOhh HdFkgQ8quEZIZ/K7sXjgk1x2zf6yWTb+cBiKsC9SNtL/tGYIoA7QNXYEkAMh0CfR Mhs6EVFc8RvBF0Wc9it7z98FypYDfvcmfyMyyi/Zjc7yutL8d9qilnvQ5ueH85bS ajzLX8Z3lmQ/IBmqGu+QDP7z/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4Hmr38 eWDpgb4yUIcMq7c+WC+DMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiMNvMBJ2vdVOsWymngQwW0+No9qpVofGAO5kI2auPtnVTCz6h+Do9 5hLN9eHlrHRjAqfic3gO29tUrMZxm2/Kh6NHdhxUINKsCJ8m+JA5vLo6vp0ozP4Y zL++2AF6bWS3SXCm56FD7bPJZdy+qDJhCn3+XvM9CPH8JBNhjCqwWjx1L0L1ZBQ5 nCOAu/Pk9bYkeaFaou7odoX8EEua/cORjRNLUNYOJzLoNN326bMzOFbzV/9Hp40p 5aL4vDlRbqxEPBZETr2Zu+8ehIUiekRGQnB+bLnMFGItv1AuYE9LaLuaH7x1Umlt cQkmeM5ZHNiO6JnNbX0fPnFgZBalvLFE -----END CERTIFICATE-----Generated at Sat Sep 6 16:46:22 2025 by rpki-client