$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: B7bTSDfreivoDchmsXW34npdOeqs09nRuZe2aLMo68Q= Subject key identifier: DE:F3:43:0F:0B:BC:59:96:DE:49:57:6B:60:D4:86:18:1F:97:7C:20 Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: A6 Signing time: Wed 23 Jul 2025 06:32:41 +0000 Manifest this update: Wed 23 Jul 2025 06:32:41 +0000 Manifest next update: Wed 30 Jul 2025 06:32:41 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: HMa13QsNEgkkPNuodqA2yvBF2uzGspbg2rUg2m7Zd4Q=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 06:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Jul 23 06:32:41 2025 GMT Not After : Jul 30 06:32:41 2025 GMT Subject: CN=68808209-1e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:42:56:22:f8:b0:a1:89:10:94:8b:21:1f: 36:2a:ba:0f:59:38:c0:5e:0b:72:3e:de:03:60:26: 7f:e7:fb:28:81:83:d2:f8:4b:a0:5c:69:46:5b:f9: 94:d0:a7:6e:e0:7e:7a:91:43:9d:06:19:86:f0:7b: 8e:ae:ec:fa:aa:32:ad:51:4a:c5:8d:d1:40:6e:5c: e8:ba:67:ed:33:7c:0d:35:31:40:7a:a1:01:db:d9: 42:49:a5:93:10:ab:b4:c0:32:7b:90:01:f6:7c:ae: ac:76:8e:8d:61:9f:6e:1b:e8:e7:7f:e1:40:96:dc: 2f:7f:f5:46:61:57:4d:aa:a9:d0:00:b2:e8:a7:1a: 14:4e:6c:a9:80:a5:c2:7a:1c:bd:05:46:7b:28:5b: 64:0f:79:4d:af:ee:ab:2c:9b:87:43:81:b1:9e:7a: d1:1f:fb:70:48:9a:59:fd:5a:78:d4:a9:3a:48:7a: a2:15:ad:8c:b6:c8:7f:82:6d:02:cb:cc:13:25:27: 7a:75:d8:43:15:85:43:f6:ee:42:5d:9e:00:4d:a1: 4f:aa:ed:4f:9c:a6:5e:ef:12:33:a1:28:b3:ec:c2: f5:b1:b0:c9:b1:c0:c9:ef:dd:64:e2:50:65:b6:2f: 0e:e6:31:83:9f:02:72:81:a6:05:44:c9:32:3b:0b: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F3:43:0F:0B:BC:59:96:DE:49:57:6B:60:D4:86:18:1F:97:7C:20 X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4a:9b:04:ce:e5:a4:94:c8:7b:91:5c:6f:12:12:de:89:96: a5:f9:29:cc:62:22:4a:cc:c8:fc:29:dd:a8:85:87:d0:67:ad: fc:7e:d8:6d:fe:75:b7:70:5f:99:e9:b5:be:d0:f6:65:c2:30: 22:4e:99:da:2b:38:24:cc:5a:22:54:72:75:1a:c4:54:4a:f3: bb:50:bb:60:15:12:07:22:47:4e:1a:db:1f:14:ca:cd:d0:7b: 98:b4:9b:7d:81:65:7c:b0:d0:45:2d:48:0e:cf:63:d7:da:dd: 04:00:7e:54:ea:c0:2a:20:53:8b:73:52:49:a6:b7:f9:e5:1e: 9e:b6:f6:f6:a3:ac:6b:7c:ce:fa:99:43:e2:36:07:00:69:cd: 74:ff:8e:aa:c3:ec:77:fc:60:94:a5:bb:b9:50:e4:fe:a7:d1: 9e:f2:b3:0f:f1:34:55:df:c2:ef:9d:fe:8e:59:25:03:dc:3f: a8:fb:ec:1a:00:62:43:b5:4d:39:ab:02:af:c9:ff:d8:95:54: 63:82:d6:dc:b1:53:6e:93:4f:43:96:00:d8:76:e8:56:85:8d: ea:1f:85:49:60:0c:f4:d1:d9:3f:67:ba:a0:34:81:74:7b:70: 22:49:3d:e2:f5:64:f6:36:d2:fd:82:83:7d:84:f4:32:d5:0b: 97:e3:61:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDIyNTlGODcwOTZFNDBBREIzQzg0MTgwRTI4QjU2QzNF ODgyMkY2NTEwHhcNMjUwNzIzMDYzMjQxWhcNMjUwNzMwMDYzMjQxWjAYMRYwFAYD VQQDEw02ODgwODIwOS0xZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/dCViL4sKGJEJSLIR82KroPWTjAXgtyPt4DYCZ/5/sogYPS+EugXGlGW/mU 0Kdu4H56kUOdBhmG8HuOruz6qjKtUUrFjdFAblzoumftM3wNNTFAeqEB29lCSaWT EKu0wDJ7kAH2fK6sdo6NYZ9uG+jnf+FAltwvf/VGYVdNqqnQALLopxoUTmypgKXC ehy9BUZ7KFtkD3lNr+6rLJuHQ4GxnnrRH/twSJpZ/Vp41Kk6SHqiFa2Mtsh/gm0C y8wTJSd6ddhDFYVD9u5CXZ4ATaFPqu1PnKZe7xIzoSiz7ML1sbDJscDJ791k4lBl ti8O5jGDnwJygaYFRMkyOwsmHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7zQw8L vFmW3klXa2DUhhgfl3wgMB8GA1UdIwQYMBaAFCJZ+HCW5ArbPIQYDii1bD6IIvZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS8zQTlDOEE1NjZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0czhoQmdPS0xWc1BvZ2k5 bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTlsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS8zQTlDOEE1NjZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0 czhoQmdPS0xWc1BvZ2k5bEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuSpsEzuWklMh7kVxvEhLeiZal+SnMYiJKzMj8Kd2ohYfQZ638ftht /nW3cF+Z6bW+0PZlwjAiTpnaKzgkzFoiVHJ1GsRUSvO7ULtgFRIHIkdOGtsfFMrN 0HuYtJt9gWV8sNBFLUgOz2PX2t0EAH5U6sAqIFOLc1JJprf55R6etvb2o6xrfM76 mUPiNgcAac10/46qw+x3/GCUpbu5UOT+p9Ge8rMP8TRV38Lvnf6OWSUD3D+o++wa AGJDtU05qwKvyf/YlVRjgtbcsVNuk09DlgDYduhWhY3qH4VJYAz00dk/Z7qgNIF0 e3AiST3i9WT2NtL9goN9hPQy1QuX42Ha -----END CERTIFICATE-----Generated at Thu Jul 24 12:14:21 2025 by rpki-client