$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: tRRi+SDZTPtfiYDhlvabg3ILX1w2eXw67zNruEweM4E= Subject key identifier: 43:B2:78:FB:90:A4:73:38:12:6C:61:8A:82:62:FE:CB:BD:44:1F:B1 Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: C2 Signing time: Mon 15 Sep 2025 06:20:16 +0000 Manifest this update: Mon 15 Sep 2025 06:20:16 +0000 Manifest next update: Mon 22 Sep 2025 06:20:16 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: 9ZmiuBbtokQJT9aCsSULFfWArbKg8j130xFT25hvgps=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 06:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Sep 15 06:20:16 2025 GMT Not After : Sep 22 06:20:16 2025 GMT Subject: CN=68c7b020-f0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b7:a3:98:8b:ad:47:58:8e:05:de:61:fb:77: c8:89:b4:95:44:ad:84:96:a5:9e:9a:f2:ec:89:73: 5a:01:0a:b3:14:85:1c:15:bc:51:2c:84:9a:97:a5: e6:43:d3:9b:c0:52:aa:36:e1:e9:1a:35:d6:4b:5a: f2:7b:b2:df:15:17:0b:11:e9:3b:db:88:6c:e4:f7: cf:2b:e3:0f:b6:7d:0e:60:54:c7:6d:3c:98:15:68: a8:8e:59:b8:3d:c7:34:9c:2a:9e:f1:20:13:bd:ca: 3d:03:f8:2e:c3:21:35:20:27:1e:60:2c:ca:93:14: 80:33:94:42:f5:95:b7:da:77:7c:94:17:71:c9:df: 2b:f0:11:ca:04:84:c9:4f:b4:42:32:a7:1c:8b:cb: f3:e3:b4:5e:eb:71:7c:89:9a:7e:a1:86:9e:5e:b3: 59:b1:2a:37:cc:cd:fd:38:73:f6:51:24:bc:61:ab: 0d:87:76:40:20:f0:a7:4a:c1:d8:85:01:d4:5c:2c: fe:4f:94:e6:26:00:a8:2d:ea:39:e0:e5:77:48:69: b0:16:68:3c:05:cc:da:05:64:27:2d:89:81:ce:20: 96:18:b3:2e:7b:2d:35:69:56:73:99:3b:86:08:0b: 5c:f4:50:80:13:55:c9:17:e9:93:bc:96:30:44:e8: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B2:78:FB:90:A4:73:38:12:6C:61:8A:82:62:FE:CB:BD:44:1F:B1 X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:12:5e:6a:18:c9:c8:c6:50:24:4e:60:79:8d:5d:35:6d:f3: 2f:79:06:f7:95:45:8b:fa:37:83:00:76:a5:47:99:25:8b:03: 72:cf:ff:8b:01:3e:82:5b:a7:50:9f:3e:7f:4f:bd:93:b8:c7: 46:91:34:e9:05:45:9c:85:2c:3f:da:48:48:c4:ed:48:6a:f7: e4:ff:b7:5b:28:75:27:d4:50:dc:40:05:b9:37:c7:de:c4:08: ef:8f:43:47:a5:3d:13:23:a1:a3:d5:1d:35:41:88:1b:3c:a5: 85:81:d1:f7:2f:75:12:dd:35:99:34:f7:f2:c8:d5:64:de:d7: a6:91:69:af:96:34:62:2c:2f:06:ac:0a:49:72:4c:ac:13:52: 42:88:68:18:83:b7:90:af:bf:22:a8:45:8f:88:9a:9a:c2:88: 61:04:0b:f9:73:f1:3d:45:c3:63:d1:5e:92:29:b7:58:f0:1c: d6:02:b6:a4:f9:49:8b:aa:05:1b:16:e6:c4:96:a7:94:b3:75: b8:6c:47:8e:23:3a:e3:6d:a7:3a:7f:3c:76:c4:b6:89:c6:d9: cb:df:09:34:fa:3b:75:98:b4:d0:d1:85:4d:d7:3d:cd:93:9b: 1b:c6:23:80:16:0e:49:8f:bf:85:f3:28:97:0e:82:04:d6:2a: 92:33:7e:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDIyNTlGODcwOTZFNDBBREIzQzg0MTgwRTI4QjU2QzNF ODgyMkY2NTEwHhcNMjUwOTE1MDYyMDE2WhcNMjUwOTIyMDYyMDE2WjAYMRYwFAYD VQQDEw02OGM3YjAyMC1mMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9bejmIutR1iOBd5h+3fIibSVRK2ElqWemvLsiXNaAQqzFIUcFbxRLISal6Xm Q9ObwFKqNuHpGjXWS1rye7LfFRcLEek724hs5PfPK+MPtn0OYFTHbTyYFWiojlm4 Pcc0nCqe8SATvco9A/guwyE1ICceYCzKkxSAM5RC9ZW32nd8lBdxyd8r8BHKBITJ T7RCMqcci8vz47Re63F8iZp+oYaeXrNZsSo3zM39OHP2USS8YasNh3ZAIPCnSsHY hQHUXCz+T5TmJgCoLeo54OV3SGmwFmg8BczaBWQnLYmBziCWGLMuey01aVZzmTuG CAtc9FCAE1XJF+mTvJYwROgchQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOyePuQ pHM4EmxhioJi/su9RB+xMB8GA1UdIwQYMBaAFCJZ+HCW5ArbPIQYDii1bD6IIvZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS8zQTlDOEE1NjZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0czhoQmdPS0xWc1BvZ2k5 bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTlsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS8zQTlDOEE1NjZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0 czhoQmdPS0xWc1BvZ2k5bEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApEl5qGMnIxlAkTmB5jV01bfMveQb3lUWL+jeDAHalR5kliwNyz/+L AT6CW6dQnz5/T72TuMdGkTTpBUWchSw/2khIxO1Iavfk/7dbKHUn1FDcQAW5N8fe xAjvj0NHpT0TI6Gj1R01QYgbPKWFgdH3L3US3TWZNPfyyNVk3temkWmvljRiLC8G rApJckysE1JCiGgYg7eQr78iqEWPiJqawohhBAv5c/E9RcNj0V6SKbdY8BzWArak +UmLqgUbFubElqeUs3W4bEeOIzrjbac6fzx2xLaJxtnL3wk0+jt1mLTQ0YVN1z3N k5sbxiOAFg5Jj7+F8yiXDoIE1iqSM36G -----END CERTIFICATE-----Generated at Wed Sep 17 02:49:17 2025 by rpki-client