$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json) Hash identifier: DLo/sSvMVhYe1apdTXQRifA6NkfChj6mbtDm8nxqozM= Subject key identifier: 08:29:33:58:C3:F2:FB:89:B7:A0:34:6D:74:90:86:A1:E7:F4:22:FB Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft Manifest number: ED Signing time: Wed 03 Sep 2025 05:52:56 +0000 Manifest this update: Wed 03 Sep 2025 05:52:56 +0000 Manifest next update: Wed 10 Sep 2025 05:52:56 +0000 Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: XVdrwIfenPFqq9ysHfbL6+DdvouNB9By8xjaLTGWiYs=) 2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: Ha/cGz3EuqzsAq4mNf1LJHzYtP6EU2XABOfv8TEGk30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Validity Not Before: Sep 3 05:52:56 2025 GMT Not After : Sep 10 05:52:56 2025 GMT Subject: CN=68b7d7b8-6124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:e1:a0:ba:d6:3e:68:96:e9:d8:83:71:b7: 80:d0:d2:e1:e4:06:cc:ea:bd:a6:a6:bf:a0:b1:c3: ff:ae:45:26:7a:52:2a:ca:8d:43:16:80:75:84:e7: e0:b7:02:3a:03:18:97:46:9f:3f:10:be:44:21:b8: 0f:80:62:51:09:5a:10:60:a4:49:cf:b6:44:b5:c8: 69:48:57:b6:6a:34:0d:a9:d5:37:8e:14:b4:d6:aa: a8:46:c4:47:97:13:9e:8a:95:10:b6:6f:e1:79:84: ca:01:da:8c:e2:23:39:8b:e7:27:1f:23:05:88:1b: 84:a8:78:da:bd:67:9b:eb:60:ad:89:73:cb:4d:c4: 4c:95:b6:cf:85:fc:86:bd:58:4b:f6:67:ee:d3:f1: 2e:1d:dc:02:24:99:cc:aa:91:cc:c3:04:63:3f:0b: 78:bc:2d:a1:3f:30:20:97:f6:66:99:85:ff:6d:39: 12:7c:10:66:7a:e5:55:b3:ec:72:82:0f:f5:1e:20: 34:32:34:73:7d:b4:8f:75:bd:d4:80:b4:0f:0d:a0: d8:5d:1d:c8:13:b7:10:22:02:b2:13:46:d9:46:da: 1e:d5:ee:ba:ec:63:7a:45:86:f6:46:3f:70:6d:46: f9:71:e8:78:f3:6b:84:b1:b1:b5:61:80:34:24:76: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:29:33:58:C3:F2:FB:89:B7:A0:34:6D:74:90:86:A1:E7:F4:22:FB X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0a:e4:07:10:f0:be:84:dc:2c:29:e7:fa:fc:23:45:7b:d0: 13:42:43:8f:fc:1d:2e:87:db:69:67:64:b2:e3:90:11:d8:2f: d3:4a:be:fc:25:4d:9a:bf:4d:fe:18:7d:c7:bd:1e:fe:c5:36: 3f:29:62:da:cf:3f:84:dc:d0:61:86:a6:5f:b9:51:cf:61:83: f3:df:ae:84:bb:15:4c:c0:5c:1c:2e:14:72:a1:1b:c2:48:17: dc:11:f2:71:4c:a5:26:be:8b:0e:f4:67:41:fd:b3:11:81:52: a3:0c:fb:02:53:71:26:bb:42:ff:a9:3d:5b:4b:02:8d:a4:31: c7:f0:ff:0b:47:46:0e:f8:19:58:89:f0:42:a9:dc:4e:38:a4: 8a:84:e4:a6:78:8d:3d:b3:23:e3:24:11:2d:a0:e7:3c:d6:74: 5c:d2:f3:e7:49:8e:0a:60:4b:d1:de:b3:52:89:41:ce:3f:5e: 97:61:78:48:24:84:7a:85:29:70:8b:cc:d0:a5:bf:17:04:56: 82:b4:26:4e:98:23:7e:72:ef:76:71:0a:b6:11:d3:91:19:d3: 76:86:db:1d:bd:be:e4:53:32:3a:b1:e3:e6:4b:66:97:00:15: 88:7f:b9:3d:cd:40:33:9e:5e:cc:36:22:a3:ba:0c:f9:6d:0f: 69:5f:3b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG OTQ2OEQ5NUEwHhcNMjUwOTAzMDU1MjU2WhcNMjUwOTEwMDU1MjU2WjAYMRYwFAYD VQQDEw02OGI3ZDdiOC02MTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28LhoLrWPmiW6diDcbeA0NLh5AbM6r2mpr+gscP/rkUmelIqyo1DFoB1hOfg twI6AxiXRp8/EL5EIbgPgGJRCVoQYKRJz7ZEtchpSFe2ajQNqdU3jhS01qqoRsRH lxOeipUQtm/heYTKAdqM4iM5i+cnHyMFiBuEqHjavWeb62CtiXPLTcRMlbbPhfyG vVhL9mfu0/EuHdwCJJnMqpHMwwRjPwt4vC2hPzAgl/ZmmYX/bTkSfBBmeuVVs+xy gg/1HiA0MjRzfbSPdb3UgLQPDaDYXR3IE7cQIgKyE0bZRtoe1e667GN6RYb2Rj9w bUb5ceh482uEsbG1YYA0JHaPNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgpM1jD 8vuJt6A0bXSQhqHn9CL7MB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy85OUM3NDg4ODI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0Fj cmNNNUU0UDhxVzM1Um8yVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8CuQHEPC+hNwsKef6/CNFe9ATQkOP/B0uh9tpZ2Sy45AR2C/TSr78 JU2av03+GH3HvR7+xTY/KWLazz+E3NBhhqZfuVHPYYPz366EuxVMwFwcLhRyoRvC SBfcEfJxTKUmvosO9GdB/bMRgVKjDPsCU3Emu0L/qT1bSwKNpDHH8P8LR0YO+BlY ifBCqdxOOKSKhOSmeI09syPjJBEtoOc81nRc0vPnSY4KYEvR3rNSiUHOP16XYXhI JIR6hSlwi8zQpb8XBFaCtCZOmCN+cu92cQq2EdORGdN2htsdvb7kUzI6sePmS2aX ABWIf7k9zUAznl7MNiKjugz5bQ9pXzuH -----END CERTIFICATE-----Generated at Thu Sep 4 15:54:26 2025 by rpki-client