$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: m4PSHq42u01q/J+AWcsSFyqLvNH56WMuvfKYjE/be10= Subject key identifier: CB:02:4D:6B:9C:23:A4:39:93:4B:AA:7C:BD:59:73:23:37:E2:11:06 Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 018F Signing time: Fri 19 Sep 2025 04:02:15 +0000 Manifest this update: Fri 19 Sep 2025 04:02:15 +0000 Manifest next update: Fri 26 Sep 2025 04:02:15 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: kih1oRkpGOx363EAiA+MFTbyxz74WW+mBt2y3DQJhcE=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: MRW+pxq2rIQWqz0eewlHDxgHTLGzIYysThVYJrp2BDc=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: Fv5yzaRaYXm7EcaxJ9d0RT5up4myTdlO4UPvIXp3L88=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: mGJXgF/PKI9FEq/cPxsdqAyVl2gi74HVL2n1gwNWhDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Sep 19 04:02:15 2025 GMT Not After : Sep 26 04:02:15 2025 GMT Subject: CN=68ccd5c7-0c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:d0:e7:a3:cc:26:1c:09:e9:8d:f6:af:ed: 78:c2:f1:31:fe:01:1a:d8:b7:c6:4a:98:73:80:d6: 7f:0f:91:cd:e9:ae:08:78:f5:b9:51:d5:ab:6a:d8: 37:31:bf:75:03:8e:4c:bd:cd:92:25:5d:5e:41:a0: c0:36:da:43:bf:7c:1b:db:e5:dd:58:86:40:79:db: 71:c6:dd:f0:f5:bc:3c:dd:4c:be:c1:1c:b0:63:a6: df:51:5e:11:da:65:04:8e:15:5b:33:2d:d3:df:19: 27:80:e0:3e:d1:8b:f2:ee:14:1c:e4:21:93:e2:81: 69:b7:70:81:10:d6:d5:e1:ee:8f:a2:1c:cd:a3:d3: dc:88:d0:cf:39:45:6b:e8:e4:70:70:97:3f:8c:46: f9:b7:12:c5:b9:bb:e9:b1:31:f5:66:ee:93:72:fc: 97:cd:ee:aa:46:48:3d:dd:b9:fa:f1:1f:fd:c4:fe: 3f:3b:c4:f9:84:84:ed:51:01:e0:0e:7f:32:82:cf: e6:c3:e1:ef:46:82:e9:a6:e3:67:d6:85:2c:70:1f: 13:b5:70:f4:43:9e:70:1d:d6:d8:1d:85:0b:98:35: e4:b3:6c:22:8a:da:40:c9:21:5c:3a:3a:0d:13:ef: 27:92:21:6a:7e:ab:ca:e7:11:17:77:39:5d:11:a5: af:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:02:4D:6B:9C:23:A4:39:93:4B:AA:7C:BD:59:73:23:37:E2:11:06 X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:11:60:57:ec:21:f3:b9:6c:d3:4b:99:10:69:de:b0:7e:af: 8f:2f:08:b2:33:73:7f:76:b2:a6:a7:8a:b0:83:3e:37:05:90: a6:23:3d:8c:7a:dc:f5:7d:8e:a0:47:cd:e0:da:19:d9:40:7c: 36:87:7e:25:51:45:e6:dd:ea:88:9c:90:28:98:82:ae:2f:ab: ac:99:0f:78:31:a5:47:08:39:7d:bf:6a:8c:ed:c5:fa:72:a0: 31:ef:82:d3:44:41:a7:89:41:36:d4:7a:54:42:aa:34:ca:e2: f5:74:f0:27:50:e8:db:52:bb:ba:c4:d1:83:64:6d:49:b0:6b: f6:af:cf:d8:bf:6a:61:0a:23:01:65:83:cb:f4:e2:cb:d4:68: 2c:26:f0:b1:60:a2:7e:bf:bf:7d:2d:62:08:13:b1:51:07:7e: f7:9a:8c:b7:e7:f7:71:50:e0:fa:31:0e:5b:b4:99:67:2f:f1: 83:34:04:be:0a:2d:21:ab:ef:fe:9c:87:07:50:d4:5c:6f:7b: 21:e0:03:3e:4c:f1:62:03:c1:05:9a:31:bd:3c:c8:19:c7:d6: dc:49:2e:25:cf:a8:e9:5c:12:30:66:d1:d7:1a:3d:ea:14:cc: 0a:95:ce:0d:f8:77:4b:7b:b1:b2:2a:1f:cd:0b:47:c5:29:d2: c1:29:5a:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjUwOTE5MDQwMjE1WhcNMjUwOTI2MDQwMjE1WjAYMRYwFAYD VQQDEw02OGNjZDVjNy0wYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmvQ56PMJhwJ6Y32r+14wvEx/gEa2LfGSphzgNZ/D5HN6a4IePW5UdWratg3 Mb91A45Mvc2SJV1eQaDANtpDv3wb2+XdWIZAedtxxt3w9bw83Uy+wRywY6bfUV4R 2mUEjhVbMy3T3xkngOA+0Yvy7hQc5CGT4oFpt3CBENbV4e6PohzNo9PciNDPOUVr 6ORwcJc/jEb5txLFubvpsTH1Zu6TcvyXze6qRkg93bn68R/9xP4/O8T5hITtUQHg Dn8ygs/mw+HvRoLppuNn1oUscB8TtXD0Q55wHdbYHYULmDXks2wiitpAySFcOjoN E+8nkiFqfqvK5xEXdzldEaWvGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsCTWuc I6Q5k0uqfL1ZcyM34hEGMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5EWBX7CHzuWzTS5kQad6wfq+PLwiyM3N/drKmp4qwgz43BZCmIz2M etz1fY6gR83g2hnZQHw2h34lUUXm3eqInJAomIKuL6usmQ94MaVHCDl9v2qM7cX6 cqAx74LTREGniUE21HpUQqo0yuL1dPAnUOjbUru6xNGDZG1JsGv2r8/Yv2phCiMB ZYPL9OLL1GgsJvCxYKJ+v799LWIIE7FRB373moy35/dxUOD6MQ5btJlnL/GDNAS+ Ci0hq+/+nIcHUNRcb3sh4AM+TPFiA8EFmjG9PMgZx9bcSS4lz6jpXBIwZtHXGj3q FMwKlc4N+HdLe7GyKh/NC0fFKdLBKVpk -----END CERTIFICATE-----Generated at Sat Sep 20 02:43:30 2025 by rpki-client