$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: OYe9nu7ozYJsp12V03MKbxp+8Vs23AbeeC7O02gow+I= Subject key identifier: 00:9A:8C:7D:BA:EC:DB:F8:9E:84:F0:2A:1E:C2:8C:20:40:A8:B5:27 Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 01CD Signing time: Sat 09 Aug 2025 03:50:15 +0000 Manifest this update: Sat 09 Aug 2025 03:50:15 +0000 Manifest next update: Sat 16 Aug 2025 03:50:15 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: H6me3IkMeN6dC4gyv2jolB4p1pZTxzeMc2bO4AWxyDs=) 2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=) 3: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=) 4: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=) 5: A6888CA8562B11F0A9D71979C4F9AE02.roa (hash: iDmp89Xpkp1Fll7WvZDCHcwidt+lSLGg3Xgb3jX5mHY=) 6: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Aug 9 03:50:15 2025 GMT Not After : Aug 16 03:50:15 2025 GMT Subject: CN=6896c577-e6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:88:18:cd:c1:5c:40:97:f0:2a:42:78:20:dd: 8c:df:3d:91:1d:4e:85:64:7f:9e:e5:b0:6a:c1:53: 2b:d8:63:f9:2c:70:50:dc:47:28:2a:8c:b6:6b:16: 53:ad:65:cb:59:c5:16:22:1b:c2:c2:29:01:0f:4a: 9d:3e:d9:e6:69:ef:bb:1d:00:cc:60:0d:53:e2:29: 42:92:2a:f8:54:7e:07:db:df:78:58:aa:49:24:bf: 6c:7a:24:7d:c2:15:4e:56:11:7a:cc:4d:8f:1f:ff: 80:5c:74:6e:e9:a1:40:c2:eb:36:74:c3:f1:7d:43: 4e:32:04:96:7b:9a:d5:6a:4b:91:0f:b9:db:57:82: 90:b9:58:c0:2a:b1:29:c4:69:61:33:38:3a:45:b5: 0d:eb:e2:9a:02:27:ec:ec:7f:16:69:13:32:a1:89: 1b:57:40:8f:98:d8:99:2f:e1:10:e6:98:1d:3a:e4: 9a:75:7c:60:1e:e7:15:10:35:a0:ef:f7:c1:44:ef: 87:4c:71:cb:0b:9b:07:71:ed:2e:19:49:67:47:28: 7a:bd:3c:0a:2e:c1:6f:50:af:64:06:1d:ad:af:73: 57:45:3d:1e:d8:21:ec:a1:42:b6:4c:a9:41:38:c2: 50:5c:31:e9:5e:ed:ab:12:29:49:18:d8:e5:fb:49: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9A:8C:7D:BA:EC:DB:F8:9E:84:F0:2A:1E:C2:8C:20:40:A8:B5:27 X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:f8:2f:75:a0:f6:cc:a9:43:24:09:15:97:d8:47:be:16:0c: 19:93:a1:46:52:ae:1b:22:74:af:3d:a3:15:c2:89:79:5e:5b: 05:39:ce:53:26:c9:9e:34:f0:35:9f:18:67:30:43:15:75:50: ce:dd:62:26:30:db:cc:17:1d:a4:64:69:f9:7d:22:65:b0:a2: 55:f9:8c:a2:f4:31:ff:92:c0:88:56:46:10:61:15:08:9b:ab: eb:4b:a9:c6:d6:dd:8e:da:75:93:ba:71:1f:ea:7a:5e:b1:28: 74:8a:de:b2:5f:f0:11:6a:36:63:04:a3:8c:2e:ae:2e:36:0a: c2:61:83:d4:39:64:fa:7e:88:b0:00:51:89:f0:3a:a4:2d:0a: 08:5a:cd:57:5d:81:67:74:7d:65:de:be:b4:43:db:c2:19:72: d3:fb:70:bd:67:6d:09:c5:3b:d0:15:f8:35:0d:c0:2b:0b:11: fc:71:99:31:70:df:d0:97:7f:12:0f:0d:9b:1c:c3:db:fc:9b: 4d:9e:2e:6c:ca:9f:f9:8d:52:07:65:da:fa:ef:2a:4d:6e:43: af:dd:2b:b9:94:07:4d:46:5e:aa:04:ca:c7:ba:0b:45:16:1e: 9a:45:b3:20:2e:85:28:7d:ad:66:d7:7b:48:7c:3b:da:e2:7e: c2:10:08:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUwODA5MDM1MDE1WhcNMjUwODE2MDM1MDE1WjAYMRYwFAYD VQQDEw02ODk2YzU3Ny1lNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ogYzcFcQJfwKkJ4IN2M3z2RHU6FZH+e5bBqwVMr2GP5LHBQ3EcoKoy2axZT rWXLWcUWIhvCwikBD0qdPtnmae+7HQDMYA1T4ilCkir4VH4H2994WKpJJL9seiR9 whVOVhF6zE2PH/+AXHRu6aFAwus2dMPxfUNOMgSWe5rVakuRD7nbV4KQuVjAKrEp xGlhMzg6RbUN6+KaAifs7H8WaRMyoYkbV0CPmNiZL+EQ5pgdOuSadXxgHucVEDWg 7/fBRO+HTHHLC5sHce0uGUlnRyh6vTwKLsFvUK9kBh2tr3NXRT0e2CHsoUK2TKlB OMJQXDHpXu2rEilJGNjl+0lO2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACajH26 7Nv4noTwKh7CjCBAqLUnMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ+C91oPbMqUMkCRWX2Ee+FgwZk6FGUq4bInSvPaMVwol5XlsFOc5T JsmeNPA1nxhnMEMVdVDO3WImMNvMFx2kZGn5fSJlsKJV+Yyi9DH/ksCIVkYQYRUI m6vrS6nG1t2O2nWTunEf6npesSh0it6yX/ARajZjBKOMLq4uNgrCYYPUOWT6foiw AFGJ8DqkLQoIWs1XXYFndH1l3r60Q9vCGXLT+3C9Z20JxTvQFfg1DcArCxH8cZkx cN/Ql38SDw2bHMPb/JtNni5syp/5jVIHZdr67ypNbkOv3Su5lAdNRl6qBMrHugtF Fh6aRbMgLoUofa1m13tIfDva4n7CEAgN -----END CERTIFICATE-----Generated at Sun Aug 10 18:14:44 2025 by rpki-client