$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json) Hash identifier: 5DMg6fxfzsQu6vKK1P8JHEpkwA+4eqvzmrRuM4vnF+o= Subject key identifier: 32:C1:34:7E:44:28:46:F4:07:73:6A:C6:84:37:13:C3:0A:27:99:8A Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Certificate serial: 085F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft Manifest number: 0851 Signing time: Fri 08 Aug 2025 21:04:28 +0000 Manifest this update: Fri 08 Aug 2025 21:04:27 +0000 Manifest next update: Fri 15 Aug 2025 21:04:27 +0000 Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: 1siXH0pYhn2QxdqrSoW4A/uTSBtObyCgpmPOtzmuAr8=) 2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aH5SgttT3yBxPoJZcOUIaaeUL8JdCzJhMaUjR/JZqLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Validity Not Before: Aug 8 21:04:27 2025 GMT Not After : Aug 15 21:04:27 2025 GMT Subject: CN=6896665c-552c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a9:6f:21:c9:88:94:db:da:f5:aa:52:eb:07: f8:cf:e7:81:12:b8:af:48:d2:f7:3e:83:8b:cd:1c: fb:90:4c:df:be:d3:bd:a5:17:2d:85:b0:fd:07:00: 43:1f:01:91:6e:e9:2e:a3:a3:b7:2a:15:69:4c:13: 70:ce:27:48:0f:95:48:c7:00:d5:a4:5d:84:d0:f6: b8:ca:9a:07:ed:b4:38:75:14:ec:09:e2:90:84:61: 91:1e:57:a0:a1:38:35:1d:23:92:47:56:f0:5a:66: 9b:1a:d7:64:fa:04:f0:c8:6b:5c:6b:87:1b:1b:d5: e3:5a:b0:7c:65:96:50:38:c8:fc:ae:ea:19:8e:54: 63:e9:49:0b:89:5f:f4:33:dc:7c:6f:f9:9f:34:6d: b3:a2:08:00:f7:14:81:b0:fd:8b:0a:a0:a4:30:98: 09:5a:b2:63:de:84:ba:d6:b3:0f:64:76:a9:06:07: 1e:9a:63:77:af:05:6c:0e:a3:52:26:01:0b:4e:6a: 57:d9:c6:2d:fa:38:53:26:89:23:0a:d2:71:18:48: 98:80:53:f6:76:40:e5:88:f2:85:e3:a0:c6:63:12: 0d:b6:86:cf:7d:60:33:6a:b1:5a:50:67:ab:56:db: ac:02:5d:4b:1b:6b:99:87:21:e4:36:bc:95:1f:01: c7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C1:34:7E:44:28:46:F4:07:73:6A:C6:84:37:13:C3:0A:27:99:8A X509v3 Authority Key Identifier: keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d6:48:7e:b9:02:a5:af:43:61:5d:59:c9:a8:83:c9:80:01: 74:17:68:6b:44:8f:28:0a:ea:53:f2:eb:66:76:13:32:4b:ea: 54:d7:8e:5e:99:b0:88:44:84:08:f6:7d:bb:1f:d4:cd:d8:46: b3:e1:28:16:97:82:c2:cf:82:b8:d3:9a:d0:1b:9c:45:ea:ba: 8c:29:dd:d7:64:d4:fa:d6:a9:5c:74:c3:a7:3c:25:1c:6b:50: 14:72:65:ee:f3:ba:a5:17:43:26:12:7e:bb:e5:aa:d7:4a:92: f8:5c:e4:2f:24:30:f4:f4:e7:a4:64:83:e6:3d:e2:e8:5f:11: fc:21:a7:31:8e:3f:54:e0:2f:e8:dd:7f:a6:31:2c:28:eb:9f: 7e:e3:1a:88:8f:dc:7d:28:3c:29:f5:1c:bf:92:0a:c0:d9:24: ad:d2:e3:3e:47:70:47:e7:5e:e0:c1:13:61:51:12:1a:7f:29: 5b:c2:e8:47:82:95:ef:03:79:ef:7b:1b:71:19:c9:d1:b3:f5: c9:41:c6:e0:59:b1:64:96:c2:02:fa:ea:b7:de:47:54:ba:cb: 6b:d6:45:a6:99:c0:a1:f6:b9:dc:a3:b2:6d:73:96:64:3e:4a: 1e:cc:9e:78:89:34:94:50:70:0c:e3:48:60:93:cd:7d:ad:f8: b9:f6:95:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD NDVDMzg1MDMwHhcNMjUwODA4MjEwNDI3WhcNMjUwODE1MjEwNDI3WjAYMRYwFAYD VQQDEw02ODk2NjY1Yy01NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66lvIcmIlNva9apS6wf4z+eBErivSNL3PoOLzRz7kEzfvtO9pRcthbD9BwBD HwGRbukuo6O3KhVpTBNwzidID5VIxwDVpF2E0Pa4ypoH7bQ4dRTsCeKQhGGRHleg oTg1HSOSR1bwWmabGtdk+gTwyGtca4cbG9XjWrB8ZZZQOMj8ruoZjlRj6UkLiV/0 M9x8b/mfNG2zoggA9xSBsP2LCqCkMJgJWrJj3oS61rMPZHapBgcemmN3rwVsDqNS JgELTmpX2cYt+jhTJokjCtJxGEiYgFP2dkDliPKF46DGYxINtobPfWAzarFaUGer VtusAl1LG2uZhyHkNryVHwHHvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLBNH5E KEb0B3NqxoQ3E8MKJ5mKMB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY VGpFWkR0clZoU3JFWERoUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt1kh+uQKlr0NhXVnJqIPJgAF0F2hrRI8oCupT8utmdhMyS+pU145e mbCIRIQI9n27H9TN2Eaz4SgWl4LCz4K405rQG5xF6rqMKd3XZNT61qlcdMOnPCUc a1AUcmXu87qlF0MmEn675arXSpL4XOQvJDD09OekZIPmPeLoXxH8Iacxjj9U4C/o 3X+mMSwo659+4xqIj9x9KDwp9Ry/kgrA2SSt0uM+R3BH517gwRNhURIafylbwuhH gpXvA3nvextxGcnRs/XJQcbgWbFklsIC+uq33kdUustr1kWmmcCh9rnco7Jtc5Zk PkoezJ54iTSUUHAM40hgk819rfi59pWz -----END CERTIFICATE-----Generated at Sun Aug 10 19:02:13 2025 by rpki-client