$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: QeTS6CaDocSu6nMMpygwGCWbpMOB4iYa1YfE76aNTXo= Subject key identifier: 2F:44:8B:53:53:5B:8C:50:8A:0D:58:BC:1A:60:C1:59:E6:B0:12:B6 Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 047D Signing time: Sat 09 Aug 2025 00:34:23 +0000 Manifest this update: Sat 09 Aug 2025 00:34:22 +0000 Manifest next update: Sat 16 Aug 2025 00:34:22 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: bo+/CYYYLrzMIVwnmLCk2cE3k8j2FCRHGkA+Zabry+s=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: Aug 9 00:34:22 2025 GMT Not After : Aug 16 00:34:22 2025 GMT Subject: CN=6896978f-7c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:45:07:c6:2c:54:8a:05:14:50:56:0b:da:66: 32:e0:c6:e4:28:d5:0e:b3:12:48:20:91:11:20:8e: 70:3f:da:dc:69:cf:c6:2b:89:4b:80:d2:66:6a:07: 47:e7:06:f8:3e:ee:77:c2:9d:84:da:fe:1c:3d:fa: 45:ee:1f:3a:8d:29:35:ca:c7:e3:83:d8:8f:cb:ea: a1:6b:1a:68:25:7f:d1:c6:f2:75:e7:70:b3:1d:3b: 3c:8c:c1:b5:2b:e0:ee:4d:5f:b4:0b:1f:a9:e6:aa: cb:c5:09:9a:d1:ba:42:fb:0c:5d:ce:6b:dd:f7:c2: a9:0d:23:54:9e:76:e0:d5:89:16:92:59:fa:ca:f2: 6b:94:e3:ee:e8:71:7f:25:5c:98:70:13:0d:ac:a6: 68:97:29:be:bf:af:54:4b:13:8d:5d:35:14:27:af: 10:17:4e:0b:67:67:57:dd:57:5b:56:cd:81:e2:0d: 22:7b:04:f2:d3:ec:a8:ba:b4:87:30:e0:9f:45:e0: 4e:17:13:65:20:bb:37:32:8c:38:12:ef:7d:ed:ff: 11:cc:0e:b2:f9:08:03:68:8c:15:fc:d5:aa:63:6c: 87:42:be:ad:de:0b:68:41:69:36:68:e5:0f:1e:45: 92:3c:8e:87:9e:79:e4:5f:30:3d:09:1b:ac:48:1e: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:44:8B:53:53:5B:8C:50:8A:0D:58:BC:1A:60:C1:59:E6:B0:12:B6 X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:18:55:be:e0:f9:cc:0f:3b:6b:cf:e5:82:11:44:8e:7b:52: 3e:a8:1f:da:13:1f:02:04:7a:e6:f4:04:c2:ee:3e:97:d6:9b: 74:e4:41:5f:91:0c:12:ea:34:54:64:e0:0c:74:af:3e:27:50: 27:ec:1e:dc:3f:37:60:17:cb:91:10:64:ec:90:d7:d7:f3:cd: ce:b1:1f:64:62:92:12:7a:47:00:00:37:72:6e:ee:35:c8:93: 16:b3:c4:2f:54:12:dd:e3:01:fb:92:56:1b:31:d1:c5:ef:1e: 66:36:a3:62:73:93:f2:ce:57:c7:0d:5b:76:41:77:49:0f:33: 06:f8:f7:c7:59:b4:0e:02:a2:d1:4b:f7:5e:5f:ea:b1:c7:33: c9:f2:6e:a3:4c:e0:89:53:3e:dc:7c:e2:c3:e7:47:e0:f2:a3: 1f:65:e9:ee:fd:2d:7c:3f:de:ae:ea:79:bd:37:33:5d:9c:91: 91:20:df:08:a9:d5:c4:08:a1:91:ab:a4:12:ca:ad:75:c7:a4: 64:2c:ed:da:e9:70:3c:64:f5:63:92:82:a4:f8:49:eb:83:31: 0f:87:07:b2:44:9a:63:c2:72:4e:f6:94:10:f5:94:c8:bb:3f: 99:b8:60:50:01:3d:7e:ea:59:ee:d0:cd:6a:7e:0a:a5:2d:13: 75:39:0f:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjUwODA5MDAzNDIyWhcNMjUwODE2MDAzNDIyWjAYMRYwFAYD VQQDEw02ODk2OTc4Zi03YzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkUHxixUigUUUFYL2mYy4MbkKNUOsxJIIJERII5wP9rcac/GK4lLgNJmagdH 5wb4Pu53wp2E2v4cPfpF7h86jSk1ysfjg9iPy+qhaxpoJX/RxvJ153CzHTs8jMG1 K+DuTV+0Cx+p5qrLxQma0bpC+wxdzmvd98KpDSNUnnbg1YkWkln6yvJrlOPu6HF/ JVyYcBMNrKZolym+v69USxONXTUUJ68QF04LZ2dX3VdbVs2B4g0iewTy0+yourSH MOCfReBOFxNlILs3Mow4Eu997f8RzA6y+QgDaIwV/NWqY2yHQr6t3gtoQWk2aOUP HkWSPI6HnnnkXzA9CRusSB7ujQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9Ei1NT W4xQig1YvBpgwVnmsBK2MB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbGFW+4PnMDztrz+WCEUSOe1I+qB/aEx8CBHrm9ATC7j6X1pt05EFf kQwS6jRUZOAMdK8+J1An7B7cPzdgF8uREGTskNfX883OsR9kYpISekcAADdybu41 yJMWs8QvVBLd4wH7klYbMdHF7x5mNqNic5PyzlfHDVt2QXdJDzMG+PfHWbQOAqLR S/deX+qxxzPJ8m6jTOCJUz7cfOLD50fg8qMfZenu/S18P96u6nm9NzNdnJGRIN8I qdXECKGRq6QSyq11x6RkLO3a6XA8ZPVjkoKk+EnrgzEPhweyRJpjwnJO9pQQ9ZTI uz+ZuGBQAT1+6lnu0M1qfgqlLRN1OQ+6 -----END CERTIFICATE-----Generated at Sat Aug 9 05:46:18 2025 by rpki-client