$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json) Hash identifier: qtvdtZaL5N1ptDqdFv6t7tohTHx6K6JEy2JlA/KY77o= Subject key identifier: CD:49:DB:6A:DB:D4:F6:48:61:0F:88:60:7C:1D:C1:03:79:AB:82:12 Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft Manifest number: 020C Signing time: Thu 07 Aug 2025 02:41:55 +0000 Manifest this update: Thu 07 Aug 2025 02:41:54 +0000 Manifest next update: Thu 14 Aug 2025 02:41:54 +0000 Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: wilvud/eTBArnGzAO/pOvZx0jPN+1h9zQ3UMSLFVDPA=) 2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: i/snzsv5ugVK5M4wkOzh02txTFh9Vl9HyndyddhSqd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Validity Not Before: Aug 7 02:41:54 2025 GMT Not After : Aug 14 02:41:54 2025 GMT Subject: CN=68941272-e271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:ee:81:1a:f6:90:5e:e6:cf:5b:c5:40:fa: 8b:f4:4a:ff:18:a6:a3:f1:f8:61:1d:95:44:51:ae: 25:e9:cc:7d:73:44:5c:0a:96:73:b4:5f:30:86:e8: 78:c6:25:66:25:ec:8f:ee:82:e4:e1:8c:79:94:9c: df:59:26:cf:b1:22:84:c0:36:cb:da:27:8a:d4:2d: c9:55:77:3e:59:72:4d:ad:30:a4:9e:32:61:35:69: 1f:14:fd:7f:3e:1f:dc:cf:2a:4e:35:7e:4a:72:f4: 45:e1:6a:0b:fd:bd:cc:93:47:f9:c3:bd:25:61:da: 32:7e:20:f1:c8:13:1f:93:9e:ab:b4:6c:4e:bc:74: 92:02:a4:79:ed:73:f7:d6:6c:ed:22:b3:55:32:71: 60:c9:31:1b:93:1c:08:11:e2:d7:20:1c:f4:7c:7b: a5:f2:6b:1f:95:30:05:dc:07:41:66:5e:e7:72:f6: 48:d3:d1:6f:da:1c:40:9c:51:7e:00:96:33:4d:77: 48:eb:37:07:ce:d4:b8:ed:25:de:8a:66:ae:06:21: 5d:4c:c5:20:e3:ba:96:b2:4d:f9:75:8d:5b:cc:e3: 40:df:6c:13:3c:e1:69:cd:c8:e2:d3:f9:fe:ec:7c: 25:c2:cb:46:0f:c6:1b:7f:36:cb:2f:7a:f5:c6:5a: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:49:DB:6A:DB:D4:F6:48:61:0F:88:60:7C:1D:C1:03:79:AB:82:12 X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4f:a3:58:a0:43:6e:79:b7:f1:e2:81:ac:87:aa:97:09:f7: 1a:9a:22:7b:6f:ae:86:48:14:0d:7b:06:ce:a1:15:d3:38:fd: a8:73:e8:6f:c7:fd:97:f0:36:2f:b4:74:e2:64:29:eb:b0:85: 1b:aa:ac:ad:8f:4c:ea:96:72:f2:45:81:41:29:fc:b4:6a:50: e5:d5:e6:90:ef:f9:d2:37:3d:0c:27:a0:26:b8:b0:08:fd:df: 22:16:77:f3:8e:2f:23:e5:5f:af:72:db:f4:84:65:b1:a8:10: 40:5f:d9:e4:ca:09:dc:98:44:12:ee:40:00:92:ff:21:cd:62: 03:50:90:b0:85:ef:1b:be:82:81:69:45:36:63:68:68:9f:25: 00:72:81:9a:40:23:f5:6b:e8:c7:48:a4:e6:b6:1b:be:dc:ff: e4:f4:20:30:f5:a3:9e:56:4a:89:bd:5e:b3:f5:74:19:2a:cd: ec:62:8b:e9:7e:c6:5c:8c:7b:2c:6a:a2:62:06:38:1c:ad:b5: 6f:ec:de:70:f6:b3:38:b3:b7:49:61:7a:71:f0:05:a8:61:3d: 74:fd:05:f2:f6:b0:7d:c4:f8:84:e9:61:d3:cc:d2:09:07:91: e3:01:1c:7a:df:e9:22:db:56:4c:4c:0a:de:6b:b6:54:42:ac: 7d:50:ff:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjUwODA3MDI0MTU0WhcNMjUwODE0MDI0MTU0WjAYMRYwFAYD VQQDEw02ODk0MTI3Mi1lMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTfugRr2kF7mz1vFQPqL9Er/GKaj8fhhHZVEUa4l6cx9c0RcCpZztF8whuh4 xiVmJeyP7oLk4Yx5lJzfWSbPsSKEwDbL2ieK1C3JVXc+WXJNrTCknjJhNWkfFP1/ Ph/czypONX5KcvRF4WoL/b3Mk0f5w70lYdoyfiDxyBMfk56rtGxOvHSSAqR57XP3 1mztIrNVMnFgyTEbkxwIEeLXIBz0fHul8msflTAF3AdBZl7ncvZI09Fv2hxAnFF+ AJYzTXdI6zcHztS47SXeimauBiFdTMUg47qWsk35dY1bzONA32wTPOFpzcji0/n+ 7HwlwstGD8YbfzbLL3r1xlr9hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1J22rb 1PZIYQ+IYHwdwQN5q4ISMB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlCNy9CMUU1NEFCODU2QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5 UEtuRU9lMlBWVGlQYW1qT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3T6NYoENuebfx4oGsh6qXCfcamiJ7b66GSBQNewbOoRXTOP2oc+hv x/2X8DYvtHTiZCnrsIUbqqytj0zqlnLyRYFBKfy0alDl1eaQ7/nSNz0MJ6AmuLAI /d8iFnfzji8j5V+vctv0hGWxqBBAX9nkygncmEQS7kAAkv8hzWIDUJCwhe8bvoKB aUU2Y2honyUAcoGaQCP1a+jHSKTmthu+3P/k9CAw9aOeVkqJvV6z9XQZKs3sYovp fsZcjHssaqJiBjgcrbVv7N5w9rM4s7dJYXpx8AWoYT10/QXy9rB9xPiE6WHTzNIJ B5HjARx63+ki21ZMTArea7ZUQqx9UP95 -----END CERTIFICATE-----Generated at Fri Aug 8 20:55:34 2025 by rpki-client