$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft File: ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json) Hash identifier: n/klLIM8QjOssZ4ScbVl/zDdROpOjjQBQvYZZyFmBq8= Subject key identifier: A8:31:99:BE:1B:46:E8:0E:FA:05:2F:B9:A7:A5:D9:35:27:32:97:21 Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B Certificate issuer: /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B Certificate serial: 0D59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft Manifest number: 0D49 Signing time: Mon 04 Aug 2025 18:13:23 +0000 Manifest this update: Mon 04 Aug 2025 18:13:22 +0000 Manifest next update: Mon 11 Aug 2025 18:13:22 +0000 Files and hashes: 1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: spZSsQ9cy17K3Ze597idaEvwAF95/Jr3PSHNn1ecbf4=) 2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: H71fhd8JZc5XXH6DNUerfJbZNQyJaOd/VCkFhoBssG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3417 (0xd59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B Validity Not Before: Aug 4 18:13:22 2025 GMT Not After : Aug 11 18:13:22 2025 GMT Subject: CN=6890f842-6ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:bb:c8:5b:29:e4:32:34:97:85:94:d9:29: 30:ab:f1:4d:02:a1:bb:68:e2:f0:af:26:84:26:ce: 47:58:f3:5f:e6:1f:25:6d:c3:06:65:5a:ff:60:fe: d3:aa:47:f4:69:29:ba:8f:97:b8:b5:49:88:99:8e: b7:60:03:6e:49:3b:3c:5d:67:1e:18:e5:50:b1:20: 98:15:42:e1:f8:4b:f7:34:1a:e1:14:58:92:43:cd: 4c:73:25:d2:62:48:74:8a:a8:d7:f2:06:3b:9d:f7: e0:30:12:83:bb:e7:05:bf:0e:36:6e:ea:fb:7e:e2: f1:80:0f:19:a0:e6:c4:56:1b:91:eb:41:40:28:27: 77:54:12:dd:88:57:ed:74:56:cd:28:90:a3:7a:e1: 55:ff:5c:7e:10:7f:fb:a3:8e:50:4d:ce:12:d7:6c: 87:28:5b:e7:81:c0:38:fe:99:f5:cf:fe:68:1b:9b: 14:50:27:83:6d:6f:4d:f6:a5:77:18:3b:a5:98:4c: b5:d6:61:cd:b2:ef:de:15:10:da:e6:b1:5a:aa:a4: 61:ee:3d:67:76:c1:b4:ec:3f:f8:06:b7:29:7e:99: 21:02:d0:a5:05:30:75:98:d9:29:a6:fb:29:eb:a9: c1:f7:d5:9b:8a:ff:fe:17:d3:26:d4:e4:44:1c:39: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:31:99:BE:1B:46:E8:0E:FA:05:2F:B9:A7:A5:D9:35:27:32:97:21 X509v3 Authority Key Identifier: keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e9:d5:6c:92:e0:45:07:29:03:93:d8:2e:fb:78:4f:d2:5a: c5:3c:64:6f:d7:9b:f4:cc:88:92:65:0f:ba:f4:63:52:1d:89: 3c:2f:f2:0b:c2:af:bd:33:95:33:4e:7e:74:21:b3:58:2f:b5: de:11:d9:66:29:30:ca:a2:d7:7e:25:0c:9e:8d:02:38:18:2d: ad:15:0c:64:ff:9b:75:66:de:98:2a:fb:d2:9d:7e:70:c0:43: 05:f2:72:a0:9c:c8:ca:64:95:3b:87:8d:ec:0d:2c:7c:10:69: 09:2c:6d:62:2f:88:90:04:02:3e:ed:24:21:67:01:2b:06:69: 59:68:ac:56:ac:d7:98:f7:89:0c:be:b3:61:05:ee:17:5f:df: 5c:fb:7b:ac:4d:4e:f8:f9:1d:21:bf:3b:26:dd:d6:04:8e:4f: 2a:93:f2:cc:7d:fe:4f:ed:de:3a:c2:e6:46:91:11:8c:a8:ea: 6f:6e:71:b7:e0:88:e7:80:e4:ec:1a:8f:d8:f6:27:9c:86:97: 9b:a6:4a:2b:a1:de:5a:d0:f1:23:a0:a3:5a:5a:1f:f3:0e:d4: d1:24:1d:94:18:3b:c5:7b:09:34:b2:80:7a:36:a9:b7:50:a1: c8:b3:20:b2:13:f0:3a:60:3f:16:61:7b:78:e8:f2:9f:a1:3b: c2:8c:fc:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NTcxMTAvBgNVBAUTKDhBOUJEQTY4NTM5RjcxNThDQjAxMzcyMEE5OTM2RjI2 NEI5QTUzN0IwHhcNMjUwODA0MTgxMzIyWhcNMjUwODExMTgxMzIyWjAYMRYwFAYD VQQDEw02ODkwZjg0Mi02ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRS7yFsp5DI0l4WU2Skwq/FNAqG7aOLwryaEJs5HWPNf5h8lbcMGZVr/YP7T qkf0aSm6j5e4tUmImY63YANuSTs8XWceGOVQsSCYFULh+Ev3NBrhFFiSQ81McyXS Ykh0iqjX8gY7nffgMBKDu+cFvw42bur7fuLxgA8ZoObEVhuR60FAKCd3VBLdiFft dFbNKJCjeuFV/1x+EH/7o45QTc4S12yHKFvngcA4/pn1z/5oG5sUUCeDbW9N9qV3 GDulmEy11mHNsu/eFRDa5rFaqqRh7j1ndsG07D/4BrcpfpkhAtClBTB1mNkppvsp 66nB99Wbiv/+F9Mm1OREHDnYrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgxmb4b RugO+gUvuael2TUnMpchMB8GA1UdIwQYMBaAFIqb2mhTn3FYywE3IKmTbyZLmlN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg1Ny9GMTMwN0I3NERB RDcxMUU5OUY4Q0FDNzhDNEY5QUUwMi9pcHZhYUZPZmNWakxBVGNncVpOdkprdWFV M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lwdmFhRk9mY1ZqTEFUY2dxWk52Smt1YVUzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg1Ny9GMTMwN0I3NERBRDcxMUU5OUY4Q0FDNzhDNEY5QUUwMi9pcHZhYUZPZmNW akxBVGNncVpOdkprdWFVM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK6dVskuBFBykDk9gu+3hP0lrFPGRv15v0zIiSZQ+69GNSHYk8L/IL wq+9M5UzTn50IbNYL7XeEdlmKTDKotd+JQyejQI4GC2tFQxk/5t1Zt6YKvvSnX5w wEMF8nKgnMjKZJU7h43sDSx8EGkJLG1iL4iQBAI+7SQhZwErBmlZaKxWrNeY94kM vrNhBe4XX99c+3usTU74+R0hvzsm3dYEjk8qk/LMff5P7d46wuZGkRGMqOpvbnG3 4IjngOTsGo/Y9iechpebpkorod5a0PEjoKNaWh/zDtTRJB2UGDvFewk0soB6Nqm3 UKHIsyCyE/A6YD8WYXt46PKfoTvCjPx/ -----END CERTIFICATE-----Generated at Wed Aug 6 00:33:22 2025 by rpki-client