$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json) Hash identifier: NIpK68moDN15Uj+w8u7gom8RfGtDfDGRY2BPPGUtbmQ= Subject key identifier: EA:3A:D8:21:2E:00:5A:63:52:87:DB:20:CC:41:90:6E:0D:6A:48:21 Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft Manifest number: 0A Signing time: Sat 09 Aug 2025 08:41:32 +0000 Manifest this update: Sat 09 Aug 2025 08:41:31 +0000 Manifest next update: Sat 16 Aug 2025 08:41:31 +0000 Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: 8k8heDZ7JDQiDr14MRomCZLrJbZZUEicdGTeuRjxL/c=) 2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: WDMb5z1Oep3KObXAq9yk+eELcjcBrGqtQZEb/aGlqi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Validity Not Before: Aug 9 08:41:31 2025 GMT Not After : Aug 16 08:41:31 2025 GMT Subject: CN=689709bb-90cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:0c:50:fe:d1:fc:7c:c6:cb:dd:1e:7a:12: d4:f2:23:01:cd:f0:21:3a:80:65:c6:a8:92:76:26: 75:48:4b:0f:ca:86:bc:82:e1:d1:fd:2c:3e:56:7a: ed:12:6b:03:a3:b6:58:43:d4:d1:9e:36:e7:91:de: 89:d5:1e:e1:b2:11:20:4d:e8:62:ce:de:d7:76:d0: 47:6c:52:9b:b3:63:58:7e:0e:ad:56:eb:58:13:ae: ba:74:1e:03:4b:44:8e:83:b5:dc:19:3d:e7:30:8b: cb:9f:b5:b4:74:de:48:87:24:99:7d:2e:53:25:d2: c0:7b:c0:c7:ce:05:8f:3c:1f:f4:5e:9a:57:e4:63: a4:83:45:7b:47:74:74:2f:54:66:c3:4d:eb:0f:34: a4:e3:42:fd:4a:53:2e:26:94:1f:29:a9:83:9a:b5: a3:e5:b1:ce:99:7b:bf:27:40:7f:46:d0:ff:4d:59: 46:77:91:f4:8d:1b:13:4a:da:62:75:f3:ee:bd:14: a8:24:d4:77:93:e3:85:d4:e4:bf:45:02:33:b9:0b: f5:6d:76:9f:f5:29:ca:36:e1:ca:29:98:30:d6:72: 29:2f:a2:dd:23:01:9a:4d:13:87:65:7f:1c:02:20: 72:5e:1a:7f:8c:6b:51:03:53:1d:b8:ba:bd:4b:ac: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3A:D8:21:2E:00:5A:63:52:87:DB:20:CC:41:90:6E:0D:6A:48:21 X509v3 Authority Key Identifier: keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5e:1f:5d:4e:42:a1:58:0e:2c:94:49:20:30:7d:d8:35:09: b0:60:2b:97:42:0b:c0:d4:9b:5d:9b:43:64:be:c9:ef:d8:35: 57:ed:9a:21:ed:7d:03:e2:23:88:95:70:74:11:16:22:87:f7: 3c:75:9b:0c:fd:e3:f2:35:66:b9:65:6b:1f:b0:25:a4:34:af: 70:06:36:3e:46:c5:70:83:82:57:9f:b3:de:af:62:33:e1:20: 4b:0f:d0:52:20:8a:20:75:f0:f7:be:76:0f:39:ff:7a:4f:4a: 55:05:a5:16:39:e1:46:a9:dd:cd:c2:c6:d1:31:1c:52:56:62: 3c:c9:5a:58:9d:dc:f7:1c:65:60:62:4e:d0:5c:e3:ab:20:aa: 35:d5:be:9c:3e:46:fb:f6:27:e3:f6:95:be:0c:32:d1:97:63: 65:67:7e:e3:d5:61:f6:36:1a:5b:90:3b:0f:bc:ee:74:0d:db: c2:d0:4e:41:eb:ca:3e:7f:e6:2d:27:4f:d4:6f:b9:6c:a4:68: 4d:8c:84:41:91:72:fc:a9:a2:75:ef:ca:f6:7c:53:06:e7:3f: c2:0d:25:6f:60:98:8b:85:f5:71:31:7f:bf:c7:ca:86:0e:03: d4:b0:f8:34:6d:2b:e3:f4:5a:d9:27:e8:02:45:6f:5e:db:cc: e5:fa:da:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUM2MjExMC8GA1UEBRMoMjFDOEYyQjZFMDFEMEE4MkQxM0MzNTE4OEMzQzkzRTZG NTE0QkE5NDAeFw0yNTA4MDkwODQxMzFaFw0yNTA4MTYwODQxMzFaMBgxFjAUBgNV BAMTDTY4OTcwOWJiLTkwY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9XwxQ/tH8fMbL3R56EtTyIwHN8CE6gGXGqJJ2JnVISw/KhryC4dH9LD5Weu0S awOjtlhD1NGeNueR3onVHuGyESBN6GLO3td20EdsUpuzY1h+Dq1W61gTrrp0HgNL RI6DtdwZPecwi8uftbR03kiHJJl9LlMl0sB7wMfOBY88H/RemlfkY6SDRXtHdHQv VGbDTesPNKTjQv1KUy4mlB8pqYOataPlsc6Ze78nQH9G0P9NWUZ3kfSNGxNK2mJ1 8+69FKgk1HeT44XU5L9FAjO5C/Vtdp/1Kco24copmDDWcikvot0jAZpNE4dlfxwC IHJeGn+Ma1EDUx24ur1LrF3jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6jrYIS4A WmNSh9sgzEGQbg1qSCEwHwYDVR0jBBgwFoAUIcjytuAdCoLRPDUYjDyT5vUUupQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5QzYyLzBBRUFBQ0Q2NkI2 NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWNqeXR1QWRDb0xSUERVWWpEeVQ1dlVVdXBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 QzYyLzBBRUFBQ0Q2NkI2NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29M UlBEVVlqRHlUNXZVVXVwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAleH11OQqFYDiyUSSAwfdg1CbBgK5dCC8DUm12bQ2S+ye/YNVftmiHt fQPiI4iVcHQRFiKH9zx1mwz94/I1Zrllax+wJaQ0r3AGNj5GxXCDglefs96vYjPh IEsP0FIgiiB18Pe+dg85/3pPSlUFpRY54Uap3c3CxtExHFJWYjzJWlid3PccZWBi TtBc46sgqjXVvpw+Rvv2J+P2lb4MMtGXY2VnfuPVYfY2GluQOw+87nQN28LQTkHr yj5/5i0nT9RvuWykaE2MhEGRcvyponXvyvZ8UwbnP8INJW9gmIuF9XExf7/HyoYO A9Sw+DRtK+P0Wtkn6AJFb17bzOX62tw= -----END CERTIFICATE-----Generated at Sun Aug 10 18:59:04 2025 by rpki-client