$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: tSJpJ2XVuK/FoTnW+JyNMCtgpj83awW6sFKJWVR/8aY= Subject key identifier: 17:09:37:42:AA:34:CC:E1:D3:18:00:60:2F:12:0C:B3:9D:A1:84:BA Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 09B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 09A9 Signing time: Sun 10 Aug 2025 19:32:53 +0000 Manifest this update: Sun 10 Aug 2025 19:32:52 +0000 Manifest next update: Sun 17 Aug 2025 19:32:52 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: Ub8KGzzWgqi/pNNWh8TbDaRyxkJvlIHKRqFxbL3RUrM=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 19:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Aug 10 19:32:52 2025 GMT Not After : Aug 17 19:32:52 2025 GMT Subject: CN=6898f3e5-ab2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:86:8a:4b:f2:49:e0:b0:9e:37:b4:81:93: c9:e7:f2:05:d2:a8:c4:07:54:aa:81:71:c3:3e:0b: 8d:cd:83:8a:7c:b9:1e:48:19:11:1f:42:48:fc:fe: ba:52:16:42:70:96:3b:8b:62:15:7e:88:6d:96:2d: 75:b8:dc:46:73:47:ed:c9:d8:b9:47:e2:5b:81:9f: 74:9a:1f:86:f6:fb:c5:af:93:6a:b6:2c:a2:83:d3: 08:4b:f5:37:1e:47:dd:a3:5b:30:16:52:e2:44:77: 72:9a:09:4c:bd:4c:bd:27:08:70:f2:ba:f7:fd:72: 34:96:12:d5:8d:fe:19:c7:a6:dc:2e:db:a9:ae:fc: c5:ad:b0:90:8d:13:2f:2a:b3:a5:d7:4c:29:32:78: bb:a9:6d:56:9c:b6:02:2b:9c:fa:da:b5:6a:db:e5: 00:99:3c:e5:4d:49:22:bc:a2:7d:55:9b:fe:2f:b9: 1f:43:bd:28:00:10:14:d4:d7:71:70:71:7e:a3:e8: 8d:39:60:b3:cc:f1:a1:36:20:ee:e3:32:70:21:8c: 48:ae:27:69:23:0b:ff:8c:c4:a7:29:7e:9f:ed:d9: 0e:ba:56:67:39:a1:57:08:d2:b7:63:0f:e5:82:03: b1:35:a3:20:0e:f0:1b:ef:54:7b:ff:73:a8:e0:63: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:09:37:42:AA:34:CC:E1:D3:18:00:60:2F:12:0C:B3:9D:A1:84:BA X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2b:67:58:d2:dc:49:a0:59:26:3b:7c:18:35:41:74:a3:f2: eb:c8:22:5c:87:74:33:e2:a1:3b:a0:3f:82:8b:9f:47:96:fe: e9:47:25:4e:a4:5c:a0:30:42:2a:76:f2:3f:8c:33:65:d5:10: fe:d5:84:8f:54:76:4c:1e:0a:3e:14:3e:d2:da:16:14:8d:fa: 1e:9e:d8:8a:10:f6:75:40:50:fd:c9:de:86:50:f2:61:3e:b5: d7:5b:45:19:8f:f3:3b:71:44:ff:71:3c:9f:f0:b2:32:2d:ef: 71:0a:82:94:05:86:da:49:f2:0a:cc:74:5c:c3:13:10:e4:ea: 16:b9:67:be:8d:87:0a:eb:79:61:7b:31:2e:32:03:ee:d2:ba: 13:35:23:10:2e:d6:0e:9e:12:21:95:f1:54:24:b6:37:c0:c1: 1e:9e:ef:6a:90:a9:26:dc:ec:af:c9:d8:50:4e:07:30:65:57: 5a:f7:84:10:2b:d6:2d:e9:60:66:e0:3f:4c:b4:8f:94:17:94: 84:fc:b9:36:2d:cf:04:49:c8:28:47:78:79:77:9c:43:98:58: c5:00:e3:6c:7d:26:5b:70:26:40:36:b7:1b:f9:79:6d:3e:8b: 49:a0:f9:b0:07:3d:e2:4c:fa:89:6e:25:08:11:0c:bd:28:87: 49:43:2e:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjUwODEwMTkzMjUyWhcNMjUwODE3MTkzMjUyWjAYMRYwFAYD VQQDEw02ODk4ZjNlNS1hYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FeGikvySeCwnje0gZPJ5/IF0qjEB1SqgXHDPguNzYOKfLkeSBkRH0JI/P66 UhZCcJY7i2IVfohtli11uNxGc0ftydi5R+JbgZ90mh+G9vvFr5Nqtiyig9MIS/U3 Hkfdo1swFlLiRHdymglMvUy9Jwhw8rr3/XI0lhLVjf4Zx6bcLtuprvzFrbCQjRMv KrOl10wpMni7qW1WnLYCK5z62rVq2+UAmTzlTUkivKJ9VZv+L7kfQ70oABAU1Ndx cHF+o+iNOWCzzPGhNiDu4zJwIYxIridpIwv/jMSnKX6f7dkOulZnOaFXCNK3Yw/l ggOxNaMgDvAb71R7/3Oo4GN5hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcJN0Kq NMzh0xgAYC8SDLOdoYS6MB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqK2dY0txJoFkmO3wYNUF0o/LryCJch3Qz4qE7oD+Ci59Hlv7pRyVO pFygMEIqdvI/jDNl1RD+1YSPVHZMHgo+FD7S2hYUjfoentiKEPZ1QFD9yd6GUPJh PrXXW0UZj/M7cUT/cTyf8LIyLe9xCoKUBYbaSfIKzHRcwxMQ5OoWuWe+jYcK63lh ezEuMgPu0roTNSMQLtYOnhIhlfFUJLY3wMEenu9qkKkm3OyvydhQTgcwZVda94QQ K9Yt6WBm4D9MtI+UF5SE/Lk2Lc8EScgoR3h5d5xDmFjFAONsfSZbcCZANrcb+Xlt PotJoPmwBz3iTPqJbiUIEQy9KIdJQy51 -----END CERTIFICATE-----Generated at Tue Aug 12 19:04:15 2025 by rpki-client