$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: bVW+2yWLS84NUs2I3sRN3EAZygZwyE27Iyz75MJZhWU= Subject key identifier: 27:75:58:47:FE:B7:5C:19:61:C0:50:CF:E8:EE:E2:07:73:0E:7F:86 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 01F6 Signing time: Tue 05 Aug 2025 02:55:16 +0000 Manifest this update: Tue 05 Aug 2025 02:55:16 +0000 Manifest next update: Tue 12 Aug 2025 02:55:16 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: TnYrT1n6bRwVHpQUcZ7wPj8qCe2A3yjmlXir3UEAkjM=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: mzTY+yHaxiOoTmhIGnRxe8TteP35OSc9TDFULhxG7es=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: TCA2TacY4ZsDEXX4IqBFag6vpZrZlhAMEJDWvtGJDWs=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Tjdi12mwJxE8vytdEEm6LYs9NXU4cX9jhBUfI2VO1fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Aug 5 02:55:16 2025 GMT Not After : Aug 12 02:55:16 2025 GMT Subject: CN=68917294-da47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:61:b6:72:de:56:21:8a:d2:d1:da:d9:74: ab:fd:87:0b:ab:96:0e:d0:a9:02:66:73:81:9a:fa: a2:f5:7e:f9:7b:e3:a2:d3:6c:f0:57:72:76:f2:1b: 01:89:12:f4:a1:54:e5:7d:8a:24:aa:13:76:0d:0a: c6:6b:9e:ef:55:e9:bd:3d:9b:0b:ba:0c:79:f4:c0: a2:11:a0:cb:0d:39:1b:d4:6f:87:51:d4:da:b4:81: 24:d0:6e:69:23:f2:40:de:a7:0e:0e:7b:b3:a3:bf: 0c:67:ee:6c:61:86:99:9f:38:25:03:55:21:83:fc: 90:e9:65:81:9f:5a:3a:e9:c4:c2:c6:9b:0b:74:8f: fd:dd:94:af:8c:e7:98:f8:32:1a:54:43:79:d0:ed: 8e:b7:b7:27:f4:00:b0:ae:26:2e:99:11:0b:a3:95: 4c:13:3b:45:38:b3:50:c9:7e:c6:ad:65:d2:04:fc: 74:dc:60:4d:63:42:74:62:be:e2:63:76:7e:af:34: d8:f5:ae:0d:67:fc:60:4d:e2:1f:ad:b9:6a:f1:da: c8:e7:4a:da:54:9e:85:63:7e:ff:59:4c:79:d8:76: 59:8d:3c:58:f8:61:fe:b6:f4:0f:a8:c2:0e:48:1a: c0:fc:a7:ba:15:cf:40:96:6f:98:9f:75:e2:96:25: 73:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:75:58:47:FE:B7:5C:19:61:C0:50:CF:E8:EE:E2:07:73:0E:7F:86 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:34:08:ea:a2:d7:83:c9:09:94:14:e7:19:4d:c0:35:df:60: 71:2e:11:08:a0:7e:ee:fb:aa:0d:c4:e3:25:a1:5f:d3:03:74: d9:4c:32:1b:32:e6:70:9c:f1:3e:12:0a:83:89:23:8a:e7:bb: 8d:6f:dd:02:2f:62:c0:b0:c2:99:9b:6b:29:c7:80:b1:be:7d: 84:d3:e9:a2:0d:ff:5a:b8:16:20:53:5c:07:e5:98:36:53:0a: 0a:87:3a:90:17:85:fe:60:98:e5:e6:82:5d:e7:09:23:39:e8: 4b:c1:1e:14:37:78:65:68:3c:22:13:16:a5:6a:4a:27:79:36: 4a:12:72:b6:c7:51:bc:84:71:04:df:06:5a:1f:8f:2f:f2:5a: 20:ee:e6:ef:90:17:a3:64:d3:65:5c:9f:44:be:3b:a0:6a:25: 90:87:10:ec:8b:fd:b4:92:bc:ec:3e:b8:85:ff:cd:cd:02:c3: e1:b9:d3:77:40:10:08:8e:17:d0:be:97:84:ca:3f:b9:3a:c3: fc:2e:0e:57:ff:44:33:e3:f6:57:77:50:ed:9c:a9:d4:08:56: c8:13:8c:7e:1b:08:4e:d8:c6:6d:bd:5e:84:29:90:26:d0:a1: 8c:41:bc:53:7a:b3:a5:bb:9a:54:f0:e1:93:35:53:15:3d:8b: 83:dd:9d:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUwODA1MDI1NTE2WhcNMjUwODEyMDI1NTE2WjAYMRYwFAYD VQQDEw02ODkxNzI5NC1kYTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvBhtnLeViGK0tHa2XSr/YcLq5YO0KkCZnOBmvqi9X75e+Oi02zwV3J28hsB iRL0oVTlfYokqhN2DQrGa57vVem9PZsLugx59MCiEaDLDTkb1G+HUdTatIEk0G5p I/JA3qcODnuzo78MZ+5sYYaZnzglA1Uhg/yQ6WWBn1o66cTCxpsLdI/93ZSvjOeY +DIaVEN50O2Ot7cn9ACwriYumRELo5VMEztFOLNQyX7GrWXSBPx03GBNY0J0Yr7i Y3Z+rzTY9a4NZ/xgTeIfrblq8drI50raVJ6FY37/WUx52HZZjTxY+GH+tvQPqMIO SBrA/Ke6Fc9Alm+Yn3XiliVzjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCd1WEf+ t1wZYcBQz+ju4gdzDn+GMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2NAjqoteDyQmUFOcZTcA132BxLhEIoH7u+6oNxOMloV/TA3TZTDIb MuZwnPE+EgqDiSOK57uNb90CL2LAsMKZm2spx4Cxvn2E0+miDf9auBYgU1wH5Zg2 UwoKhzqQF4X+YJjl5oJd5wkjOehLwR4UN3hlaDwiExalakoneTZKEnK2x1G8hHEE 3wZaH48v8log7ubvkBejZNNlXJ9EvjugaiWQhxDsi/20krzsPriF/83NAsPhudN3 QBAIjhfQvpeEyj+5OsP8Lg5X/0Qz4/ZXd1DtnKnUCFbIE4x+GwhO2MZtvV6EKZAm 0KGMQbxTerOlu5pU8OGTNVMVPYuD3Z0m -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:42 2025 by rpki-client