$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json) Hash identifier: N3F7vKxvEuxOD5qthu2pVb7hrZ3bgzRe6BN+FAxwT/4= Subject key identifier: F0:06:4C:7C:80:FD:BB:84:4A:43:FD:B0:5F:81:55:AC:19:F6:91:D8 Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft Manifest number: 069F Signing time: Mon 04 Aug 2025 22:35:19 +0000 Manifest this update: Mon 04 Aug 2025 22:35:19 +0000 Manifest next update: Mon 11 Aug 2025 22:35:19 +0000 Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: Q3d3ZTs6jxRo/C0gWtbZi3uX5AnkL9k9mfBrDHbORBU=) 2: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: QRognwJk9AvzC5yneK2dgTuODW0yL1x1QHdbXzDSYZ0=) 3: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: JEn605s5uj7twYN8vhMjV/lhtaUfRkimlGOAUbH9hfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 22:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Validity Not Before: Aug 4 22:35:19 2025 GMT Not After : Aug 11 22:35:19 2025 GMT Subject: CN=689135a7-ee7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:f4:0e:c1:c7:44:3e:68:e7:bd:f8:8b:67: db:c2:d3:f8:8a:18:ef:50:f4:52:84:e2:2b:ac:ce: 12:c3:a8:5c:a1:f0:89:59:d6:79:45:a8:6e:88:f5: 61:c9:12:7a:aa:bc:c5:2b:0c:f5:6f:e0:b3:8f:d3: 2b:e6:56:6f:8a:6b:b3:54:4b:78:27:3a:02:ed:bd: ca:0d:1e:10:f9:7f:40:78:7d:84:98:e9:18:b8:56: e5:0d:28:7c:1c:ed:78:1c:00:36:41:03:9a:b5:da: 19:7e:3a:4a:1c:05:bc:38:26:ef:96:58:24:a3:90: 93:0b:7a:33:18:45:ad:d5:e9:b1:78:13:93:09:02: 10:25:98:36:2b:26:b2:b1:e9:ec:4f:dc:f9:35:2c: ab:9f:13:5d:ed:5c:b1:99:3c:54:87:4a:fa:7c:06: 8a:cf:58:67:9f:48:9b:d9:04:3d:75:f6:c1:bc:e8: be:52:97:57:34:db:5b:89:b4:b4:3a:e8:58:ab:af: 9a:f2:4d:6c:fd:76:22:c2:63:f4:92:a9:41:0f:77: dc:c0:d1:58:9c:e5:7c:fa:3d:1f:b9:19:54:e4:b2: 1b:22:d1:e8:a7:b4:f3:91:7c:15:26:d8:f9:2b:57: 54:88:34:40:12:f6:ac:08:95:21:1d:c6:22:7b:dc: c6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:06:4C:7C:80:FD:BB:84:4A:43:FD:B0:5F:81:55:AC:19:F6:91:D8 X509v3 Authority Key Identifier: keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8f:10:93:fe:81:28:39:5b:67:e6:50:d7:33:bb:62:ed:03: 9e:a1:c2:1b:7d:9e:11:c8:f9:6f:52:c4:6b:23:0c:6e:e6:56: 6c:ef:12:83:77:af:ee:51:9b:e1:8e:45:c9:cd:0c:b4:d3:5c: 99:21:97:67:96:d9:7b:e5:89:ba:92:cf:f8:0a:6c:aa:3d:83: 9d:26:f4:f8:96:5c:c0:f9:c0:25:21:ba:79:c0:99:f7:5c:5b: ed:51:d1:28:87:9e:d5:be:f9:5a:15:1e:0d:15:dc:8a:65:04: cd:82:23:f8:39:8d:5d:7f:f9:a3:ff:3a:33:96:61:bc:16:e5: db:56:d4:1b:79:f2:c4:0c:c8:da:61:28:13:c9:15:e6:f7:c9: 6b:2b:d8:30:87:18:cd:da:97:31:1b:b8:35:0a:2d:fc:3f:b7: 96:88:46:4c:f5:18:35:9e:d7:0b:f7:2a:6b:e0:c4:12:5e:c8: f4:c8:da:df:5c:28:0b:fe:43:03:40:12:2c:87:85:f6:c6:20: eb:ae:9e:44:3c:a2:ea:f1:8a:d7:ba:93:82:b9:77:6a:4a:1a: eb:80:e1:60:65:fb:47:ae:a4:b0:80:77:b9:78:39:ac:d2:98: a9:ca:64:f9:dc:12:a3:e0:80:eb:65:21:09:24:cb:b8:bf:aa: eb:ca:76:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1RTYxMTAvBgNVBAUTKDg4NzgyRjgzMUYzNjlFOTZGOTc5QTI1ODVDRjI3M0M5 MTZDN0I0RkQwHhcNMjUwODA0MjIzNTE5WhcNMjUwODExMjIzNTE5WjAYMRYwFAYD VQQDEw02ODkxMzVhNy1lZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZD0DsHHRD5o5734i2fbwtP4ihjvUPRShOIrrM4Sw6hcofCJWdZ5RahuiPVh yRJ6qrzFKwz1b+Czj9Mr5lZvimuzVEt4JzoC7b3KDR4Q+X9AeH2EmOkYuFblDSh8 HO14HAA2QQOatdoZfjpKHAW8OCbvllgko5CTC3ozGEWt1emxeBOTCQIQJZg2Kyay sensT9z5NSyrnxNd7VyxmTxUh0r6fAaKz1hnn0ib2QQ9dfbBvOi+UpdXNNtbibS0 OuhYq6+a8k1s/XYiwmP0kqlBD3fcwNFYnOV8+j0fuRlU5LIbItHop7TzkXwVJtj5 K1dUiDRAEvasCJUhHcYie9zGjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAGTHyA /buESkP9sF+BVawZ9pHYMB8GA1UdIwQYMBaAFIh4L4MfNp6W+XmiWFzyc8kWx7T9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVFNi84N0QxRUQwNjdB ODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5wYjVlYUpZWFBKenlSYkh0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lIZ3ZneDgybnBiNWVhSllYUEp6eVJiSHRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVFNi84N0QxRUQwNjdBODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5w YjVlYUpZWFBKenlSYkh0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAajxCT/oEoOVtn5lDXM7ti7QOeocIbfZ4RyPlvUsRrIwxu5lZs7xKD d6/uUZvhjkXJzQy001yZIZdnltl75Ym6ks/4CmyqPYOdJvT4llzA+cAlIbp5wJn3 XFvtUdEoh57VvvlaFR4NFdyKZQTNgiP4OY1df/mj/zozlmG8FuXbVtQbefLEDMja YSgTyRXm98lrK9gwhxjN2pcxG7g1Ci38P7eWiEZM9Rg1ntcL9ypr4MQSXsj0yNrf XCgL/kMDQBIsh4X2xiDrrp5EPKLq8YrXupOCuXdqShrrgOFgZftHrqSwgHe5eDms 0pipymT53BKj4IDrZSEJJMu4v6rrynZY -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:34 2025 by rpki-client