$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: twIjoWzrCtxeHahF03C7oRZtTWKKjM7hSyYTtIyGz18= Subject key identifier: A7:9A:4F:AB:0B:E3:13:5F:56:80:45:2E:98:44:6C:7F:BA:9F:DC:BE Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 0711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 0706 Signing time: Fri 08 Aug 2025 22:17:48 +0000 Manifest this update: Fri 08 Aug 2025 22:17:47 +0000 Manifest next update: Fri 15 Aug 2025 22:17:47 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: t/ggx8r9Rn7bNEikB7NcJwkQpFKELJLxMSUZqeDNIRQ=) 2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1809 (0x711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: Aug 8 22:17:47 2025 GMT Not After : Aug 15 22:17:47 2025 GMT Subject: CN=6896778b-bee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:85:b7:aa:25:91:96:93:d9:32:f9:52:c1: f9:7a:f2:7c:37:4b:46:0d:c7:d5:b1:e1:2a:27:53: a7:cb:a6:dd:a7:dc:09:14:89:fa:41:43:93:91:78: 0d:61:85:f7:4b:8e:14:1c:62:22:d7:a4:ac:36:cc: 88:22:89:d6:96:33:20:4d:80:12:0f:2d:d0:3d:bb: e6:b5:58:40:80:b2:07:3b:f5:e5:16:91:eb:b2:b5: 6e:db:d8:df:48:d6:d5:7b:18:26:ac:90:fb:42:7b: 48:d5:7f:14:0c:0e:22:e5:84:56:d9:cb:0f:c7:8e: 94:e3:27:16:a5:c5:c0:59:cd:de:73:69:2d:a9:58: 77:fc:b4:cc:f7:11:d7:7a:50:ff:10:f9:2e:ab:85: e2:88:75:17:a4:14:26:e5:ba:b2:de:e6:ff:2a:1a: ea:30:7a:b9:30:d2:b2:a4:de:98:3f:32:c9:cd:56: d3:fa:b2:07:72:32:6b:34:ec:11:65:d3:71:c9:bc: e8:7a:52:0a:d4:24:92:0d:e6:56:a4:16:cf:c2:ef: 99:87:81:f1:da:a7:ed:66:2b:86:42:dd:a3:4b:f1: f0:86:2f:16:57:17:82:ba:05:d3:08:d6:ef:d9:f7: 30:08:be:28:b8:04:c2:95:dc:b5:08:bb:aa:f3:7f: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9A:4F:AB:0B:E3:13:5F:56:80:45:2E:98:44:6C:7F:BA:9F:DC:BE X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c8:c3:d7:0f:d6:2d:af:6d:a5:13:8e:c0:ea:c5:99:d0:a5: 43:c2:4d:c2:83:e3:31:1e:3b:0a:94:58:5d:8e:b6:48:3c:52: 1f:20:11:8b:98:86:30:ee:7a:95:d1:e3:f7:fa:47:e5:1f:03: 1d:90:1d:08:6d:70:e7:29:b0:07:88:d8:22:b4:80:25:7c:f6: 92:45:27:93:6e:c4:8b:a4:d0:71:04:16:84:9e:26:f9:b2:c6: 33:25:ed:fa:7e:76:ae:ca:9e:10:05:de:03:c2:1a:a5:50:59: 00:49:7d:61:43:91:77:ec:5b:bc:46:ea:1f:57:06:be:6b:d6: 3f:97:84:ad:a3:40:d3:8f:85:fa:c0:36:fd:2b:9f:42:a0:91: 70:75:19:32:d0:b0:e9:24:04:f9:d8:5a:3c:24:0f:a4:03:a5: 93:13:45:04:20:07:3b:dc:c7:8b:3f:fd:1b:25:af:6c:cb:92: 7a:80:8e:70:22:be:18:eb:6b:81:b0:87:b7:9c:67:99:1d:19: 93:56:d0:71:12:30:2c:cd:03:75:cf:67:f3:14:bf:e8:2d:a8: 19:5c:bf:89:5a:da:35:58:6e:12:40:7b:0f:c1:36:e8:a4:ab: c0:6f:17:2b:ac:28:bd:f9:92:89:05:ea:af:f8:67:26:b9:dc: 65:13:c8:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjUwODA4MjIxNzQ3WhcNMjUwODE1MjIxNzQ3WjAYMRYwFAYD VQQDEw02ODk2Nzc4Yi1iZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMeFt6olkZaT2TL5UsH5evJ8N0tGDcfVseEqJ1Ony6bdp9wJFIn6QUOTkXgN YYX3S44UHGIi16SsNsyIIonWljMgTYASDy3QPbvmtVhAgLIHO/XlFpHrsrVu29jf SNbVexgmrJD7QntI1X8UDA4i5YRW2csPx46U4ycWpcXAWc3ec2ktqVh3/LTM9xHX elD/EPkuq4XiiHUXpBQm5bqy3ub/KhrqMHq5MNKypN6YPzLJzVbT+rIHcjJrNOwR ZdNxybzoelIK1CSSDeZWpBbPwu+Zh4Hx2qftZiuGQt2jS/Hwhi8WVxeCugXTCNbv 2fcwCL4ouATCldy1CLuq83+SiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeaT6sL 4xNfVoBFLphEbH+6n9y+MB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtyMPXD9Ytr22lE47A6sWZ0KVDwk3Cg+MxHjsKlFhdjrZIPFIfIBGL mIYw7nqV0eP3+kflHwMdkB0IbXDnKbAHiNgitIAlfPaSRSeTbsSLpNBxBBaEnib5 ssYzJe36fnauyp4QBd4DwhqlUFkASX1hQ5F37Fu8RuofVwa+a9Y/l4Sto0DTj4X6 wDb9K59CoJFwdRky0LDpJAT52Fo8JA+kA6WTE0UEIAc73MeLP/0bJa9sy5J6gI5w Ir4Y62uBsIe3nGeZHRmTVtBxEjAszQN1z2fzFL/oLagZXL+JWto1WG4SQHsPwTbo pKvAbxcrrCi9+ZKJBeqv+GcmudxlE8gm -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:14 2025 by rpki-client