$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft File: imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json) Hash identifier: NZPHatlWDPv1oqGG+Ro614WqmEhk6eB44xEKif27yVI= Subject key identifier: 09:DC:FF:91:62:E0:F4:CF:C1:CD:37:C0:35:49:3D:63:83:43:91:64 Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 Certificate issuer: /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft Manifest number: 0145 Signing time: Sat 09 Aug 2025 04:41:27 +0000 Manifest this update: Sat 09 Aug 2025 04:41:27 +0000 Manifest next update: Sat 16 Aug 2025 04:41:27 +0000 Files and hashes: 1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: 3BuD1QEMnNuA8qBa/brrx7/Porjhy4Jo4GRQCDvPPZI=) 2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: MIl/OMgyucN0EutmGHMH29cPoxdMejUcwQsKGNX20nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Validity Not Before: Aug 9 04:41:27 2025 GMT Not After : Aug 16 04:41:27 2025 GMT Subject: CN=6896d177-3582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:8a:b5:09:21:a3:64:6e:ea:a6:5d:08:e1: 58:06:28:dd:99:31:ef:c2:ab:1c:7f:dc:d2:13:0e: 0f:8c:04:e5:bb:3f:c4:2c:b1:43:30:bb:59:a7:63: 38:41:3f:38:7e:f9:94:e4:11:be:5f:e8:94:34:82: 33:39:11:41:10:0f:c8:dd:49:e9:43:1e:c2:97:b5: 81:fe:ce:2b:41:8f:6e:d5:84:cc:37:87:6c:5e:93: 35:5f:54:fd:73:1f:00:e9:74:db:41:99:f4:09:23: b6:b6:a1:48:50:70:94:ad:a6:7c:62:34:3c:8b:a0: 3e:2f:c7:ad:32:2a:d5:13:94:47:c3:22:60:51:81: 12:9b:d1:61:91:c4:9b:d8:79:a1:36:6c:6c:82:4d: a8:ed:14:67:e2:a8:e2:a1:c3:27:71:94:ec:36:ff: 5e:c4:91:e6:ec:fd:22:e5:ce:3d:b1:71:f5:3c:4a: 35:85:bd:27:f3:47:f8:4d:62:a6:77:92:6b:37:c1: 11:c1:28:d2:5a:6d:9b:78:17:f0:9c:46:76:db:f9: 46:e6:e5:29:5c:cf:e3:99:21:79:6e:0d:e7:71:88: 4d:7d:b9:b9:28:af:e4:87:af:ee:bd:43:da:72:6c: 64:c6:1a:67:67:a8:42:c4:0b:20:f2:58:5b:ef:aa: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DC:FF:91:62:E0:F4:CF:C1:CD:37:C0:35:49:3D:63:83:43:91:64 X509v3 Authority Key Identifier: keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d5:70:6d:1a:58:f2:60:ac:1f:e2:c8:67:f6:cc:6a:85:a6: 26:f6:73:0d:04:01:61:c4:c1:d0:f5:40:39:5d:c4:a3:ba:90: e8:49:71:4d:78:cf:55:03:2e:77:e5:95:3a:b1:22:72:0f:68: cf:99:66:cc:11:83:ce:4f:24:5d:15:93:72:c2:fb:74:f1:12: 86:f0:cd:6b:27:4a:2f:80:df:9d:ad:ec:c1:a7:98:d5:ac:70: 22:70:05:d7:92:c1:5b:ab:ec:f1:a7:ed:d5:d7:f6:bd:17:27: 6f:8a:15:a0:24:42:9a:ac:3d:24:81:a4:c8:bd:25:14:a3:f4: fd:32:15:06:e7:a5:cd:54:ac:4e:d4:08:80:f8:16:8a:87:85: ee:87:bf:fc:12:c8:75:20:09:ea:ff:1b:5c:ac:d6:38:6a:53: 9c:73:f7:b7:9c:91:4a:77:3e:8f:b4:c1:84:26:13:ed:c8:5f: d0:8d:ac:3d:21:db:6c:dc:6b:15:8c:59:20:c4:d0:a6:98:5e: d5:8f:df:ff:3e:75:23:0f:c1:dd:c9:07:0a:0a:93:02:77:98: 85:39:be:15:14:6d:ae:2b:fa:d6:56:84:02:63:56:e5:72:f3: 18:ff:cc:84:63:2e:db:55:8d:df:e1:98:32:44:6f:b4:6e:7d: fe:78:6a:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI0QzUxMTAvBgNVBAUTKDhBNjIxQkM3N0EzREQ0MTcwQ0I5MTAzRkY4Nzg4QkM5 MDkwMDgyRDEwHhcNMjUwODA5MDQ0MTI3WhcNMjUwODE2MDQ0MTI3WjAYMRYwFAYD VQQDEw02ODk2ZDE3Ny0zNTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxaKtQkho2Ru6qZdCOFYBijdmTHvwqscf9zSEw4PjATluz/ELLFDMLtZp2M4 QT84fvmU5BG+X+iUNIIzORFBEA/I3UnpQx7Cl7WB/s4rQY9u1YTMN4dsXpM1X1T9 cx8A6XTbQZn0CSO2tqFIUHCUraZ8YjQ8i6A+L8etMirVE5RHwyJgUYESm9FhkcSb 2HmhNmxsgk2o7RRn4qjiocMncZTsNv9exJHm7P0i5c49sXH1PEo1hb0n80f4TWKm d5JrN8ERwSjSWm2beBfwnEZ22/lG5uUpXM/jmSF5bg3ncYhNfbm5KK/kh6/uvUPa cmxkxhpnZ6hCxAsg8lhb76r4ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnc/5Fi 4PTPwc03wDVJPWODQ5FkMB8GA1UdIwQYMBaAFIpiG8d6PdQXDLkQP/h4i8kJAILR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjRDNS9EMUUyRDk2ODgz NTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFCY011UkFfLUhpTHlRa0Fn dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltSWJ4M285MUJjTXVSQV8tSGlMeVFrQWd0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjRDNS9EMUUyRDk2ODgzNTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFC Y011UkFfLUhpTHlRa0FndEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu1XBtGljyYKwf4shn9sxqhaYm9nMNBAFhxMHQ9UA5XcSjupDoSXFN eM9VAy535ZU6sSJyD2jPmWbMEYPOTyRdFZNywvt08RKG8M1rJ0ovgN+drezBp5jV rHAicAXXksFbq+zxp+3V1/a9FydvihWgJEKarD0kgaTIvSUUo/T9MhUG56XNVKxO 1AiA+BaKh4Xuh7/8Esh1IAnq/xtcrNY4alOcc/e3nJFKdz6PtMGEJhPtyF/Qjaw9 Idts3GsVjFkgxNCmmF7Vj9//PnUjD8HdyQcKCpMCd5iFOb4VFG2uK/rWVoQCY1bl cvMY/8yEYy7bVY3f4ZgyRG+0bn3+eGq6 -----END CERTIFICATE-----Generated at Sun Aug 10 15:59:39 2025 by rpki-client