$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json) Hash identifier: Arv4QU27e+aDwdlPCVfR6TnP9QIRwA0gwcrKW6H9L7U= Subject key identifier: EE:D0:1B:64:FF:15:B4:59:BE:AC:40:49:A1:6A:48:D4:4D:56:7F:32 Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Certificate serial: 0C07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft Manifest number: 0C01 Signing time: Fri 08 Aug 2025 18:58:59 +0000 Manifest this update: Fri 08 Aug 2025 18:58:58 +0000 Manifest next update: Fri 15 Aug 2025 18:58:58 +0000 Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: 2FQ60iBvADpH/P07l6/6kNtfFb9Z+aQbPn0ZqTogag4=) 2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Kec3OJ0yXeD5eottWlXfmKbDVOHd3PQe3ZSjrmCo8jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3079 (0xc07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Validity Not Before: Aug 8 18:58:58 2025 GMT Not After : Aug 15 18:58:58 2025 GMT Subject: CN=689648f3-f21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:27:a7:6c:6a:ec:7c:48:b2:83:55:68:2c: de:6a:e3:1e:b1:65:c8:09:99:68:91:af:a4:dc:94: 2a:f4:3b:9f:49:a4:03:82:3e:f2:ff:28:1e:26:27: a4:39:83:0c:3c:69:41:f4:c9:aa:f3:9d:6c:c3:62: f3:39:95:68:a7:82:cf:b9:a8:23:74:a0:df:b1:d5: 97:6c:7a:2d:4d:f7:b2:8a:50:a7:4d:ea:42:6b:89: d7:c9:ae:c1:16:76:a9:c7:f0:26:24:fe:67:35:b1: 12:c5:8e:03:c2:b6:fe:f3:06:3c:09:2f:d7:46:84: b0:f0:48:6a:eb:16:ad:94:12:fd:66:c4:1b:89:3d: b5:03:01:61:63:1a:7a:13:a8:64:10:c6:14:01:b3: 86:82:d3:55:46:4c:20:b6:19:a4:a2:76:d3:da:f3: 63:e8:5a:5c:de:c4:5b:2b:87:b9:4f:fb:12:62:e5: 59:a3:0f:60:a1:4d:55:7f:d1:9d:a0:08:9a:5a:74: bf:a9:6c:d4:2a:36:85:75:a8:66:b6:91:0c:ce:60: a2:88:68:6d:d4:2c:ec:52:02:99:91:fc:52:6c:8f: eb:61:40:8a:ca:29:38:98:58:3f:a2:d6:6e:1c:ce: 8b:45:82:ba:73:7c:d8:14:ef:48:9f:fb:75:be:a0: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D0:1B:64:FF:15:B4:59:BE:AC:40:49:A1:6A:48:D4:4D:56:7F:32 X509v3 Authority Key Identifier: keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b4:4f:fa:ae:3b:ed:ac:74:16:d8:0e:95:ba:d2:05:11:b9: 09:80:0d:22:b7:98:42:d9:52:04:e0:78:c8:54:fe:ad:ec:c9: 2c:4a:0c:29:4b:9f:44:47:bf:54:96:12:52:0a:a8:28:6f:9b: 48:f8:65:43:5b:49:db:38:ea:f9:25:10:b6:03:79:d1:0c:56: 16:ae:e9:14:2b:aa:7b:cf:92:c8:81:26:5b:c8:f3:f1:d7:b8: c6:4d:bd:37:45:81:65:ee:e5:04:ae:f0:9d:42:3d:04:7f:f3: 18:49:8a:e2:c4:cd:f1:f1:5b:63:da:ba:e6:29:c7:14:c3:1d: e0:77:3b:81:3b:15:f4:8a:1f:f0:61:5c:5c:e9:a2:3b:4d:5a: 50:1d:f3:26:c2:89:54:4b:be:30:27:0c:2d:e1:1c:38:21:5b: 7c:a0:87:d5:1c:81:d8:f4:b3:35:49:96:df:d6:63:79:4e:14: 84:8b:5b:be:48:af:3b:ca:22:68:24:e9:74:28:c9:4d:54:1b: 2b:30:63:ca:15:92:98:ab:ab:cb:55:06:08:d7:89:f7:b6:49: 5c:43:20:62:c4:2c:76:f3:00:3d:34:b8:71:c6:fe:53:b8:ab: 69:85:d3:aa:ea:7a:83:3f:09:e8:9f:4e:4a:ae:67:bb:e4:ba: f2:64:ba:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG RjhDMDg5RTMwHhcNMjUwODA4MTg1ODU4WhcNMjUwODE1MTg1ODU4WjAYMRYwFAYD VQQDEw02ODk2NDhmMy1mMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+snp2xq7HxIsoNVaCzeauMesWXICZloka+k3JQq9DufSaQDgj7y/ygeJiek OYMMPGlB9Mmq851sw2LzOZVop4LPuagjdKDfsdWXbHotTfeyilCnTepCa4nXya7B Fnapx/AmJP5nNbESxY4Dwrb+8wY8CS/XRoSw8Ehq6xatlBL9ZsQbiT21AwFhYxp6 E6hkEMYUAbOGgtNVRkwgthmkonbT2vNj6Fpc3sRbK4e5T/sSYuVZow9goU1Vf9Gd oAiaWnS/qWzUKjaFdahmtpEMzmCiiGht1CzsUgKZkfxSbI/rYUCKyik4mFg/otZu HM6LRYK6c3zYFO9In/t1vqD6mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7QG2T/ FbRZvqxASaFqSNRNVn8yMB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4 MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5 c043alhxVFAwdlhfakFpZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6tE/6rjvtrHQW2A6VutIFEbkJgA0it5hC2VIE4HjIVP6t7MksSgwp S59ER79UlhJSCqgob5tI+GVDW0nbOOr5JRC2A3nRDFYWrukUK6p7z5LIgSZbyPPx 17jGTb03RYFl7uUErvCdQj0Ef/MYSYrixM3x8Vtj2rrmKccUwx3gdzuBOxX0ih/w YVxc6aI7TVpQHfMmwolUS74wJwwt4Rw4IVt8oIfVHIHY9LM1SZbf1mN5ThSEi1u+ SK87yiJoJOl0KMlNVBsrMGPKFZKYq6vLVQYI14n3tklcQyBixCx28wA9NLhxxv5T uKtphdOq6nqDPwnon05Krme75LryZLrV -----END CERTIFICATE-----Generated at Sun Aug 10 18:15:53 2025 by rpki-client