$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: vk9sTtudtcldclfA+QfRAqaT1A6JEZLIOJMqRCAnvw0= Subject key identifier: 31:29:12:C2:1A:41:89:4B:99:99:F9:1D:53:8D:F2:B7:B5:16:43:1A Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 0563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 0557 Signing time: Mon 04 Aug 2025 23:49:45 +0000 Manifest this update: Mon 04 Aug 2025 23:49:44 +0000 Manifest next update: Mon 11 Aug 2025 23:49:44 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: V0gNzE50eDaTtIgVIhm0U8KU48FtJzzxAASmOeGTgi4=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Aug 4 23:49:44 2025 GMT Not After : Aug 11 23:49:44 2025 GMT Subject: CN=68914718-c6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:f7:a1:16:bf:88:57:78:f4:49:b4:c1:24: a7:e0:0c:74:2f:5b:51:05:5b:9a:88:32:39:b4:c3: ba:54:ab:62:88:8e:eb:d2:d1:a7:72:39:57:39:d7: ee:bb:f9:30:ec:37:fb:10:62:12:bd:28:76:1d:e9: 66:a0:84:35:e9:d6:e5:ce:03:e7:eb:ff:59:d9:f2: 5e:46:1f:4b:23:48:d4:88:fd:ca:d1:0b:44:9d:1e: 0c:1e:7f:f6:f8:e5:56:d9:25:94:4c:12:c6:45:ec: d9:7e:70:f3:45:04:f1:3d:d2:d0:3a:76:f6:4b:02: 08:7d:0c:7a:b0:13:6a:18:bd:53:f2:05:2f:93:1b: 29:10:4b:ac:97:b8:77:1a:e2:63:81:8b:a4:ee:c1: 48:a8:29:34:ac:ff:3b:eb:a0:cf:d1:ee:6e:ce:39: b3:2a:ed:1c:a7:61:c8:c9:ec:92:00:6c:4d:45:d4: a8:b3:9d:0f:6d:37:c7:44:39:ac:bc:a6:fb:90:b3: a2:9e:e1:68:03:6a:a8:e5:6e:58:3b:57:e3:e1:ab: e7:b3:c5:6e:39:06:27:6a:ad:21:e8:10:d2:e1:80: cb:56:9a:97:fb:8c:13:84:cf:24:d2:ae:ea:5c:e5: 9b:13:37:1c:36:2f:b3:d6:bb:86:60:5c:8f:6c:13: d1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:29:12:C2:1A:41:89:4B:99:99:F9:1D:53:8D:F2:B7:B5:16:43:1A X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:94:29:48:83:3d:25:f9:1d:fb:84:73:23:8c:86:c1:5d:bc: 04:1c:63:75:ac:7b:ad:35:d5:0d:2b:2d:44:de:7e:7c:72:e6: 58:56:92:f7:e5:30:0d:ef:f2:f1:06:16:2f:2b:db:01:87:e1: ef:92:69:1e:23:c5:0a:f2:d2:1d:73:0c:66:90:1d:91:52:9e: bd:ce:27:ae:b7:36:6d:12:f6:19:ac:b0:5d:d0:cc:95:4d:09: 0a:62:87:6e:41:fd:5f:2b:0e:d2:f1:c4:58:50:b6:e2:47:39: ae:8e:da:07:b9:60:9d:da:6d:fc:5d:de:95:9e:48:d4:10:10: a8:c0:ee:78:19:67:3b:dd:5d:f0:0d:2d:ef:eb:7c:77:25:87: 99:b6:0f:38:a6:1c:52:96:27:68:65:8d:cb:34:d4:00:bf:cd: 3b:72:9f:37:95:86:ca:35:4f:60:9f:35:fd:bc:68:a9:92:cc: 2c:12:76:5a:10:89:44:18:51:c2:78:eb:65:09:af:82:0f:30: 48:d1:e6:5e:b1:10:5d:74:b0:d8:e7:94:b3:08:fc:60:61:92: ad:1a:36:92:4c:4c:07:be:c3:fe:f4:c3:3c:a5:09:9e:7c:4d: 8a:88:ae:63:38:cc:1d:f1:eb:32:73:38:5a:cf:28:8d:8c:4a: 29:fa:96:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUwODA0MjM0OTQ0WhcNMjUwODExMjM0OTQ0WjAYMRYwFAYD VQQDEw02ODkxNDcxOC1jNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokz3oRa/iFd49Em0wSSn4Ax0L1tRBVuaiDI5tMO6VKtiiI7r0tGncjlXOdfu u/kw7Df7EGISvSh2HelmoIQ16dblzgPn6/9Z2fJeRh9LI0jUiP3K0QtEnR4MHn/2 +OVW2SWUTBLGRezZfnDzRQTxPdLQOnb2SwIIfQx6sBNqGL1T8gUvkxspEEusl7h3 GuJjgYuk7sFIqCk0rP8766DP0e5uzjmzKu0cp2HIyeySAGxNRdSos50PbTfHRDms vKb7kLOinuFoA2qo5W5YO1fj4avns8VuOQYnaq0h6BDS4YDLVpqX+4wThM8k0q7q XOWbEzccNi+z1ruGYFyPbBPRnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEpEsIa QYlLmZn5HVON8re1FkMaMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCelClIgz0l+R37hHMjjIbBXbwEHGN1rHutNdUNKy1E3n58cuZYVpL3 5TAN7/LxBhYvK9sBh+HvkmkeI8UK8tIdcwxmkB2RUp69zieutzZtEvYZrLBd0MyV TQkKYoduQf1fKw7S8cRYULbiRzmujtoHuWCd2m38Xd6VnkjUEBCowO54GWc73V3w DS3v63x3JYeZtg84phxSlidoZY3LNNQAv807cp83lYbKNU9gnzX9vGipkswsEnZa EIlEGFHCeOtlCa+CDzBI0eZesRBddLDY55SzCPxgYZKtGjaSTEwHvsP+9MM8pQme fE2KiK5jOMwd8esyczhazyiNjEop+paP -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:25 2025 by rpki-client