$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: Ci8Zluz14hqRJ1BakPzH1R12lJjlY2MF4LvJyw2LvZ4= Subject key identifier: 60:3F:57:5D:BE:C0:59:99:2F:7E:4D:E8:65:14:91:CF:BC:C9:1D:46 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 016A Signing time: Sat 09 Aug 2025 04:13:47 +0000 Manifest this update: Sat 09 Aug 2025 04:13:46 +0000 Manifest next update: Sat 16 Aug 2025 04:13:46 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: aUNGBDqqwUADNadWvGjNXze2NsVpTPe2Fs31yWnqQXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Aug 9 04:13:46 2025 GMT Not After : Aug 16 04:13:46 2025 GMT Subject: CN=6896cafb-a891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:af:a5:b5:d2:d5:27:1d:ba:af:28:af:ed: f9:8a:1c:a0:61:30:31:e2:06:45:b2:45:25:45:f6: 7c:c4:dc:f6:cd:d3:9e:99:37:82:0c:c3:bb:e7:69: ec:05:20:d4:af:bc:9e:c5:5d:60:83:95:48:f9:75: f9:5b:69:9f:5e:ac:4a:02:61:ca:d5:ab:48:57:a2: 68:da:6e:ad:6b:1d:1f:aa:89:cd:43:ef:af:8d:5c: b5:93:f1:ee:df:af:06:50:31:50:de:b9:79:f2:2a: 2f:da:08:8c:16:10:12:9a:36:71:75:f9:db:f3:ca: ff:c4:45:c8:a3:d6:ae:aa:1f:85:b2:50:82:5b:b0: ce:e0:35:ca:ad:31:23:a6:41:82:21:8f:4e:b5:89: a7:5c:f1:90:8a:99:65:c9:7c:d7:90:58:a0:6e:0b: b6:53:f8:15:93:c6:60:5f:ba:35:a1:14:03:e7:a0: ff:14:f0:39:08:1d:6d:4a:b9:a7:b9:ab:4e:41:56: 85:49:ce:63:98:1a:80:72:73:27:06:46:8f:0e:a8: 54:e7:05:e6:03:78:8f:91:55:85:e0:63:b5:ef:29: 14:e6:56:89:2f:33:f7:13:82:3c:d0:bc:c2:c5:b2: 97:b2:39:ad:43:fe:03:bb:78:24:4b:5b:48:16:df: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3F:57:5D:BE:C0:59:99:2F:7E:4D:E8:65:14:91:CF:BC:C9:1D:46 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:77:3e:65:85:cc:da:38:01:d8:d5:ae:42:6e:ca:3e:cd:8a: 75:d7:e1:d6:5b:51:b4:e2:9f:35:96:53:31:eb:d6:16:e0:77: 93:25:d2:9c:23:c2:3e:30:68:59:df:e4:03:c8:8a:55:08:30: 34:d1:7e:c2:e2:4f:2d:1f:56:4e:0b:46:0b:46:ea:3b:27:b8: 7b:ec:a1:0a:da:1c:c8:12:56:e6:48:b3:ba:db:1e:ef:9c:90: 97:0a:20:6d:53:42:97:4d:5e:6f:33:60:e3:d8:c5:3b:e6:65: 18:26:c3:65:d0:1a:98:0e:ec:91:31:46:93:d4:1e:05:44:b7: fb:c8:90:06:aa:1c:dc:16:fe:6a:1d:47:78:d6:29:eb:66:f8: 69:7b:7d:8e:8e:38:77:3a:24:1a:23:cd:a5:b0:26:3c:31:52: f9:cc:cb:0a:f9:09:35:bb:7b:35:6c:39:bb:b9:4d:15:03:18: 6b:e9:59:ae:93:a8:c8:4f:05:78:db:0a:28:f6:1a:ce:05:e7: e2:c3:34:d7:65:16:bc:26:9e:6c:c3:b0:36:32:61:7b:d9:2f: 45:07:ff:cc:c3:26:38:76:67:68:93:86:0e:15:35:df:f0:e6: 30:e9:9e:8e:bd:8c:82:6b:8c:86:09:28:6c:32:d1:f1:29:3b: 7d:5d:a4:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjUwODA5MDQxMzQ2WhcNMjUwODE2MDQxMzQ2WjAYMRYwFAYD VQQDEw02ODk2Y2FmYi1hODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsz2vpbXS1Scduq8or+35ihygYTAx4gZFskUlRfZ8xNz2zdOemTeCDMO752ns BSDUr7yexV1gg5VI+XX5W2mfXqxKAmHK1atIV6Jo2m6tax0fqonNQ++vjVy1k/Hu 368GUDFQ3rl58iov2giMFhASmjZxdfnb88r/xEXIo9auqh+FslCCW7DO4DXKrTEj pkGCIY9OtYmnXPGQipllyXzXkFigbgu2U/gVk8ZgX7o1oRQD56D/FPA5CB1tSrmn uatOQVaFSc5jmBqAcnMnBkaPDqhU5wXmA3iPkVWF4GO17ykU5laJLzP3E4I80LzC xbKXsjmtQ/4Du3gkS1tIFt+E7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA/V12+ wFmZL35N6GUUkc+8yR1GMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwdz5lhczaOAHY1a5Cbso+zYp11+HWW1G04p81llMx69YW4HeTJdKc I8I+MGhZ3+QDyIpVCDA00X7C4k8tH1ZOC0YLRuo7J7h77KEK2hzIElbmSLO62x7v nJCXCiBtU0KXTV5vM2Dj2MU75mUYJsNl0BqYDuyRMUaT1B4FRLf7yJAGqhzcFv5q HUd41inrZvhpe32Ojjh3OiQaI82lsCY8MVL5zMsK+Qk1u3s1bDm7uU0VAxhr6Vmu k6jITwV42woo9hrOBefiwzTXZRa8Jp5sw7A2MmF72S9FB//MwyY4dmdok4YOFTXf 8OYw6Z6OvYyCa4yGCShsMtHxKTt9XaSC -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:18 2025 by rpki-client