$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: cuIwIbIucNzd5BWMCehakLcszFaCIG9oZ9cgn44NeGc= Subject key identifier: DF:B9:B4:95:66:B4:A5:61:DC:FA:AC:97:7A:B9:AC:F7:BD:BF:12:0F Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: 23 Signing time: Thu 07 Aug 2025 08:29:44 +0000 Manifest this update: Thu 07 Aug 2025 08:29:43 +0000 Manifest next update: Thu 14 Aug 2025 08:29:43 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: 182nGkFscQftKt/opYGQo+p8uG9o7EnWsZAMu7kG6N8=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: NGudT5ffYxQaLDuPITb3DSyOtSWSbubIZoe2i4vUMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Aug 7 08:29:43 2025 GMT Not After : Aug 14 08:29:43 2025 GMT Subject: CN=689463f7-68d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:79:31:08:0f:c9:15:b3:30:b5:cb:c1:ed:9e: 20:c4:8b:fc:55:4b:f0:b9:96:b6:79:cb:c5:48:e5: 4b:5a:16:98:69:5f:ce:a6:1a:3c:fc:7e:7b:0f:ce: d7:5d:b1:73:c3:eb:98:b3:1b:01:86:17:8d:fa:8d: 64:18:d5:93:db:7d:92:48:d9:80:0d:c5:ad:74:e4: 47:90:bb:4b:12:ed:eb:26:38:51:a2:3b:bd:a3:91: f6:a5:0e:5d:b6:50:ab:96:6e:9c:4d:67:5d:3d:0a: df:2b:84:de:63:76:0d:4d:8e:5e:9c:44:64:2f:13: ed:0d:fb:64:30:bd:8f:3f:cf:9a:df:16:b4:d7:62: a5:9d:f9:d0:a9:d8:d3:d3:37:7b:cd:09:4a:4e:50: 32:e4:01:f4:bd:c6:6e:92:51:da:b7:23:45:ed:49: ae:69:2d:e9:3d:77:86:c6:8e:f2:8c:4c:19:7a:a9: 7e:e8:f7:25:01:d7:b5:11:9a:11:99:54:56:6e:50: 66:b2:d7:3f:79:6a:b8:ab:db:29:d1:71:c9:85:79: cd:74:18:ee:41:1d:3c:28:8c:c4:42:68:17:be:36: cb:11:6c:e0:13:b4:87:7a:cf:b6:32:fc:a0:88:c8: 86:f3:f9:15:19:62:63:08:da:84:cd:52:82:04:04: 13:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B9:B4:95:66:B4:A5:61:DC:FA:AC:97:7A:B9:AC:F7:BD:BF:12:0F X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ca:e1:27:86:b8:63:1e:39:af:21:a4:b0:08:8a:e7:6c:7f: 37:e1:43:25:12:50:56:bb:19:ef:70:c4:ab:10:df:98:9a:bf: 62:21:5f:f2:ba:d0:66:4b:44:29:99:97:18:e1:e3:6b:dd:bb: 9c:af:6e:b1:9f:a0:8f:37:fb:0b:7a:21:93:7a:13:cb:bb:24: 0b:df:1e:9d:30:9f:66:ca:ef:81:40:f1:8c:aa:6e:11:92:4d: dd:f1:83:6a:a2:71:9f:bc:93:5f:1e:41:1c:d5:a9:19:4c:28: 27:fe:80:ce:d9:e9:dd:82:db:d3:84:65:64:e8:3f:61:17:42: 40:20:48:0c:7c:0b:e5:f4:da:67:83:ac:53:95:0d:b7:1a:7c: da:45:cc:22:db:c5:3d:77:be:dc:07:c9:60:53:21:5d:d5:aa: c4:ae:39:9c:11:dd:0e:78:d5:5a:83:05:60:f7:82:c9:b5:57: 61:2d:72:4e:87:9c:52:6f:cb:a4:86:07:80:6c:cf:67:7c:23: 59:1d:e8:06:e3:73:d2:98:d7:37:a3:fa:b4:87:69:3b:9f:5f: 9c:b6:bc:1a:d5:fb:2e:9c:11:25:57:52:86:f9:02:4b:55:d4: 7e:54:28:60:64:d4:00:da:24:56:a2:87:c1:3f:6c:ca:36:aa: 36:4c:ba:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkZDQjExMC8GA1UEBRMoMjIyNDI5NDQxNkI4NDY1NzA2NTU0QjUyQ0JDNTZGNDQ5 QkM0NkM4OTAeFw0yNTA4MDcwODI5NDNaFw0yNTA4MTQwODI5NDNaMBgxFjAUBgNV BAMTDTY4OTQ2M2Y3LTY4ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgeTEID8kVszC1y8HtniDEi/xVS/C5lrZ5y8VI5UtaFphpX86mGjz8fnsPztdd sXPD65izGwGGF436jWQY1ZPbfZJI2YANxa105EeQu0sS7esmOFGiO72jkfalDl22 UKuWbpxNZ109Ct8rhN5jdg1Njl6cRGQvE+0N+2QwvY8/z5rfFrTXYqWd+dCp2NPT N3vNCUpOUDLkAfS9xm6SUdq3I0XtSa5pLek9d4bGjvKMTBl6qX7o9yUB17URmhGZ VFZuUGay1z95arir2ynRccmFec10GO5BHTwojMRCaBe+NssRbOATtId6z7Yy/KCI yIbz+RUZYmMI2oTNUoIEBBMPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU37m0lWa0 pWHc+qyXerms972/Eg8wHwYDVR0jBBgwFoAUIiQpRBa4RlcGVUtSy8VvRJvEbIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRkNCL0VEMEYxMUY0NDIw NTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWlRcFJCYTRSbGNHVlV0U3k4VnZSSnZFYklrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RkNCL0VEMEYxMUY0NDIwNTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0Umxj R1ZVdFN5OFZ2Ukp2RWJJay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITK4SeGuGMeOa8hpLAIiudsfzfhQyUSUFa7Ge9wxKsQ35iav2IhX/K6 0GZLRCmZlxjh42vdu5yvbrGfoI83+wt6IZN6E8u7JAvfHp0wn2bK74FA8YyqbhGS Td3xg2qicZ+8k18eQRzVqRlMKCf+gM7Z6d2C29OEZWToP2EXQkAgSAx8C+X02meD rFOVDbcafNpFzCLbxT13vtwHyWBTIV3VqsSuOZwR3Q541VqDBWD3gsm1V2Etck6H nFJvy6SGB4Bsz2d8I1kd6Abjc9KY1zej+rSHaTufX5y2vBrV+y6cESVXUob5AktV 1H5UKGBk1ADaJFaih8E/bMo2qjZMulM= -----END CERTIFICATE-----Generated at Sat Aug 9 01:15:07 2025 by rpki-client