$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json) Hash identifier: zxCqXE0kGM5pM9RUakRtpYJtaBs4ZF1HVoH18e+eiio= Subject key identifier: 2A:69:2C:61:57:90:91:EB:58:32:12:AA:3D:2B:50:37:E8:08:E2:C1 Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft Manifest number: 0368 Signing time: Sat 09 Aug 2025 01:28:15 +0000 Manifest this update: Sat 09 Aug 2025 01:28:14 +0000 Manifest next update: Sat 16 Aug 2025 01:28:14 +0000 Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: EYKb82CfQz9Koa0gCIlxIKnKiC2hMmB6DVW9rIjgPqM=) 2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: eJqOfUXf9pyBvXqljah+FkA7bab4t5X+jzwwp1GzOds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Validity Not Before: Aug 9 01:28:14 2025 GMT Not After : Aug 16 01:28:14 2025 GMT Subject: CN=6896a42f-2606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:65:36:bd:55:82:01:6e:18:76:67:e8:33: 82:05:9f:e9:16:13:57:c3:a9:bc:68:fd:9e:c9:3f: 0f:1d:d4:ec:27:a0:23:aa:bb:d5:5d:39:a9:be:05: 50:29:59:75:43:37:ab:94:3b:ab:ab:f6:de:40:f8: 0d:41:b0:24:38:9a:dc:19:a6:c3:ae:bd:16:33:e3: 0d:a8:59:86:c3:8b:c1:89:66:5d:2d:eb:52:ac:65: 92:a6:a9:e5:c1:e2:68:d4:cd:4b:96:80:f7:df:b4: e6:de:e0:c2:88:46:95:90:11:5b:7a:ce:6c:70:69: bb:dc:4f:c9:3e:e6:ae:06:de:48:d1:da:df:f7:c4: e9:8f:96:de:6c:c3:5d:c4:38:6e:5f:4b:20:7b:85: 8b:84:84:ca:cc:3a:6e:36:f4:31:58:84:36:e1:02: 4f:6a:b1:c3:9b:d9:f8:2d:c3:8f:b2:7b:83:f0:48: 9d:34:c9:58:fa:5d:ee:a7:eb:05:84:b6:c6:10:9d: 97:f1:e6:6e:a4:48:a0:cf:b0:4a:a0:e1:21:2b:4e: 82:f5:e8:5e:f9:b6:1a:19:56:7f:db:1e:30:82:20: 01:54:92:a6:7c:2a:a5:01:71:32:0c:ee:43:00:02: b0:d5:b3:53:09:50:00:35:de:88:b4:14:d4:15:aa: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:69:2C:61:57:90:91:EB:58:32:12:AA:3D:2B:50:37:E8:08:E2:C1 X509v3 Authority Key Identifier: keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b5:be:68:19:9a:ac:ee:39:95:61:d8:f5:97:b9:11:36:16: 38:13:28:8e:97:d0:b1:9c:a5:e7:a9:98:c4:01:b6:c2:f1:7b: 68:35:e4:9a:22:2f:e8:27:da:a0:7f:0f:34:36:6f:f3:a1:d0: c8:13:b9:de:d8:a5:1c:87:a3:f7:6e:f6:01:66:7e:6e:4c:1f: ec:b7:27:10:b5:ea:b0:52:fe:9b:88:d2:11:89:3f:c0:fa:44: cc:52:c7:18:96:85:50:fc:d1:ed:d4:cc:28:90:16:9c:36:e3: 77:ba:1c:b9:8a:a9:78:ed:f7:fe:11:86:10:f5:e9:f9:ff:cb: 93:50:48:14:ac:29:8c:ee:de:bc:5c:b4:e3:77:bf:ba:c9:12: bd:ed:50:b5:9b:55:85:01:c8:26:d4:7d:01:de:ac:31:34:f7: ad:3f:b7:0c:36:6c:d1:d6:49:83:46:e5:4c:3e:d5:8c:e1:83: 1a:d2:c7:fc:aa:e8:98:26:3b:8a:35:a8:c7:f3:75:79:10:55: 6d:94:cd:62:df:8e:fe:b5:37:8d:12:34:51:e3:f8:54:07:dc: 6d:37:88:bf:d1:72:fb:2b:1c:ff:b5:62:b4:7c:32:bf:b3:0f: eb:ff:82:b9:37:c4:d4:d7:6b:c8:eb:95:f0:ac:30:75:99:36: 26:2f:68:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1OTAxMTAvBgNVBAUTKDIwMDAwMDVBQzVBMTc0NDA0QkQzQkZDMjk5NDMzMjNF OTYwNjI1QjkwHhcNMjUwODA5MDEyODE0WhcNMjUwODE2MDEyODE0WjAYMRYwFAYD VQQDEw02ODk2YTQyZi0yNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxz9lNr1VggFuGHZn6DOCBZ/pFhNXw6m8aP2eyT8PHdTsJ6AjqrvVXTmpvgVQ KVl1QzerlDurq/beQPgNQbAkOJrcGabDrr0WM+MNqFmGw4vBiWZdLetSrGWSpqnl weJo1M1LloD337Tm3uDCiEaVkBFbes5scGm73E/JPuauBt5I0drf98Tpj5bebMNd xDhuX0sge4WLhITKzDpuNvQxWIQ24QJParHDm9n4LcOPsnuD8EidNMlY+l3up+sF hLbGEJ2X8eZupEigz7BKoOEhK06C9ehe+bYaGVZ/2x4wgiABVJKmfCqlAXEyDO5D AAKw1bNTCVAANd6ItBTUFapfnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCppLGFX kJHrWDISqj0rUDfoCOLBMB8GA1UdIwQYMBaAFCAAAFrFoXRAS9O/wplDMj6WBiW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5MC85NTEwRTg2QUMw N0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRFQkwwN19DbVVNeVBwWUdK YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBQUFXc1doZEVCTDA3X0NtVU15UHBZR0piay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTU5MC85NTEwRTg2QUMwN0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRF QkwwN19DbVVNeVBwWUdKYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEtb5oGZqs7jmVYdj1l7kRNhY4EyiOl9CxnKXnqZjEAbbC8XtoNeSa Ii/oJ9qgfw80Nm/zodDIE7ne2KUch6P3bvYBZn5uTB/stycQteqwUv6biNIRiT/A +kTMUscYloVQ/NHt1MwokBacNuN3uhy5iql47ff+EYYQ9en5/8uTUEgUrCmM7t68 XLTjd7+6yRK97VC1m1WFAcgm1H0B3qwxNPetP7cMNmzR1kmDRuVMPtWM4YMa0sf8 quiYJjuKNajH83V5EFVtlM1i347+tTeNEjRR4/hUB9xtN4i/0XL7Kxz/tWK0fDK/ sw/r/4K5N8TU12vI65XwrDB1mTYmL2jb -----END CERTIFICATE-----Generated at Sat Aug 9 23:08:35 2025 by rpki-client