$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: ntDVCJ0Q2JJu/QogUmF6XsusSoj0XZdOfWR79zr7FpY= Subject key identifier: 1D:8A:8A:FD:B0:40:D6:24:0C:9B:65:5D:EC:94:D7:D7:08:1C:AD:28 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 0206 Signing time: Mon 11 Aug 2025 02:33:14 +0000 Manifest this update: Mon 11 Aug 2025 02:33:13 +0000 Manifest next update: Mon 18 Aug 2025 02:33:13 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: xKaF7s5EypUJsWQjWaj38PYg2zwanLpCdIeDNiiPE3g=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: dTUyCBlbO/pz+tuVT/tO+XLwXxn5j9PKDxmqVQaSeKk=) 3: CC863C00AAC011EF8A637D09C4F9AE02.roa (hash: 0d8EDj7p85g61PO4rxhm2YW85ofVuKXgCa1+1ENa/7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Aug 11 02:33:13 2025 GMT Not After : Aug 18 02:33:13 2025 GMT Subject: CN=68995669-0cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d7:cd:1b:86:fc:a0:19:30:07:60:ca:68:dc: e3:fc:6c:20:7f:f2:b6:10:54:8f:e8:a3:73:52:e4: 84:f4:2c:e3:17:fc:b0:2d:78:4b:da:f7:51:91:98: 65:58:77:1a:c9:fe:a4:94:19:9d:15:52:22:24:a0: ed:96:5b:17:18:68:be:60:a2:8d:08:58:99:6b:a6: 78:27:20:4f:d0:8a:9a:ed:e9:8e:31:43:1e:26:e6: a4:17:92:41:75:d4:9d:07:0f:48:c6:83:00:85:27: 38:74:a9:d9:5c:3b:51:a9:25:f9:62:41:83:c3:dc: 9e:3f:4d:f4:39:dd:d7:bd:e9:b8:68:4c:72:76:4a: 4e:aa:40:f1:2f:fd:ea:34:64:e9:d0:53:4b:10:52: 82:93:b2:65:08:2b:3e:3f:a4:0a:49:30:f1:24:1f: f0:e4:a3:9b:55:bd:a2:e6:1e:09:67:28:13:ad:5d: 27:0d:2b:bf:b3:e6:c1:ef:51:c1:95:e8:b1:b5:5c: f5:15:6e:77:10:90:1b:31:95:ae:3c:25:77:3d:c1: 17:fe:df:2a:50:54:4a:bf:f0:80:e8:9c:12:db:be: c3:c1:7f:a7:95:c1:9a:93:79:f5:68:ae:32:b3:c4: 55:a0:90:fd:02:86:e3:64:e6:e7:19:4d:87:2e:a6: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8A:8A:FD:B0:40:D6:24:0C:9B:65:5D:EC:94:D7:D7:08:1C:AD:28 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:47:21:3c:0e:c8:c6:77:cf:8c:25:49:04:f2:0c:98:98:84: 45:fa:9a:83:dd:10:f6:b6:19:86:39:80:b7:d3:b6:12:f9:99: 22:53:00:86:04:47:a7:56:a4:eb:fc:85:32:5a:40:94:c1:48: bb:52:36:84:4f:2e:24:a3:ea:d5:4a:ba:f5:86:9b:2f:79:b8: a6:49:50:b0:fd:5f:0a:4f:77:70:65:a3:9c:34:f2:56:9a:a6: f8:0a:71:68:a2:09:4e:f1:2e:90:87:64:5a:e6:e7:07:a4:f1: 8d:15:6d:87:44:63:71:87:55:3c:6d:f1:d9:c1:ae:f9:4c:d4: cc:a2:7c:28:b2:c3:34:56:5c:3f:0c:f7:49:bb:32:f4:21:aa: 05:52:63:4a:4d:bd:40:07:64:19:32:23:7d:ed:66:ed:58:b6: a4:3d:44:9a:e1:bc:29:bb:2f:e1:fb:27:49:c5:d8:2b:d0:52: 76:e5:2b:50:35:ee:02:ad:94:7a:51:ea:43:65:91:4a:e7:57: 59:8f:f2:7c:eb:b1:4a:35:8e:5b:7a:03:bd:aa:c7:a2:07:97: 56:bb:1a:26:98:f8:65:c6:06:fe:41:14:d4:d0:89:1f:d0:1e: f9:23:3b:0a:19:8d:2f:9b:02:01:96:c9:3f:10:ac:28:ed:4c: 99:21:fd:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUwODExMDIzMzEzWhcNMjUwODE4MDIzMzEzWjAYMRYwFAYD VQQDEw02ODk5NTY2OS0wY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tfNG4b8oBkwB2DKaNzj/Gwgf/K2EFSP6KNzUuSE9CzjF/ywLXhL2vdRkZhl WHcayf6klBmdFVIiJKDtllsXGGi+YKKNCFiZa6Z4JyBP0Iqa7emOMUMeJuakF5JB ddSdBw9IxoMAhSc4dKnZXDtRqSX5YkGDw9yeP030Od3Xvem4aExydkpOqkDxL/3q NGTp0FNLEFKCk7JlCCs+P6QKSTDxJB/w5KObVb2i5h4JZygTrV0nDSu/s+bB71HB leixtVz1FW53EJAbMZWuPCV3PcEX/t8qUFRKv/CA6JwS277DwX+nlcGak3n1aK4y s8RVoJD9AobjZObnGU2HLqa93QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2Kiv2w QNYkDJtlXeyU19cIHK0oMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbRyE8DsjGd8+MJUkE8gyYmIRF+pqD3RD2thmGOYC307YS+ZkiUwCG BEenVqTr/IUyWkCUwUi7UjaETy4ko+rVSrr1hpsvebimSVCw/V8KT3dwZaOcNPJW mqb4CnFooglO8S6Qh2Ra5ucHpPGNFW2HRGNxh1U8bfHZwa75TNTMonwossM0Vlw/ DPdJuzL0IaoFUmNKTb1AB2QZMiN97WbtWLakPUSa4bwpuy/h+ydJxdgr0FJ25StQ Ne4CrZR6UepDZZFK51dZj/J867FKNY5begO9qseiB5dWuxommPhlxgb+QRTU0Ikf 0B75IzsKGY0vmwIBlsk/EKwo7UyZIf0C -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:45 2025 by rpki-client