$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft File: ihuLzV7XzXIsUwBJjkqTZdBGo04.mft (raw, json) Hash identifier: HZ82F4kPUYVFp0H3DECNvjomnhiVwSD0+nLvdJG49mw= Subject key identifier: ED:8D:82:9D:1E:1D:05:13:35:27:FA:9D:C9:E0:93:35:7B:77:3C:03 Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft Manifest number: 0869 Signing time: Fri 08 Aug 2025 21:01:36 +0000 Manifest this update: Fri 08 Aug 2025 21:01:35 +0000 Manifest next update: Fri 15 Aug 2025 21:01:35 +0000 Files and hashes: 1: ihuLzV7XzXIsUwBJjkqTZdBGo04.crl (hash: 45H5BCrEIDFuKmlb/s5CqSv5hg/BNKl4L4gH8oP7qcI=) 2: B6EB6C5ED46611ECA1A27035C4F9AE02.roa (hash: PkkKGsSttNAnAE7wwrjI2GVszUmv3X4tNLiBBoRT9nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Validity Not Before: Aug 8 21:01:35 2025 GMT Not After : Aug 15 21:01:35 2025 GMT Subject: CN=689665b0-2c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:56:8a:cd:d0:51:2e:10:bf:ac:d5:2e:80: 2b:d0:d4:2f:b5:90:c5:e2:36:c9:f8:de:ee:50:51: e7:a7:a7:e9:3d:fc:76:c5:81:82:3a:45:53:67:ec: 10:0b:14:16:2d:38:58:15:1c:83:05:8c:4c:d5:b9: 2e:12:09:e5:06:d6:0f:ca:5e:58:7b:5b:76:18:b5: 23:e0:e5:81:ee:5d:db:94:12:b0:fe:7d:55:20:f9: a0:71:5c:a0:eb:be:fd:20:99:47:94:8a:2b:7d:0e: be:d9:99:42:ae:07:1b:d3:c4:f8:7d:48:97:4c:b9: 66:1b:9b:49:c3:db:f1:12:f1:14:69:93:1e:3b:b0: 2e:1b:5e:86:dc:8c:ff:33:16:fa:74:0a:87:7f:d7: a3:3d:d8:09:82:54:0c:b9:a2:3b:54:8c:ed:75:e1: 28:4b:32:7c:cf:11:40:cc:db:64:31:e3:bd:c3:03: 11:0f:e5:05:50:e2:92:40:86:2d:a6:ab:d2:a6:39: a8:1d:83:53:db:9c:35:79:4b:d7:76:02:7f:80:09: 1c:19:55:86:26:09:f4:16:0f:ca:28:33:7c:23:fa: 80:64:92:d8:4c:1e:06:49:4d:62:25:bc:20:a2:d4: d8:07:23:f8:ef:26:08:ec:30:f1:61:7e:39:71:f6: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8D:82:9D:1E:1D:05:13:35:27:FA:9D:C9:E0:93:35:7B:77:3C:03 X509v3 Authority Key Identifier: keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c5:0a:2f:0b:c2:5f:93:75:f5:1a:a4:e9:55:ff:51:75:a7: 0c:97:d0:75:24:76:3b:51:59:a6:9f:6f:d9:0b:6a:ec:97:de: 05:ef:ed:d3:d0:49:4a:b7:48:e2:af:3d:cd:52:04:eb:7f:aa: 1a:c9:07:34:9c:0f:82:82:9f:01:3a:2a:40:87:15:b2:e5:13: f2:ef:85:54:9b:b3:ba:d1:72:51:61:5b:2e:c8:42:9a:0d:04: 8c:ea:b2:75:49:14:9e:a3:dd:c8:f3:47:fd:10:2a:5f:8a:f5: d0:32:0d:60:db:49:85:72:d8:7e:c0:f5:86:dc:58:68:07:16: 5b:9d:ca:01:e9:57:52:9c:09:e1:2d:2d:6f:92:e0:f8:d4:55: 3c:74:76:bf:ea:65:82:e2:ff:09:34:56:a4:d8:9a:11:06:cd: cf:fa:39:66:51:ab:9b:9d:60:e5:7a:b1:31:05:7f:29:dc:b4: 2f:77:d3:3f:f6:5f:f6:2a:44:87:d7:5f:22:1d:3c:00:9e:b3: f1:3b:c9:d8:2a:44:e1:48:6b:f7:da:d6:dc:67:ef:98:a5:13: e6:5d:ba:4d:86:70:d1:39:f8:04:37:e1:f0:10:cc:79:a1:22: c8:8e:95:26:b6:10:4e:e6:56:38:b0:82:f3:ed:73:a2:a1:2e: fc:03:7b:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQzYxMTAvBgNVBAUTKDhBMUI4QkNENUVEN0NENzIyQzUzMDA0OThFNEE5MzY1 RDA0NkEzNEUwHhcNMjUwODA4MjEwMTM1WhcNMjUwODE1MjEwMTM1WjAYMRYwFAYD VQQDEw02ODk2NjViMC0yYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGpWis3QUS4Qv6zVLoAr0NQvtZDF4jbJ+N7uUFHnp6fpPfx2xYGCOkVTZ+wQ CxQWLThYFRyDBYxM1bkuEgnlBtYPyl5Ye1t2GLUj4OWB7l3blBKw/n1VIPmgcVyg 6779IJlHlIorfQ6+2ZlCrgcb08T4fUiXTLlmG5tJw9vxEvEUaZMeO7AuG16G3Iz/ Mxb6dAqHf9ejPdgJglQMuaI7VIztdeEoSzJ8zxFAzNtkMeO9wwMRD+UFUOKSQIYt pqvSpjmoHYNT25w1eUvXdgJ/gAkcGVWGJgn0Fg/KKDN8I/qAZJLYTB4GSU1iJbwg otTYByP47yYI7DDxYX45cfax0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2Ngp0e HQUTNSf6ncngkzV7dzwDMB8GA1UdIwQYMBaAFIobi81e181yLFMASY5Kk2XQRqNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFDNi80OTFDOENFNkND OTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpYSXNVd0JKamtxVFpkQkdv MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lodUx6VjdYelhJc1V3Qkpqa3FUWmRCR28wNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFDNi80OTFDOENFNkNDOTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpY SXNVd0JKamtxVFpkQkdvMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfxQovC8Jfk3X1GqTpVf9RdacMl9B1JHY7UVmmn2/ZC2rsl94F7+3T 0ElKt0jirz3NUgTrf6oayQc0nA+Cgp8BOipAhxWy5RPy74VUm7O60XJRYVsuyEKa DQSM6rJ1SRSeo93I80f9ECpfivXQMg1g20mFcth+wPWG3FhoBxZbncoB6VdSnAnh LS1vkuD41FU8dHa/6mWC4v8JNFak2JoRBs3P+jlmUaubnWDlerExBX8p3LQvd9M/ 9l/2KkSH118iHTwAnrPxO8nYKkThSGv32tbcZ++YpRPmXbpNhnDROfgEN+HwEMx5 oSLIjpUmthBO5lY4sILz7XOioS78A3vB -----END CERTIFICATE-----Generated at Sat Aug 9 14:33:53 2025 by rpki-client