$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json) Hash identifier: 9Fu/Io9iS/xe6B49r/w0BSrER5Mp6Ji1HPvhhHRjya0= Subject key identifier: 97:CA:CC:67:71:B8:59:58:3C:37:F7:E2:A2:F7:B2:02:E6:46:29:44 Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Certificate serial: 0545 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft Manifest number: 053F Signing time: Fri 08 Aug 2025 23:57:08 +0000 Manifest this update: Fri 08 Aug 2025 23:57:08 +0000 Manifest next update: Fri 15 Aug 2025 23:57:08 +0000 Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: RkqJMB9F3T1o3Mnu7bU2KFiCZYFBtQcsQ/Qcus7DryY=) 2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: gNJTzz5gTRCi7TWu8OqobzQyrN+9OUDBMZ0c3PoKanY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349 (0x545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Validity Not Before: Aug 8 23:57:08 2025 GMT Not After : Aug 15 23:57:08 2025 GMT Subject: CN=68968ed4-f742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:61:8f:c5:e9:30:8e:1f:c1:dc:f3:30:7e:3a: d8:dc:e8:a2:ff:20:51:80:1d:e1:7a:e8:96:0c:f3: f7:f4:b8:3e:65:75:c7:b6:b6:26:5a:53:c0:70:0c: 1b:6c:42:01:d3:a6:27:cf:be:f6:45:b8:c1:9b:af: 4e:b9:24:36:bd:96:b7:4e:a5:55:79:a4:be:0a:c7: 63:d6:f9:05:99:58:30:49:95:0e:e0:f9:f6:d6:63: d3:68:2b:88:2e:ce:54:ec:fa:dc:ad:32:e3:4e:27: 5e:5b:b1:76:13:e6:b4:18:87:82:4c:6c:ec:a5:79: ab:84:10:43:5e:38:5c:45:c9:25:77:d7:d3:26:0c: da:fd:90:7b:2c:46:58:67:2a:ca:aa:f8:05:e7:f4: 69:8a:2e:e2:f1:e4:05:85:67:0b:1a:c4:c8:a6:d8: e0:6c:b2:52:50:77:d4:11:24:ec:be:18:3a:df:f5: 05:cb:fa:a7:e6:51:a5:a3:3d:12:3f:d7:5c:18:4d: d7:07:11:54:38:24:8f:02:62:13:5b:65:f2:c6:83: 6f:0a:21:3f:62:8f:57:bc:e3:fe:c7:e8:94:ec:44: 95:5f:b7:50:b6:7f:40:1f:b6:45:94:d5:75:54:df: 5f:e8:a3:c7:5b:01:b3:f9:58:83:c0:ee:b5:cc:89: 7a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CA:CC:67:71:B8:59:58:3C:37:F7:E2:A2:F7:B2:02:E6:46:29:44 X509v3 Authority Key Identifier: keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f8:ac:09:3f:e7:e5:09:65:34:bb:76:4e:9a:38:8d:07:80: aa:31:02:49:a6:20:b2:de:ab:ac:d7:de:14:6a:5d:99:f2:c3: b7:9a:02:62:e7:84:9a:41:01:a9:ab:c6:55:ae:29:99:2d:1b: 84:f2:57:92:3e:e6:be:bc:67:58:45:02:32:dd:c5:90:ea:8b: 78:1b:4e:c0:6c:b0:7c:1d:e1:b2:13:51:04:12:06:c0:89:ef: f8:04:3e:f8:23:7b:ed:7d:97:8d:b5:9c:44:2b:b5:8b:f4:c4: e3:0d:f2:0c:31:4c:9e:0d:c5:84:a2:d4:a8:2b:a1:f7:11:fc: 33:18:89:97:a9:10:7f:34:ae:62:97:a1:5b:fa:14:37:0c:7d: a1:3a:62:cf:75:66:46:2e:8a:9f:3a:aa:d5:35:90:28:91:7a: e8:4f:97:0a:6b:03:5c:84:16:12:26:a9:bb:85:b7:5a:06:54: f8:5e:15:b5:49:18:f9:41:f1:ec:62:0d:73:7b:8e:86:03:95: 8c:58:79:18:9f:fd:56:d4:92:57:4b:27:52:3a:28:17:8a:8f: b3:94:4c:7d:2c:ca:db:bb:73:f3:e1:a4:cb:4a:a8:31:44:e9: 40:79:9b:cc:18:0c:b8:d7:81:ca:25:0d:d6:8c:4c:af:93:4e: 96:3f:f6:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG Q0E4MDY0REEwHhcNMjUwODA4MjM1NzA4WhcNMjUwODE1MjM1NzA4WjAYMRYwFAYD VQQDEw02ODk2OGVkNC1mNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WGPxekwjh/B3PMwfjrY3Oii/yBRgB3heuiWDPP39Lg+ZXXHtrYmWlPAcAwb bEIB06Ynz772RbjBm69OuSQ2vZa3TqVVeaS+Csdj1vkFmVgwSZUO4Pn21mPTaCuI Ls5U7PrcrTLjTideW7F2E+a0GIeCTGzspXmrhBBDXjhcRckld9fTJgza/ZB7LEZY ZyrKqvgF5/Rpii7i8eQFhWcLGsTIptjgbLJSUHfUESTsvhg63/UFy/qn5lGloz0S P9dcGE3XBxFUOCSPAmITW2XyxoNvCiE/Yo9XvOP+x+iU7ESVX7dQtn9AH7ZFlNV1 VN9f6KPHWwGz+ViDwO61zIl6bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfKzGdx uFlYPDf34qL3sgLmRilEMB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0 QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12 MU1uSkxkWGllaTM4cUFaTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF+KwJP+flCWU0u3ZOmjiNB4CqMQJJpiCy3qus194Ual2Z8sO3mgJi 54SaQQGpq8ZVrimZLRuE8leSPua+vGdYRQIy3cWQ6ot4G07AbLB8HeGyE1EEEgbA ie/4BD74I3vtfZeNtZxEK7WL9MTjDfIMMUyeDcWEotSoK6H3EfwzGImXqRB/NK5i l6Fb+hQ3DH2hOmLPdWZGLoqfOqrVNZAokXroT5cKawNchBYSJqm7hbdaBlT4XhW1 SRj5QfHsYg1ze46GA5WMWHkYn/1W1JJXSydSOigXio+zlEx9LMrbu3Pz4aTLSqgx ROlAeZvMGAy414HKJQ3WjEyvk06WP/b9 -----END CERTIFICATE-----Generated at Sun Aug 10 05:38:38 2025 by rpki-client