$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: nnCtgdhKJknCz+U4KrvYDTnuhFCcxWMOFUHUKhml4dI= Subject key identifier: DC:82:F0:15:E9:14:41:B8:C2:B0:B6:2C:12:B9:9B:9A:76:0B:C2:58 Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 01CC Signing time: Sat 09 Aug 2025 03:26:53 +0000 Manifest this update: Sat 09 Aug 2025 03:26:53 +0000 Manifest next update: Sat 16 Aug 2025 03:26:53 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: kDGpocU/SEXmq9f1I0HGyEXpE+tfK2F7g/n7ix0uTTc=) 2: 7D22B44E249D11EFAC24EF6CC4F9AE02.roa (hash: A2YwzeZCV7lXuESZaxuoNr3XCXQA1+q4ChTmE99OOZ8=) 3: 9772767EB69A11EFBEB6CE0CC4F9AE02.roa (hash: 7OwaJrudjWnecoz7BCK7kPXjzB+3R7tWJ8DmqplI2rk=) 4: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: Ah9DA9XDU6AgPBrVhyRA7IEj119ByF47rhFGR96tGKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Aug 9 03:26:53 2025 GMT Not After : Aug 16 03:26:53 2025 GMT Subject: CN=6896bffd-0238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:17:77:ba:52:d9:de:16:91:44:8f:8b:b4: 9f:e8:5c:c3:64:f8:ae:4e:9e:23:bc:c1:45:84:80: af:7f:45:33:e3:b7:6e:87:32:f3:03:fa:54:e5:81: 9b:d2:76:fa:00:0d:fd:92:97:a6:af:cb:67:6e:59: bc:f0:67:5c:a7:75:8c:83:df:86:e5:2c:c9:c1:2e: 4b:3b:8a:9f:12:a1:9a:2a:1d:f7:3a:59:d8:e8:ff: a2:36:e5:db:ef:55:75:66:26:5c:2f:b2:5d:34:aa: 84:7a:13:38:76:9e:e7:a8:a9:df:9f:65:cf:64:80: 2d:4a:1c:07:01:b4:fc:24:39:4c:b0:e9:9f:fd:ea: e6:90:44:eb:2d:07:f1:ed:8a:9f:91:6d:eb:db:52: 8e:7c:ab:8c:79:e3:4b:37:fa:74:45:8e:9a:6a:35: 9f:1e:51:1a:73:4b:50:c4:ec:5b:fd:c9:85:ae:93: 48:cb:72:85:ac:1a:3c:e7:8d:a7:f2:80:a7:57:61: b5:24:bb:8e:dc:9c:55:f4:6c:82:ca:b5:dc:de:f3: 13:79:c4:55:19:cc:25:b9:63:9f:48:b0:fb:ca:77: 27:3a:5f:f9:e3:fc:b9:6c:27:23:3b:26:0d:52:8a: d9:ed:cf:da:68:3f:10:d8:a2:77:7a:d2:8d:9f:1b: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:F0:15:E9:14:41:B8:C2:B0:B6:2C:12:B9:9B:9A:76:0B:C2:58 X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:15:7b:2b:56:7b:3d:ef:88:f1:d0:53:dc:7c:88:02:b6:d6: 32:12:db:5a:5a:b5:ee:92:6d:38:0d:70:23:df:5b:4e:05:d8: 8b:dd:ff:65:99:f7:c2:96:a8:cc:d7:c8:c3:f2:a6:8d:b8:03: ea:e0:86:5a:e0:da:c1:08:17:7f:5c:d6:90:29:fb:7f:59:7e: b5:3f:50:4e:14:e2:2b:48:03:16:9f:b2:47:e1:0e:ee:d6:78: c7:33:4e:43:4e:6e:dd:4a:31:1a:2e:e9:46:ef:12:61:ea:f7: 08:8b:a7:23:7b:ba:66:d9:b3:b5:38:6f:7b:ae:89:7e:f1:1c: 6e:af:79:1b:ba:29:28:60:26:ca:b3:7b:94:82:32:7d:18:e8: 0f:6d:36:2b:6b:64:4f:8b:4a:3b:ce:13:b3:f8:a6:c6:bf:26: 0a:f2:bb:77:29:bb:8b:10:4b:5f:f7:86:86:39:9b:6b:d2:51: 9d:09:36:84:0b:43:23:ac:d3:d2:2e:bf:8d:39:14:81:82:51: f9:a9:26:c7:3a:44:0a:1e:bd:f1:a9:dc:12:92:45:5b:87:d3: 78:53:70:97:23:ee:43:a7:ec:fc:0f:f5:9f:93:89:a4:23:3e: 2c:3e:85:bc:70:02:c8:3b:07:06:66:40:09:27:f4:45:cc:51: 28:d5:43:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjUwODA5MDMyNjUzWhcNMjUwODE2MDMyNjUzWjAYMRYwFAYD VQQDEw02ODk2YmZmZC0wMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqsXd7pS2d4WkUSPi7Sf6FzDZPiuTp4jvMFFhICvf0Uz47duhzLzA/pU5YGb 0nb6AA39kpemr8tnblm88Gdcp3WMg9+G5SzJwS5LO4qfEqGaKh33OlnY6P+iNuXb 71V1ZiZcL7JdNKqEehM4dp7nqKnfn2XPZIAtShwHAbT8JDlMsOmf/ermkETrLQfx 7YqfkW3r21KOfKuMeeNLN/p0RY6aajWfHlEac0tQxOxb/cmFrpNIy3KFrBo8542n 8oCnV2G1JLuO3JxV9GyCyrXc3vMTecRVGcwluWOfSLD7yncnOl/54/y5bCcjOyYN UorZ7c/aaD8Q2KJ3etKNnxunSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyC8BXp FEG4wrC2LBK5m5p2C8JYMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAFXsrVns974jx0FPcfIgCttYyEttaWrXukm04DXAj31tOBdiL3f9l mffClqjM18jD8qaNuAPq4IZa4NrBCBd/XNaQKft/WX61P1BOFOIrSAMWn7JH4Q7u 1njHM05DTm7dSjEaLulG7xJh6vcIi6cje7pm2bO1OG97rol+8Rxur3kbuikoYCbK s3uUgjJ9GOgPbTYra2RPi0o7zhOz+KbGvyYK8rt3KbuLEEtf94aGOZtr0lGdCTaE C0MjrNPSLr+NORSBglH5qSbHOkQKHr3xqdwSkkVbh9N4U3CXI+5Dp+z8D/Wfk4mk Iz4sPoW8cALIOwcGZkAJJ/RFzFEo1UPT -----END CERTIFICATE-----Generated at Sat Aug 9 10:53:32 2025 by rpki-client