$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: sxxl5PJbk+U7dXon5XucXrJZdjezVZjgWq/Ea5I0TnM= Subject key identifier: 56:3E:65:E7:F3:94:2E:20:E5:78:C6:8E:D8:D7:4A:75:5B:1C:58:DE Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 050D Signing time: Sat 09 Aug 2025 00:05:37 +0000 Manifest this update: Sat 09 Aug 2025 00:05:37 +0000 Manifest next update: Sat 16 Aug 2025 00:05:37 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: TRGKQYJU5NVV5fCNb0MKOk6Ko3jHoObpXz5gv2526zQ=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: Aug 9 00:05:37 2025 GMT Not After : Aug 16 00:05:37 2025 GMT Subject: CN=689690d1-fa44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:07:2b:ca:64:e4:4a:4e:90:fb:b5:e2:5b: c3:25:af:a7:f1:fa:77:40:ef:53:35:ef:3d:d8:90: 5c:7d:2e:ac:72:d1:90:10:12:e9:87:6d:d4:22:18: 90:1e:c6:5f:97:43:c4:da:cb:10:65:99:d5:f3:d8: 82:5e:e6:90:4f:26:85:b6:8b:f4:e0:5c:be:ec:81: 84:ab:25:a0:cd:71:eb:81:37:d8:e8:0f:3d:b4:6a: 9e:37:32:dc:98:e6:b8:3d:51:63:34:8f:9d:e5:4c: 1a:ed:62:b8:3c:63:9f:13:f5:2b:0b:e9:1d:a2:b9: 3d:4b:b0:f7:9a:79:37:8b:9f:20:a7:88:c5:4f:4a: 40:d8:9e:23:23:a1:0e:b3:94:8c:26:2d:71:de:d2: ad:92:a9:60:78:5c:59:d6:b2:8b:f2:f9:9c:9b:22: 7f:de:f4:ed:37:a3:15:4a:eb:f5:33:23:53:cc:05: 7e:23:93:9b:cb:9e:b1:ee:63:84:4b:56:c1:b7:48: a2:5d:cc:8b:0e:36:72:35:57:ee:a4:8f:2b:9e:3c: 92:6b:61:56:9d:68:a3:43:fa:88:b5:24:02:cd:e7: 22:1e:bf:28:c9:7f:73:32:6b:3b:09:0c:3e:00:f5: 62:9d:85:e9:d6:a3:67:4e:59:5d:2c:86:4e:e6:3f: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3E:65:E7:F3:94:2E:20:E5:78:C6:8E:D8:D7:4A:75:5B:1C:58:DE X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b1:75:85:66:1a:59:12:4f:b5:a9:d6:71:2c:ee:10:46:62: 47:aa:0d:c9:b3:c3:92:1a:55:ce:a8:57:56:ec:e7:23:a9:b4: a4:93:a7:3b:41:53:63:bf:0e:0c:a5:5c:44:83:d5:b3:f7:2a: 05:99:0d:12:1a:8f:83:63:99:bb:29:d1:3f:2b:f5:85:f7:8c: 7f:8c:74:be:55:72:76:e0:ff:ba:d4:aa:17:14:6a:06:8f:9d: 03:d4:b0:58:87:13:79:f7:53:0d:da:19:c9:7c:6d:1f:57:7b: a7:08:c3:fc:76:f7:3f:db:60:30:fd:9e:aa:e5:6d:89:5e:79: d1:90:ff:7a:02:07:1d:65:c8:55:7e:e5:98:e8:c3:60:fa:74: bc:b7:2e:f4:a3:58:a5:d9:99:bd:12:94:4c:b7:0d:73:87:bc: df:77:6b:e7:1a:e4:f2:4e:aa:e5:13:46:61:cc:4b:d2:24:31: 64:cd:f8:a6:6f:36:9a:d9:ea:57:bd:f0:40:89:25:b3:a2:7d: 58:e5:50:b9:31:9d:36:ce:35:2f:52:2e:1c:98:07:36:43:a7: 9b:bd:9d:b8:44:a3:b0:b6:06:54:75:63:c5:4e:59:fe:0f:33: 64:c4:e1:30:d9:0e:90:f5:07:c3:e6:e0:bd:03:3f:8b:16:83: 37:36:a4:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUwODA5MDAwNTM3WhcNMjUwODE2MDAwNTM3WjAYMRYwFAYD VQQDEw02ODk2OTBkMS1mYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYEHK8pk5EpOkPu14lvDJa+n8fp3QO9TNe892JBcfS6sctGQEBLph23UIhiQ HsZfl0PE2ssQZZnV89iCXuaQTyaFtov04Fy+7IGEqyWgzXHrgTfY6A89tGqeNzLc mOa4PVFjNI+d5Uwa7WK4PGOfE/UrC+kdork9S7D3mnk3i58gp4jFT0pA2J4jI6EO s5SMJi1x3tKtkqlgeFxZ1rKL8vmcmyJ/3vTtN6MVSuv1MyNTzAV+I5Oby56x7mOE S1bBt0iiXcyLDjZyNVfupI8rnjySa2FWnWijQ/qItSQCzeciHr8oyX9zMms7CQw+ APVinYXp1qNnTlldLIZO5j+Z7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFY+Zefz lC4g5XjGjtjXSnVbHFjeMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrsXWFZhpZEk+1qdZxLO4QRmJHqg3Js8OSGlXOqFdW7OcjqbSkk6c7 QVNjvw4MpVxEg9Wz9yoFmQ0SGo+DY5m7KdE/K/WF94x/jHS+VXJ24P+61KoXFGoG j50D1LBYhxN591MN2hnJfG0fV3unCMP8dvc/22Aw/Z6q5W2JXnnRkP96AgcdZchV fuWY6MNg+nS8ty70o1il2Zm9EpRMtw1zh7zfd2vnGuTyTqrlE0ZhzEvSJDFkzfim bzaa2epXvfBAiSWzon1Y5VC5MZ02zjUvUi4cmAc2Q6ebvZ24RKOwtgZUdWPFTln+ DzNkxOEw2Q6Q9QfD5uC9Az+LFoM3NqQr -----END CERTIFICATE-----Generated at Sun Aug 10 13:55:11 2025 by rpki-client