$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: YtCXnH/qSDe1FZNv0g/rDpuA1L+YsYA9XSzUDjdW9ws= Subject key identifier: A3:37:00:A7:67:8A:D5:E0:07:BB:AA:57:28:06:01:3C:86:80:9A:EE Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: AF Signing time: Sat 09 Aug 2025 06:32:35 +0000 Manifest this update: Sat 09 Aug 2025 06:32:35 +0000 Manifest next update: Sat 16 Aug 2025 06:32:35 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: sKcIQ1HDcFrSxgyn7yqPCyDhMIZtLMfyPFTrSxQIyJU=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Aug 9 06:32:35 2025 GMT Not After : Aug 16 06:32:35 2025 GMT Subject: CN=6896eb83-54aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:88:c3:b0:9e:2d:54:2b:73:91:46:af:9a: b2:f7:04:29:b4:a7:a2:bf:99:6a:38:74:2b:b7:34: 81:b9:9a:db:77:c6:9f:fc:41:1d:42:98:f8:ab:d8: 5f:ed:31:65:b2:52:19:b4:f0:9f:bf:cb:36:47:80: aa:b7:7f:38:ff:a9:52:ad:44:63:ab:59:34:d5:83: 65:7e:19:ff:8d:f7:9e:9a:08:22:88:6d:aa:d2:bf: 8e:19:3f:78:f2:51:09:cb:82:6e:5a:c7:e6:0f:45: d9:b8:84:aa:b1:26:90:1e:24:21:6d:86:a0:7c:e7: a0:c8:8e:74:6b:cc:11:a3:e3:22:97:77:11:66:90: 28:79:6e:d5:b1:2b:3b:a2:5c:2f:00:97:cf:2c:b7: 48:f2:92:29:fc:46:da:24:d8:fd:ce:72:19:61:fb: b2:46:e9:ba:76:78:94:1e:bf:aa:3b:1b:f4:c1:e2: d5:04:5b:c8:5c:3f:6f:d7:7c:35:a6:a4:e1:1e:3f: 58:e4:56:9b:db:b1:9c:26:60:73:5d:0a:ee:2e:64: 7c:1f:1d:01:77:2c:11:22:46:cf:34:0c:43:ba:23: ca:ae:dd:cf:72:fa:ea:f3:f9:56:0f:18:88:0f:38: 29:8e:5e:dc:2b:00:e0:8e:8a:5f:ce:c2:3c:81:5b: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:37:00:A7:67:8A:D5:E0:07:BB:AA:57:28:06:01:3C:86:80:9A:EE X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:29:3d:a2:f3:35:e9:03:57:75:cd:f8:b4:05:4c:cb:a4:51: 17:9e:31:c8:61:a6:4d:50:ab:91:98:00:89:64:e5:ae:ee:5f: 87:a8:5e:3d:39:f5:8e:66:58:0d:0b:06:af:67:ce:7d:90:31: 49:43:49:69:59:6a:63:6e:af:bb:b2:fb:a1:78:18:3d:24:4d: c0:29:a6:f1:f1:df:63:5d:85:e3:5e:3f:89:5a:c9:3c:de:5c: 9d:8f:d5:30:ff:34:8f:88:03:6b:2e:61:8f:f4:84:ac:e6:99: c3:20:52:22:63:f9:d1:df:9e:1a:30:e5:3f:96:a3:e3:18:9c: c1:51:a8:59:a5:4c:8f:3c:2f:d5:94:8f:da:bf:97:54:8a:ed: 08:f6:93:1f:f8:57:af:74:0b:84:a9:45:d7:16:54:7c:72:8e: 5f:6f:d6:9d:a9:14:0f:83:c0:af:67:0b:d7:1b:ac:c6:31:bb: 67:c9:e1:f5:32:97:71:a8:03:0a:00:41:97:93:a1:4f:db:5c: 6a:00:a0:81:c2:2d:ca:c0:e8:35:89:e6:91:be:9e:26:e2:6a: 3c:42:05:ed:95:6f:53:36:ad:b2:07:5c:a5:4a:cd:3d:25:c1: 74:c5:81:66:ec:93:d6:ea:cb:31:fc:92:3c:e7:64:e0:1f:6e: 0f:76:52:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDIyNTlGODcwOTZFNDBBREIzQzg0MTgwRTI4QjU2QzNF ODgyMkY2NTEwHhcNMjUwODA5MDYzMjM1WhcNMjUwODE2MDYzMjM1WjAYMRYwFAYD VQQDEw02ODk2ZWI4My01NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWGIw7CeLVQrc5FGr5qy9wQptKeiv5lqOHQrtzSBuZrbd8af/EEdQpj4q9hf 7TFlslIZtPCfv8s2R4Cqt384/6lSrURjq1k01YNlfhn/jfeemggiiG2q0r+OGT94 8lEJy4JuWsfmD0XZuISqsSaQHiQhbYagfOegyI50a8wRo+Mil3cRZpAoeW7VsSs7 olwvAJfPLLdI8pIp/EbaJNj9znIZYfuyRum6dniUHr+qOxv0weLVBFvIXD9v13w1 pqThHj9Y5Fab27GcJmBzXQruLmR8Hx0BdywRIkbPNAxDuiPKrt3Pcvrq8/lWDxiI Dzgpjl7cKwDgjopfzsI8gVtZFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKM3AKdn itXgB7uqVygGATyGgJruMB8GA1UdIwQYMBaAFCJZ+HCW5ArbPIQYDii1bD6IIvZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS8zQTlDOEE1NjZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0czhoQmdPS0xWc1BvZ2k5 bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTlsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS8zQTlDOEE1NjZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0 czhoQmdPS0xWc1BvZ2k5bEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASKT2i8zXpA1d1zfi0BUzLpFEXnjHIYaZNUKuRmACJZOWu7l+HqF49 OfWOZlgNCwavZ859kDFJQ0lpWWpjbq+7svuheBg9JE3AKabx8d9jXYXjXj+JWsk8 3lydj9Uw/zSPiANrLmGP9ISs5pnDIFIiY/nR354aMOU/lqPjGJzBUahZpUyPPC/V lI/av5dUiu0I9pMf+FevdAuEqUXXFlR8co5fb9adqRQPg8CvZwvXG6zGMbtnyeH1 MpdxqAMKAEGXk6FP21xqAKCBwi3KwOg1ieaRvp4m4mo8QgXtlW9TNq2yB1ylSs09 JcF0xYFm7JPW6ssx/JI852TgH24PdlIP -----END CERTIFICATE-----Generated at Sun Aug 10 04:47:30 2025 by rpki-client