$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: veZkp88xuF8uLVprZ8b6i8fFfVm972Oiw2wpM6SY/qc= Subject key identifier: E7:FB:93:F6:6B:4A:2D:B0:93:20:60:1D:21:F1:95:12:A6:19:20:90 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 27AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2758 Signing time: Sun 10 Aug 2025 15:36:45 +0000 Manifest this update: Sun 10 Aug 2025 15:36:45 +0000 Manifest next update: Sun 17 Aug 2025 15:36:45 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: p74Ds1wnmEfdp43jZILk1o5GM5wGlQ0NJY/SGBqBfac=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: tAGi/sSZ9el7Z/s+1sNJT90gzy4cpKpqrErB6Bm68K0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: 4dAtwCU1fi5Bo6SCfNalDzxKHkBj/DREl9uromRy6Rs=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10157 (0x27ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Aug 10 15:36:45 2025 GMT Not After : Aug 17 15:36:45 2025 GMT Subject: CN=6898bc8d-2176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:ce:60:af:f5:cc:59:a4:54:79:1e:a6:69: 57:10:a3:fd:a6:83:2f:21:0d:f7:90:70:30:1b:f1: 40:2c:54:0b:fc:c0:87:c0:45:4b:86:1c:99:7e:75: b9:69:46:dd:b7:b5:c6:0f:05:11:2d:cc:3d:9c:fc: c2:8c:69:a0:a7:ce:4f:41:92:39:5b:5a:f9:d2:d0: fb:e5:e0:66:bc:e1:04:51:0e:ee:c5:2f:64:28:43: 8e:73:2d:d9:6e:a8:fb:40:f4:54:b7:4c:93:2e:9c: 2e:c3:56:f7:0e:f9:03:8f:46:b8:cf:4c:cb:4d:1b: 03:a4:e4:1b:70:7b:bd:5a:c5:b6:44:ce:2b:59:f1: a5:93:14:30:76:8f:51:1c:44:e4:98:2c:b1:23:79: 56:41:98:47:c8:08:b2:4f:5c:28:1e:fe:c6:41:dd: 46:4c:43:90:cb:e2:d2:bb:d4:34:77:92:6a:4f:e1: 0e:5e:d7:40:eb:64:8d:d2:a8:bd:3a:ed:3f:b8:c1: cf:ef:ba:79:df:e6:bd:c3:f8:6c:d0:ac:06:6e:2f: 43:61:e0:da:17:b9:b1:5b:7b:8a:5f:c6:05:43:00: 6e:9a:81:86:f9:e8:54:47:f9:2e:fa:dc:62:0e:78: 3e:c9:93:c7:e8:b0:e1:a6:95:26:b5:81:41:0e:8b: 06:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FB:93:F6:6B:4A:2D:B0:93:20:60:1D:21:F1:95:12:A6:19:20:90 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:67:b7:98:1e:d5:a7:06:e1:58:d5:12:2e:67:75:30:99:44: f9:05:0e:44:5b:e8:58:90:8f:fc:c5:23:ff:36:59:fe:67:06: da:f2:fb:cc:94:04:56:ca:d1:5d:9b:ed:ce:99:41:30:51:0b: 15:17:01:74:6b:8e:95:c4:a6:ad:93:ec:c6:0f:f8:37:ae:03: 80:e3:a6:f3:d9:b2:ee:af:a2:f1:d8:80:30:6c:f5:da:a5:01: 7b:96:76:bc:af:08:52:d3:10:96:c7:64:f6:2e:d4:e9:a5:6d: d7:e8:8e:9c:94:78:41:2c:1b:9d:11:0b:30:0d:60:72:b4:8b: 85:68:31:06:56:36:26:89:58:71:b0:04:6e:03:61:da:03:87: ac:47:92:b8:ac:c8:3b:98:b9:f7:01:7b:eb:df:6e:da:cb:d1: 71:55:b9:6d:cd:0d:df:74:d1:b1:e3:7b:02:44:47:20:d3:a0: ef:01:c0:b6:ef:68:83:40:d3:6e:7c:b5:47:0b:d4:a1:15:9c: 12:9e:dd:78:62:32:7a:44:92:1b:a4:1b:d1:6b:47:18:fb:65: b7:e1:49:d0:c3:94:2a:fd:e4:b2:ed:1b:92:1a:92:66:6b:2a: 5a:46:de:9f:30:3f:08:2e:0a:1f:fa:c3:fe:e1:97:d7:6d:e1: bf:a7:d5:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwODEwMTUzNjQ1WhcNMjUwODE3MTUzNjQ1WjAYMRYwFAYD VQQDEw02ODk4YmM4ZC0yMTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDvOYK/1zFmkVHkepmlXEKP9poMvIQ33kHAwG/FALFQL/MCHwEVLhhyZfnW5 aUbdt7XGDwURLcw9nPzCjGmgp85PQZI5W1r50tD75eBmvOEEUQ7uxS9kKEOOcy3Z bqj7QPRUt0yTLpwuw1b3DvkDj0a4z0zLTRsDpOQbcHu9WsW2RM4rWfGlkxQwdo9R HETkmCyxI3lWQZhHyAiyT1woHv7GQd1GTEOQy+LSu9Q0d5JqT+EOXtdA62SN0qi9 Ou0/uMHP77p53+a9w/hs0KwGbi9DYeDaF7mxW3uKX8YFQwBumoGG+ehUR/ku+txi Dng+yZPH6LDhppUmtYFBDosGXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOf7k/Zr Si2wkyBgHSHxlRKmGSCQMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Z7eYHtWnBuFY1RIuZ3UwmUT5BQ5EW+hYkI/8xSP/Nln+Zwba8vvM lARWytFdm+3OmUEwUQsVFwF0a46VxKatk+zGD/g3rgOA46bz2bLur6Lx2IAwbPXa pQF7lna8rwhS0xCWx2T2LtTppW3X6I6clHhBLBudEQswDWBytIuFaDEGVjYmiVhx sARuA2HaA4esR5K4rMg7mLn3AXvr327ay9FxVbltzQ3fdNGx43sCREcg06DvAcC2 72iDQNNufLVHC9ShFZwSnt14YjJ6RJIbpBvRa0cY+2W34UnQw5Qq/eSy7RuSGpJm aypaRt6fMD8ILgof+sP+4ZfXbeG/p9V+ -----END CERTIFICATE-----Generated at Sun Aug 10 18:16:21 2025 by rpki-client