$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json) Hash identifier: xeF8BTA/Pb7DdyNXiQwbVM7jkYlniZs8arSZlV/Z4lI= Subject key identifier: 43:44:B4:D3:1D:E7:75:F1:C0:22:99:AF:1D:AD:96:14:BB:F0:4A:7D Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft Manifest number: DD Signing time: Sun 03 Aug 2025 05:53:59 +0000 Manifest this update: Sun 03 Aug 2025 05:53:58 +0000 Manifest next update: Sun 10 Aug 2025 05:53:58 +0000 Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: LiFKQNc8ZGi7/zfBcWJhPm0hqMdJdmJvvL1pU+NpKTo=) 2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: Ha/cGz3EuqzsAq4mNf1LJHzYtP6EU2XABOfv8TEGk30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Validity Not Before: Aug 3 05:53:58 2025 GMT Not After : Aug 10 05:53:58 2025 GMT Subject: CN=688ef977-c577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:6a:25:c4:fe:87:15:8d:4e:91:ef:c7:25: e2:09:f5:60:58:89:8e:9e:df:09:d3:4d:83:17:b9: 54:f8:21:6e:20:35:20:90:df:26:0b:c2:29:cd:3c: 7c:3d:9f:f2:15:56:a4:55:2a:28:e6:05:01:77:5e: 0f:b8:6d:37:fa:ab:21:c0:55:51:90:d6:9d:26:39: e4:cc:9f:10:ba:72:84:8c:f7:76:88:71:89:af:3c: 1e:63:cc:21:64:56:ed:f6:42:c8:7b:8d:f7:92:02: dc:96:3b:80:f2:a3:0a:d1:c8:35:21:5b:10:c6:66: be:fe:19:fe:95:3c:1f:f1:ab:27:a2:77:3d:89:53: f6:5b:e2:97:db:86:2a:c7:47:3c:92:48:a2:48:70: f3:9a:30:27:48:98:4a:fb:96:1e:4d:78:a3:95:57: ad:4b:3e:64:e0:5b:84:e5:f5:87:7f:d8:73:26:f8: 1e:29:e3:89:db:e2:2d:30:d6:60:be:0b:96:e7:0f: 11:db:85:3a:dd:6e:0d:b4:1a:cf:7c:e2:90:92:90: 55:ca:98:6f:78:fa:9c:55:7d:b2:03:c5:78:37:d4: f6:a4:83:81:d4:1a:2e:5c:a9:df:2d:ed:eb:7c:bd: 14:b0:82:ec:0e:5c:4e:a6:28:cf:43:09:25:52:8c: 87:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:44:B4:D3:1D:E7:75:F1:C0:22:99:AF:1D:AD:96:14:BB:F0:4A:7D X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:df:4e:5d:2f:08:f8:f0:9d:36:e7:6d:0b:c0:e5:64:65:31: 67:1c:09:67:cd:16:e6:df:64:a9:27:e0:26:df:28:44:13:ce: 7c:97:4c:cf:b0:d1:39:2f:36:2f:af:4c:b2:c6:34:40:4a:1b: 79:c1:27:5c:e5:25:1e:bd:91:1d:61:a3:4d:1a:6b:87:43:47: 0a:e3:93:b7:db:3d:12:73:f7:98:ad:73:39:80:a5:b9:d9:23: 5e:59:01:36:8c:66:c8:47:a7:3b:9a:00:88:60:ff:cb:38:81: 88:3d:0b:b8:10:07:1a:54:dc:20:b2:18:b2:cb:dc:e2:0d:87: 2c:b7:a3:94:ec:db:dc:b3:da:7d:de:2a:3e:39:86:b6:4b:bb: d4:6b:e5:fe:da:63:65:0f:3a:9b:ba:fb:5d:54:26:af:18:fb: 62:1b:80:b2:84:c2:dc:80:0c:4e:9c:6c:3c:74:d8:52:16:07: eb:18:82:b8:b2:ed:4b:b4:01:6f:b2:3d:5f:3c:bf:af:d3:68: 14:30:53:61:a2:24:4f:40:06:b3:0e:6a:86:94:e0:39:ea:4b: c4:79:2d:2a:cf:f8:e2:68:6e:e3:3c:b6:44:33:75:2d:e9:f6: fb:bb:d8:28:dd:5b:a6:b8:aa:a7:a2:34:37:e8:ba:69:03:14: 72:a6:77:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG OTQ2OEQ5NUEwHhcNMjUwODAzMDU1MzU4WhcNMjUwODEwMDU1MzU4WjAYMRYwFAYD VQQDEw02ODhlZjk3Ny1jNTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32RqJcT+hxWNTpHvxyXiCfVgWImOnt8J002DF7lU+CFuIDUgkN8mC8IpzTx8 PZ/yFVakVSoo5gUBd14PuG03+qshwFVRkNadJjnkzJ8QunKEjPd2iHGJrzweY8wh ZFbt9kLIe433kgLcljuA8qMK0cg1IVsQxma+/hn+lTwf8asnonc9iVP2W+KX24Yq x0c8kkiiSHDzmjAnSJhK+5YeTXijlVetSz5k4FuE5fWHf9hzJvgeKeOJ2+ItMNZg vguW5w8R24U63W4NtBrPfOKQkpBVyphvePqcVX2yA8V4N9T2pIOB1BouXKnfLe3r fL0UsILsDlxOpijPQwklUoyHBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENEtNMd 53XxwCKZrx2tlhS78Ep9MB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy85OUM3NDg4ODI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0Fj cmNNNUU0UDhxVzM1Um8yVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF305dLwj48J02520LwOVkZTFnHAlnzRbm32SpJ+Am3yhEE858l0zP sNE5LzYvr0yyxjRASht5wSdc5SUevZEdYaNNGmuHQ0cK45O32z0Sc/eYrXM5gKW5 2SNeWQE2jGbIR6c7mgCIYP/LOIGIPQu4EAcaVNwgshiyy9ziDYcst6OU7Nvcs9p9 3io+OYa2S7vUa+X+2mNlDzqbuvtdVCavGPtiG4CyhMLcgAxOnGw8dNhSFgfrGIK4 su1LtAFvsj1fPL+v02gUMFNhoiRPQAazDmqGlOA56kvEeS0qz/jiaG7jPLZEM3Ut 6fb7u9go3VumuKqnojQ36LppAxRypneU -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:02 2025 by rpki-client