$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json) Hash identifier: Vs2uet+j3GiweHr3r6diAFfDcyITNOm3HyH/qC9DuDw= Subject key identifier: A2:13:B8:AA:4C:6D:34:9C:C5:93:52:C4:F0:D4:B7:3E:19:35:D2:CC Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft Manifest number: 022E Signing time: Mon 11 Aug 2025 02:10:35 +0000 Manifest this update: Mon 11 Aug 2025 02:10:34 +0000 Manifest next update: Mon 18 Aug 2025 02:10:34 +0000 Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: BhtpZtMkkkzDcahL3CevNZdo6boMKGr27JjhJJCVe0U=) 2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=) 3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: Aug 11 02:10:34 2025 GMT Not After : Aug 18 02:10:34 2025 GMT Subject: CN=6899511a-a433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:92:14:51:5b:85:3f:80:3e:c2:e1:bb:37: 72:d7:57:46:5b:64:a0:d8:4a:c9:78:16:fc:e9:e3: 38:0d:62:93:a8:ec:db:b4:30:ce:32:0e:a8:43:86: e8:4f:05:cf:93:1e:6a:06:ff:b6:2c:08:ca:dc:65: 31:46:e5:a2:7e:ee:b0:e3:bb:3b:49:73:1e:be:4e: df:33:54:84:43:0f:65:28:0b:92:ab:0b:74:41:ea: 85:bf:82:8a:36:dc:9c:30:66:18:ac:ff:6b:cb:90: aa:88:ec:71:89:91:42:2e:2e:c3:90:38:12:05:ad: 3c:9f:c6:d6:43:eb:05:9d:0f:8e:83:67:c7:33:0a: f9:d4:28:f6:31:38:47:12:83:59:ba:10:59:40:32: 94:1e:1c:ce:40:13:15:95:ec:8e:49:bc:5b:62:07: 2a:78:7f:00:68:a9:e8:df:39:06:fa:1f:f1:ba:95: 9f:82:d1:9c:b4:97:98:ea:cf:2a:d9:20:b0:60:10: 1e:3b:63:d9:5f:db:b7:f8:f1:2c:00:e3:e2:53:ae: a3:49:b7:53:01:31:77:62:92:df:20:4c:c7:ec:7c: 8f:c1:e5:0e:22:4a:5b:8e:ff:94:6f:60:87:f3:f9: 0d:56:2d:f5:c6:40:0f:70:b6:2f:6a:c1:bb:13:88: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:13:B8:AA:4C:6D:34:9C:C5:93:52:C4:F0:D4:B7:3E:19:35:D2:CC X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:87:cd:b9:43:10:2a:ce:56:76:e3:7a:34:5e:1c:7b:8d:68: b9:36:c0:60:a5:c3:d9:fa:1d:7e:5e:26:f6:b6:44:28:cd:54: 21:fb:78:cd:24:e9:d6:61:9e:a5:9e:86:1b:fe:2b:4b:05:95: b8:82:9e:73:ea:14:ce:8a:43:89:3b:79:b9:81:52:56:fc:c3: 00:86:19:6d:68:af:8b:16:f9:c5:03:8e:06:07:16:52:1b:c6: 42:13:75:bb:37:6b:1e:71:dc:27:c4:c7:93:72:5a:a7:88:32: d6:87:88:25:ec:71:d8:2e:b7:53:d3:b5:ce:6c:a5:ce:79:e0: 4c:9f:fa:e3:72:a7:fd:1a:ff:2d:67:60:3e:33:63:a5:48:7a: b1:25:22:e3:32:01:a4:cb:e4:0d:40:32:29:22:82:ae:48:e6: c9:99:6b:05:dc:dd:7e:99:4a:9d:a0:36:6b:43:6e:e6:be:4f: 31:d8:e2:5a:a1:a5:3d:ba:53:65:97:aa:65:14:87:28:f4:c1: f4:07:70:e8:51:e8:da:19:a5:8c:82:86:b0:ba:36:be:73:da: a7:dd:a3:d7:0b:4b:39:8e:d9:e1:54:72:5d:8e:11:67:4b:cd: 74:87:c6:fc:47:5e:e4:1e:15:09:1e:25:4f:7b:00:7d:03:1c: 48:f4:55:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjUwODExMDIxMDM0WhcNMjUwODE4MDIxMDM0WjAYMRYwFAYD VQQDEw02ODk5NTExYS1hNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIOSFFFbhT+APsLhuzdy11dGW2Sg2ErJeBb86eM4DWKTqOzbtDDOMg6oQ4bo TwXPkx5qBv+2LAjK3GUxRuWifu6w47s7SXMevk7fM1SEQw9lKAuSqwt0QeqFv4KK NtycMGYYrP9ry5CqiOxxiZFCLi7DkDgSBa08n8bWQ+sFnQ+Og2fHMwr51Cj2MThH EoNZuhBZQDKUHhzOQBMVleyOSbxbYgcqeH8AaKno3zkG+h/xupWfgtGctJeY6s8q 2SCwYBAeO2PZX9u3+PEsAOPiU66jSbdTATF3YpLfIEzH7HyPweUOIkpbjv+Ub2CH 8/kNVi31xkAPcLYvasG7E4iIuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKITuKpM bTScxZNSxPDUtz4ZNdLMMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq VUpua2hEUElKSmVobDduWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyh825QxAqzlZ243o0Xhx7jWi5NsBgpcPZ+h1+Xib2tkQozVQh+3jN JOnWYZ6lnoYb/itLBZW4gp5z6hTOikOJO3m5gVJW/MMAhhltaK+LFvnFA44GBxZS G8ZCE3W7N2secdwnxMeTclqniDLWh4gl7HHYLrdT07XObKXOeeBMn/rjcqf9Gv8t Z2A+M2OlSHqxJSLjMgGky+QNQDIpIoKuSObJmWsF3N1+mUqdoDZrQ27mvk8x2OJa oaU9ulNll6plFIco9MH0B3DoUejaGaWMgoawuja+c9qn3aPXC0s5jtnhVHJdjhFn S810h8b8R17kHhUJHiVPewB9AxxI9FXU -----END CERTIFICATE-----Generated at Mon Aug 11 11:50:56 2025 by rpki-client