$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: WAR2fptCAyb85IVKM+Xy0XZMfTiNXKiHrl5peXA4Cs4= Subject key identifier: 2A:87:E7:03:C3:40:77:4F:D7:97:72:3B:4B:51:FA:39:FF:31:B3:E8 Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 017B Signing time: Mon 11 Aug 2025 03:48:42 +0000 Manifest this update: Mon 11 Aug 2025 03:48:41 +0000 Manifest next update: Mon 18 Aug 2025 03:48:41 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: P+SkxQ0M8XGfh5zn3uLpx4thSTpy2XfZQ+DQOIJ9UuQ=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: +03LMs4GrIEKMr4AUS8THT/+aKHBZJZQJL5qDyXGi38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: Aug 11 03:48:41 2025 GMT Not After : Aug 18 03:48:41 2025 GMT Subject: CN=68996819-b52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:d9:f2:19:74:c7:85:17:1f:a8:be:b9:14: 2b:d1:be:70:7e:a2:31:e8:dc:67:e5:50:29:7a:4d: 91:31:04:ff:cc:f2:f8:fd:8e:33:b4:ae:27:c9:e4: cb:a6:c3:e2:b7:8c:6f:00:ef:b2:a6:d2:09:60:7b: e6:d7:ac:e5:d2:4f:f6:ab:81:da:da:a9:e1:83:ab: 63:d5:73:2c:e0:c6:a0:89:77:e2:93:38:fc:d7:66: a9:92:1f:3e:2e:ad:0b:c4:a6:72:e5:42:fc:ab:8e: ba:65:e3:44:04:f8:b8:f9:01:d3:43:bd:8c:bd:8e: 43:8f:d2:70:f7:fa:79:9c:1e:e6:25:a9:0f:bc:09: 9e:5a:b2:87:30:8d:ce:6c:73:6f:08:9c:8d:47:ad: 9e:8b:3e:f5:9b:15:d7:06:45:3c:fe:e1:1a:b7:3f: 5f:74:79:59:4a:7d:79:08:3d:d4:f6:f7:15:58:c2: ae:da:27:67:3e:f0:e6:06:80:60:51:b2:39:47:b5: 50:88:46:1b:9a:e0:00:bb:4e:78:77:85:35:bc:a9: 3a:6e:75:78:30:7f:1f:26:a6:8d:bd:1f:c8:da:ac: 26:02:ca:d6:52:a9:ec:07:21:92:29:5a:0f:44:3b: fb:f6:d8:81:d4:b0:53:fb:79:91:fd:24:64:4c:2c: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:87:E7:03:C3:40:77:4F:D7:97:72:3B:4B:51:FA:39:FF:31:B3:E8 X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bc:27:5e:33:4e:0a:f4:19:47:e7:87:49:a2:8c:a0:64:4a: c9:2f:75:7d:3a:e8:5e:fa:61:a7:e1:37:54:42:2e:5c:ea:e4: 4e:cd:51:93:d7:e5:7d:42:4c:b0:9d:cf:a5:05:e0:f5:4c:5e: 26:71:f3:71:8b:54:1f:4f:12:15:9c:ad:c9:32:69:58:c9:bf: b9:e5:db:ce:bf:d5:3a:cb:6d:ac:18:dc:c4:b8:ec:83:26:d6: e6:f0:97:b5:9d:4a:31:44:75:42:08:97:44:73:44:7c:d5:9e: c7:a2:ba:0f:2d:49:a9:8a:ad:66:f2:cf:3d:27:48:3f:9a:60: f8:9c:bd:df:ab:de:eb:a4:4a:6a:dc:7f:06:f9:09:f9:62:3a: dc:ce:c9:cd:40:61:db:83:af:5f:41:2d:d3:a4:61:1c:f0:e3: 9a:30:08:7c:90:41:ac:8a:3b:cf:d5:5a:1a:9d:84:58:a0:07: 23:89:3c:6f:56:d0:fe:b3:8f:dd:55:58:9f:7b:d8:0a:a3:58: 12:22:4a:4e:ee:c6:15:30:c4:77:68:34:92:f8:8b:29:0c:5d: db:9f:e2:cc:69:8b:0e:68:b8:d9:c3:b5:29:17:8a:02:6d:14: a1:8c:07:af:83:ed:d2:12:00:5e:e5:9e:d1:ce:d7:9a:49:a8: 84:01:ac:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjUwODExMDM0ODQxWhcNMjUwODE4MDM0ODQxWjAYMRYwFAYD VQQDEw02ODk5NjgxOS1iNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NvZ8hl0x4UXH6i+uRQr0b5wfqIx6Nxn5VApek2RMQT/zPL4/Y4ztK4nyeTL psPit4xvAO+yptIJYHvm16zl0k/2q4Ha2qnhg6tj1XMs4MagiXfikzj812apkh8+ Lq0LxKZy5UL8q466ZeNEBPi4+QHTQ72MvY5Dj9Jw9/p5nB7mJakPvAmeWrKHMI3O bHNvCJyNR62eiz71mxXXBkU8/uEatz9fdHlZSn15CD3U9vcVWMKu2idnPvDmBoBg UbI5R7VQiEYbmuAAu054d4U1vKk6bnV4MH8fJqaNvR/I2qwmAsrWUqnsByGSKVoP RDv79tiB1LBT+3mR/SRkTCy8+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqH5wPD QHdP15dyO0tR+jn/MbPoMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqvCdeM04K9BlH54dJooygZErJL3V9Ouhe+mGn4TdUQi5c6uROzVGT 1+V9Qkywnc+lBeD1TF4mcfNxi1QfTxIVnK3JMmlYyb+55dvOv9U6y22sGNzEuOyD Jtbm8Je1nUoxRHVCCJdEc0R81Z7HoroPLUmpiq1m8s89J0g/mmD4nL3fq97rpEpq 3H8G+Qn5YjrczsnNQGHbg69fQS3TpGEc8OOaMAh8kEGsijvP1VoanYRYoAcjiTxv VtD+s4/dVVife9gKo1gSIkpO7sYVMMR3aDSS+IspDF3bn+LMaYsOaLjZw7UpF4oC bRShjAevg+3SEgBe5Z7RzteaSaiEAawN -----END CERTIFICATE-----Generated at Wed Aug 13 04:28:26 2025 by rpki-client