$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: d1CGpQwzJQfKGyc8B4Lt3HOApK3VDoPrJedS8j9u57s= Subject key identifier: B8:38:21:17:25:2C:EC:E3:9C:FD:DE:93:75:E2:45:A1:7F:6D:1F:76 Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 017A Signing time: Sat 09 Aug 2025 04:08:30 +0000 Manifest this update: Sat 09 Aug 2025 04:08:30 +0000 Manifest next update: Sat 16 Aug 2025 04:08:30 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: TtWuTcOBsD57HvVlEMsJjrn4dNPhDEZRScGCz7O5Zwc=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: MRW+pxq2rIQWqz0eewlHDxgHTLGzIYysThVYJrp2BDc=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: Fv5yzaRaYXm7EcaxJ9d0RT5up4myTdlO4UPvIXp3L88=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: mGJXgF/PKI9FEq/cPxsdqAyVl2gi74HVL2n1gwNWhDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Aug 9 04:08:30 2025 GMT Not After : Aug 16 04:08:30 2025 GMT Subject: CN=6896c9be-d781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:1b:70:cf:6c:e7:a6:3d:64:a0:a8:91:f1: 46:61:0a:81:b8:e2:e8:c0:66:20:52:c9:b2:92:34: b9:17:71:26:c2:67:65:b4:d3:b3:57:73:ec:95:8a: 8f:10:b3:71:42:46:73:52:07:31:a5:2d:d3:09:8d: 93:aa:a5:38:e7:1d:22:46:fa:8f:11:16:2d:27:95: c0:73:15:91:ef:70:38:61:af:4b:cd:ed:f4:32:7f: 2b:71:3e:af:ea:72:07:10:c6:c6:0d:33:5e:b5:77: c8:32:7f:5b:b5:fe:8c:8d:7e:32:bd:04:70:f1:96: b0:80:8e:3c:a4:2a:63:74:4b:8f:e9:5f:e5:43:94: 6b:36:fc:99:4c:cf:6b:94:44:79:cd:95:06:4a:47: dc:1c:12:57:a6:44:d6:e1:5f:31:97:05:d3:fe:5d: 57:b4:0f:a2:06:b1:f6:c9:59:83:b2:53:41:a1:db: 4c:54:5d:c2:75:15:cb:7b:52:a7:c6:59:3b:bf:f5: c0:d8:64:8a:76:ba:33:12:e5:c1:77:67:0c:e6:b3: 63:ee:c4:16:9b:36:b2:bc:e2:f1:13:b0:78:f2:65: 36:cf:fd:cf:cc:44:cb:93:b8:d3:1a:b2:6d:6f:ae: 48:d6:48:87:fe:19:08:77:d0:f2:63:a6:36:51:28: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:21:17:25:2C:EC:E3:9C:FD:DE:93:75:E2:45:A1:7F:6D:1F:76 X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:32:c0:03:84:b3:53:b6:f6:5a:58:65:dd:3d:81:20:05:23: 98:06:c0:7d:71:14:ce:66:75:d3:5e:55:10:a0:39:12:80:57: 95:c9:af:6e:1d:17:25:22:83:08:dd:a3:6c:a3:44:e5:82:dd: 1c:fa:d4:76:9e:c6:fc:31:67:b6:17:64:18:cc:86:9e:b9:a7: 34:bc:da:36:f6:51:0e:39:d3:b0:6f:26:c4:df:5d:ab:21:ef: a0:f7:69:02:2e:8e:d5:3a:48:de:86:a3:05:c9:7c:f7:73:0b: 0e:2a:c5:16:d4:b7:59:4c:d4:24:f5:2d:3a:90:03:99:4e:67: 87:5e:32:e9:1a:a4:ee:8d:42:32:05:8c:eb:1e:e0:5a:e1:a3: e6:b6:6a:11:8e:70:6a:ec:93:70:ec:74:76:ce:e6:e7:a3:08: a2:f4:d2:22:63:c6:0c:4e:e6:b5:08:34:92:d3:b2:83:34:a5: 02:bf:63:f9:ac:a4:da:db:33:ec:fd:3e:d0:35:cb:9f:96:e5: 1c:ab:6d:69:6f:c8:a3:ec:ff:b3:bb:49:50:a4:ed:23:e4:f1: 13:53:8e:8b:93:56:5a:5f:86:41:9c:67:12:41:e4:f2:27:df: bc:a9:4f:e1:37:83:56:18:dd:3c:4b:d8:56:8a:70:b9:40:a1: ac:69:c6:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjUwODA5MDQwODMwWhcNMjUwODE2MDQwODMwWjAYMRYwFAYD VQQDEw02ODk2YzliZS1kNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg0bcM9s56Y9ZKCokfFGYQqBuOLowGYgUsmykjS5F3EmwmdltNOzV3PslYqP ELNxQkZzUgcxpS3TCY2TqqU45x0iRvqPERYtJ5XAcxWR73A4Ya9Lze30Mn8rcT6v 6nIHEMbGDTNetXfIMn9btf6MjX4yvQRw8ZawgI48pCpjdEuP6V/lQ5RrNvyZTM9r lER5zZUGSkfcHBJXpkTW4V8xlwXT/l1XtA+iBrH2yVmDslNBodtMVF3CdRXLe1Kn xlk7v/XA2GSKdrozEuXBd2cM5rNj7sQWmzayvOLxE7B48mU2z/3PzETLk7jTGrJt b65I1kiH/hkId9DyY6Y2USjXWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg4IRcl LOzjnP3ek3XiRaF/bR92MB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMMsADhLNTtvZaWGXdPYEgBSOYBsB9cRTOZnXTXlUQoDkSgFeVya9u HRclIoMI3aNso0Tlgt0c+tR2nsb8MWe2F2QYzIaeuac0vNo29lEOOdOwbybE312r Ie+g92kCLo7VOkjehqMFyXz3cwsOKsUW1LdZTNQk9S06kAOZTmeHXjLpGqTujUIy BYzrHuBa4aPmtmoRjnBq7JNw7HR2zubnowii9NIiY8YMTua1CDSS07KDNKUCv2P5 rKTa2zPs/T7QNcufluUcq21pb8ij7P+zu0lQpO0j5PETU46Lk1ZaX4ZBnGcSQeTy J9+8qU/hN4NWGN08S9hWinC5QKGsacaz -----END CERTIFICATE-----Generated at Sun Aug 10 04:26:57 2025 by rpki-client