$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json) Hash identifier: i0kAQMBcmArjmSwxIKqqreS72CpWNBe7BehMwPn2VXU= Subject key identifier: 3D:9C:9F:39:3D:1B:A9:77:8E:38:EA:A6:4F:8B:FC:E6:B3:63:D0:EC Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft Manifest number: 0139 Signing time: Mon 21 Jul 2025 04:34:12 +0000 Manifest this update: Mon 21 Jul 2025 04:34:11 +0000 Manifest next update: Mon 28 Jul 2025 04:34:11 +0000 Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: MpQgd1BzM/rSL46veisCS28LXUZoWYhXWhJ5GQElxlo=) 2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: 1BbW+GzFmicFxrJi47abULi9jqJhPlJkmCnwzd461wM=) 3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: uYX2IlbgkFVHpSI6ncTYHrhhVumZeL9bEclaECevCas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Validity Not Before: Jul 21 04:34:11 2025 GMT Not After : Jul 28 04:34:11 2025 GMT Subject: CN=687dc344-6fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:71:62:30:f3:4e:32:b0:4f:47:f9:54:2b: ae:9e:d9:20:bc:c6:cc:21:ae:ea:84:f4:e1:c2:59: 71:b8:6b:4c:23:0a:88:b9:b4:d9:51:5d:9a:13:b9: 2c:f1:b7:14:25:79:91:c6:48:9a:b5:51:fb:2d:fb: 02:41:88:55:fd:38:b6:95:26:3c:74:3e:c6:f8:df: 9f:d1:61:ac:a4:49:49:80:30:ab:ae:26:f2:49:98: 3e:00:31:1d:9b:48:af:6c:31:5d:fc:36:18:98:aa: d8:9a:6f:a9:0b:6d:4b:57:5f:88:91:e9:07:d5:9d: a9:b7:95:89:1a:b3:31:6a:ef:cb:e5:fe:bc:13:72: fa:42:bd:e1:91:ff:16:e7:61:db:50:df:29:c7:6e: a5:23:3f:6f:12:21:89:52:ce:3c:6f:6d:75:54:ad: 65:c5:af:9e:60:3b:e9:ab:ec:7e:4f:8b:d2:52:7b: 16:d0:c6:18:5a:d5:c4:fa:79:8b:9c:4f:0d:52:a9: d5:85:dc:19:83:02:2d:9a:1c:06:82:82:32:ca:43: 13:91:b0:20:63:b2:0d:ca:66:58:d6:5f:05:54:54: d9:c4:dc:8f:fd:02:2c:c2:80:cd:59:59:3d:13:a8: b7:da:5c:d8:a6:5e:78:72:1a:1b:56:06:f7:18:2a: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9C:9F:39:3D:1B:A9:77:8E:38:EA:A6:4F:8B:FC:E6:B3:63:D0:EC X509v3 Authority Key Identifier: keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:06:f3:ba:5a:3f:34:b0:5a:cc:9d:3b:84:8e:ee:e9:0d:49: 48:df:0e:70:89:2a:77:a4:a8:d5:e2:74:be:78:64:0d:68:0f: db:d7:06:79:88:a2:29:3a:08:3f:8e:5d:1a:4e:e3:ad:29:19: 8f:7a:db:05:80:09:ec:83:40:67:d7:7f:77:e6:60:72:31:44: 50:8b:c9:b1:a4:a5:1a:ae:55:48:fa:f4:3e:12:fd:40:b9:7e: ed:ea:0a:62:e1:22:8e:72:ad:cf:93:af:6f:42:92:82:1e:58: 7b:1a:d6:13:b2:aa:7a:aa:65:ee:22:82:90:e1:76:0c:fb:d8: 31:21:27:2a:ea:1f:37:a3:f6:99:12:ff:b6:d2:b7:51:3e:64: 7e:fc:7c:c9:e6:f0:46:ba:80:02:9c:54:65:de:92:98:63:62: 48:12:39:7d:84:36:3f:0e:70:d5:06:23:c0:7f:0a:fe:de:98: 5a:fd:8a:6b:7c:84:da:17:4e:85:64:6c:af:24:75:55:be:b2: ac:16:be:e9:7a:ca:a1:46:c3:6e:bb:8d:20:a6:51:4d:46:02: 92:e7:11:cf:f1:93:9d:42:de:aa:7b:30:5f:8c:71:ad:12:4a: 58:f7:91:d3:b2:f3:f6:5e:19:f2:1f:f1:2d:c7:94:73:da:6d: 8d:42:99:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE QjVCNjY3OTEwHhcNMjUwNzIxMDQzNDExWhcNMjUwNzI4MDQzNDExWjAYMRYwFAYD VQQDEw02ODdkYzM0NC02ZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uhxYjDzTjKwT0f5VCuuntkgvMbMIa7qhPThwllxuGtMIwqIubTZUV2aE7ks 8bcUJXmRxkiatVH7LfsCQYhV/Ti2lSY8dD7G+N+f0WGspElJgDCrribySZg+ADEd m0ivbDFd/DYYmKrYmm+pC21LV1+IkekH1Z2pt5WJGrMxau/L5f68E3L6Qr3hkf8W 52HbUN8px26lIz9vEiGJUs48b211VK1lxa+eYDvpq+x+T4vSUnsW0MYYWtXE+nmL nE8NUqnVhdwZgwItmhwGgoIyykMTkbAgY7INymZY1l8FVFTZxNyP/QIswoDNWVk9 E6i32lzYpl54chobVgb3GCr/ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2cnzk9 G6l3jjjqpk+L/OazY9DsMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv WTNqRWF6NmRyWHpiVzJaNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWBvO6Wj80sFrMnTuEju7pDUlI3w5wiSp3pKjV4nS+eGQNaA/b1wZ5 iKIpOgg/jl0aTuOtKRmPetsFgAnsg0Bn13935mByMURQi8mxpKUarlVI+vQ+Ev1A uX7t6gpi4SKOcq3Pk69vQpKCHlh7GtYTsqp6qmXuIoKQ4XYM+9gxIScq6h83o/aZ Ev+20rdRPmR+/HzJ5vBGuoACnFRl3pKYY2JIEjl9hDY/DnDVBiPAfwr+3pha/Ypr fITaF06FZGyvJHVVvrKsFr7pesqhRsNuu40gplFNRgKS5xHP8ZOdQt6qezBfjHGt EkpY95HTsvP2XhnyH/Etx5Rz2m2NQpmj -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:09 2025 by rpki-client