$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: Jp3nDfRruLnUNEXxcExk1OMQdkY4R5UECuCupeHjaS4= Subject key identifier: 27:F0:A6:6A:EE:E6:B3:36:59:2B:F6:59:EC:03:EB:0E:15:72:BA:27 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: 06 Signing time: Fri 18 Jul 2025 23:08:19 +0000 Manifest this update: Fri 18 Jul 2025 23:08:18 +0000 Manifest next update: Fri 25 Jul 2025 23:08:18 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: ok11DK575QwZcRDTNPKEvCZd56S3Tmh7tdZqxZELl2k=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: tRrklyhCDRycwJaKFRwEZyyD1E5up+J5TjkxJCAvISc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Jul 18 23:08:18 2025 GMT Not After : Jul 25 23:08:18 2025 GMT Subject: CN=687ad3e2-3733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:30:b0:08:85:fc:a6:c1:71:25:ba:c1:a4: 04:ed:01:b6:f2:16:d6:47:e6:11:f8:90:a1:82:25: 0b:cf:c2:3a:7a:ec:f0:20:08:73:49:9b:19:c8:a0: ed:d8:eb:c7:7f:61:e1:e0:5c:22:f5:41:be:bb:ea: e5:42:6b:21:0f:37:4a:e7:50:21:c8:ea:62:22:5a: 6e:37:2e:20:ab:6c:2a:b9:c9:65:da:3d:5e:dc:30: bc:aa:bd:80:99:58:f5:dd:57:df:73:f7:ac:c9:ea: 7c:b8:b8:7d:3a:3f:ea:94:37:01:ae:24:ca:c7:b7: f2:11:28:b8:11:0f:a6:e7:de:cd:3c:67:4a:d5:ac: f5:75:77:ba:a4:1b:06:46:93:0a:ac:be:2f:08:4f: 96:3b:8c:e6:24:b0:1e:8a:4b:bf:25:16:d5:69:70: e4:4c:4b:d3:53:a8:59:3d:1a:78:68:b3:95:6b:df: a8:c3:4f:0a:de:09:82:3a:4e:7f:18:a8:64:e9:96: 7c:55:9c:ea:97:11:f7:8a:a6:9a:92:cc:d9:eb:ce: 8c:6e:79:00:ac:ba:9f:f9:81:10:16:d1:18:a1:3f: 1b:96:88:18:f2:b7:75:ad:7c:82:9a:42:b9:8c:dd: 12:72:3f:1d:f0:60:b8:18:8c:b2:ec:7d:4c:55:aa: 14:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F0:A6:6A:EE:E6:B3:36:59:2B:F6:59:EC:03:EB:0E:15:72:BA:27 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:34:6c:89:4b:6c:d4:c1:19:d5:6d:14:cf:2a:0b:cf:c9:a9: ae:84:67:53:72:17:04:ac:4e:43:91:be:3d:d6:fa:1f:1a:31: de:f8:d1:ee:9e:bd:cc:40:49:5b:6b:14:83:99:e4:e0:3e:7c: 05:f3:5d:41:68:29:31:09:37:1a:4d:79:c1:93:f8:a1:c5:71: b3:86:25:7a:aa:1c:fb:28:92:67:f6:01:20:c7:d8:51:35:bc: 13:29:51:d6:12:19:e6:a2:04:32:48:2e:2b:ca:b7:cf:2b:b9: 11:60:43:fb:93:ea:cf:9d:c8:bc:d3:78:af:9a:0f:c7:62:89: 8a:ff:cb:65:81:c8:71:2f:12:e4:be:49:db:b1:35:df:7c:4b: d1:f3:1c:49:b9:79:57:f1:0e:78:fb:db:13:18:20:75:9a:aa: 6b:99:65:b9:01:64:b3:0b:ca:4e:16:33:e9:0c:96:22:6f:35: e3:fe:da:63:03:79:64:ec:b0:07:04:fc:d3:10:02:6f:4d:35: 07:5b:5d:73:e8:0a:b5:4f:c0:3a:43:31:40:55:6a:a8:b2:59: e1:4c:82:e3:b7:0d:b6:3d:99:95:65:d4:79:13:2a:48:f8:ff: 63:9a:90:54:95:07:7a:53:f8:5b:fd:3b:94:4a:27:e0:62:c0: 7e:06:09:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEQwMDExMC8GA1UEBRMoMjE0MjkzM0ZCRTZFN0M1RkI3NjdBODZBNUUyMURENjAx NzhFQTM5RDAeFw0yNTA3MTgyMzA4MThaFw0yNTA3MjUyMzA4MThaMBgxFjAUBgNV BAMTDTY4N2FkM2UyLTM3MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvBjCwCIX8psFxJbrBpATtAbbyFtZH5hH4kKGCJQvPwjp67PAgCHNJmxnIoO3Y 68d/YeHgXCL1Qb676uVCayEPN0rnUCHI6mIiWm43LiCrbCq5yWXaPV7cMLyqvYCZ WPXdV99z96zJ6ny4uH06P+qUNwGuJMrHt/IRKLgRD6bn3s08Z0rVrPV1d7qkGwZG kwqsvi8IT5Y7jOYksB6KS78lFtVpcORMS9NTqFk9Gnhos5Vr36jDTwreCYI6Tn8Y qGTplnxVnOqXEfeKppqSzNnrzoxueQCsup/5gRAW0RihPxuWiBjyt3WtfIKaQrmM 3RJyPx3wYLgYjLLsfUxVqhQdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ/Cmau7m szZZK/ZZ7APrDhVyuicwHwYDVR0jBBgwFoAUIUKTP75ufF+3Z6hqXiHdYBeOo50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RDAwL0YxQUYxMDUyNjFE RjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVVLVFA3NXVmRi0zWjZocVhpSGRZQmVPbzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RDAwL0YxQUYxMDUyNjFERjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYt M1o2aHFYaUhkWUJlT281MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ40bIlLbNTBGdVtFM8qC8/Jqa6EZ1NyFwSsTkORvj3W+h8aMd740e6e vcxASVtrFIOZ5OA+fAXzXUFoKTEJNxpNecGT+KHFcbOGJXqqHPsokmf2ASDH2FE1 vBMpUdYSGeaiBDJILivKt88ruRFgQ/uT6s+dyLzTeK+aD8diiYr/y2WByHEvEuS+ SduxNd98S9HzHEm5eVfxDnj72xMYIHWaqmuZZbkBZLMLyk4WM+kMliJvNeP+2mMD eWTssAcE/NMQAm9NNQdbXXPoCrVPwDpDMUBVaqiyWeFMguO3DbY9mZVl1HkTKkj4 /2OakFSVB3pT+Fv9O5RKJ+BiwH4GCcc= -----END CERTIFICATE-----Generated at Sun Jul 20 11:16:42 2025 by rpki-client