$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json) Hash identifier: paUQQACosW50hBS4VBOLDiLWcYn9eI0uPAy28BLp+1s= Subject key identifier: E4:BD:1E:AF:61:03:F3:59:48:2B:75:EF:1D:4B:60:37:88:B8:2C:34 Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft Manifest number: 0172 Signing time: Mon 21 Jul 2025 03:50:17 +0000 Manifest this update: Mon 21 Jul 2025 03:50:16 +0000 Manifest next update: Mon 28 Jul 2025 03:50:16 +0000 Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: tMGtcQl7G16bjyV+L13B4YztGBlxYMiFjceDLLzeotc=) 2: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: 749u4lopn9W/FVK2H662IjT0Y70cK7ANdEZnlQh0KN8=) 3: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: JpEflAmkAjQw8fDsB0P7evpxNWtbBcByQzIhr/Rv/Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E Validity Not Before: Jul 21 03:50:16 2025 GMT Not After : Jul 28 03:50:16 2025 GMT Subject: CN=687db8f8-0397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:2b:96:59:07:54:b4:b5:f1:05:0a:d5:c6: 1a:68:21:cd:28:2f:84:ce:e4:08:1e:9f:dc:a8:38: bc:1b:50:9f:f8:e5:16:03:0c:58:71:fd:ca:4e:ae: cf:23:b3:85:a1:bf:ac:8f:ca:19:ce:df:ca:f6:84: 90:02:ee:7f:d4:17:54:24:c5:fa:5c:6d:a2:9d:48: e4:fb:e7:a6:0d:2e:0f:d8:08:aa:c8:f6:1f:5a:e6: 50:33:2a:e3:3d:37:cc:63:0a:7e:47:39:a6:3d:31: ba:a4:b4:2e:91:c0:e7:15:01:71:1a:9e:bf:a4:30: 05:04:0c:42:31:39:5f:07:6a:45:0f:19:08:f5:55: fd:1a:0f:f8:a6:12:f8:38:77:4e:cd:5e:65:06:2a: b7:9d:70:64:e5:a2:ad:69:26:31:14:a2:d0:53:75: 20:21:87:a6:96:a8:9c:0c:08:b6:1c:8f:2c:90:9d: 7f:95:f4:f8:dd:5c:69:9b:ea:3c:ab:3b:4f:8a:0f: d7:3f:e3:47:bf:88:13:f4:4b:04:31:7a:fe:2a:94: 97:2c:b9:cd:3b:14:57:d0:47:4b:bf:5a:da:24:eb: 4d:95:52:6f:e7:68:cd:94:23:ce:bd:df:c7:c6:67: 00:b4:93:e2:7c:6e:ae:70:0d:d8:8f:50:d0:06:ea: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BD:1E:AF:61:03:F3:59:48:2B:75:EF:1D:4B:60:37:88:B8:2C:34 X509v3 Authority Key Identifier: keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:4f:9e:55:2e:e0:26:06:9e:e8:71:60:0d:d3:fc:b6:59:a2: 61:35:38:a6:3f:1d:70:8a:90:f6:37:5d:c3:72:dd:74:57:97: da:1f:8e:81:58:81:60:6a:f6:71:73:3b:96:b3:74:68:28:4e: db:e7:5d:5f:0f:b7:aa:fb:15:55:cf:6a:72:c1:a6:79:3f:37: 11:d1:1e:f5:f5:f7:c4:df:74:d9:8b:8a:18:2f:39:0d:8b:16: 9d:12:29:55:6d:ce:cb:8f:2e:58:17:b5:e2:f0:fa:9a:be:c3: 0e:11:bb:ba:e5:82:31:87:31:34:d5:c3:97:4b:05:23:56:94: d8:0e:6d:ca:8b:68:e0:a5:e1:0c:cf:4c:2e:0c:06:c8:ad:73: f8:5a:d5:0e:e9:de:4f:a2:80:d3:26:bc:cf:39:29:fb:34:ec: 4d:6c:73:c2:ea:d2:87:84:3f:e0:08:59:1a:38:a9:c9:da:40: de:ef:dd:f8:c8:f7:5b:12:d1:65:09:cd:a6:6e:e7:da:b3:cf: c4:fe:ce:65:6b:5d:86:18:97:6e:9f:c1:22:c4:29:fe:54:ed: 5a:66:bd:ba:e8:27:fd:8e:f4:4e:85:bf:77:a9:ce:6b:3c:f1: ac:1e:67:e3:d7:1c:43:2e:16:9c:2e:f6:e6:73:26:92:32:4e: b7:ec:d7:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI2NDQxMTAvBgNVBAUTKEY4ODFEOTREN0EyNjlBRjY4ODQ4M0E2NTFEMzczOTE4 RTc4NjUwMUUwHhcNMjUwNzIxMDM1MDE2WhcNMjUwNzI4MDM1MDE2WjAYMRYwFAYD VQQDEw02ODdkYjhmOC0wMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQYrllkHVLS18QUK1cYaaCHNKC+EzuQIHp/cqDi8G1Cf+OUWAwxYcf3KTq7P I7OFob+sj8oZzt/K9oSQAu5/1BdUJMX6XG2inUjk++emDS4P2AiqyPYfWuZQMyrj PTfMYwp+RzmmPTG6pLQukcDnFQFxGp6/pDAFBAxCMTlfB2pFDxkI9VX9Gg/4phL4 OHdOzV5lBiq3nXBk5aKtaSYxFKLQU3UgIYemlqicDAi2HI8skJ1/lfT43Vxpm+o8 qztPig/XP+NHv4gT9EsEMXr+KpSXLLnNOxRX0EdLv1raJOtNlVJv52jNlCPOvd/H xmcAtJPifG6ucA3Yj1DQBur6iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS9Hq9h A/NZSCt17x1LYDeIuCw0MB8GA1UdIwQYMBaAFPiB2U16Jpr2iEg6ZR03ORjnhlAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjY0NC9CRjEzMUQzNDJE MDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12YUlTRHBsSFRjNUdPZUdV QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JSFpUWG9tbXZhSVNEcGxIVGM1R09lR1VCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjY0NC9CRjEzMUQzNDJEMDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12 YUlTRHBsSFRjNUdPZUdVQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNT55VLuAmBp7ocWAN0/y2WaJhNTimPx1wipD2N13Dct10V5faH46B WIFgavZxczuWs3RoKE7b511fD7eq+xVVz2pywaZ5PzcR0R719ffE33TZi4oYLzkN ixadEilVbc7Ljy5YF7Xi8PqavsMOEbu65YIxhzE01cOXSwUjVpTYDm3Ki2jgpeEM z0wuDAbIrXP4WtUO6d5PooDTJrzPOSn7NOxNbHPC6tKHhD/gCFkaOKnJ2kDe7934 yPdbEtFlCc2mbufas8/E/s5la12GGJdun8EixCn+VO1aZr266Cf9jvROhb93qc5r PPGsHmfj1xxDLhacLvbmcyaSMk637Ndc -----END CERTIFICATE-----Generated at Mon Jul 21 12:46:56 2025 by rpki-client