$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: GZELD+22zhbShbANoMPLM/zBcZgZpc6pjvLxkeWlr5E= Subject key identifier: 67:78:7E:0E:1F:09:9B:B7:3D:B5:CF:0E:2F:64:65:8B:99:0B:45:4B Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 0450 Signing time: Fri 05 Sep 2025 00:43:36 +0000 Manifest this update: Fri 05 Sep 2025 00:43:36 +0000 Manifest next update: Fri 12 Sep 2025 00:43:36 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: 5oXtpmr43FKDChxqNQXOtOKwDzVwdRXFAOfxFH9+PkQ=) 2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: tHlnHTM42fIgrOKj6B5mEiDlxGJ8PU+aATIjcWUbfzQ=) 3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: G91/+5P90Gbi5PgxXduUuTfOqPoMJhhodtxKYVTEQhU=) 4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: dDUwPb8yT4c7h8uvXZN4RSXgwF3JJh0qprW0Nf2AMic=) 5: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: 6FWLxJ0tuemCPYBLnFeCXc6fNxB9xk/e0IXfBTmtzAk=) 6: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: OW2gDSL6apVk21WPZdNUp4voxwL3co7ZVV/LZN2sPnI=) 7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: rr7JwL3aP2xt22xpI8m2scwwvBMRgYndiZXBSENrUYA=) 8: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: P6m9Y8fkMm3GUB3vWCGhg/CMVh26A+E6bYvQlekbBbQ=) 9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: onTCqXS9qZGzhIeTCRHgBXLlG0kEyR1ncJjeY60B73A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Sep 5 00:43:36 2025 GMT Not After : Sep 12 00:43:36 2025 GMT Subject: CN=68ba3238-4f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:ef:c1:88:44:15:68:7f:1f:11:87:8b:a2: 1e:ce:d8:6d:cc:85:08:36:8e:41:b7:8d:81:e7:d8: f4:79:82:d7:f6:19:e9:0d:19:9e:63:da:76:63:00: ff:36:5a:61:03:bb:21:51:d1:34:67:35:be:72:90: 5b:9c:33:00:ff:79:0a:51:30:c2:a9:36:d4:d1:f9: f6:3d:d1:dc:75:ab:5f:fe:3b:37:28:bf:9e:70:a5: 2c:0d:fc:1f:79:c2:e1:af:22:dd:0e:6c:27:ce:97: cf:44:db:86:fe:7c:36:41:0c:87:95:ac:73:04:04: 44:d6:65:5f:6b:4c:e0:e2:19:98:32:62:47:95:44: 6a:44:cf:30:fb:1a:31:01:aa:3c:88:3b:7e:58:00: 51:f6:18:26:67:1a:35:8c:f5:33:a3:15:22:f9:4a: 9a:84:f0:8b:8c:6e:1e:18:72:be:4b:fe:6e:98:5a: 5e:0f:03:a2:4b:2c:31:ef:6a:b1:88:d5:1b:b8:5e: 78:1f:ec:eb:41:3a:dc:66:45:c5:56:65:ad:d9:a2: 30:a9:70:09:2a:d5:c9:73:57:ab:e3:d7:10:51:a7: 70:87:89:ab:68:5d:b6:d0:93:4d:07:be:93:0b:fb: 62:46:fb:28:07:87:b9:2a:2f:53:b1:c8:4c:ba:1d: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:78:7E:0E:1F:09:9B:B7:3D:B5:CF:0E:2F:64:65:8B:99:0B:45:4B X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0e:f2:ec:7e:a9:37:6e:fd:80:65:02:89:de:d6:cc:6b:29: a5:58:32:3e:2e:2e:44:8b:d6:7f:c3:7f:ef:e7:78:bc:c4:89: 23:5a:bd:b7:fa:42:6e:02:ed:a5:0f:8f:eb:d0:f8:7f:76:c6: 32:14:52:22:20:7d:5b:d9:16:bd:98:59:17:54:44:62:3f:c9: cc:c5:ee:17:87:22:6b:4d:ce:a7:e3:3b:cc:bf:2a:4d:ff:b7: 98:dd:51:1c:52:6c:e1:22:d7:31:c4:37:d4:b6:9f:6f:d6:ea: 71:7e:be:28:95:c8:f6:2c:8d:53:99:92:16:0a:93:7c:49:a5: 51:7b:be:13:b3:d8:8c:cc:ea:45:10:27:db:6a:c5:b6:43:93: 7b:45:c8:f5:c3:b3:1c:5c:91:34:9f:68:2a:ab:7d:a3:e7:a5: 72:27:65:6f:06:96:b8:c4:d1:93:b7:af:02:f7:bd:2d:21:bd: a8:bf:ef:6f:ed:4e:50:e2:7b:f9:f3:cc:4a:7f:49:9e:07:c4: 49:d2:48:e9:ba:5c:29:c1:3a:11:35:3e:e7:7a:49:79:a1:c4: 61:a9:59:5e:d5:40:a0:d1:56:5d:d4:cd:ea:e6:5c:82:65:9e: d1:1c:49:b2:d9:0f:d9:34:d9:e4:11:96:89:dc:e0:58:60:e7: 22:31:4f:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUwOTA1MDA0MzM2WhcNMjUwOTEyMDA0MzM2WjAYMRYwFAYD VQQDEw02OGJhMzIzOC00ZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12vvwYhEFWh/HxGHi6IezthtzIUINo5Bt42B59j0eYLX9hnpDRmeY9p2YwD/ NlphA7shUdE0ZzW+cpBbnDMA/3kKUTDCqTbU0fn2PdHcdatf/js3KL+ecKUsDfwf ecLhryLdDmwnzpfPRNuG/nw2QQyHlaxzBARE1mVfa0zg4hmYMmJHlURqRM8w+xox Aao8iDt+WABR9hgmZxo1jPUzoxUi+UqahPCLjG4eGHK+S/5umFpeDwOiSywx72qx iNUbuF54H+zrQTrcZkXFVmWt2aIwqXAJKtXJc1er49cQUadwh4mraF220JNNB76T C/tiRvsoB4e5Ki9TschMuh3+mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGd4fg4f CZu3PbXPDi9kZYuZC0VLMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+DvLsfqk3bv2AZQKJ3tbMaymlWDI+Li5Ei9Z/w3/v53i8xIkjWr23 +kJuAu2lD4/r0Ph/dsYyFFIiIH1b2Ra9mFkXVERiP8nMxe4XhyJrTc6n4zvMvypN /7eY3VEcUmzhItcxxDfUtp9v1upxfr4olcj2LI1TmZIWCpN8SaVRe74Ts9iMzOpF ECfbasW2Q5N7Rcj1w7McXJE0n2gqq32j56VyJ2VvBpa4xNGTt68C970tIb2ov+9v 7U5Q4nv588xKf0meB8RJ0kjpulwpwToRNT7nekl5ocRhqVle1UCg0VZd1M3q5lyC ZZ7RHEmy2Q/ZNNnkEZaJ3OBYYOciMU96 -----END CERTIFICATE-----Generated at Fri Sep 5 03:23:00 2025 by rpki-client