$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft File: iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json) Hash identifier: rFYkiJeTQMJxvssK8KCEl2QrbfISM+pu52rVarvYMCM= Subject key identifier: 30:9E:B2:18:5D:91:8B:70:AC:25:24:60:4D:9D:1F:7C:91:5B:76:4D Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 Certificate issuer: /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft Manifest number: 0680 Signing time: Wed 10 Sep 2025 22:38:20 +0000 Manifest this update: Wed 10 Sep 2025 22:38:19 +0000 Manifest next update: Wed 17 Sep 2025 22:38:19 +0000 Files and hashes: 1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: QRpXoqRsuLGdbmpJPEixmwZ3WsnOEql5B3y7ORVmR78=) 2: 6339493A516311ED90F04711C4F9AE02.roa (hash: UZVHz0fvOssKPNLwiZ35IeL2xHQA6a7FTosxanmpoZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 22:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Validity Not Before: Sep 10 22:38:19 2025 GMT Not After : Sep 17 22:38:19 2025 GMT Subject: CN=68c1fddb-6c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:b1:c6:90:87:cd:ce:7b:9a:c4:f1:9f:b1: 99:ed:6d:19:5a:3b:94:3c:3d:25:ad:7c:f0:bf:10: 1d:3e:8e:5d:6b:e6:74:87:92:26:33:ae:66:b0:c9: 4b:49:1a:de:f5:ae:61:5c:83:67:29:8d:18:38:35: b1:a3:d8:0f:db:24:9f:07:93:6c:1d:c8:e0:d9:0a: e8:54:85:3c:4c:93:a3:70:4d:98:d9:05:e9:a7:47: af:ce:fc:b2:af:5b:12:3e:25:8c:f0:c0:6a:a0:8d: aa:e4:7a:64:f5:92:dc:1f:dd:fd:00:d5:d1:f0:4d: fe:81:4c:72:3b:e7:a8:4d:fe:47:51:c6:4a:72:5f: 07:d4:42:f7:31:94:9e:d9:f8:f1:dd:ab:ff:a6:6c: 7b:db:e7:77:66:ea:1f:1b:fd:be:84:41:8d:f3:68: d5:6b:be:df:e3:d5:f8:42:d4:59:ea:f5:12:27:4e: 46:11:aa:18:37:e4:1b:0e:f8:30:05:a2:d9:f9:b9: 54:87:cd:7c:eb:da:d4:ed:e3:7c:29:83:46:9a:9c: 99:bd:b0:f9:5c:9d:26:53:bd:02:bc:59:b8:f6:13: 6a:ba:38:60:6a:99:8d:07:4c:fb:48:5f:66:49:4b: 8d:1b:e9:44:fb:76:f5:dc:2e:69:bf:ac:a8:82:47: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9E:B2:18:5D:91:8B:70:AC:25:24:60:4D:9D:1F:7C:91:5B:76:4D X509v3 Authority Key Identifier: keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:29:52:b3:a9:a7:72:61:10:38:38:41:e8:77:a1:0a:a3:ef: 2c:8a:b8:80:39:a5:3b:b8:0c:31:c5:74:7e:a2:3c:47:6c:fc: 05:01:b4:cd:48:4c:28:26:3e:57:05:0d:3a:e1:4c:38:f2:a0: 70:50:78:a9:46:87:89:cc:7a:3e:cd:bd:6a:81:a8:4b:21:f5: 78:72:c7:3f:07:08:67:53:f7:58:25:94:16:67:6c:79:18:2b: cd:1e:06:c5:a2:8a:f6:1b:03:26:e0:b4:ea:06:ba:18:7b:af: 02:97:ba:95:89:b0:d6:15:47:59:7d:1d:45:f2:87:b3:24:5a: 4d:69:10:ef:fb:72:51:aa:86:38:3b:63:99:d2:76:9e:92:3f: 8a:c3:a1:d6:91:9b:0f:e7:84:a4:e2:23:44:b7:2f:82:30:96: f1:ca:c6:41:87:1e:9b:11:15:f6:59:d9:8b:9d:51:3b:48:7d: 50:47:c3:57:f5:52:10:ec:d3:18:d1:35:76:4d:6f:68:35:e4: ae:1f:32:4e:c2:06:b1:c9:59:ae:53:a1:43:94:0c:94:d1:18: d9:2d:3a:33:90:67:32:6a:61:2c:83:97:51:f6:d6:4e:3f:3d: 81:94:67:e0:2b:d1:8c:ce:61:9c:85:de:8c:bc:17:46:a5:a0: 84:9e:8c:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MDIxMTAvBgNVBAUTKDg4RDFDOTk0RTgxMDhGQzBBNTMzREY0QkI4RTJDRThE MUM0QjlGMTcwHhcNMjUwOTEwMjIzODE5WhcNMjUwOTE3MjIzODE5WjAYMRYwFAYD VQQDEw02OGMxZmRkYi02YzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+uxxpCHzc57msTxn7GZ7W0ZWjuUPD0lrXzwvxAdPo5da+Z0h5ImM65msMlL SRre9a5hXINnKY0YODWxo9gP2ySfB5NsHcjg2QroVIU8TJOjcE2Y2QXpp0evzvyy r1sSPiWM8MBqoI2q5Hpk9ZLcH939ANXR8E3+gUxyO+eoTf5HUcZKcl8H1EL3MZSe 2fjx3av/pmx72+d3ZuofG/2+hEGN82jVa77f49X4QtRZ6vUSJ05GEaoYN+QbDvgw BaLZ+blUh81869rU7eN8KYNGmpyZvbD5XJ0mU70CvFm49hNqujhgapmNB0z7SF9m SUuNG+lE+3b13C5pv6yogkcTOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCeshhd kYtwrCUkYE2dH3yRW3ZNMB8GA1UdIwQYMBaAFIjRyZToEI/ApTPfS7jizo0cS58X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwMi85MzlDQUUyQzhE RDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4Q2xNOTlMdU9MT2pSeExu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOSEpsT2dRajhDbE05OUx1T0xPalJ4TG54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwMi85MzlDQUUyQzhERDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4 Q2xNOTlMdU9MT2pSeExueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXKVKzqadyYRA4OEHod6EKo+8siriAOaU7uAwxxXR+ojxHbPwFAbTN SEwoJj5XBQ064Uw48qBwUHipRoeJzHo+zb1qgahLIfV4csc/BwhnU/dYJZQWZ2x5 GCvNHgbFoor2GwMm4LTqBroYe68Cl7qVibDWFUdZfR1F8oezJFpNaRDv+3JRqoY4 O2OZ0naekj+Kw6HWkZsP54Sk4iNEty+CMJbxysZBhx6bERX2WdmLnVE7SH1QR8NX 9VIQ7NMY0TV2TW9oNeSuHzJOwgaxyVmuU6FDlAyU0RjZLTozkGcyamEsg5dR9tZO Pz2BlGfgK9GMzmGchd6MvBdGpaCEnoyu -----END CERTIFICATE-----Generated at Thu Sep 11 19:57:03 2025 by rpki-client