$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: bbaFmdY/ZQn3i5M24Kqh0knOkp9XmMhBuSy2jMZLNGk= Subject key identifier: 9B:ED:D5:F8:71:25:B3:F8:C0:C1:20:86:5D:EA:88:10:AE:3D:D2:6B Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 013D Signing time: Sun 07 Sep 2025 04:58:55 +0000 Manifest this update: Sun 07 Sep 2025 04:58:55 +0000 Manifest next update: Sun 14 Sep 2025 04:58:55 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: 4GTSu6HExeVL0UolWXDR8vB6Lz9PceLSNDEHW7niXFg=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=) 4: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=) 5: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Sep 7 04:58:55 2025 GMT Not After : Sep 14 04:58:55 2025 GMT Subject: CN=68bd110f-0f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:66:70:39:dd:4b:38:5f:7b:91:66:da:df:41: 52:00:ab:3c:40:75:9f:44:fb:67:6d:f5:c0:0d:32: c4:71:76:73:fb:45:e9:38:54:5d:a7:8b:38:0f:68: bb:bd:24:e6:65:41:a4:7f:ce:32:df:7e:2d:fd:d3: c3:36:28:61:e9:08:68:d5:6b:bd:c6:11:00:93:37: e7:20:a8:15:6b:c9:a0:85:b6:f4:6c:7c:87:19:22: 1e:90:0d:2e:3d:9b:a1:e0:00:0d:ff:76:22:42:3e: 01:74:ba:51:e4:56:28:39:c2:de:34:fd:dd:d3:b0: cf:45:f3:8b:eb:38:41:01:9b:e6:b0:32:a1:95:25: e5:9e:03:c6:e8:01:65:bd:2a:0e:93:b6:9b:98:42: f4:97:28:85:19:1a:81:61:a1:81:19:0b:18:16:50: c7:76:42:91:6a:89:90:5b:bc:41:41:37:f9:02:66: 5a:75:be:a1:b6:a4:ca:a0:b4:f4:01:0d:d2:04:22: 48:be:ed:85:c6:34:db:06:b8:d9:86:d6:06:42:86: 22:cf:49:03:30:ca:e1:a6:4d:b5:da:12:48:77:b7: f1:42:c4:1a:fc:fc:75:4b:91:9a:98:03:d6:ce:9e: 30:c7:ff:76:10:96:2b:fd:bc:43:5e:08:ee:ca:c4: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:ED:D5:F8:71:25:B3:F8:C0:C1:20:86:5D:EA:88:10:AE:3D:D2:6B X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:90:8f:d5:36:05:99:e9:18:d4:74:86:5b:60:97:a4:9e:57: d4:73:9a:3e:ed:91:17:ab:88:92:32:96:69:8f:46:87:c6:6b: d2:37:ab:c9:43:c1:8a:92:3c:e6:2e:f1:fe:00:38:8c:5d:86: c2:da:06:7a:72:9c:08:e8:34:65:9c:f0:98:a8:38:24:27:ed: 09:70:ac:15:d7:5d:7a:82:c3:a3:b8:c8:7b:34:f3:02:7d:5e: 78:68:6f:1d:f0:19:96:39:35:d8:b2:c0:30:7c:63:b3:62:bc: 3b:56:7e:51:85:10:cf:a4:60:de:07:ec:cd:b2:4f:2e:7a:e0: 7b:fd:d7:e9:6b:c1:bb:25:84:82:fa:15:a9:09:02:a2:6d:c2: 9a:1c:1d:e9:ec:7c:8e:19:6d:4c:b5:e8:a2:01:d5:b2:8f:41: 7e:64:9a:b6:30:cd:a6:eb:72:e5:d6:89:14:22:34:8f:63:67: 9e:8c:8a:7b:67:e0:8a:58:aa:52:35:1a:27:2c:ca:33:a9:90: c3:3b:77:90:c3:fa:27:d1:b8:dc:e6:c5:cc:3f:66:2e:92:47: ef:e6:39:0e:0c:32:a7:4a:fc:43:af:5e:f8:aa:e5:5c:02:11: d2:8e:c9:af:18:76:4e:89:dd:d7:f2:d6:da:79:9a:b8:21:d9: d3:09:92:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUwOTA3MDQ1ODU1WhcNMjUwOTE0MDQ1ODU1WjAYMRYwFAYD VQQDEw02OGJkMTEwZi0wZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGZwOd1LOF97kWba30FSAKs8QHWfRPtnbfXADTLEcXZz+0XpOFRdp4s4D2i7 vSTmZUGkf84y334t/dPDNihh6Qho1Wu9xhEAkzfnIKgVa8mghbb0bHyHGSIekA0u PZuh4AAN/3YiQj4BdLpR5FYoOcLeNP3d07DPRfOL6zhBAZvmsDKhlSXlngPG6AFl vSoOk7abmEL0lyiFGRqBYaGBGQsYFlDHdkKRaomQW7xBQTf5AmZadb6htqTKoLT0 AQ3SBCJIvu2FxjTbBrjZhtYGQoYiz0kDMMrhpk212hJId7fxQsQa/Px1S5GamAPW zp4wx/92EJYr/bxDXgjuysTdpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvt1fhx JbP4wMEghl3qiBCuPdJrMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXkI/VNgWZ6RjUdIZbYJeknlfUc5o+7ZEXq4iSMpZpj0aHxmvSN6vJ Q8GKkjzmLvH+ADiMXYbC2gZ6cpwI6DRlnPCYqDgkJ+0JcKwV1116gsOjuMh7NPMC fV54aG8d8BmWOTXYssAwfGOzYrw7Vn5RhRDPpGDeB+zNsk8ueuB7/dfpa8G7JYSC +hWpCQKibcKaHB3p7HyOGW1MteiiAdWyj0F+ZJq2MM2m63Ll1okUIjSPY2eejIp7 Z+CKWKpSNRonLMozqZDDO3eQw/on0bjc5sXMP2Yukkfv5jkODDKnSvxDr174quVc AhHSjsmvGHZOid3X8tbaeZq4IdnTCZK1 -----END CERTIFICATE-----Generated at Sun Sep 7 14:33:07 2025 by rpki-client