$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json) Hash identifier: uSwtXa6U6qK3Rw/wvdMo1M3VSTST7/sL/LZxcllr6h0= Subject key identifier: 41:DD:96:08:15:94:76:39:36:F0:9D:8F:0C:2F:7A:E0:04:A2:AC:99 Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft Manifest number: 04BB Signing time: Wed 20 Aug 2025 23:59:50 +0000 Manifest this update: Wed 20 Aug 2025 23:59:50 +0000 Manifest next update: Wed 27 Aug 2025 23:59:50 +0000 Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: c9+d4lhzdzJDt+NVoEvnTG04zsce6dcY5Zq/ja33Ud4=) 2: F9343F063B0911EC82AE0828C4F9AE02.roa (hash: pIsS/aAz3NlTfiRznLCHJWwJfZnRVJbtBleuPSnoEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Validity Not Before: Aug 20 23:59:50 2025 GMT Not After : Aug 27 23:59:50 2025 GMT Subject: CN=68a66176-25fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0a:24:79:9e:d6:d5:5f:ef:86:18:75:83:e0: e4:23:74:b7:5f:35:53:9d:82:2d:69:7d:6a:ec:44: 5b:40:fc:ef:83:57:45:d2:e3:69:7d:6a:b9:f6:33: a1:c7:95:85:2e:2b:bc:ce:cb:a6:7e:1a:d0:c9:b9: 34:b5:14:1e:12:a2:5f:a0:ba:44:f7:16:6a:44:7d: 1a:31:86:be:3d:cf:93:54:75:ea:1c:58:bf:88:da: 6d:f2:0b:82:6d:ca:04:96:fe:ad:d2:3a:9b:4c:30: 21:6d:ed:be:cf:fe:13:2d:eb:69:92:46:15:8f:07: a4:c6:e0:07:f9:d1:cb:a4:68:96:19:d7:aa:d8:6d: c9:5d:b4:00:ec:30:1a:63:73:6f:ef:54:1e:f8:52: 99:e4:77:45:53:07:a8:8c:ef:85:35:66:4c:c7:db: 4c:4e:f9:6f:c3:67:d5:4c:f0:a9:77:8f:39:30:e0: de:8d:c1:ea:f6:0d:c5:ea:fd:22:73:15:56:ae:df: 04:4c:14:59:9e:ec:e8:1c:1b:95:7e:a1:8c:73:c8: be:4c:3f:8d:cf:75:88:cc:00:9a:90:b6:2c:9d:62: 6d:1f:86:e0:5c:76:cf:a7:a8:1b:58:c6:f2:52:97: 32:9f:44:3d:a9:82:7d:90:e6:70:7c:87:73:b4:d8: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DD:96:08:15:94:76:39:36:F0:9D:8F:0C:2F:7A:E0:04:A2:AC:99 X509v3 Authority Key Identifier: keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0b:fc:5b:b0:50:9d:8a:b1:67:42:16:6e:3f:77:c0:b2:ed: b1:a0:e0:df:c6:b3:4a:5d:81:38:85:15:bd:4a:5d:b6:b2:10: cb:22:ca:ee:70:28:0b:f8:8e:d3:79:24:8c:06:1c:52:de:b1: f3:6c:0c:31:1f:ad:53:b5:c6:b3:77:31:05:a0:ee:e2:66:04: 02:d8:3f:d1:0f:80:50:d4:6c:a6:12:87:8c:5b:c2:04:71:99: 1d:54:5c:b4:c5:5e:e0:19:81:f1:d9:54:f5:3b:3f:40:a1:c1: 0a:67:67:3a:e3:4e:5f:ba:34:4c:63:02:4c:7b:b6:8a:b3:d5: 9b:20:c5:c1:4c:42:15:e4:cc:12:46:0a:bf:19:ad:f3:41:b4: 38:e6:86:7b:a9:cf:a8:e9:41:aa:0e:7b:42:0d:43:0a:62:0c: 72:43:cb:c5:2a:54:0e:c3:07:84:ee:c3:fe:b0:16:50:4a:38: e6:10:85:38:9f:df:3a:21:de:a3:2d:a2:92:e7:a5:b9:3c:2a: a6:e7:82:80:a4:20:c0:7f:1e:da:db:5d:73:0a:6e:35:78:f5: 3e:5a:30:cb:81:70:81:f6:8e:2b:9a:92:90:59:ac:a6:0b:7b: 28:7e:48:04:be:d7:d7:dd:c4:62:56:f0:89:79:22:24:e2:00: bd:72:50:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5N0ExMTAvBgNVBAUTKDg5NDM2NjNEQ0Y4MzA5RkEyNzRBNDY1MkZBODNBQkQy NkQ4NDI2NEYwHhcNMjUwODIwMjM1OTUwWhcNMjUwODI3MjM1OTUwWjAYMRYwFAYD VQQDEw02OGE2NjE3Ni0yNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wokeZ7W1V/vhhh1g+DkI3S3XzVTnYItaX1q7ERbQPzvg1dF0uNpfWq59jOh x5WFLiu8zsumfhrQybk0tRQeEqJfoLpE9xZqRH0aMYa+Pc+TVHXqHFi/iNpt8guC bcoElv6t0jqbTDAhbe2+z/4TLetpkkYVjwekxuAH+dHLpGiWGdeq2G3JXbQA7DAa Y3Nv71Qe+FKZ5HdFUweojO+FNWZMx9tMTvlvw2fVTPCpd485MODejcHq9g3F6v0i cxVWrt8ETBRZnuzoHBuVfqGMc8i+TD+Nz3WIzACakLYsnWJtH4bgXHbPp6gbWMby Upcyn0Q9qYJ9kOZwfIdztNgjuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHdlggV lHY5NvCdjwwveuAEoqyZMB8GA1UdIwQYMBaAFIlDZj3Pgwn6J0pGUvqDq9JthCZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDk3QS82MTY3QTZEMjNC MDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENmb25Ta1pTLW9PcjBtMkVK azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVTm1QYy1EQ2ZvblNrWlMtb09yMG0yRUprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDk3QS82MTY3QTZEMjNCMDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENm b25Ta1pTLW9PcjBtMkVKazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxC/xbsFCdirFnQhZuP3fAsu2xoODfxrNKXYE4hRW9Sl22shDLIsru cCgL+I7TeSSMBhxS3rHzbAwxH61TtcazdzEFoO7iZgQC2D/RD4BQ1GymEoeMW8IE cZkdVFy0xV7gGYHx2VT1Oz9AocEKZ2c6405fujRMYwJMe7aKs9WbIMXBTEIV5MwS Rgq/Ga3zQbQ45oZ7qc+o6UGqDntCDUMKYgxyQ8vFKlQOwweE7sP+sBZQSjjmEIU4 n986Id6jLaKS56W5PCqm54KApCDAfx7a211zCm41ePU+WjDLgXCB9o4rmpKQWaym C3sofkgEvtfX3cRiVvCJeSIk4gC9clBo -----END CERTIFICATE-----Generated at Fri Aug 22 16:18:18 2025 by rpki-client