$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft File: ISgYkHWJssqEa0nRCd0zrJ4utUM.mft (raw, json) Hash identifier: NQ/+5EBlST29eh3Ki/fH2RAdIPOI1Fxp3NlpFS/wZSg= Subject key identifier: 50:E9:61:66:A8:29:E7:6D:8C:FB:FC:27:1B:61:73:95:7A:BF:9F:96 Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43 Certificate issuer: /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft Manifest number: 25 Signing time: Wed 03 Sep 2025 08:29:32 +0000 Manifest this update: Wed 03 Sep 2025 08:29:31 +0000 Manifest next update: Wed 10 Sep 2025 08:29:31 +0000 Files and hashes: 1: ISgYkHWJssqEa0nRCd0zrJ4utUM.crl (hash: WfRq5DP8COQbHSLIAc7ePz/q8lVu8GcIowlcPY2jSCI=) 2: 499C2F0A534111F089393B42C4F9AE02.roa (hash: fSSf7ryiBLDRlZlFztp2IYlUMMSWWQRmpXOgQAMLAFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543 Validity Not Before: Sep 3 08:29:31 2025 GMT Not After : Sep 10 08:29:31 2025 GMT Subject: CN=68b7fc6c-ab97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:30:f6:5b:c0:13:d1:73:2a:07:db:f8:d7: 3b:77:d2:06:ba:ef:6e:29:1e:71:b1:49:69:e9:d8: 2a:65:98:f4:4c:ce:63:b4:d7:f7:86:1a:4f:49:4e: c2:66:50:82:49:b7:43:d0:97:07:29:e7:f3:18:ef: fb:37:fa:4f:bd:50:41:06:50:9f:ee:da:2f:9b:58: e9:d5:94:ca:89:03:5e:f9:54:df:f1:b1:ae:79:9c: 0a:e2:d1:b5:81:ed:b2:0b:6d:ca:6b:20:7e:27:9c: 1e:a7:cf:80:1e:35:26:c1:34:1a:44:94:7c:bd:c2: fc:0e:20:33:2b:5f:5c:6f:f4:29:95:87:c3:d6:95: 83:7a:8b:ae:fe:ab:d1:79:9b:43:24:38:4e:3c:f6: 3d:d0:89:26:24:b5:e0:8a:cc:2e:b0:7d:b3:d8:d0: 19:e7:c5:70:5d:0b:65:58:9f:cd:2c:f1:39:3d:bf: 6c:78:08:27:e5:0e:5b:6c:b6:2b:e6:9c:a2:f4:dc: 4d:19:9d:b7:15:f4:b3:5e:bc:5a:d9:d8:53:cf:cd: e7:94:79:16:6f:cd:7b:34:20:7d:37:eb:72:78:c1: 3f:ec:1e:af:fa:0a:72:31:6f:19:c3:ed:49:6d:73: 16:3a:f6:59:7c:0d:de:11:31:8d:ba:bd:0e:98:60: 46:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:61:66:A8:29:E7:6D:8C:FB:FC:27:1B:61:73:95:7A:BF:9F:96 X509v3 Authority Key Identifier: keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:09:92:2f:07:f8:16:31:1f:1e:de:a1:81:e8:ee:87:9b:30: 23:35:aa:7c:c7:48:58:79:8d:4a:73:eb:5e:32:cf:dc:4b:e7: dd:20:70:ac:f0:43:bf:b2:34:80:d8:89:34:db:b6:ff:86:8f: c3:0f:17:f3:87:9c:c3:8c:57:aa:51:7a:2f:cc:30:57:ec:d2: 96:84:d8:8d:7a:01:96:0c:a1:9f:2c:90:f4:0f:a1:3d:45:32: c4:35:6b:ea:02:58:c8:27:f8:fc:7a:df:7d:08:f1:6a:17:4c: 47:5a:5c:e7:bc:b9:84:e4:bb:b8:c2:85:6e:7b:2f:b2:9a:fa: 33:fb:68:c8:21:f5:46:5f:c3:1e:24:ba:8e:6e:fc:4e:ad:53: a6:3b:e5:a4:81:fd:bb:02:5d:ff:62:68:51:e4:bc:8f:3c:61: 03:d4:5e:0c:28:ae:dd:d3:44:4b:02:7f:be:17:af:68:27:dc: 55:8d:cc:40:f4:a9:4a:8f:87:75:5f:5d:0a:56:4e:34:c8:44: e4:d2:30:78:06:fd:5a:c6:0e:b4:57:18:34:5b:9c:e5:60:3a: 0a:d5:49:b7:ac:fa:2a:67:93:9f:1e:45:b9:35:17:2f:31:fd: 83:ea:a4:6d:4c:9f:04:aa:6a:98:7c:a5:0f:73:ea:64:b5:d9: 69:a5:fa:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Njk1RTExMC8GA1UEBRMoMjEyODE4OTA3NTg5QjJDQTg0NkI0OUQxMDlERDMzQUM5 RTJFQjU0MzAeFw0yNTA5MDMwODI5MzFaFw0yNTA5MTAwODI5MzFaMBgxFjAUBgNV BAMTDTY4YjdmYzZjLWFiOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFRjD2W8AT0XMqB9v41zt30ga6724pHnGxSWnp2CplmPRMzmO01/eGGk9JTsJm UIJJt0PQlwcp5/MY7/s3+k+9UEEGUJ/u2i+bWOnVlMqJA175VN/xsa55nAri0bWB 7bILbcprIH4nnB6nz4AeNSbBNBpElHy9wvwOIDMrX1xv9CmVh8PWlYN6i67+q9F5 m0MkOE489j3QiSYkteCKzC6wfbPY0BnnxXBdC2VYn80s8Tk9v2x4CCflDltstivm nKL03E0ZnbcV9LNevFrZ2FPPzeeUeRZvzXs0IH0363J4wT/sHq/6CnIxbxnD7Ult cxY69ll8Dd4RMY26vQ6YYEYRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUOlhZqgp 522M+/wnG2FzlXq/n5YwHwYDVR0jBBgwFoAUISgYkHWJssqEa0nRCd0zrJ4utUMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2OTVFL0U3QjM0OTcyNTM0 MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL0lTZ1lrSFdKc3NxRWEwblJDZDB6cko0dXRV TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVNnWWtIV0pzc3FFYTBuUkNkMHpySjR1dFVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 OTVFL0U3QjM0OTcyNTM0MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL0lTZ1lrSFdKc3Nx RWEwblJDZDB6cko0dXRVTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADEJki8H+BYxHx7eoYHo7oebMCM1qnzHSFh5jUpz614yz9xL590gcKzw Q7+yNIDYiTTbtv+Gj8MPF/OHnMOMV6pRei/MMFfs0paE2I16AZYMoZ8skPQPoT1F MsQ1a+oCWMgn+Px6330I8WoXTEdaXOe8uYTku7jChW57L7Ka+jP7aMgh9UZfwx4k uo5u/E6tU6Y75aSB/bsCXf9iaFHkvI88YQPUXgwort3TREsCf74Xr2gn3FWNzED0 qUqPh3VfXQpWTjTIROTSMHgG/VrGDrRXGDRbnOVgOgrVSbes+ipnk58eRbk1Fy8x /YPqpG1MnwSqaph8pQ9z6mS12Wml+k4= -----END CERTIFICATE-----Generated at Thu Sep 4 15:52:12 2025 by rpki-client