$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: 9DriTWhEkYnuKaaLnec83FNQMtFWXDsFB2qPt2Ny9zk= Subject key identifier: 75:11:83:3E:39:D4:77:CD:8B:19:73:14:CA:5D:B5:3C:17:DB:E8:B3 Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0C74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0C6B Signing time: Sun 24 Aug 2025 18:23:22 +0000 Manifest this update: Sun 24 Aug 2025 18:23:22 +0000 Manifest next update: Sun 31 Aug 2025 18:23:22 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: 1Dfvg7dw3tKkbuRW0v1HrP5S0K/d71esA9JqoI+9Oy8=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: ZF76+TdQMAvJkkO6rvtsiHzBwUDEVkLOtw/tW67c6tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Aug 24 18:23:22 2025 GMT Not After : Aug 31 18:23:22 2025 GMT Subject: CN=68ab589a-7995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:3f:97:25:24:92:15:fe:9f:95:c1:33:49: c4:29:e4:94:26:38:9b:75:1b:82:39:7d:1d:e3:99: f0:c0:e8:a1:ac:49:b3:fa:cb:0b:21:be:4e:a6:15: 28:73:19:19:72:b6:e7:bf:28:09:b4:a3:2a:a3:f5: 51:48:60:05:9e:14:ee:40:14:83:30:92:35:a4:4f: e6:f4:db:f0:ad:3d:2c:ed:ad:92:39:bb:3d:c6:df: 45:dd:f6:51:a5:24:d8:c3:32:62:87:4d:93:53:ce: 10:a2:7f:1c:64:18:7c:56:0e:90:e7:4c:5b:06:dc: da:fe:5f:9c:51:7a:fe:bf:92:15:dc:d7:b7:ac:5a: bc:f9:a6:2b:bb:b3:e9:43:2b:05:9c:a8:68:ad:2b: e4:c2:f9:d2:e9:a5:5e:af:ec:ab:19:93:a3:57:13: fa:31:10:a5:47:ec:32:a8:f5:ac:59:24:9e:3f:6d: 79:8d:9a:47:48:24:37:4e:77:7e:ca:c7:b7:5c:3c: 57:80:44:a5:5f:20:a0:36:e0:27:00:f1:ce:0e:01: 17:dd:86:74:06:18:1e:58:cf:cf:ff:db:a1:ad:bb: 06:4d:c0:c2:48:13:9d:fc:34:10:24:3c:3e:d3:87: 35:d0:65:f7:79:5b:10:23:f9:97:19:e7:9c:f5:d7: 0c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:11:83:3E:39:D4:77:CD:8B:19:73:14:CA:5D:B5:3C:17:DB:E8:B3 X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:70:e3:cd:ca:eb:ae:30:6f:17:fb:fd:06:f4:e7:a2:ac: aa:51:29:50:1f:2f:7e:5c:ca:2e:56:02:a3:57:b2:b4:2f:46: c2:5c:36:9f:d5:d5:35:df:16:22:09:8d:5f:98:06:f6:68:c9: 06:2e:c6:cf:53:34:df:1e:0c:8a:88:15:58:14:5d:22:0b:ac: 83:87:b4:8e:5f:4a:6a:4f:0b:c7:a3:fe:8c:f0:5f:07:01:77: 2a:c5:81:b6:7c:4e:b6:28:2e:7e:5b:31:0f:c7:de:f8:84:c5: e6:37:61:27:bf:38:5c:26:31:ae:b4:6c:03:7d:32:8b:31:b1: 0c:f3:c8:04:89:65:5f:c5:02:8e:c0:c2:2a:ac:bf:58:82:ba: 89:ee:af:06:38:41:29:d9:c6:6f:4e:7f:dd:c0:06:d2:48:67: c9:75:ec:a2:e3:1a:51:28:b5:78:be:b2:0b:c1:bd:96:a1:a1: ab:9b:26:fb:ff:06:ff:a4:b9:3f:88:6e:59:8f:7d:de:db:59: 09:9b:22:f1:4d:1e:96:64:2a:29:ad:f9:d7:cb:5f:95:e6:80: 15:45:54:6a:5b:77:37:54:21:f6:15:f9:e3:81:0c:df:29:d4: e8:32:98:13:8f:21:8f:d9:dd:f6:d8:a6:29:fd:ae:40:78:04: e5:ed:2b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjUwODI0MTgyMzIyWhcNMjUwODMxMTgyMzIyWjAYMRYwFAYD VQQDEw02OGFiNTg5YS03OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoa0/lyUkkhX+n5XBM0nEKeSUJjibdRuCOX0d45nwwOihrEmz+ssLIb5OphUo cxkZcrbnvygJtKMqo/VRSGAFnhTuQBSDMJI1pE/m9NvwrT0s7a2SObs9xt9F3fZR pSTYwzJih02TU84Qon8cZBh8Vg6Q50xbBtza/l+cUXr+v5IV3Ne3rFq8+aYru7Pp QysFnKhorSvkwvnS6aVer+yrGZOjVxP6MRClR+wyqPWsWSSeP215jZpHSCQ3Tnd+ yse3XDxXgESlXyCgNuAnAPHODgEX3YZ0BhgeWM/P/9uhrbsGTcDCSBOd/DQQJDw+ 04c10GX3eVsQI/mXGeec9dcMpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHURgz45 1HfNixlzFMpdtTwX2+izMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAel3DjzcrrrjBvF/v9BvTnoqyqUSlQHy9+XMouVgKjV7K0L0bCXDaf 1dU13xYiCY1fmAb2aMkGLsbPUzTfHgyKiBVYFF0iC6yDh7SOX0pqTwvHo/6M8F8H AXcqxYG2fE62KC5+WzEPx974hMXmN2EnvzhcJjGutGwDfTKLMbEM88gEiWVfxQKO wMIqrL9YgrqJ7q8GOEEp2cZvTn/dwAbSSGfJdeyi4xpRKLV4vrILwb2WoaGrmyb7 /wb/pLk/iG5Zj33e21kJmyLxTR6WZCoprfnXy1+V5oAVRVRqW3c3VCH2FfnjgQzf KdToMpgTjyGP2d322KYp/a5AeATl7Ss0 -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:15 2025 by rpki-client