$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: Uh2VLr+ai/ZIKAuxn29+1MxXcIQNn/LfMX7mJDxhuto= Subject key identifier: A5:9F:5F:50:3E:29:B5:2A:B0:10:89:34:3B:82:86:D1:A9:97:3E:2E Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: 41 Signing time: Thu 04 Sep 2025 20:19:42 +0000 Manifest this update: Thu 04 Sep 2025 20:19:41 +0000 Manifest next update: Thu 11 Sep 2025 20:19:41 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: Nm84IisD10Nmj9v4FDLp5zRel6Gb2HVJ/a3FoYKJro0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Sep 4 20:19:41 2025 GMT Not After : Sep 11 20:19:41 2025 GMT Subject: CN=68b9f45e-13ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:ee:e4:ef:53:88:b6:57:44:40:fe:41:98: 1f:66:23:87:22:b2:7c:ca:cc:12:06:9f:6f:42:76: 22:15:f2:d4:78:fe:3f:fc:64:bb:2a:2a:8d:e8:31: a6:8a:db:bf:19:c4:1f:60:b5:ae:20:c7:4c:0c:c9: 4f:d2:b8:a9:28:f4:4c:ac:89:0e:54:ca:ce:66:93: 8d:22:cb:32:07:5e:b9:bf:9e:86:eb:0f:0f:96:5f: 81:40:96:8e:16:d7:7f:30:ec:3b:3e:bd:cd:73:88: 41:10:81:b2:99:a5:88:9b:1d:ea:80:0a:da:46:28: 30:30:ca:1d:76:01:48:11:fb:74:ad:d2:ab:49:58: af:75:0b:53:f5:9e:a7:37:21:71:42:a8:16:4a:5b: 30:ed:a4:81:7c:4b:d6:72:58:16:de:3d:23:ec:59: 5a:87:f1:1f:bf:d7:79:16:10:65:07:25:44:5f:2b: b8:6b:a0:65:9c:a3:43:4e:3a:ed:fb:46:66:a5:04: 3f:5e:e2:65:cc:64:df:43:c0:e3:b6:43:ae:9c:d8: 55:e4:c6:55:af:6d:18:3d:28:54:e5:8a:54:32:11: 05:8b:3f:93:56:ea:e3:d6:37:4c:56:2b:d5:81:e6: d5:96:b8:4d:af:e9:ff:89:5f:83:8e:ee:a0:6b:ce: 5d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9F:5F:50:3E:29:B5:2A:B0:10:89:34:3B:82:86:D1:A9:97:3E:2E X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:f4:07:1f:c7:3a:f4:9c:25:d9:32:d3:17:34:ad:e0:60: f8:af:23:fd:1d:44:27:72:3a:11:4a:c2:25:30:8c:3a:e6:a4: df:16:ed:89:3a:d0:27:8e:5d:eb:f4:05:42:04:a9:12:24:62: 6d:9e:04:2c:96:dc:28:78:43:c6:ed:fc:3f:f1:dc:8a:4d:77: a5:e8:c1:6a:0d:2b:27:ed:d3:cb:cb:2d:b9:cb:fd:0e:9b:77: 57:ac:4f:b2:50:58:4d:95:50:c1:8c:95:1f:f1:a2:de:4d:b7: 99:e0:5d:22:75:87:82:67:8e:1b:7d:53:ec:a4:29:5e:b6:0d: 38:19:96:2e:15:24:00:63:72:f6:f5:f6:cd:92:7e:36:c0:a0: 8b:74:db:d6:e9:20:9d:f2:66:f9:a4:c7:c8:16:be:58:3c:20: 8a:6b:ca:d9:12:82:1c:34:58:ed:27:6f:41:25:b8:4e:36:a2: 1c:f3:ae:10:f2:15:ad:c6:25:b8:51:2b:2c:6a:7b:60:0d:b6: da:e4:50:c0:9e:f7:63:28:70:e6:34:b6:be:d8:d6:20:7b:ed: 4f:8e:1c:c4:f7:86:2f:67:58:c7:ab:5b:73:33:83:52:38:aa: 32:17:23:20:ff:5e:a8:60:6a:10:9e:dc:60:ec:cb:04:f0:6e: 48:92:14:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0MwRjExMC8GA1UEBRMoOEExMUVCNzY0QjE1Nzg1MzlENkVEM0IyOTAzQkY2MUY0 QzA4MDA3QzAeFw0yNTA5MDQyMDE5NDFaFw0yNTA5MTEyMDE5NDFaMBgxFjAUBgNV BAMTDTY4YjlmNDVlLTEzZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKOe7k71OItldEQP5BmB9mI4cisnzKzBIGn29CdiIV8tR4/j/8ZLsqKo3oMaaK 278ZxB9gta4gx0wMyU/SuKko9EysiQ5Uys5mk40iyzIHXrm/nobrDw+WX4FAlo4W 138w7Ds+vc1ziEEQgbKZpYibHeqACtpGKDAwyh12AUgR+3St0qtJWK91C1P1nqc3 IXFCqBZKWzDtpIF8S9ZyWBbePSPsWVqH8R+/13kWEGUHJURfK7hroGWco0NOOu37 RmalBD9e4mXMZN9DwOO2Q66c2FXkxlWvbRg9KFTlilQyEQWLP5NW6uPWN0xWK9WB 5tWWuE2v6f+JX4OO7qBrzl2tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpZ9fUD4p tSqwEIk0O4KG0amXPi4wHwYDVR0jBBgwFoAUihHrdksVeFOdbtOykDv2H0wIAHww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDQzBGLzQ5RTk5NkM0MkM2 MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFI dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWhIcmRrc1ZlRk9kYnRPeWtEdjJIMHdJQUh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD QzBGLzQ5RTk5NkM0MkM2MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZP ZGJ0T3lrRHYySDB3SUFIdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGT09Acfxzr0nCXZMtMXNK3gYPivI/0dRCdyOhFKwiUwjDrmpN8W7Yk6 0CeOXev0BUIEqRIkYm2eBCyW3Ch4Q8bt/D/x3IpNd6XowWoNKyft08vLLbnL/Q6b d1esT7JQWE2VUMGMlR/xot5Nt5ngXSJ1h4Jnjht9U+ykKV62DTgZli4VJABjcvb1 9s2SfjbAoIt029bpIJ3yZvmkx8gWvlg8IIprytkSghw0WO0nb0EluE42ohzzrhDy Fa3GJbhRKyxqe2ANttrkUMCe92MocOY0tr7Y1iB77U+OHMT3hi9nWMerW3Mzg1I4 qjIXIyD/XqhgahCe3GDsywTwbkiSFOo= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:59 2025 by rpki-client