$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft File: ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json) Hash identifier: 4oOhATtzZ72trRXA+mhaz4DETOQvlKa0V1UGmfiRjGg= Subject key identifier: 38:81:3E:6E:EA:90:15:CC:45:51:E8:A7:8C:46:89:46:D7:07:DF:ED Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B Certificate issuer: /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft Manifest number: 018F Signing time: Sat 23 Aug 2025 03:37:02 +0000 Manifest this update: Sat 23 Aug 2025 03:37:02 +0000 Manifest next update: Sat 30 Aug 2025 03:37:02 +0000 Files and hashes: 1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: dzRZz/rQKFYKxWGXhp2g/q8Gi0K7QAtQsQrmpXSIjHA=) 2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: tPpYtoObLW6IaU9Qrnag/tKS5hGwADSPolXixr4yblo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Validity Not Before: Aug 23 03:37:02 2025 GMT Not After : Aug 30 03:37:02 2025 GMT Subject: CN=68a9375e-2f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:e2:8a:ae:1b:52:f2:e9:c3:47:3f:c7:c2: a5:6a:cc:99:64:52:92:50:99:63:cd:98:e5:ff:6a: 70:51:d4:43:11:a7:e4:4f:52:a1:32:97:0c:49:24: 12:1a:ac:ca:a0:35:cf:79:65:e0:60:66:b6:bb:7d: ba:a7:80:d3:2c:d9:8f:80:70:22:5a:7b:14:b8:33: e6:94:4b:df:f5:f6:fa:26:8b:c9:c8:aa:95:25:d8: d4:02:a8:1f:0e:e0:b2:3a:73:0d:9e:f0:a9:f6:5a: 30:0f:b5:2c:b6:fa:10:27:3f:38:2c:e1:5a:1e:10: cd:8e:1a:d9:19:a5:44:1c:4a:5b:4d:cb:dd:f7:9c: 4b:1e:a6:18:34:a0:46:43:76:26:b9:b9:20:a4:b4: b0:9d:69:71:97:f2:cd:7e:d2:38:3c:77:e5:1b:03: dd:4a:06:f1:85:9e:46:d6:df:80:d6:66:fc:17:77: 6d:06:cc:7a:49:9a:36:52:3f:08:e5:c7:de:e7:dc: 53:79:08:40:d6:84:41:b0:bf:04:90:5a:48:05:3e: 7b:86:11:53:75:85:e0:cc:bd:43:de:e6:b2:5e:23: 5d:3c:cd:2c:61:55:10:47:3e:f8:76:00:61:27:6f: 46:f0:54:1b:84:c5:46:df:93:ce:70:26:26:e9:38: a8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:81:3E:6E:EA:90:15:CC:45:51:E8:A7:8C:46:89:46:D7:07:DF:ED X509v3 Authority Key Identifier: keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2b:42:16:d5:32:81:63:aa:06:95:58:95:b9:52:24:7f:91: 7a:64:86:be:5e:bd:19:95:6f:b0:3d:cf:e9:d7:70:63:f8:46: 7c:d9:d3:b4:a5:d9:27:94:a7:da:1a:cf:a7:8c:55:55:f1:e5: 96:ba:57:80:23:7d:f0:99:2d:bf:dd:fb:e6:8f:f4:f6:e3:2d: 5c:17:02:66:e7:28:07:6f:c3:a2:dc:aa:03:5a:a9:a6:18:1d: 66:e6:44:3f:59:e3:13:bd:b3:c3:cf:a6:fc:80:42:0b:15:13: 4c:01:18:ed:ab:fc:80:87:3e:bc:9e:a5:cd:db:2d:43:69:f8: c3:cb:8a:76:82:08:db:f1:0a:3a:83:07:e0:7c:a4:ea:c7:89: 09:bf:12:04:20:51:85:6a:cd:f2:2e:01:75:d5:57:88:38:2e: ed:76:e3:db:e1:a9:a0:3b:60:b6:9e:d5:da:eb:c8:11:8c:0b: aa:7b:56:d0:f0:45:2d:9b:1f:af:ce:8c:8f:43:b2:a8:ed:48: 3e:18:70:ad:b2:fc:90:07:7e:ac:64:fa:89:47:2f:6b:72:6e: 11:cf:de:a2:23:18:66:bd:6b:01:ab:d0:87:c7:87:85:7f:45: 69:d1:49:62:19:4a:7b:98:a7:9a:96:74:6a:ca:08:1a:07:1b: 7c:f3:c8:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNzYxMTAvBgNVBAUTKDhBNTgxNjU1QzkyMkE3QTUxMjFFMDBGQjdBNDI3RTAx OUFDNzMwN0IwHhcNMjUwODIzMDMzNzAyWhcNMjUwODMwMDMzNzAyWjAYMRYwFAYD VQQDEw02OGE5Mzc1ZS0yZjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9ziiq4bUvLpw0c/x8KlasyZZFKSUJljzZjl/2pwUdRDEafkT1KhMpcMSSQS GqzKoDXPeWXgYGa2u326p4DTLNmPgHAiWnsUuDPmlEvf9fb6JovJyKqVJdjUAqgf DuCyOnMNnvCp9lowD7UstvoQJz84LOFaHhDNjhrZGaVEHEpbTcvd95xLHqYYNKBG Q3YmubkgpLSwnWlxl/LNftI4PHflGwPdSgbxhZ5G1t+A1mb8F3dtBsx6SZo2Uj8I 5cfe59xTeQhA1oRBsL8EkFpIBT57hhFTdYXgzL1D3uayXiNdPM0sYVUQRz74dgBh J29G8FQbhMVG35POcCYm6Tio/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiBPm7q kBXMRVHop4xGiUbXB9/tMB8GA1UdIwQYMBaAFIpYFlXJIqelEh4A+3pCfgGaxzB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM3Ni9BMzU3RDc5NjIw OEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2VVNIZ0Q3ZWtKLUFackhN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lsZ1dWY2tpcDZVU0hnRDdla0otQVpySE1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM3Ni9BMzU3RDc5NjIwOEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2 VVNIZ0Q3ZWtKLUFackhNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALK0IW1TKBY6oGlViVuVIkf5F6ZIa+Xr0ZlW+wPc/p13Bj+EZ82dO0 pdknlKfaGs+njFVV8eWWuleAI33wmS2/3fvmj/T24y1cFwJm5ygHb8Oi3KoDWqmm GB1m5kQ/WeMTvbPDz6b8gEILFRNMARjtq/yAhz68nqXN2y1DafjDy4p2ggjb8Qo6 gwfgfKTqx4kJvxIEIFGFas3yLgF11VeIOC7tduPb4amgO2C2ntXa68gRjAuqe1bQ 8EUtmx+vzoyPQ7Ko7Ug+GHCtsvyQB36sZPqJRy9rcm4Rz96iIxhmvWsBq9CHx4eF f0Vp0UliGUp7mKealnRqyggaBxt888jP -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:57 2025 by rpki-client