$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: PQHdT8PgUzq12YUJyNz+hPIoMod/JUuXOm3636O1fY4= Subject key identifier: FB:5D:BD:98:63:50:2D:2A:3E:6C:06:3C:C4:08:72:0C:5A:05:C8:EF Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 34FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 34D2 Signing time: Thu 04 Sep 2025 14:19:54 +0000 Manifest this update: Thu 04 Sep 2025 14:19:53 +0000 Manifest next update: Thu 11 Sep 2025 14:19:53 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: HUEQHSa5Mut8ummHTdQvOf3kxPjzYRCqMEE6XQRFk6I=) 2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: T96snG6T3ksqfKF7mowlYs05xmmtsddFbccqyfqSTxQ=) 3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: aiAqLVoZ6cEM6hY/DjBukcfxFi5I+NxU4FFn5k2CPUQ=) 4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: XONO8AScATR8p+dgN33QWapfnhUPZs7VGzeHh0uX4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13564 (0x34fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: Sep 4 14:19:53 2025 GMT Not After : Sep 11 14:19:53 2025 GMT Subject: CN=68b9a00a-37a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:71:15:31:7b:69:d3:5d:a6:d6:67:1a:ba: a4:de:19:e8:9f:e5:13:b8:39:fd:ab:85:bf:6a:87: 1b:b7:69:75:e9:95:03:7c:0c:42:bd:e1:cd:c8:dd: 0e:1c:60:74:e1:f4:18:5a:5d:90:18:7a:d4:5a:aa: f9:9d:03:f5:39:b4:35:1b:c5:c4:2e:78:c9:68:98: ff:72:65:f0:f6:20:03:05:d9:d9:01:1e:52:cd:5a: 05:7b:7f:7d:43:1a:82:b5:b6:a2:4e:54:1d:75:28: aa:63:c4:d6:dc:f7:71:72:94:a1:30:88:2a:6f:24: b0:c0:a0:79:b5:54:ab:5f:bd:08:98:e1:7e:d0:8f: 18:8e:08:c9:70:6a:8a:31:e3:9f:ff:07:46:70:61: 37:02:e2:b3:c0:c5:5e:8b:fe:92:1d:57:97:22:6b: ed:b6:46:e6:f6:ff:bc:4a:06:9f:4c:dd:96:a2:0e: 18:dc:0f:53:da:e6:bf:c4:0c:7f:e4:f2:44:f6:93: e4:0b:a9:6a:22:eb:ff:54:50:ee:d3:79:22:b1:60: 79:40:55:b3:c4:1f:ed:85:48:85:2c:d3:cf:76:e7: 16:a9:cb:a5:ee:0e:b8:78:dc:7b:de:0b:ff:91:80: 04:1d:14:26:1b:15:b5:a9:ed:e5:1e:e1:05:91:4a: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5D:BD:98:63:50:2D:2A:3E:6C:06:3C:C4:08:72:0C:5A:05:C8:EF X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:df:9e:fc:ce:9d:c0:27:d5:4f:ff:70:65:eb:f7:29:91:61: c6:5b:bc:71:bc:ef:f0:bb:35:1c:6c:b9:4b:01:af:63:59:a9: 95:ed:55:25:d1:5a:16:fc:76:4e:9e:bb:f3:53:bd:b5:4b:7a: d9:34:95:b0:53:53:5a:74:e8:5e:8c:57:ab:d2:f1:e2:af:c1: c9:8b:81:81:95:a3:4c:63:63:5e:07:41:b4:1d:0c:d8:b2:7d: 85:89:de:26:75:9b:5f:a7:54:29:5d:16:92:57:68:62:4f:4e: 3f:93:e1:30:7b:83:5d:79:cf:fa:81:ed:b3:ee:a9:08:06:81: 36:f5:ae:5d:af:d7:1f:bd:af:bf:c1:05:27:e3:e7:ac:9b:3b: a7:96:27:8b:3f:e9:2f:a7:78:7a:19:3e:ca:57:98:b4:bd:11: 14:da:6c:cc:f7:18:8e:e3:a9:9c:4f:35:9d:a6:64:2d:5f:6b: ea:f6:fa:3f:f0:e4:83:53:61:a6:d5:5b:f5:20:32:e6:2d:bf: 3e:51:41:58:58:b8:74:71:2c:34:07:e4:f5:78:47:cd:0b:21: 40:7c:e2:28:ed:33:1f:31:bb:02:9c:2b:c2:f0:6a:d9:f6:e9: c6:be:d0:39:f8:40:3b:38:1a:f9:e4:dd:cb:58:b6:a4:8c:30: 2a:56:aa:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjUwOTA0MTQxOTUzWhcNMjUwOTExMTQxOTUzWjAYMRYwFAYD VQQDEw02OGI5YTAwYS0zN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv75xFTF7adNdptZnGrqk3hnon+UTuDn9q4W/aocbt2l16ZUDfAxCveHNyN0O HGB04fQYWl2QGHrUWqr5nQP1ObQ1G8XELnjJaJj/cmXw9iADBdnZAR5SzVoFe399 QxqCtbaiTlQddSiqY8TW3PdxcpShMIgqbySwwKB5tVSrX70ImOF+0I8YjgjJcGqK MeOf/wdGcGE3AuKzwMVei/6SHVeXImvttkbm9v+8SgafTN2Wog4Y3A9T2ua/xAx/ 5PJE9pPkC6lqIuv/VFDu03kisWB5QFWzxB/thUiFLNPPducWqcul7g64eNx73gv/ kYAEHRQmGxW1qe3lHuEFkUob4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtdvZhj UC0qPmwGPMQIcgxaBcjvMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB3578zp3AJ9VP/3Bl6/cpkWHGW7xxvO/wuzUcbLlLAa9jWamV7VUl 0VoW/HZOnrvzU721S3rZNJWwU1NadOhejFer0vHir8HJi4GBlaNMY2NeB0G0HQzY sn2Fid4mdZtfp1QpXRaSV2hiT04/k+Ewe4Ndec/6ge2z7qkIBoE29a5dr9cfva+/ wQUn4+esmzunlieLP+kvp3h6GT7KV5i0vREU2mzM9xiO46mcTzWdpmQtX2vq9vo/ 8OSDU2Gm1Vv1IDLmLb8+UUFYWLh0cSw0B+T1eEfNCyFAfOIo7TMfMbsCnCvC8GrZ 9unGvtA5+EA7OBr55N3LWLakjDAqVqrT -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:10 2025 by rpki-client