$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft File: ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json) Hash identifier: K1kvnZc7EobKO0wI+WiiQc/Bd1tFeqT4vdukkkoW0ss= Subject key identifier: 8C:34:F7:95:F6:D5:4D:9C:F5:BD:96:5C:39:37:4C:0A:A5:53:F9:FD Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft Manifest number: 9F Signing time: Fri 05 Sep 2025 06:45:57 +0000 Manifest this update: Fri 05 Sep 2025 06:45:57 +0000 Manifest next update: Fri 12 Sep 2025 06:45:57 +0000 Files and hashes: 1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: Yr4+lxjboe3Z4enB8fBzSthHP4kLOQsBAfxGRPhiKqw=) 2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Validity Not Before: Sep 5 06:45:57 2025 GMT Not After : Sep 12 06:45:57 2025 GMT Subject: CN=68ba8725-8f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f6:10:e5:3d:11:0b:6e:41:20:14:70:94:fd: 6f:9c:7d:29:a0:a5:10:df:35:c1:34:59:86:b4:b9: 45:20:ca:44:e6:c8:54:d2:73:28:54:de:7b:07:96: 2d:be:fc:e2:5d:18:0f:31:97:cb:2d:83:9e:b0:d3: 76:34:6f:d9:84:6e:95:93:2a:c1:67:8b:c9:76:9b: 3b:73:24:d1:c7:de:e2:bf:d5:3a:07:19:cf:62:a0: c4:9b:5a:a5:56:ec:13:63:4f:90:e8:d0:39:48:0a: 4f:19:36:f9:49:cb:f2:61:7a:91:92:0a:c0:02:c3: 90:8d:af:47:24:08:a6:4a:99:27:7a:84:d7:fd:35: 13:7f:64:d4:29:da:47:d6:9a:ad:b0:f2:f8:5d:fb: e2:ca:3f:ff:4a:cd:cf:ba:85:a7:0d:65:70:0e:80: b2:18:fa:a9:6d:dc:e4:2f:62:07:ca:2a:f6:de:2a: a9:20:e6:01:ad:9a:79:75:63:13:f2:33:72:62:30: 16:f2:1c:81:b9:52:16:04:f3:df:79:e2:5c:bc:39: be:a7:c2:10:15:f5:84:5c:ea:43:36:95:de:62:b2: ee:1c:ab:01:7a:82:be:1f:ab:3d:bd:9b:d3:c6:5e: d0:42:b7:18:87:ff:e1:b1:66:ce:86:d7:b0:90:03: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:34:F7:95:F6:D5:4D:9C:F5:BD:96:5C:39:37:4C:0A:A5:53:F9:FD X509v3 Authority Key Identifier: keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:45:a7:24:8c:b7:2e:4a:d6:cf:57:b4:af:6a:96:d9:23:bd: 6a:e7:92:79:ab:61:1d:1d:ad:45:51:a1:27:95:b6:3c:27:25: 3b:1e:c0:3d:ee:11:87:42:bb:f0:83:0e:96:9d:82:64:d7:b7: 38:f1:a6:f7:8e:42:c0:9c:31:5c:65:fe:97:8b:82:10:6c:fc: a7:62:4f:e6:50:ca:cd:42:a4:ca:27:ad:d3:d5:21:76:6e:27: db:e9:6c:a4:10:50:9d:7f:b2:dc:04:4c:48:74:d1:35:48:54: 40:c3:83:f5:35:7c:49:46:f1:e1:ca:d8:ba:36:6b:67:af:a7: 4a:a3:32:4b:ea:60:8a:5f:5d:66:85:c2:22:98:fd:c2:e0:19: 56:4f:e5:67:03:09:f5:52:5e:84:db:14:30:42:99:4f:08:f1: 12:1e:00:da:a2:2e:e7:cc:8e:34:1a:cf:d6:0c:1c:57:39:c3: 2d:6d:45:e6:47:0d:b1:57:92:30:6b:27:40:9d:2e:19:94:fb: 46:b9:03:c2:46:9e:91:7e:f9:14:71:95:e0:e0:62:19:4b:8f: 51:ce:46:d0:81:73:6c:e7:66:f3:1d:54:6f:e3:bf:2d:b2:6b: 62:e8:62:6e:f1:88:e3:da:8a:b9:45:f8:06:75:e3:7a:e2:31: 3e:45:36:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKDhCMTU0NDBBRTIyNkM5OTBGQzlFNTU5MTVGRThDOTUw OUJDQjY2NzYwHhcNMjUwOTA1MDY0NTU3WhcNMjUwOTEyMDY0NTU3WjAYMRYwFAYD VQQDEw02OGJhODcyNS04ZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+fYQ5T0RC25BIBRwlP1vnH0poKUQ3zXBNFmGtLlFIMpE5shU0nMoVN57B5Yt vvziXRgPMZfLLYOesNN2NG/ZhG6VkyrBZ4vJdps7cyTRx97iv9U6BxnPYqDEm1ql VuwTY0+Q6NA5SApPGTb5ScvyYXqRkgrAAsOQja9HJAimSpkneoTX/TUTf2TUKdpH 1pqtsPL4Xfviyj//Ss3PuoWnDWVwDoCyGPqpbdzkL2IHyir23iqpIOYBrZp5dWMT 8jNyYjAW8hyBuVIWBPPfeeJcvDm+p8IQFfWEXOpDNpXeYrLuHKsBeoK+H6s9vZvT xl7QQrcYh//hsWbOhtewkAMJOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw095X2 1U2c9b2WXDk3TAqlU/n9MB8GA1UdIwQYMBaAFIsVRAriJsmQ/J5VkV/oyVCby2Z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9ENDM3MTExMjlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXlaRDhubFdSWC1qSlVKdkxa blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9ENDM3MTExMjlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXla RDhubFdSWC1qSlVKdkxablkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaRackjLcuStbPV7SvapbZI71q55J5q2EdHa1FUaEnlbY8JyU7HsA9 7hGHQrvwgw6WnYJk17c48ab3jkLAnDFcZf6Xi4IQbPynYk/mUMrNQqTKJ63T1SF2 bifb6WykEFCdf7LcBExIdNE1SFRAw4P1NXxJRvHhyti6Nmtnr6dKozJL6mCKX11m hcIimP3C4BlWT+VnAwn1Ul6E2xQwQplPCPESHgDaoi7nzI40Gs/WDBxXOcMtbUXm Rw2xV5IwaydAnS4ZlPtGuQPCRp6RfvkUcZXg4GIZS49RzkbQgXNs52bzHVRv478t smti6GJu8Yjj2oq5RfgGdeN64jE+RTaM -----END CERTIFICATE-----Generated at Sat Sep 6 21:30:34 2025 by rpki-client