$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: PZOBpDWOshR0WiMkdO+fB1bnMd7dGobXDj1f/bcfAbo= Subject key identifier: 52:19:19:86:8A:35:BC:C6:31:DE:95:8D:65:BE:1E:BE:D1:89:3D:E6 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: 1E Signing time: Tue 02 Sep 2025 23:02:52 +0000 Manifest this update: Tue 02 Sep 2025 23:02:51 +0000 Manifest next update: Tue 09 Sep 2025 23:02:51 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: OT7nb6ZI5WpZdov74WMRHz91/dS7cqDpQT3ctuk+wBQ=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: tRrklyhCDRycwJaKFRwEZyyD1E5up+J5TjkxJCAvISc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Sep 2 23:02:51 2025 GMT Not After : Sep 9 23:02:51 2025 GMT Subject: CN=68b7779c-8907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:31:e1:15:92:65:4f:fd:4e:f9:88:c6:7c: ad:3f:bf:b5:40:7b:e2:7e:a6:d1:51:71:fb:53:e5: 94:57:2a:b1:74:b7:64:d4:52:2d:22:cf:20:f1:ba: 41:32:d5:ff:96:22:e7:74:9f:a3:01:f4:21:d7:d6: 27:db:82:c4:08:fd:84:26:68:80:a3:3a:ad:fb:dc: 3d:31:96:12:c5:b3:58:9c:b2:9a:bd:11:d5:60:eb: 81:43:b0:f1:9c:53:3d:76:33:f4:80:0f:98:85:34: 88:6a:18:97:af:17:ca:49:56:47:95:bc:c2:55:58: 85:f8:62:01:5f:13:01:89:03:cb:74:0f:01:c2:c8: 14:81:44:4e:90:51:15:b7:d8:6f:90:9b:26:a6:5d: 37:55:b3:24:94:ad:98:dd:7c:2f:90:4e:de:db:20: 9a:f1:f1:18:8e:68:3a:3e:47:b1:d2:fa:48:31:38: 5d:49:e6:59:02:0d:f0:ef:a2:47:4e:4e:01:09:ec: e2:59:14:44:c6:eb:a8:f4:56:9d:5b:34:e1:b7:86: 6c:1e:02:c7:ea:1b:bc:6d:8c:5d:a8:3a:13:f7:8b: 13:4e:a9:9a:1e:fc:31:db:10:19:4c:5f:70:f6:03: 10:d8:a9:51:af:7d:28:12:59:44:2c:d1:7f:52:60: 12:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:19:19:86:8A:35:BC:C6:31:DE:95:8D:65:BE:1E:BE:D1:89:3D:E6 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0d:30:6b:c1:65:2f:07:34:a4:6d:09:41:b7:25:f3:d5:84: 9a:30:a4:a1:bc:ac:f7:25:4b:dd:fb:fb:ef:aa:c6:e3:7f:7c: 5e:a0:b9:73:b1:5c:a5:bd:09:92:68:d1:d6:01:01:7b:fb:8b: f6:a3:de:82:44:58:9f:b5:c2:67:87:2b:f4:20:6d:e1:22:32: 6d:d4:d1:ae:3c:a8:84:f7:a3:4c:a0:5c:af:ba:62:3b:de:30: dc:57:8a:1e:07:e6:9e:92:73:ab:bf:45:5a:f4:76:e9:41:cd: 4e:ca:7b:ef:cc:f0:ad:1f:0c:ac:9d:81:b3:f8:d5:5c:30:71: 9e:21:ab:06:e6:c5:7d:89:92:8f:32:b1:e7:94:0b:ff:cc:77: 84:cf:c9:5f:e8:24:28:d4:36:65:b0:99:c7:04:35:51:e3:aa: 69:e6:50:bf:93:fc:40:7c:fd:1d:dc:32:7f:3e:d6:1c:27:c8: 40:8f:1d:ca:41:53:45:d0:7a:fe:d4:df:53:7a:d8:bb:b9:9a: 8c:81:18:92:42:fd:4a:b5:ac:ed:74:60:5e:91:54:2d:8a:9c: 1d:59:72:bc:af:2d:6f:6b:c8:14:22:60:56:0d:90:c0:59:7d: 07:4e:fe:b6:b9:26:a5:c7:f5:3b:62:c3:e0:0f:7e:7f:4d:a7: f6:14:a4:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEQwMDExMC8GA1UEBRMoMjE0MjkzM0ZCRTZFN0M1RkI3NjdBODZBNUUyMURENjAx NzhFQTM5RDAeFw0yNTA5MDIyMzAyNTFaFw0yNTA5MDkyMzAyNTFaMBgxFjAUBgNV BAMTDTY4Yjc3NzljLTg5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+hTHhFZJlT/1O+YjGfK0/v7VAe+J+ptFRcftT5ZRXKrF0t2TUUi0izyDxukEy 1f+WIud0n6MB9CHX1ifbgsQI/YQmaICjOq373D0xlhLFs1icspq9EdVg64FDsPGc Uz12M/SAD5iFNIhqGJevF8pJVkeVvMJVWIX4YgFfEwGJA8t0DwHCyBSBRE6QURW3 2G+QmyamXTdVsySUrZjdfC+QTt7bIJrx8RiOaDo+R7HS+kgxOF1J5lkCDfDvokdO TgEJ7OJZFETG66j0Vp1bNOG3hmweAsfqG7xtjF2oOhP3ixNOqZoe/DHbEBlMX3D2 AxDYqVGvfSgSWUQs0X9SYBJdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUhkZhoo1 vMYx3pWNZb4evtGJPeYwHwYDVR0jBBgwFoAUIUKTP75ufF+3Z6hqXiHdYBeOo50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RDAwL0YxQUYxMDUyNjFE RjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVVLVFA3NXVmRi0zWjZocVhpSGRZQmVPbzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RDAwL0YxQUYxMDUyNjFERjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYt M1o2aHFYaUhkWUJlT281MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEoNMGvBZS8HNKRtCUG3JfPVhJowpKG8rPclS937+++qxuN/fF6guXOx XKW9CZJo0dYBAXv7i/aj3oJEWJ+1wmeHK/QgbeEiMm3U0a48qIT3o0ygXK+6Yjve MNxXih4H5p6Sc6u/RVr0dulBzU7Ke+/M8K0fDKydgbP41VwwcZ4hqwbmxX2Jko8y seeUC//Md4TPyV/oJCjUNmWwmccENVHjqmnmUL+T/EB8/R3cMn8+1hwnyECPHcpB U0XQev7U31N62Lu5moyBGJJC/Uq1rO10YF6RVC2KnB1ZcryvLW9ryBQiYFYNkMBZ fQdO/ra5JqXH9Ttiw+APfn9Np/YUpDY= -----END CERTIFICATE-----Generated at Thu Sep 4 14:06:17 2025 by rpki-client