$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: F8MDjk/OqgP9l7TKQJFBj4D//WhzTKNOuTi+lpev6ss= Subject key identifier: 8F:23:E8:EA:37:99:70:AC:9B:36:DB:F6:60:92:33:72:2F:5F:D9:2C Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 135D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 12FF Signing time: Tue 02 Sep 2025 17:16:02 +0000 Manifest this update: Tue 02 Sep 2025 17:16:01 +0000 Manifest next update: Tue 09 Sep 2025 17:16:01 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: PVxJbv5xw3T9HcXUsQsNNe6Km1ESyN9vsSvzMg/kcPY=) 2: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: 7cgMEZO8tN+1Cmn/CZonBr3at8tPmq+bBhIi3Hlmo8w=) 3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: Wnr6Nu+wn4KpT3jxG77VWtuMf2NiqHg0vBMGp2AER8s=) 4: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: nCv8KSq1x9Ijvp8OSX/9bUAYQko+S3mPDE0oXqFbbRA=) 5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: Yr7221/AjrFVZuk28SsMWsCKf7jgwJUz8UL6k6tO024=) 6: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: 5H1pM+kreN4Oi8C8HZm8e4S8ShHr8LgmiJJ+cKgYRHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4957 (0x135d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Sep 2 17:16:01 2025 GMT Not After : Sep 9 17:16:01 2025 GMT Subject: CN=68b72651-6c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:98:f8:96:c1:f3:36:2d:5f:1d:58:8a:6d:41: 67:f7:ec:e3:b6:20:fc:72:3b:2b:54:d6:9a:4e:be: 0b:68:db:4f:91:ba:f7:b2:8a:f7:8f:05:89:c0:ed: c1:66:b5:0d:14:e4:74:4c:fd:09:73:bd:34:1a:63: 4d:47:51:72:f0:05:5b:ca:01:c0:3f:5a:ea:ec:14: 77:e2:10:49:fe:67:dc:29:88:33:c2:ff:9f:17:ee: da:89:31:81:40:48:5e:4b:7f:04:c8:5e:e2:18:a4: c1:f1:04:7f:af:f9:3b:ce:2b:41:5d:79:97:a0:79: 82:31:60:31:68:f8:36:ce:86:fe:2f:64:4f:51:e7: fa:7e:c3:7c:1e:15:c0:54:4d:17:54:86:f6:37:2f: 8c:dd:33:cb:7b:e5:dd:07:00:01:35:66:86:16:0d: 5b:d5:93:f3:d9:78:4c:ee:5c:90:a7:0a:7d:71:7b: 48:7e:9b:7d:cd:c7:d3:74:06:31:bd:fe:b7:4e:d7: 0d:fb:98:6f:53:3a:6b:fa:1b:bc:82:7f:f0:db:7f: b6:d5:6c:fb:81:14:24:90:c4:5e:7b:34:de:07:2d: 1e:21:11:00:64:a4:5e:53:44:46:d7:91:95:68:0f: 29:9b:03:ea:a3:87:53:11:e2:85:3c:76:e8:74:7d: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:23:E8:EA:37:99:70:AC:9B:36:DB:F6:60:92:33:72:2F:5F:D9:2C X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:21:03:eb:bb:5e:aa:46:74:3b:6d:29:3c:07:7b:45:60:93: c2:67:75:43:4c:e2:58:40:40:68:e2:14:cc:7d:34:d7:61:f9: a0:62:41:06:24:94:f5:6a:aa:85:30:6b:fe:d4:82:b9:c8:2a: 76:1b:7e:6d:58:e3:b1:ac:0b:e8:3d:83:2f:fb:6c:bb:68:2a: bc:cb:6a:45:74:08:e6:98:d5:b7:b9:c1:de:05:74:a2:5c:1d: 5d:d8:20:e6:52:17:27:57:ca:59:12:2f:50:3f:ff:91:cd:aa: d7:e1:34:4f:38:4d:4e:0f:ad:3d:04:39:f8:fd:44:3d:d4:9c: 52:74:13:b2:a1:95:27:69:6f:5f:30:f6:dd:e0:f0:b5:37:47: cc:28:0c:ef:db:8b:ca:dd:b7:67:50:23:fc:2f:c9:23:4f:a9: cd:e9:ee:c4:5c:e9:71:2a:02:b5:3b:bf:c4:c6:a6:ef:a6:0f: 72:e8:58:c6:89:6f:70:c9:e1:98:5a:9c:cd:7c:af:64:fb:53: e5:12:53:d5:c5:d4:54:4e:f5:11:ef:4f:8f:8a:71:4d:f2:e8: 05:4d:77:8e:fb:02:6d:0b:79:44:7f:fd:c9:ed:88:51:27:e5: 3d:8b:cf:be:e0:50:c6:b3:3c:b9:0f:0d:8b:85:35:da:21:0e: d7:8d:40:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUwOTAyMTcxNjAxWhcNMjUwOTA5MTcxNjAxWjAYMRYwFAYD VQQDEw02OGI3MjY1MS02YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Zj4lsHzNi1fHViKbUFn9+zjtiD8cjsrVNaaTr4LaNtPkbr3sor3jwWJwO3B ZrUNFOR0TP0Jc700GmNNR1Fy8AVbygHAP1rq7BR34hBJ/mfcKYgzwv+fF+7aiTGB QEheS38EyF7iGKTB8QR/r/k7zitBXXmXoHmCMWAxaPg2zob+L2RPUef6fsN8HhXA VE0XVIb2Ny+M3TPLe+XdBwABNWaGFg1b1ZPz2XhM7lyQpwp9cXtIfpt9zcfTdAYx vf63TtcN+5hvUzpr+hu8gn/w23+21Wz7gRQkkMReezTeBy0eIREAZKReU0RG15GV aA8pmwPqo4dTEeKFPHbodH0wiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8j6Oo3 mXCsmzbb9mCSM3IvX9ksMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbIQPru16qRnQ7bSk8B3tFYJPCZ3VDTOJYQEBo4hTMfTTXYfmgYkEG JJT1aqqFMGv+1IK5yCp2G35tWOOxrAvoPYMv+2y7aCq8y2pFdAjmmNW3ucHeBXSi XB1d2CDmUhcnV8pZEi9QP/+RzarX4TRPOE1OD609BDn4/UQ91JxSdBOyoZUnaW9f MPbd4PC1N0fMKAzv24vK3bdnUCP8L8kjT6nN6e7EXOlxKgK1O7/Exqbvpg9y6FjG iW9wyeGYWpzNfK9k+1PlElPVxdRUTvUR70+PinFN8ugFTXeO+wJtC3lEf/3J7YhR J+U9i8++4FDGszy5Dw2LhTXaIQ7XjUC2 -----END CERTIFICATE-----Generated at Thu Sep 4 14:01:35 2025 by rpki-client