$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: OsdAxkUklt8Xczc0NhYd6brU2BYCrgObhOcqgXOgsEE= Subject key identifier: 53:22:A1:2C:4B:96:C0:40:3C:35:38:98:25:15:47:74:98:9D:18:FC Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 04D6 Signing time: Wed 20 Aug 2025 23:54:52 +0000 Manifest this update: Wed 20 Aug 2025 23:54:51 +0000 Manifest next update: Wed 27 Aug 2025 23:54:51 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: bMetjVnONIUnAeMyooBnehHWbkgSTXI91Ua/7cX31LE=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: CU8ZA4/4TdlPTUdktMFTY7GCuwd/QCyrxC7+CMDATDo=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: yUQWHT36J9pLE1kpKGBgRzyjB4VNhd4/HCHR7qeOtAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Aug 20 23:54:51 2025 GMT Not After : Aug 27 23:54:51 2025 GMT Subject: CN=68a6604b-3cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:73:d7:73:3e:42:bc:bc:e4:c5:80:5d:09:18: 07:1f:ed:1c:69:4d:4e:27:f5:38:83:00:c7:b0:53: 85:fe:f5:33:80:0b:8b:9d:4e:d7:38:b8:f3:47:bb: a8:e5:02:16:09:c9:4a:a3:06:0d:db:58:5c:e1:d7: b0:93:fb:05:d8:93:83:f7:fe:49:ee:1f:e7:91:c3: 54:7d:11:bc:da:02:8d:0b:65:7b:db:c4:9f:8e:c6: 5e:8f:73:a0:a0:c6:98:28:ca:a9:8e:66:67:76:90: 39:b1:9d:03:4e:bc:55:de:f1:39:a2:50:ee:7a:ad: 9d:dd:e0:28:76:a9:46:d6:82:da:77:a7:d7:75:58: d6:27:f9:dc:db:8e:03:3d:63:8f:d7:68:40:f9:2b: fc:c6:84:12:77:30:6c:2f:2f:a4:84:d1:c6:0f:d6: 33:7d:2d:25:77:ee:a7:da:c0:a0:6b:ef:74:ba:9b: 8c:65:2b:61:3d:4d:2b:7a:30:6b:71:21:88:97:76: 6c:98:ab:68:b7:14:56:9c:cc:55:fb:08:97:2a:df: e9:91:84:d7:e3:6a:25:73:4e:f7:17:e5:61:59:23: 26:eb:eb:1f:2d:ee:39:7e:b7:e3:ab:1a:ad:3d:ad: 01:1f:31:fd:36:c9:5c:36:f4:cd:0d:1e:d6:0d:12: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:22:A1:2C:4B:96:C0:40:3C:35:38:98:25:15:47:74:98:9D:18:FC X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:64:ff:b8:e6:08:9d:6f:04:33:3a:86:15:3c:a2:7a:be:30: 59:fc:1e:62:72:10:0e:1a:c7:d4:12:e8:b9:dc:85:bc:37:30: c7:1a:f4:4e:70:ee:6f:b2:a9:1c:6c:58:98:51:0f:bf:a2:af: 69:a9:1f:c0:0c:1d:0d:97:38:c0:71:04:40:33:5d:c2:b2:01: 51:e4:fe:2d:61:80:d3:b3:bd:92:33:d9:11:04:69:b6:7f:61: f9:55:3e:01:11:4a:51:4b:51:27:f3:bc:a0:bf:4b:8e:a2:72: 9b:4d:ed:11:17:04:a3:24:fb:dd:2e:fa:22:96:d4:0c:39:c8: fb:41:8c:0a:62:a9:a0:ea:51:52:e2:c1:55:f0:79:c3:ad:45: 9d:40:66:2c:56:d3:ef:f0:9d:44:36:7d:a6:26:89:03:74:3d: a0:29:1a:09:69:50:31:31:b8:92:9a:ec:85:01:b7:f0:9e:dc: 2d:4e:9d:8c:cf:2e:42:c8:9a:67:9d:6a:29:65:5a:a4:e0:ca: a0:8f:be:52:3f:ab:7c:5a:ba:93:30:4c:12:e2:e7:2b:61:c1: 27:de:c3:c6:59:c7:11:dd:e7:10:e5:0b:0e:72:72:e4:fc:ca: 58:bb:bf:b4:65:3c:ca:13:fe:e0:ed:ad:5e:5a:a7:e3:b1:98: 3b:38:17:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjUwODIwMjM1NDUxWhcNMjUwODI3MjM1NDUxWjAYMRYwFAYD VQQDEw02OGE2NjA0Yi0zY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nPXcz5CvLzkxYBdCRgHH+0caU1OJ/U4gwDHsFOF/vUzgAuLnU7XOLjzR7uo 5QIWCclKowYN21hc4dewk/sF2JOD9/5J7h/nkcNUfRG82gKNC2V728SfjsZej3Og oMaYKMqpjmZndpA5sZ0DTrxV3vE5olDueq2d3eAodqlG1oLad6fXdVjWJ/nc244D PWOP12hA+Sv8xoQSdzBsLy+khNHGD9YzfS0ld+6n2sCga+90upuMZSthPU0rejBr cSGIl3ZsmKtotxRWnMxV+wiXKt/pkYTX42olc073F+VhWSMm6+sfLe45frfjqxqt Pa0BHzH9NslcNvTNDR7WDRL/MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMioSxL lsBAPDU4mCUVR3SYnRj8MB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKZP+45gidbwQzOoYVPKJ6vjBZ/B5ichAOGsfUEui53IW8NzDHGvRO cO5vsqkcbFiYUQ+/oq9pqR/ADB0NlzjAcQRAM13CsgFR5P4tYYDTs72SM9kRBGm2 f2H5VT4BEUpRS1En87ygv0uOonKbTe0RFwSjJPvdLvoiltQMOcj7QYwKYqmg6lFS 4sFV8HnDrUWdQGYsVtPv8J1ENn2mJokDdD2gKRoJaVAxMbiSmuyFAbfwntwtTp2M zy5CyJpnnWopZVqk4Mqgj75SP6t8WrqTMEwS4ucrYcEn3sPGWccR3ecQ5QsOcnLk /MpYu7+0ZTzKE/7g7a1eWqfjsZg7OBfQ -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:39 2025 by rpki-client