$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: ObsTeQe9Ja1LJ2FB1zngl7jLfY8oR3BHbL+yh4ZQ3L4= Subject key identifier: 56:A1:E7:A5:D4:D2:45:9B:EA:89:A4:A6:E4:1A:43:F4:1D:57:7B:77 Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 07BF Signing time: Sat 06 Sep 2025 21:29:40 +0000 Manifest this update: Sat 06 Sep 2025 21:29:40 +0000 Manifest next update: Sat 13 Sep 2025 21:29:40 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: nedz5d1qRII9esJVflQQ9Ic6MzsZx+MdY8BmDduPe7U=) 2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: x1swDqDbdRpW1YcvJW4XZPVqkw29NgcBcxcpOtDQ400=) 3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: faGNUns0UIB/6rsiDFhIe2V0V3MDd2DqirXM6CF0Z8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Sep 6 21:29:40 2025 GMT Not After : Sep 13 21:29:40 2025 GMT Subject: CN=68bca7c4-155e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:13:c1:79:3d:69:43:09:44:6b:98:1e:80: 66:55:8a:d9:0d:bf:37:a1:ae:3e:df:90:76:ca:1f: 89:15:41:7d:72:fd:15:c2:fc:78:79:fd:cb:a4:e0: 1d:4a:68:f4:d5:cd:44:8d:3e:60:41:5e:fe:47:c3: 03:03:86:16:43:f1:63:ba:09:53:14:3e:8d:eb:06: f7:c3:ac:42:52:39:f8:07:7e:33:cd:86:b7:b8:a9: d5:8f:39:d1:2e:97:c8:4d:90:15:2b:87:44:79:26: 83:8a:6b:c6:c6:62:b7:26:07:39:31:c9:fd:dc:c5: d2:7e:8a:8c:b2:95:17:ee:7b:18:67:e9:83:6d:58: a8:8a:2d:d6:64:0b:2f:4a:8f:90:4b:3b:cc:d9:06: 94:b8:20:e5:90:64:f3:0b:98:13:7c:cb:8d:20:7c: d3:bb:ba:3c:9c:bd:4d:f3:fd:a9:94:07:5c:52:a1: 6a:53:8e:8b:c4:3a:f5:c1:1a:99:df:67:ca:08:9c: 73:a5:ff:0b:ea:79:5c:0d:34:3c:be:a2:0f:7c:d6: 6b:fd:eb:b6:f7:64:85:88:9c:b9:58:42:80:30:58: a0:ed:2e:df:f7:c3:2e:89:6e:01:cf:a4:48:71:ad: cd:f1:26:f3:1e:c1:1b:e7:fb:d0:37:bf:52:dc:9b: b3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A1:E7:A5:D4:D2:45:9B:EA:89:A4:A6:E4:1A:43:F4:1D:57:7B:77 X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:7c:ba:b1:3c:eb:b4:9a:2e:b5:0d:d5:90:f4:5d:f9:9b:1d: 2b:76:7e:6b:b8:7d:46:bb:24:12:50:9a:76:59:ce:52:8a:f4: 29:9a:41:38:19:de:82:67:2d:05:3c:65:06:f8:7c:3c:80:68: cb:de:23:cd:b5:88:4b:01:02:f0:81:9b:b5:77:86:1f:8b:1d: ba:e2:22:1e:49:96:a2:0c:43:60:85:3c:23:a5:d4:8e:5f:1e: 44:be:cc:fb:24:eb:c6:0c:35:15:90:cb:10:e1:63:fc:ae:8a: 44:df:ca:70:f6:2b:f7:4e:32:31:fc:e2:ec:87:a9:d3:2d:3d: c5:9c:96:91:14:e6:ce:71:29:92:d3:ac:58:92:00:73:7e:2b: 8d:ff:f0:42:d8:6e:90:a0:a5:f1:cb:ea:39:76:fc:d6:f2:42: e6:77:7b:3e:bd:47:1d:f6:34:24:f2:3a:1c:d9:74:43:33:34: a7:e2:ae:e5:18:a3:9e:46:23:05:5e:ae:ab:c3:fc:11:30:5c: 28:b5:1b:57:20:b3:09:b8:38:a6:40:b5:ac:30:ca:c0:7e:6f: 91:cb:fc:7c:a5:d2:ac:c1:3f:c3:81:99:d2:10:86:99:92:0b: 8a:9e:70:b8:f7:7a:bb:f8:8c:0a:4f:5c:05:f9:ae:9c:fd:62: 25:4a:39:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjUwOTA2MjEyOTQwWhcNMjUwOTEzMjEyOTQwWjAYMRYwFAYD VQQDEw02OGJjYTdjNC0xNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJUTwXk9aUMJRGuYHoBmVYrZDb83oa4+35B2yh+JFUF9cv0Vwvx4ef3LpOAd Smj01c1EjT5gQV7+R8MDA4YWQ/FjuglTFD6N6wb3w6xCUjn4B34zzYa3uKnVjznR LpfITZAVK4dEeSaDimvGxmK3Jgc5Mcn93MXSfoqMspUX7nsYZ+mDbVioii3WZAsv So+QSzvM2QaUuCDlkGTzC5gTfMuNIHzTu7o8nL1N8/2plAdcUqFqU46LxDr1wRqZ 32fKCJxzpf8L6nlcDTQ8vqIPfNZr/eu292SFiJy5WEKAMFig7S7f98MuiW4Bz6RI ca3N8SbzHsEb5/vQN79S3JuziwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFah56XU 0kWb6omkpuQaQ/QdV3t3MB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSfLqxPOu0mi61DdWQ9F35mx0rdn5ruH1GuyQSUJp2Wc5SivQpmkE4 Gd6CZy0FPGUG+Hw8gGjL3iPNtYhLAQLwgZu1d4Yfix264iIeSZaiDENghTwjpdSO Xx5Evsz7JOvGDDUVkMsQ4WP8ropE38pw9iv3TjIx/OLsh6nTLT3FnJaRFObOcSmS 06xYkgBzfiuN//BC2G6QoKXxy+o5dvzW8kLmd3s+vUcd9jQk8joc2XRDMzSn4q7l GKOeRiMFXq6rw/wRMFwotRtXILMJuDimQLWsMMrAfm+Ry/x8pdKswT/DgZnSEIaZ kguKnnC493q7+IwKT1wF+a6c/WIlSjmc -----END CERTIFICATE-----Generated at Sun Sep 7 14:25:41 2025 by rpki-client