$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: j4kl4WKxqLC/XCHcypnEURS4VjPjSIwNXBn8w2OyZOo= Subject key identifier: F8:3E:F4:08:67:17:2C:9C:2B:EA:33:47:4A:C1:A5:41:BA:EA:46:EA Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: F1 Signing time: Sun 07 Sep 2025 05:45:27 +0000 Manifest this update: Sun 07 Sep 2025 05:45:27 +0000 Manifest next update: Sun 14 Sep 2025 05:45:27 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: QG1KZAJ3QrUfIcsIIHQ/Ghh+K1EALFV8WMG4SazZ1lg=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: 2Ea6pfyMHuu7UJGQSJfsHF3FX8pvDKiDVHdhUSz8QqA=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Sep 7 05:45:27 2025 GMT Not After : Sep 14 05:45:27 2025 GMT Subject: CN=68bd1bf7-464b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:5b:5e:35:ac:10:3c:d4:91:88:42:92:6d: f3:fe:61:da:2e:69:f3:fc:72:61:2a:2e:43:98:fc: d8:51:09:6a:e6:67:c0:42:c2:cc:1f:b5:9f:15:84: 5c:04:cf:8a:5b:16:1b:f1:ea:f1:42:c9:90:ce:9c: 68:b1:08:ed:3d:23:52:5e:94:de:f9:ec:ab:ee:ab: b9:49:7f:17:86:09:97:36:19:31:9b:0d:cc:ac:4c: 48:67:05:42:2e:fc:f9:e9:2d:5a:80:92:da:5d:00: da:4e:d6:49:00:11:83:f6:36:d4:57:0e:83:1e:d9: 02:a4:2b:bf:39:47:f8:33:9f:c6:d6:fc:09:84:d0: b7:be:16:c4:e1:5a:db:ee:79:4b:af:bf:8f:c1:0f: ed:5a:08:23:38:57:9d:ed:26:a0:d2:e8:71:13:8a: 80:78:24:64:58:54:1a:3b:6d:61:0d:86:11:b5:59: b9:50:57:a7:e4:fd:ef:c1:95:40:b0:a3:26:c0:2a: 57:00:c4:0e:e9:36:cb:7c:2e:9c:3b:0e:09:68:eb: fb:dd:84:2a:98:dc:b0:a5:9b:ab:9b:94:66:37:ab: 44:9d:22:29:37:3b:29:cf:df:74:02:28:5d:90:34: dc:1a:a7:7d:ce:64:f0:7f:36:2a:3a:e5:1c:0c:20: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3E:F4:08:67:17:2C:9C:2B:EA:33:47:4A:C1:A5:41:BA:EA:46:EA X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:0c:b4:5d:a5:62:48:f4:16:34:c3:0e:21:cb:0e:08:ea:88: a9:84:a6:2f:9b:3d:db:79:ec:50:06:77:8b:30:cb:c9:85:5d: c4:01:f9:bd:5e:29:0e:6b:82:11:77:d7:c0:c2:b4:09:8c:67: 4b:e4:ac:27:c6:d4:6c:61:7e:2f:74:5e:1a:14:70:18:6b:37: da:16:1f:81:4d:f2:c8:af:ca:50:73:88:f8:d1:b2:55:5f:ec: 61:88:d9:4b:b4:45:c1:6b:c7:e4:66:40:d9:3d:12:87:2c:72: ed:8f:6c:56:90:08:15:96:c5:66:bd:48:80:bf:a1:3a:45:b4: c6:c6:f9:ca:52:89:a0:2b:c5:6c:8b:49:65:31:35:41:4d:a8: 8d:35:86:0a:23:a9:d9:ad:ad:86:af:cf:08:32:ba:a1:81:a4: 62:04:3b:c8:a2:30:08:3d:da:7b:e6:f0:a6:02:e4:18:a7:b2: 9d:16:b1:20:c8:1b:23:ee:4e:a9:0f:df:06:bf:19:b7:d0:08: b7:d2:3b:c4:e4:18:2d:2b:d2:0b:9e:f8:d5:c2:b7:34:66:f6: 8d:6c:07:00:63:cb:c3:8d:8f:f1:eb:e5:42:92:3c:f2:ff:9c: cd:54:a3:e7:9f:c0:53:53:2a:ac:60:a8:c6:11:2e:e5:45:8c: 15:6c:ca:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUwOTA3MDU0NTI3WhcNMjUwOTE0MDU0NTI3WjAYMRYwFAYD VQQDEw02OGJkMWJmNy00NjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8dbXjWsEDzUkYhCkm3z/mHaLmnz/HJhKi5DmPzYUQlq5mfAQsLMH7WfFYRc BM+KWxYb8erxQsmQzpxosQjtPSNSXpTe+eyr7qu5SX8XhgmXNhkxmw3MrExIZwVC Lvz56S1agJLaXQDaTtZJABGD9jbUVw6DHtkCpCu/OUf4M5/G1vwJhNC3vhbE4Vrb 7nlLr7+PwQ/tWggjOFed7Sag0uhxE4qAeCRkWFQaO21hDYYRtVm5UFen5P3vwZVA sKMmwCpXAMQO6TbLfC6cOw4JaOv73YQqmNywpZurm5RmN6tEnSIpNzspz990Aihd kDTcGqd9zmTwfzYqOuUcDCCnrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg+9Ahn FyycK+ozR0rBpUG66kbqMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4DLRdpWJI9BY0ww4hyw4I6oiphKYvmz3beexQBneLMMvJhV3EAfm9 XikOa4IRd9fAwrQJjGdL5KwnxtRsYX4vdF4aFHAYazfaFh+BTfLIr8pQc4j40bJV X+xhiNlLtEXBa8fkZkDZPRKHLHLtj2xWkAgVlsVmvUiAv6E6RbTGxvnKUomgK8Vs i0llMTVBTaiNNYYKI6nZra2Gr88IMrqhgaRiBDvIojAIPdp75vCmAuQYp7KdFrEg yBsj7k6pD98Gvxm30Ai30jvE5BgtK9ILnvjVwrc0ZvaNbAcAY8vDjY/x6+VCkjzy /5zNVKPnn8BTUyqsYKjGES7lRYwVbMrA -----END CERTIFICATE-----Generated at Mon Sep 8 22:28:32 2025 by rpki-client