$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: F0yMhE+SznlBZO21ImbvSv1Lqr0ctQcvV7J+3hDeY4o= Subject key identifier: 8C:C0:89:2E:85:B5:8E:64:78:22:EE:76:72:B6:EC:F4:EE:5D:E0:AC Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 16A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 1690 Signing time: Sat 06 Sep 2025 16:46:34 +0000 Manifest this update: Sat 06 Sep 2025 16:46:34 +0000 Manifest next update: Sat 13 Sep 2025 16:46:34 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: PxgBOGV3Dj3I0KBx6uBRTzc10na5yYCBFv9n0x6dlXs=) 2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: irCyzZt8lLVT2O/nBYFOPs0nEEY6FDn9ohpC+rSN6lg=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: UF4UGi4YvKSRTlKCNcjEh8f4bqwvLQuk9xLcKAJKTWQ=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: slzLXwHdalwSZSG2cdS37Tf6mGAWnLHG4M+IywxJpUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5796 (0x16a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Sep 6 16:46:34 2025 GMT Not After : Sep 13 16:46:34 2025 GMT Subject: CN=68bc656a-29d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:05:cf:04:09:28:1d:57:a6:ed:70:82:19: 51:7f:1e:9e:c9:99:42:d0:74:fd:46:16:3b:de:d6: 97:51:b3:b5:79:35:c8:5e:91:2c:6f:95:ff:1c:18: 32:c1:c0:4e:a9:24:6f:36:79:f5:ec:cc:42:c9:f3: ac:79:5c:2b:70:79:37:ab:25:50:19:b9:98:56:01: 01:1d:25:6f:ce:46:91:4d:eb:9b:a4:57:7d:69:97: b0:ba:d9:ce:a6:5b:06:34:62:ab:2b:04:54:b2:80: 91:47:51:a6:98:fe:30:5e:94:2f:d3:94:d0:58:f3: 54:35:73:f8:6a:a2:ea:f8:c3:e9:cd:76:ec:7b:93: b4:40:62:41:c6:59:1d:d9:b4:3d:66:8d:d8:61:3b: 53:6a:06:63:16:24:ef:82:9d:e5:b8:5f:f7:4b:c6: 52:a0:af:2b:34:83:78:5f:e6:1b:f8:4c:d5:18:ab: 48:57:0c:20:a4:7a:d1:8f:d3:40:ca:e5:54:aa:0d: 1d:60:92:91:70:ea:f4:28:cb:f7:2d:5d:df:bd:33: f1:d3:48:44:95:80:db:66:5d:e3:4f:90:a2:19:43: 83:3e:3e:aa:b4:e2:18:3c:d9:4f:26:10:9e:6c:4d: 17:e9:92:86:41:45:17:43:a9:9d:43:f6:5e:43:b5: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C0:89:2E:85:B5:8E:64:78:22:EE:76:72:B6:EC:F4:EE:5D:E0:AC X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:dc:36:55:da:81:ca:24:3f:68:aa:ff:25:2b:64:18:ba:ae: a1:1b:6f:db:48:8d:69:4c:75:82:69:61:8e:41:7e:04:0b:43: 4d:d8:06:24:cb:7e:2b:64:2f:19:a9:9b:b9:c9:ad:c7:7d:03: 8a:63:12:f1:bb:f5:7b:10:de:2b:7e:c8:8c:9d:b6:44:94:4f: 7d:40:06:b7:0e:ff:a9:0b:f9:24:b4:49:67:44:b1:bc:60:40: 63:86:22:ae:ec:1f:9c:e0:8c:77:ed:44:7a:a1:2d:c7:47:29: 88:c8:9a:e4:f4:b9:72:7a:3a:08:bb:4f:e8:14:d5:de:78:bd: 4d:14:cd:cc:10:aa:e6:25:a1:74:75:47:c0:96:56:a4:9b:f9: a5:4e:9c:bc:47:20:6f:01:58:58:32:49:d7:2e:87:af:48:28: 36:e3:7a:38:a7:a1:6a:98:73:64:ea:14:28:82:12:f0:4e:10: b7:a0:55:5b:f9:2e:19:c0:ca:2e:e4:6a:fb:2e:ac:78:90:6a: bf:4d:84:50:a0:fb:3b:e3:83:4f:6c:66:58:07:b9:da:ef:9c: 76:78:07:21:76:bf:2a:a2:23:0f:f6:d3:6b:f5:a8:82:df:25: ea:4c:f6:b2:b0:40:08:96:c7:2b:0f:02:4f:93:b9:08:29:dc: 49:0a:29:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjUwOTA2MTY0NjM0WhcNMjUwOTEzMTY0NjM0WjAYMRYwFAYD VQQDEw02OGJjNjU2YS0yOWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze0FzwQJKB1Xpu1wghlRfx6eyZlC0HT9RhY73taXUbO1eTXIXpEsb5X/HBgy wcBOqSRvNnn17MxCyfOseVwrcHk3qyVQGbmYVgEBHSVvzkaRTeubpFd9aZewutnO plsGNGKrKwRUsoCRR1GmmP4wXpQv05TQWPNUNXP4aqLq+MPpzXbse5O0QGJBxlkd 2bQ9Zo3YYTtTagZjFiTvgp3luF/3S8ZSoK8rNIN4X+Yb+EzVGKtIVwwgpHrRj9NA yuVUqg0dYJKRcOr0KMv3LV3fvTPx00hElYDbZl3jT5CiGUODPj6qtOIYPNlPJhCe bE0X6ZKGQUUXQ6mdQ/ZeQ7V0wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzAiS6F tY5keCLudnK27PTuXeCsMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz3DZV2oHKJD9oqv8lK2QYuq6hG2/bSI1pTHWCaWGOQX4EC0NN2AYk y34rZC8ZqZu5ya3HfQOKYxLxu/V7EN4rfsiMnbZElE99QAa3Dv+pC/kktElnRLG8 YEBjhiKu7B+c4Ix37UR6oS3HRymIyJrk9LlyejoIu0/oFNXeeL1NFM3MEKrmJaF0 dUfAllakm/mlTpy8RyBvAVhYMknXLoevSCg243o4p6FqmHNk6hQoghLwThC3oFVb +S4ZwMou5Gr7Lqx4kGq/TYRQoPs744NPbGZYB7na75x2eAchdr8qoiMP9tNr9aiC 3yXqTPaysEAIlscrDwJPk7kIKdxJCik5 -----END CERTIFICATE-----Generated at Mon Sep 8 02:19:07 2025 by rpki-client