$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: 1f7kcsD+0cr5h+25gRykHH2ilDUmZZLSkazmICatMy0= Subject key identifier: 91:B5:A2:8F:FB:6D:0C:94:3E:6B:33:0C:42:DE:7C:4E:50:FC:E3:C5 Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 262F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 25A2 Signing time: Wed 20 Aug 2025 15:47:21 +0000 Manifest this update: Wed 20 Aug 2025 15:47:20 +0000 Manifest next update: Wed 27 Aug 2025 15:47:20 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: Q0p6KIZPo7zS6SNxhAU4KtiT/6/PwV7A71uuNxeTpHo=) 2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: ezRu4Wadjp9NH7xvxUm1SslQ6GZ7jqHMcsIlTCHPxl0=) 3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: sPjEV8NdOTwFwPMcdQnUOL5yo6ytt7upFB96AA18yK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9775 (0x262f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Aug 20 15:47:20 2025 GMT Not After : Aug 27 15:47:20 2025 GMT Subject: CN=68a5ee08-581b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:87:ca:30:64:76:fb:f3:d5:91:3a:f5:18:8f: ad:37:5a:2a:ab:3b:04:42:a1:81:50:de:c8:a0:2f: 8d:26:dd:4b:a8:0d:cb:d5:fd:9e:0e:29:b9:a7:30: ff:01:b5:3a:27:9e:2b:1d:52:f3:7a:43:bf:eb:0a: 23:4d:a8:31:19:23:69:07:68:b3:02:d9:d3:0f:07: db:14:0b:3e:58:38:f0:80:23:cb:90:ca:a0:1b:ef: 67:5e:16:79:da:39:1e:4d:2e:a8:50:1d:1b:41:21: d8:2b:25:88:1e:02:b9:94:02:a1:cf:b4:c9:70:b9: df:a5:da:d4:65:7d:17:30:4d:ab:65:82:7d:a1:a2: 34:be:24:f4:16:f9:58:ad:c9:f3:3f:f2:9e:6f:03: ec:cc:14:56:b4:b4:38:ef:49:73:d3:db:25:ab:b4: 73:15:ad:d8:71:1e:3c:fc:8e:c8:9d:b6:ed:72:24: c7:d2:fb:b7:ef:a2:ca:65:f8:43:d7:ab:58:36:95: 4b:92:a5:b3:16:9c:5e:42:ff:db:1c:71:57:b5:a0: 1a:41:65:84:ad:93:d9:ff:44:30:82:57:b7:e9:1f: 66:47:d6:21:ce:b5:06:42:41:c3:62:c3:a4:44:52: ce:85:3e:b0:84:22:86:99:7e:e5:a3:ca:bb:7b:18: e1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B5:A2:8F:FB:6D:0C:94:3E:6B:33:0C:42:DE:7C:4E:50:FC:E3:C5 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:2c:45:32:39:26:20:3a:61:86:dd:3f:63:65:55:a1:a0:b1: 5f:10:b1:be:05:19:56:41:63:27:9b:b5:48:3b:6b:bd:cd:ae: 4a:39:d7:15:a4:07:44:14:3a:43:03:97:82:30:9b:6c:7a:c8: 4f:13:e2:1b:57:f8:57:c1:03:13:e0:fb:a9:3f:48:45:68:e2: 1d:f4:0d:32:a3:b1:86:0f:8e:6c:77:02:a0:14:44:7a:77:8c: c5:10:38:d4:2d:f6:c1:a7:16:d7:c5:39:c9:76:f6:09:41:90: eb:f7:58:92:7a:66:ad:de:8d:cd:20:6c:85:eb:56:65:b1:b6: 5f:de:f8:db:c7:e5:b3:ed:0b:96:6e:5d:08:12:87:00:3e:90: 98:fa:6f:5c:fa:16:96:c9:2b:de:46:8f:5c:12:43:0f:1e:bf: ff:f5:4c:af:6f:3f:31:c2:a0:e1:1e:81:df:7a:4e:8b:5d:c5: 68:15:2f:d3:78:d8:09:c7:4b:2c:2c:04:6e:7f:dd:44:6c:98: 9b:99:c5:89:52:df:86:0a:2c:10:9a:49:bf:cd:36:d2:60:df: da:0c:9e:b8:5b:7c:cd:8b:3c:5e:4f:00:06:2b:51:32:a5:cb: 2f:82:b7:08:32:ca:61:f8:96:81:70:e5:76:7a:3a:91:0c:7b: 57:be:e0:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjUwODIwMTU0NzIwWhcNMjUwODI3MTU0NzIwWjAYMRYwFAYD VQQDEw02OGE1ZWUwOC01ODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA74fKMGR2+/PVkTr1GI+tN1oqqzsEQqGBUN7IoC+NJt1LqA3L1f2eDim5pzD/ AbU6J54rHVLzekO/6wojTagxGSNpB2izAtnTDwfbFAs+WDjwgCPLkMqgG+9nXhZ5 2jkeTS6oUB0bQSHYKyWIHgK5lAKhz7TJcLnfpdrUZX0XME2rZYJ9oaI0viT0FvlY rcnzP/KebwPszBRWtLQ470lz09slq7RzFa3YcR48/I7InbbtciTH0vu376LKZfhD 16tYNpVLkqWzFpxeQv/bHHFXtaAaQWWErZPZ/0Qwgle36R9mR9YhzrUGQkHDYsOk RFLOhT6whCKGmX7lo8q7exjh4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG1oo/7 bQyUPmszDELefE5Q/OPFMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4LEUyOSYgOmGG3T9jZVWhoLFfELG+BRlWQWMnm7VIO2u9za5KOdcV pAdEFDpDA5eCMJtseshPE+IbV/hXwQMT4PupP0hFaOId9A0yo7GGD45sdwKgFER6 d4zFEDjULfbBpxbXxTnJdvYJQZDr91iSemat3o3NIGyF61ZlsbZf3vjbx+Wz7QuW bl0IEocAPpCY+m9c+haWySveRo9cEkMPHr//9Uyvbz8xwqDhHoHfek6LXcVoFS/T eNgJx0ssLARuf91EbJibmcWJUt+GCiwQmkm/zTbSYN/aDJ64W3zNizxeTwAGK1Ey pcsvgrcIMsph+JaBcOV2ejqRDHtXvuDz -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:43 2025 by rpki-client