$ rpki-client -vvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft File: iifxtRRZ_TbLLIBghxxVOPnSPX4.mft (raw, json) Hash identifier: XSxShmz4rEVlnV2wG+mpF/ifHMQTghJ6reaEcUmcW1c= Subject key identifier: E3:C6:09:24:41:4A:7C:19:84:F4:AB:8C:69:1E:35:38:11:06:1D:89 Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E Certificate issuer: /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft Manifest number: ED Signing time: Sat 23 Aug 2025 05:29:23 +0000 Manifest this update: Sat 23 Aug 2025 05:29:23 +0000 Manifest next update: Sat 30 Aug 2025 05:29:23 +0000 Files and hashes: 1: iifxtRRZ_TbLLIBghxxVOPnSPX4.crl (hash: wL7mSSWsv9BPOmzpLixfXS3Fjg8Z0stT3PCCfW1ZDw0=) 2: 7DA22F2C199D11EFB19DA380C4F9AE02.roa (hash: m/G/Sff8tqA/XbNYboOxx50mkuYuHxKvPy3vRj80oOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AACD, serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Validity Not Before: Aug 23 05:29:23 2025 GMT Not After : Aug 30 05:29:23 2025 GMT Subject: CN=68a951b3-6676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:99:13:7d:fc:b9:98:36:78:9e:06:52:30: f6:3a:90:a9:01:be:48:c4:3f:14:8f:b7:26:1c:9f: aa:fd:a4:0c:d9:69:e6:8d:85:e1:0c:20:bf:90:fe: f8:64:6a:0e:ed:77:0d:5b:12:f2:1c:67:43:a3:48: 82:16:f6:c8:3c:ff:db:13:40:65:4b:01:c2:48:86: a5:9a:3d:20:3c:21:06:67:0f:39:a9:a0:cc:31:d7: 77:e9:fa:45:10:ca:7f:c9:eb:3f:04:2f:84:f5:14: 34:cb:a3:66:8d:41:dc:ab:73:1c:89:2b:55:68:a8: a8:c3:f4:b5:81:6b:af:d9:ca:1a:f8:5a:b1:23:b8: b7:de:ce:83:f7:09:73:a8:3a:3f:ae:67:fa:bd:40: 1f:fa:ad:f2:d6:16:83:f0:84:22:08:f9:d3:6c:8e: ef:9d:e5:a7:10:76:ec:5b:d6:a7:89:4b:f8:db:c6: ec:b9:02:d8:43:85:e2:22:4a:51:11:aa:f3:2a:6e: df:11:ed:4d:0e:33:f3:c8:a3:04:e2:33:cb:9f:1d: 62:37:23:62:63:da:4b:ae:f9:74:e3:8b:16:30:8c: 9d:59:5c:ea:cf:49:63:1b:1d:73:78:2e:80:bf:b8: 6f:a4:2f:e8:20:18:a5:67:cb:75:12:11:bd:5d:b6: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C6:09:24:41:4A:7C:19:84:F4:AB:8C:69:1E:35:38:11:06:1D:89 X509v3 Authority Key Identifier: keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:41:69:12:86:4b:fd:8a:bd:69:a3:2b:20:f0:d1:d9:17:8f: 84:0b:a5:20:b7:fc:f2:83:3f:fe:27:09:01:55:87:65:96:3c: 59:1a:3d:a9:1a:c7:f0:c6:09:2c:74:fe:97:40:fa:d0:73:ea: 6f:a8:79:03:da:26:ed:5e:79:5d:f2:31:1e:91:9d:6b:c3:ff: e2:e2:00:4d:f6:e3:a9:b2:47:2c:f2:c0:19:ed:74:7f:ed:a1: f3:f6:66:7e:9b:3e:04:3f:b0:35:e6:16:85:5d:15:4a:5f:4b: ba:8c:9c:13:07:77:c6:c5:9f:e0:0b:9b:a1:91:0c:4e:c4:b5: de:88:b1:24:87:da:48:d7:09:e8:d0:c3:d5:ee:1e:3b:df:1c: 1f:e2:d4:e1:8f:46:95:29:58:cb:a8:c2:ea:64:ea:03:c6:c4: 6a:81:61:86:cf:7b:8e:b9:3c:0e:6f:5f:73:03:2f:16:b1:2b: 0e:04:9e:9a:3e:6f:06:1e:ef:63:a8:55:0f:72:c9:04:ba:ac: 32:72:26:ac:f0:3a:b1:1c:34:5f:f3:c1:89:53:53:de:d0:b0: bc:74:8b:90:6e:7f:0b:6e:68:c5:75:73:b7:b8:a6:94:89:27: d4:e3:fa:64:27:82:8f:99:d2:ec:12:f9:e9:bf:aa:dd:d9:6e: 02:86:a4:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBQ0QxMTAvBgNVBAUTKDhBMjdGMUI1MTQ1OUZEMzZDQjJDODA2MDg3MUM1NTM4 RjlEMjNEN0UwHhcNMjUwODIzMDUyOTIzWhcNMjUwODMwMDUyOTIzWjAYMRYwFAYD VQQDEw02OGE5NTFiMy02Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28+ZE338uZg2eJ4GUjD2OpCpAb5IxD8Uj7cmHJ+q/aQM2WnmjYXhDCC/kP74 ZGoO7XcNWxLyHGdDo0iCFvbIPP/bE0BlSwHCSIalmj0gPCEGZw85qaDMMdd36fpF EMp/yes/BC+E9RQ0y6NmjUHcq3MciStVaKiow/S1gWuv2coa+FqxI7i33s6D9wlz qDo/rmf6vUAf+q3y1haD8IQiCPnTbI7vneWnEHbsW9aniUv428bsuQLYQ4XiIkpR EarzKm7fEe1NDjPzyKME4jPLnx1iNyNiY9pLrvl044sWMIydWVzqz0ljGx1zeC6A v7hvpC/oIBilZ8t1EhG9XbYdSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPGCSRB SnwZhPSrjGkeNTgRBh2JMB8GA1UdIwQYMBaAFIon8bUUWf02yyyAYIccVTj50j1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUFDRC84RUExOUFBMjE5 OUMxMUVGOTY5NzM0N0ZDNEY5QUUwMi9paWZ4dFJSWl9UYkxMSUJnaHh4Vk9QblNQ WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpZnh0UlJaX1RiTExJQmdoeHhWT1BuU1BYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUFDRC84RUExOUFBMjE5OUMxMUVGOTY5NzM0N0ZDNEY5QUUwMi9paWZ4dFJSWl9U YkxMSUJnaHh4Vk9QblNQWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIQWkShkv9ir1poysg8NHZF4+EC6Ugt/zygz/+JwkBVYdlljxZGj2p GsfwxgksdP6XQPrQc+pvqHkD2ibtXnld8jEekZ1rw//i4gBN9uOpskcs8sAZ7XR/ 7aHz9mZ+mz4EP7A15haFXRVKX0u6jJwTB3fGxZ/gC5uhkQxOxLXeiLEkh9pI1wno 0MPV7h473xwf4tThj0aVKVjLqMLqZOoDxsRqgWGGz3uOuTwOb19zAy8WsSsOBJ6a Pm8GHu9jqFUPcskEuqwycias8DqxHDRf88GJU1Pe0LC8dIuQbn8LbmjFdXO3uKaU iSfU4/pkJ4KPmdLsEvnpv6rd2W4ChqQ+ -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:17 2025 by rpki-client