$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: cEilEyonRqtgzNrXOf9YhN5wjfo5vWHxlWHvdJlsz30= Subject key identifier: CE:38:57:75:44:B7:7A:EF:80:F7:EB:5B:50:A8:F5:B0:B9:CE:71:7D Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 0A15 Signing time: Thu 04 Sep 2025 20:07:48 +0000 Manifest this update: Thu 04 Sep 2025 20:07:47 +0000 Manifest next update: Thu 11 Sep 2025 20:07:47 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: fO7I2260ijzI8xZHE2/+2/CRhm+bgsYeKn+9kfzV1so=) 2: 794C43721A5F11F080409056C4F9AE02.roa (hash: tliF6bTq6KTU3ampYuLl3Y31z/FfmmETEltl1u+bSdc=) 3: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=) 4: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w=) 5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: 5GewRvUgDB6rcXNpXbxI+RsMmEZ6AmWtSegm+so4e0M=) 6: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: CpOxmpHFMzljYWx1tmf9sr/C/j2WdjltGmwOj4BHMOc=) 7: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: dXngOtAcFhvArc3Tgv9HMRYfy3lpLyOKuQ2Q99Bv4cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Sep 4 20:07:47 2025 GMT Not After : Sep 11 20:07:47 2025 GMT Subject: CN=68b9f193-be0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:b2:18:bb:77:5c:0a:be:96:e4:a0:06:3c: 98:f0:57:22:44:64:4d:fa:ee:5e:52:2f:dc:57:2d: 4b:2f:55:48:c1:fa:1b:24:1d:64:ce:68:8d:63:1c: 9e:d7:03:fb:ba:da:00:29:de:fa:48:73:da:79:f0: a1:47:7b:d6:4b:36:d5:f2:33:36:3f:2e:3e:13:a8: 93:79:2a:c7:48:1c:9d:a9:d9:c0:5b:36:45:62:0e: ab:d0:71:9c:de:48:43:cf:b7:b4:ac:45:45:b9:0b: 0a:ae:ea:3c:8b:61:d1:07:ca:fa:8b:c8:a5:ee:cd: e6:e2:4a:de:98:da:55:ee:d5:2c:b8:89:13:10:a0: 23:6d:13:5a:46:94:16:48:9a:01:6a:73:e6:93:99: b9:24:a6:51:ec:26:6d:8f:39:3c:a2:00:26:93:b8: 20:46:3f:1d:c4:8b:fb:0d:18:94:98:9f:90:d0:a5: 63:2f:bf:5d:d3:87:87:1a:2a:4b:f6:fa:93:aa:5c: e2:eb:cd:b0:ba:cd:c7:7d:6a:3e:30:9b:0c:91:af: b4:ff:c0:0f:33:bf:27:0a:5f:09:c3:7a:48:ec:4e: 1f:bc:93:98:0c:51:dd:48:03:0e:0e:b0:91:2b:c5: d8:72:c5:1f:64:dd:3f:30:c7:0f:c9:01:ca:c8:40: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:38:57:75:44:B7:7A:EF:80:F7:EB:5B:50:A8:F5:B0:B9:CE:71:7D X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:41:96:01:38:19:5c:84:31:20:5a:7f:59:ff:c7:83:43:83: 86:3f:09:88:a0:2d:3d:c3:0d:b7:dd:c9:57:7f:c2:22:91:03: f5:ec:18:ff:0d:fd:35:d2:41:70:99:15:13:0d:21:e3:95:04: e7:63:7c:e9:4f:c9:36:91:8d:71:d7:b5:12:db:71:42:74:cf: bd:2c:76:c6:d6:b6:19:72:8d:c5:0a:39:78:b1:8c:11:a7:bb: a5:ed:8e:9a:85:d1:9b:bb:1b:64:28:57:08:64:ca:fe:f1:2c: 29:0a:99:1b:2a:f2:a0:95:0f:93:35:30:54:f5:1c:5b:d5:3f: 48:16:59:dd:1e:63:54:b7:8a:48:80:8d:a2:b9:78:81:31:19: 02:04:5e:ff:3e:d3:e6:0e:da:d1:f8:23:ab:d0:00:1c:88:39: 16:f3:a9:b4:23:ba:b2:59:d6:88:17:26:e9:29:8a:5a:93:b1: b8:ea:f1:83:1c:c3:fa:fc:24:6a:b4:5d:cb:77:0e:e0:01:da: c2:1d:1f:57:b0:5d:6c:ac:86:ba:46:9e:ef:ef:26:12:d8:e6: ff:bb:a2:3f:c5:55:76:8e:c2:e4:f4:e4:a7:c5:2e:dd:eb:c9: df:44:f1:b5:bf:70:49:d8:30:78:d0:82:12:5d:02:f9:b1:0a: d5:18:ea:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUwOTA0MjAwNzQ3WhcNMjUwOTExMjAwNzQ3WjAYMRYwFAYD VQQDEw02OGI5ZjE5My1iZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshmyGLt3XAq+luSgBjyY8FciRGRN+u5eUi/cVy1LL1VIwfobJB1kzmiNYxye 1wP7utoAKd76SHPaefChR3vWSzbV8jM2Py4+E6iTeSrHSBydqdnAWzZFYg6r0HGc 3khDz7e0rEVFuQsKruo8i2HRB8r6i8il7s3m4kremNpV7tUsuIkTEKAjbRNaRpQW SJoBanPmk5m5JKZR7CZtjzk8ogAmk7ggRj8dxIv7DRiUmJ+Q0KVjL79d04eHGipL 9vqTqlzi682wus3HfWo+MJsMka+0/8APM78nCl8Jw3pI7E4fvJOYDFHdSAMODrCR K8XYcsUfZN0/MMcPyQHKyEDTfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM44V3VE t3rvgPfrW1Co9bC5znF9MB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdQZYBOBlchDEgWn9Z/8eDQ4OGPwmIoC09ww233clXf8IikQP17Bj/ Df010kFwmRUTDSHjlQTnY3zpT8k2kY1x17US23FCdM+9LHbG1rYZco3FCjl4sYwR p7ul7Y6ahdGbuxtkKFcIZMr+8SwpCpkbKvKglQ+TNTBU9Rxb1T9IFlndHmNUt4pI gI2iuXiBMRkCBF7/PtPmDtrR+COr0AAciDkW86m0I7qyWdaIFybpKYpak7G46vGD HMP6/CRqtF3Ldw7gAdrCHR9XsF1srIa6Rp7v7yYS2Ob/u6I/xVV2jsLk9OSnxS7d 68nfRPG1v3BJ2DB40IISXQL5sQrVGOpn -----END CERTIFICATE-----Generated at Fri Sep 5 06:22:38 2025 by rpki-client