$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: ju7Hv+st48+ffOy/UOxjw3KJ25x4qfZ90yQr8aaSBSg= Subject key identifier: D1:D3:FA:14:F6:00:CE:E6:DA:91:6E:E6:EE:D1:AD:D5:63:F4:34:96 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 09F5 Signing time: Tue 08 Jul 2025 20:22:56 +0000 Manifest this update: Tue 08 Jul 2025 20:22:55 +0000 Manifest next update: Tue 15 Jul 2025 20:22:55 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: ekxO31rhi+H5dqST5IR+Y8FnnlKorH7hFWXKQPdYUXs=) 2: 794C43721A5F11F080409056C4F9AE02.roa (hash: tliF6bTq6KTU3ampYuLl3Y31z/FfmmETEltl1u+bSdc=) 3: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=) 4: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w=) 5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: 5GewRvUgDB6rcXNpXbxI+RsMmEZ6AmWtSegm+so4e0M=) 6: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: hVI5f3OngSrJ6IFISwTQMQm8YsnsRDaEoKxA88qPW7o=) 7: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: dXngOtAcFhvArc3Tgv9HMRYfy3lpLyOKuQ2Q99Bv4cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Jul 2025 20:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Jul 8 20:22:55 2025 GMT Not After : Jul 15 20:22:55 2025 GMT Subject: CN=686d7e20-2e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:3b:87:49:54:a5:57:e6:17:00:90:f6:b4: 6f:6f:97:bc:40:48:a8:2d:f2:b1:80:67:24:a7:d4: e8:29:dc:aa:9c:cf:a0:eb:0a:ea:52:3e:46:61:93: 0c:08:08:2e:2c:92:b0:89:08:44:60:3b:04:4f:2b: e7:cc:e9:38:c3:13:3b:0c:e4:b7:54:e2:c2:b9:84: 94:4b:9b:56:b4:fa:76:0b:df:80:ea:46:87:4f:0c: 86:37:42:c6:22:8c:4e:fc:f3:d9:2f:2c:40:2a:ba: a9:04:a9:6e:e9:3f:39:32:ea:0a:95:80:4c:a2:f2: 21:00:1a:3d:22:33:de:85:4f:eb:89:37:30:71:54: 4b:70:86:aa:62:56:37:25:55:f1:5f:a3:1a:61:58: eb:50:72:f5:aa:c3:9f:a2:71:09:a0:27:12:59:61: 7a:62:ed:01:0d:1e:a9:37:3d:24:f9:3b:00:71:ee: d3:e0:0f:94:cd:57:16:9d:8b:29:c4:84:c8:ae:3e: 64:0a:2f:0a:b0:ed:00:7f:ac:79:3d:55:8a:ac:d5: 1c:f1:16:12:dd:8c:3f:25:f6:91:fe:b1:90:14:be: 37:34:d4:6a:90:f4:18:e7:42:d6:d1:94:42:a6:f1: bf:5a:ab:45:74:3a:1d:fc:0d:a9:8c:20:c4:95:9d: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D3:FA:14:F6:00:CE:E6:DA:91:6E:E6:EE:D1:AD:D5:63:F4:34:96 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f3:f0:44:39:d0:07:ca:4e:6e:3d:b7:2e:90:51:e6:40:a0: 30:08:e3:ee:11:96:df:65:2d:8b:9f:ac:6e:bd:f8:2b:eb:99: e3:2a:7b:7b:e3:0a:21:c5:b7:50:d4:b9:11:af:79:67:91:d7: df:42:c3:50:93:d5:59:10:96:61:23:99:89:2e:b3:a0:da:e2: eb:ae:30:30:f1:26:ce:d1:9d:40:a1:be:a0:2f:16:c7:71:96: 69:4c:85:78:39:23:b4:9b:29:62:e3:a0:4c:a0:74:60:61:67: 49:10:6e:49:77:e4:64:72:5a:98:b1:e8:37:63:9e:f3:49:83: f7:e6:9c:64:5f:53:de:aa:b2:a8:d7:a9:8e:4a:53:05:40:68: 01:c1:4e:48:bd:13:82:ba:9b:a2:db:1f:d5:46:ac:f7:a1:ef: 8d:0f:68:9f:2d:6c:36:8e:bd:9b:bd:2d:b1:b5:c9:f0:0b:92: 4e:1e:03:3d:c3:9c:22:4f:12:7a:4b:0d:ef:61:33:03:5b:1d: 0b:20:77:7e:ce:f5:86:5f:e6:03:4f:23:6b:92:24:fa:54:d7: bd:2c:d1:b5:89:6c:1f:c0:30:2e:5f:b5:6b:2f:26:6c:23:38: 90:39:e4:8d:27:05:88:88:bd:46:76:31:8f:47:bb:6d:ae:21: 91:d8:bf:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUwNzA4MjAyMjU1WhcNMjUwNzE1MjAyMjU1WjAYMRYwFAYD VQQDEw02ODZkN2UyMC0yZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FA7h0lUpVfmFwCQ9rRvb5e8QEioLfKxgGckp9ToKdyqnM+g6wrqUj5GYZMM CAguLJKwiQhEYDsETyvnzOk4wxM7DOS3VOLCuYSUS5tWtPp2C9+A6kaHTwyGN0LG IoxO/PPZLyxAKrqpBKlu6T85MuoKlYBMovIhABo9IjPehU/riTcwcVRLcIaqYlY3 JVXxX6MaYVjrUHL1qsOfonEJoCcSWWF6Yu0BDR6pNz0k+TsAce7T4A+UzVcWnYsp xITIrj5kCi8KsO0Af6x5PVWKrNUc8RYS3Yw/JfaR/rGQFL43NNRqkPQY50LW0ZRC pvG/WqtFdDod/A2pjCDElZ0rJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHT+hT2 AM7m2pFu5u7RrdVj9DSWMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI8/BEOdAHyk5uPbcukFHmQKAwCOPuEZbfZS2Ln6xuvfgr65njKnt7 4wohxbdQ1LkRr3lnkdffQsNQk9VZEJZhI5mJLrOg2uLrrjAw8SbO0Z1Aob6gLxbH cZZpTIV4OSO0myli46BMoHRgYWdJEG5Jd+RkclqYseg3Y57zSYP35pxkX1PeqrKo 16mOSlMFQGgBwU5IvROCupui2x/VRqz3oe+ND2ifLWw2jr2bvS2xtcnwC5JOHgM9 w5wiTxJ6Sw3vYTMDWx0LIHd+zvWGX+YDTyNrkiT6VNe9LNG1iWwfwDAuX7VrLyZs IziQOeSNJwWIiL1GdjGPR7ttriGR2L+r -----END CERTIFICATE-----Generated at Wed Jul 9 09:51:56 2025 by rpki-client