$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft File: IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json) Hash identifier: EskY4ooQJECBlPXo8av3gGXAI2w9aAQgCnwMXTliZ8k= Subject key identifier: 2D:7C:C8:22:9F:65:2D:31:76:68:9F:52:B8:76:C7:E7:5C:3F:EE:9E Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7 Certificate issuer: /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft Manifest number: 0213 Signing time: Thu 21 Aug 2025 02:16:12 +0000 Manifest this update: Thu 21 Aug 2025 02:16:11 +0000 Manifest next update: Thu 28 Aug 2025 02:16:11 +0000 Files and hashes: 1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: 5meXez1yCn1CQx+d2Meuu3TSlEG7Qkcr5yVBWqWIXmw=) 2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: ArJFnlnVhsrJcFwhi1wglVXIencAnedBRPQm/FHkems=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190226, serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7 Validity Not Before: Aug 21 02:16:11 2025 GMT Not After : Aug 28 02:16:11 2025 GMT Subject: CN=68a6816c-dd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:7d:34:8f:8a:2b:da:fc:6f:6a:33:9d:08: 1f:f2:92:b9:d3:08:c7:24:78:9d:8c:44:2a:23:0d: 64:70:f9:4c:71:33:c0:a8:91:f2:80:d7:a5:04:a8: 5a:5d:fe:b7:0d:18:d8:47:c4:dd:a8:2a:97:4f:bb: 46:84:6f:10:d4:63:48:30:a4:6f:0b:03:db:bb:f6: 09:c2:9f:aa:7a:e6:03:87:e4:87:6e:f4:1c:7a:75: be:5f:b1:3d:c3:e5:f8:60:c1:19:6b:a1:ec:91:fc: 47:58:4e:c0:ea:aa:b2:86:7b:2d:79:57:2b:ae:8a: 0d:74:cd:7a:78:d5:85:70:4c:ad:2d:8b:51:03:92: ff:e3:32:06:fe:f1:fa:08:7d:0e:e6:7c:d4:90:66: 77:4f:72:36:a0:e8:8c:c7:17:6f:d7:9f:dd:88:36: e1:c2:b1:e5:70:df:b3:1c:66:d7:3d:40:fd:75:2a: 87:ec:52:67:50:a0:ca:e1:a1:47:6e:f6:fd:4b:9b: 15:8f:a2:a4:92:fe:6e:f8:1d:66:e0:fb:cb:e2:ea: 85:c2:ee:fa:e0:6c:78:14:da:94:f5:c4:49:8a:52: 31:01:4e:75:fb:fe:be:66:fb:21:69:4e:a4:50:0e: 6d:e4:94:5a:81:e6:90:61:30:6c:0d:5f:87:b7:26: 4c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7C:C8:22:9F:65:2D:31:76:68:9F:52:B8:76:C7:E7:5C:3F:EE:9E X509v3 Authority Key Identifier: keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ad:00:45:10:7d:14:93:a0:db:e4:50:b2:18:a9:77:9d:cf: 04:88:bb:96:ee:33:30:a0:ff:8f:b7:de:ef:5a:6c:df:8d:34: 3c:a7:fc:44:61:7a:1f:eb:db:7e:69:cb:8e:d0:d5:19:1c:5f: 77:ee:3c:03:71:88:e8:b7:3e:d8:ae:8c:71:ae:b7:75:62:48: 53:e1:7c:42:cd:de:68:32:34:b8:c8:6a:18:4f:52:25:e6:a0: 75:93:1b:08:a3:48:d5:34:49:64:07:8a:5b:8e:47:33:31:59: 7c:a4:9e:d6:a0:48:99:3f:0e:d5:8e:29:0f:be:7f:70:e0:30: f5:8a:ed:18:d0:64:3f:e8:4e:ee:6c:0e:83:10:1a:90:b1:12: e0:d7:b4:43:d0:de:95:d3:9e:48:79:2f:69:46:2a:1c:24:90: 2d:d8:fd:36:85:fa:6a:f2:47:1f:32:62:f6:80:c6:87:32:fe: b9:26:24:76:bb:54:5f:72:8a:ec:40:11:1f:6c:53:b7:d2:93: d5:cb:7e:01:9e:09:1e:44:14:93:f5:f5:ca:21:47:3a:35:5e: 9c:70:6b:c9:74:8c:dc:32:4e:01:42:ee:c5:d6:84:25:22:39: c1:af:9d:4b:38:f0:94:74:83:1d:26:f1:d1:74:86:4a:92:df: 52:a0:79:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAyMjYxMTAvBgNVBAUTKDIyMDUxRTcxRkVEMDFCQkU1QjlDRDYyNDQ3NjBDRTZF OTAzMDdBRjcwHhcNMjUwODIxMDIxNjExWhcNMjUwODI4MDIxNjExWjAYMRYwFAYD VQQDEw02OGE2ODE2Yy1kZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHJ9NI+KK9r8b2oznQgf8pK50wjHJHidjEQqIw1kcPlMcTPAqJHygNelBKha Xf63DRjYR8TdqCqXT7tGhG8Q1GNIMKRvCwPbu/YJwp+qeuYDh+SHbvQcenW+X7E9 w+X4YMEZa6HskfxHWE7A6qqyhnsteVcrrooNdM16eNWFcEytLYtRA5L/4zIG/vH6 CH0O5nzUkGZ3T3I2oOiMxxdv15/diDbhwrHlcN+zHGbXPUD9dSqH7FJnUKDK4aFH bvb9S5sVj6Kkkv5u+B1m4PvL4uqFwu764Gx4FNqU9cRJilIxAU51+/6+ZvshaU6k UA5t5JRageaQYTBsDV+HtyZMgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC18yCKf ZS0xdmifUrh2x+dcP+6eMB8GA1UdIwQYMBaAFCIFHnH+0Bu+W5zWJEdgzm6QMHr3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDIyNi9CNThFQkEzMDU1 QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3NWJuTllrUjJET2JwQXdl dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lnVWVjZjdRRzc1Ym5OWWtSMkRPYnBBd2V2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDIyNi9CNThFQkEzMDU1QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3 NWJuTllrUjJET2JwQXdldmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCrQBFEH0Uk6Db5FCyGKl3nc8EiLuW7jMwoP+Pt97vWmzfjTQ8p/xE YXof69t+acuO0NUZHF937jwDcYjotz7Yroxxrrd1YkhT4XxCzd5oMjS4yGoYT1Il 5qB1kxsIo0jVNElkB4pbjkczMVl8pJ7WoEiZPw7VjikPvn9w4DD1iu0Y0GQ/6E7u bA6DEBqQsRLg17RD0N6V055IeS9pRiocJJAt2P02hfpq8kcfMmL2gMaHMv65JiR2 u1RfcorsQBEfbFO30pPVy34BngkeRBST9fXKIUc6NV6ccGvJdIzcMk4BQu7F1oQl IjnBr51LOPCUdIMdJvHRdIZKkt9SoHmQ -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:49 2025 by rpki-client