$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: LRH+QMZYMo3WywdgHqE1MCll7AolfywPmuNN5ClP+qY= Subject key identifier: 5D:D7:22:1F:1B:05:A1:79:A1:95:34:34:D4:08:1C:39:65:31:73:EE Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 082C Signing time: Mon 08 Sep 2025 20:48:48 +0000 Manifest this update: Mon 08 Sep 2025 20:48:48 +0000 Manifest next update: Mon 15 Sep 2025 20:48:48 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: SIDjnImjn7Z6LuzOihPb4jG2sM4zBZzrsbD02iVp6kY=) 2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: HYLlaeYCfOhwQIw7Fb2O6gPao8D0dgK0DzH31riAA30=) 3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: CYIyqLTD/N7RHKkzVI9yCjfPCRo2bvj5EsxmVhBkQbM=) 4: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: EAWxypzDCQPQzqcMnvR1K/XDUjaENmu81MPhjQzqwkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Sep 8 20:48:48 2025 GMT Not After : Sep 15 20:48:48 2025 GMT Subject: CN=68bf4130-f7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:4c:a3:68:05:67:ca:18:15:08:18:71:72: 57:48:90:c9:89:26:da:03:94:77:e6:7b:2c:6d:68: 8c:e2:49:51:73:71:5a:f3:d4:69:60:a4:eb:e9:a2: 13:f1:84:51:68:cd:f4:99:e0:c8:ac:33:3e:1a:b8: b5:54:55:10:50:14:ba:c2:bc:da:da:86:a2:02:ed: 15:25:c1:d9:ab:14:25:0a:66:26:8c:ad:d2:44:f6: 91:b1:69:76:a7:02:f3:10:56:d8:56:f2:52:54:89: f0:0e:90:68:39:0c:72:e2:34:11:39:3d:27:07:88: 7c:5f:80:33:47:45:8b:f6:3c:84:37:e9:4c:ac:1c: a0:c7:46:3c:92:9d:10:b1:dc:0d:61:19:cc:ca:05: 40:ef:92:8f:4b:d7:82:c3:02:ad:ce:f8:87:39:33: b7:15:83:69:be:f8:d2:47:05:f6:76:b0:4f:1a:14: ee:46:a6:6b:6f:d3:99:e7:fe:50:ab:58:23:b6:09: 9f:5a:2c:3b:b6:5f:c4:4c:41:22:be:c1:74:e1:2f: b3:81:d9:d6:a1:8e:14:28:f2:29:a4:47:2c:90:f8: f3:8c:b4:ba:e1:be:ee:47:ce:b0:21:54:af:72:e6: 26:53:28:db:52:55:25:55:7c:4b:85:cd:07:50:e1: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:22:1F:1B:05:A1:79:A1:95:34:34:D4:08:1C:39:65:31:73:EE X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0d:db:98:43:1b:da:92:36:d3:21:21:9e:38:39:62:3f:ae: 2a:ad:03:86:b8:c5:47:6f:59:50:e9:7f:3d:87:b2:8f:e9:85: 25:5f:1f:a1:1c:59:79:e0:94:05:9d:48:fa:d9:f9:2e:ef:58: cc:9f:aa:61:42:86:a0:6d:4d:fc:29:af:19:bc:d7:87:0f:d8: 59:62:02:84:a0:ce:8a:a0:f9:24:91:cf:0f:f8:be:3b:8f:b9: f4:bc:d8:e3:8a:9c:c0:ad:ce:3b:02:75:fb:72:79:30:f3:9b: 7b:70:7b:8f:bb:96:95:15:f4:22:e9:f3:cd:87:76:6a:a5:1e: 5b:95:69:e5:66:57:b2:dd:83:ae:24:a7:d4:a6:c9:fd:fb:db: 68:d1:56:43:79:f7:ed:90:7f:69:93:55:82:ec:af:1d:83:c8: c8:57:1a:56:ea:c1:95:c5:f6:65:e3:12:a1:87:a5:eb:a4:c6: ae:99:a4:44:44:54:e0:57:06:0b:ca:82:95:f2:71:42:46:b9: 35:6e:48:42:0d:1d:45:1c:1a:6f:36:0a:29:58:dd:f0:83:8f: d5:49:31:14:9f:60:3e:e4:7f:13:c8:47:3e:d2:dd:2f:7c:42: 3d:bb:66:94:09:07:51:a1:10:1b:52:c9:46:3e:d6:69:32:f2: e7:46:60:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjUwOTA4MjA0ODQ4WhcNMjUwOTE1MjA0ODQ4WjAYMRYwFAYD VQQDEw02OGJmNDEzMC1mN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMVMo2gFZ8oYFQgYcXJXSJDJiSbaA5R35nssbWiM4klRc3Fa89RpYKTr6aIT 8YRRaM30meDIrDM+Gri1VFUQUBS6wrza2oaiAu0VJcHZqxQlCmYmjK3SRPaRsWl2 pwLzEFbYVvJSVInwDpBoOQxy4jQROT0nB4h8X4AzR0WL9jyEN+lMrBygx0Y8kp0Q sdwNYRnMygVA75KPS9eCwwKtzviHOTO3FYNpvvjSRwX2drBPGhTuRqZrb9OZ5/5Q q1gjtgmfWiw7tl/ETEEivsF04S+zgdnWoY4UKPIppEcskPjzjLS64b7uR86wIVSv cuYmUyjbUlUlVXxLhc0HUOG0ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3XIh8b BaF5oZU0NNQIHDllMXPuMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPDduYQxvakjbTISGeODliP64qrQOGuMVHb1lQ6X89h7KP6YUlXx+h HFl54JQFnUj62fku71jMn6phQoagbU38Ka8ZvNeHD9hZYgKEoM6KoPkkkc8P+L47 j7n0vNjjipzArc47AnX7cnkw85t7cHuPu5aVFfQi6fPNh3ZqpR5blWnlZley3YOu JKfUpsn9+9to0VZDefftkH9pk1WC7K8dg8jIVxpW6sGVxfZl4xKhh6XrpMaumaRE RFTgVwYLyoKV8nFCRrk1bkhCDR1FHBpvNgopWN3wg4/VSTEUn2A+5H8TyEc+0t0v fEI9u2aUCQdRoRAbUslGPtZpMvLnRmC5 -----END CERTIFICATE-----Generated at Tue Sep 9 06:41:49 2025 by rpki-client