$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: C5WXAQVL6VTWGqn1m6OTESMoyBhBVjXntSM9BcEQ+Bo= Subject key identifier: 65:88:2F:09:B5:EC:19:B4:38:59:DB:C6:FB:C9:85:2E:40:92:F3:8A Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: 06 Signing time: Fri 22 Aug 2025 02:14:01 +0000 Manifest this update: Fri 22 Aug 2025 02:14:00 +0000 Manifest next update: Fri 29 Aug 2025 02:14:00 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: s9GMFOI2zi+CL7QT1bQUZGJ0ovHyn/frmOiroW+p+HI=) 2: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: LhJsIUDxJjf34uwAXx8g7B6lkG4erRS20bGVNhkO1Ek=) 3: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: vQ9ge67AKzH4HNbVsuxX3Mwi95vAo6POwUTMCo0fB8I=) 4: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: ccXunp3OE2ONSoYTGcr2m1hcygin6LHeeNQEO7if+44=) 5: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: DPudtrZt3zDLn6cOKt8G2uNXGPQUskKpTDxbAvt9zzA=) 6: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: 8VEPDf924YuQ0JrYCDPzrjF2qm9rSo7AZ2xnXGQmqpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 02:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Aug 22 02:14:00 2025 GMT Not After : Aug 29 02:14:00 2025 GMT Subject: CN=68a7d269-751b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:6d:f1:9b:c5:59:91:20:64:70:44:c7:f6: c9:d3:23:14:09:37:25:c1:d5:5a:69:e4:7d:cf:7a: a8:3d:13:af:b5:16:e9:30:87:23:f6:d1:d5:2c:d3: 1d:e3:db:0a:c5:1c:3d:1b:26:86:6e:c9:6b:5f:db: 9f:37:e0:80:aa:e8:0b:78:d3:12:1a:e1:ed:e6:70: 0f:48:12:ff:06:80:a4:93:95:4d:4a:1d:e9:50:fc: f6:e8:ab:df:88:e4:77:8e:e4:c5:dc:22:ea:31:6c: 8c:0e:8a:97:49:ef:1e:4e:34:cb:ba:8c:db:e8:c8: 9c:73:ce:f6:fd:c4:32:f7:c3:fe:2c:a3:a0:b6:2f: 90:3b:c8:b8:70:0c:61:a5:1a:eb:5d:08:d5:46:24: 4d:2c:55:b0:4b:13:d3:9a:24:55:e1:a5:98:ce:a0: ad:50:a0:10:71:e0:0d:f7:c1:94:cd:2a:6d:fc:c1: bf:20:af:51:b8:89:29:56:9c:54:38:c1:e3:11:d2: 82:32:2d:40:c7:60:f3:2d:6e:ce:95:0e:12:ac:90: 54:c4:68:a3:9e:e2:87:16:e0:a5:0e:ad:e6:61:c5: a6:6c:07:63:70:20:69:3d:99:19:56:cb:98:b7:24: 36:7c:f0:af:f6:b6:5a:d5:12:d7:fb:4b:3d:69:ca: a6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:88:2F:09:B5:EC:19:B4:38:59:DB:C6:FB:C9:85:2E:40:92:F3:8A X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:30:d7:1c:26:79:eb:40:1f:d8:56:ad:c9:2f:6b:3b:70:75: b5:1a:c1:58:54:24:e8:99:64:c1:13:68:98:40:16:f1:98:8a: 7b:7e:cf:16:47:1b:82:ae:8d:1a:f1:74:12:11:c5:f5:6b:75: d9:78:93:d5:7c:15:a1:5c:70:18:5a:12:7e:7a:b8:d7:87:1d: 30:20:92:3e:34:cf:e0:79:a7:c4:a8:10:db:5e:17:13:d1:ec: 30:18:24:62:dc:c4:f3:23:cc:51:37:3c:46:69:c9:97:a9:10: 23:64:31:f1:84:a8:eb:c6:9a:45:18:62:20:c1:a8:78:c8:5a: b0:84:21:09:81:0c:67:2d:4e:68:0b:dc:cd:9f:49:90:5d:a2: 29:a4:a3:9d:e8:ff:22:14:ca:ae:20:8d:48:7a:97:b2:35:59: c8:4a:fc:a9:84:51:e8:2d:86:17:00:f1:b6:f2:3b:b9:3b:f9: a3:38:0b:57:1a:f6:01:c8:0a:32:18:ae:17:cb:d9:bf:a9:35: 73:0d:63:de:0e:94:f1:7e:a5:e9:b9:e1:38:12:6c:d3:0e:38: 38:66:d5:8c:eb:7c:a3:32:21:ff:9a:b4:a3:a1:ef:70:01:16: b1:bb:b6:c6:83:fc:f4:27:dc:63:88:6a:72:80:52:22:23:63: ed:b5:e4:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDU4ODExMC8GA1UEBRMoODgyODU5RDUyMzAxRjAxNTcxRDlENENGOTUzRjQ1RTA3 NUUwOUE5ODAeFw0yNTA4MjIwMjE0MDBaFw0yNTA4MjkwMjE0MDBaMBgxFjAUBgNV BAMTDTY4YTdkMjY5LTc1MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbLW3xm8VZkSBkcETH9snTIxQJNyXB1Vpp5H3Peqg9E6+1FukwhyP20dUs0x3j 2wrFHD0bJoZuyWtf25834ICq6At40xIa4e3mcA9IEv8GgKSTlU1KHelQ/Pboq9+I 5HeO5MXcIuoxbIwOipdJ7x5ONMu6jNvoyJxzzvb9xDL3w/4so6C2L5A7yLhwDGGl GutdCNVGJE0sVbBLE9OaJFXhpZjOoK1QoBBx4A33wZTNKm38wb8gr1G4iSlWnFQ4 weMR0oIyLUDHYPMtbs6VDhKskFTEaKOe4ocW4KUOreZhxaZsB2NwIGk9mRlWy5i3 JDZ88K/2tlrVEtf7Sz1pyqbhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZYgvCbXs GbQ4WdvG+8mFLkCS84owHwYDVR0jBBgwFoAUiChZ1SMB8BVx2dTPlT9F4HXgmpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlENTg4L0JGN0Q1RTc2N0JG MzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21w Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUNoWjFTTUI4QlZ4MmRUUGxUOUY0SFhnbXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE NTg4L0JGN0Q1RTc2N0JGMzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJW eDJkVFBsVDlGNEhYZ21wZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8w1xwmeetAH9hWrckvaztwdbUawVhUJOiZZMETaJhAFvGYint+zxZH G4KujRrxdBIRxfVrddl4k9V8FaFccBhaEn56uNeHHTAgkj40z+B5p8SoENteFxPR 7DAYJGLcxPMjzFE3PEZpyZepECNkMfGEqOvGmkUYYiDBqHjIWrCEIQmBDGctTmgL 3M2fSZBdoimko53o/yIUyq4gjUh6l7I1WchK/KmEUegthhcA8bbyO7k7+aM4C1ca 9gHICjIYrhfL2b+pNXMNY94OlPF+pem54TgSbNMOODhm1YzrfKMyIf+atKOh73AB FrG7tsaD/PQn3GOIanKAUiIjY+215Gg= -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:16 2025 by rpki-client