$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft File: iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json) Hash identifier: ylg0qH1fpjfgGSXugdgz4epdPs1slHwjCzCE5r0mmQc= Subject key identifier: 91:3A:9F:03:1C:D9:D7:25:7E:7A:75:B0:7D:83:40:7E:E9:62:0A:D4 Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 Certificate issuer: /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft Manifest number: 066F Signing time: Fri 08 Aug 2025 22:54:20 +0000 Manifest this update: Fri 08 Aug 2025 22:54:20 +0000 Manifest next update: Fri 15 Aug 2025 22:54:20 +0000 Files and hashes: 1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: TdvQSIdyMih+rN0fCKPsnfcr6t/xexZOY5k4k80k8KQ=) 2: 6339493A516311ED90F04711C4F9AE02.roa (hash: UZVHz0fvOssKPNLwiZ35IeL2xHQA6a7FTosxanmpoZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Validity Not Before: Aug 8 22:54:20 2025 GMT Not After : Aug 15 22:54:20 2025 GMT Subject: CN=6896801c-9738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:7d:ab:34:75:ca:2e:6b:71:51:ec:f1:26: 70:f2:91:2f:f6:89:4d:ff:03:a4:54:a5:99:95:54: b0:bb:85:b2:e1:f0:c5:69:03:2d:72:a1:12:a7:c9: 28:14:e0:5d:72:ef:6b:67:f8:8d:bf:0a:bc:4d:16: af:5a:3c:6e:17:95:13:38:13:be:32:9a:44:93:05: 25:42:32:ca:f4:b4:ea:7d:21:a8:70:f9:03:da:07: 76:f4:39:6d:d5:4d:17:ff:d8:cd:76:45:57:4c:79: 73:f6:38:b5:02:df:a7:b4:9c:ec:bc:be:63:e1:ed: a7:4d:98:5b:11:e4:7b:5f:3f:f0:2f:a8:b8:a1:02: 22:cc:6d:ba:58:dd:f6:eb:1d:17:9d:e2:ef:ea:75: 61:d5:a8:b5:7a:6e:da:2a:85:65:47:0a:f2:9e:6f: 6f:6b:dc:f0:2d:3a:ad:50:bb:98:ba:35:91:74:f5: a1:71:5f:b1:14:59:f7:79:24:7d:ae:2e:94:24:97: 73:9c:94:31:2a:4c:12:e1:71:19:58:25:9c:66:3f: 1b:00:4a:ff:c4:63:03:76:17:02:7d:38:98:db:b6: a5:9b:36:20:3b:c0:45:0a:14:12:ff:e2:98:0a:a0: ac:49:c7:01:3c:47:32:c1:88:01:ac:18:d8:52:75: e1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3A:9F:03:1C:D9:D7:25:7E:7A:75:B0:7D:83:40:7E:E9:62:0A:D4 X509v3 Authority Key Identifier: keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:67:4f:8e:0b:21:6b:09:5d:ca:19:d2:3d:5d:ac:cb:97:1e: 68:c6:54:69:0c:15:a0:58:04:2a:65:91:29:86:d5:49:84:2c: 7d:1f:23:7c:b8:fb:4c:b0:4a:98:f7:93:6d:95:6b:eb:61:3c: b4:23:ca:33:ec:56:6c:5e:41:9d:6d:58:19:d7:86:9e:7f:a4: 11:75:3a:e0:e0:60:d4:15:75:0e:cd:de:5d:6f:44:54:fa:58: 57:7b:14:0e:fb:c1:4c:f9:e7:27:21:06:53:7e:50:28:85:b6: ef:8d:77:cd:c0:4d:af:04:19:d5:61:94:01:15:a4:7d:e5:6a: e2:cf:48:35:f1:c5:7e:70:45:df:81:9f:ab:f1:04:dc:9e:c6: f7:a3:c5:bd:e9:ee:b7:4e:65:0e:7b:da:60:df:3b:b7:95:69: e1:bb:ed:e3:28:2b:c0:eb:c6:d8:fb:ad:9c:df:2f:e3:be:68: 3b:a9:19:1f:a9:b9:fa:1e:7e:b5:dd:75:a3:e5:c3:f1:b2:a7: e8:85:18:92:59:75:f1:6b:06:32:7d:fa:df:f0:df:a6:82:3e: 45:3a:74:12:84:00:98:f5:3e:ee:9d:64:a4:6b:73:de:e3:03: 2f:8d:11:67:20:da:30:57:73:66:e4:67:27:15:a8:1f:ea:d1: ae:97:05:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MDIxMTAvBgNVBAUTKDg4RDFDOTk0RTgxMDhGQzBBNTMzREY0QkI4RTJDRThE MUM0QjlGMTcwHhcNMjUwODA4MjI1NDIwWhcNMjUwODE1MjI1NDIwWjAYMRYwFAYD VQQDEw02ODk2ODAxYy05NzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKZ9qzR1yi5rcVHs8SZw8pEv9olN/wOkVKWZlVSwu4Wy4fDFaQMtcqESp8ko FOBdcu9rZ/iNvwq8TRavWjxuF5UTOBO+MppEkwUlQjLK9LTqfSGocPkD2gd29Dlt 1U0X/9jNdkVXTHlz9ji1At+ntJzsvL5j4e2nTZhbEeR7Xz/wL6i4oQIizG26WN32 6x0XneLv6nVh1ai1em7aKoVlRwrynm9va9zwLTqtULuYujWRdPWhcV+xFFn3eSR9 ri6UJJdznJQxKkwS4XEZWCWcZj8bAEr/xGMDdhcCfTiY27almzYgO8BFChQS/+KY CqCsSccBPEcywYgBrBjYUnXhOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJE6nwMc 2dclfnp1sH2DQH7pYgrUMB8GA1UdIwQYMBaAFIjRyZToEI/ApTPfS7jizo0cS58X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwMi85MzlDQUUyQzhE RDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4Q2xNOTlMdU9MT2pSeExu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOSEpsT2dRajhDbE05OUx1T0xPalJ4TG54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwMi85MzlDQUUyQzhERDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4 Q2xNOTlMdU9MT2pSeExueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKZ0+OCyFrCV3KGdI9XazLlx5oxlRpDBWgWAQqZZEphtVJhCx9HyN8 uPtMsEqY95NtlWvrYTy0I8oz7FZsXkGdbVgZ14aef6QRdTrg4GDUFXUOzd5db0RU +lhXexQO+8FM+ecnIQZTflAohbbvjXfNwE2vBBnVYZQBFaR95Wriz0g18cV+cEXf gZ+r8QTcnsb3o8W96e63TmUOe9pg3zu3lWnhu+3jKCvA68bY+62c3y/jvmg7qRkf qbn6Hn613XWj5cPxsqfohRiSWXXxawYyffrf8N+mgj5FOnQShACY9T7unWSka3Pe 4wMvjRFnINowV3Nm5GcnFagf6tGulwWs -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:25 2025 by rpki-client