$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: zmyDkxUncsU0/9YBqRoYeHX6BPl4T24+Ejv2KQB1TR8= Subject key identifier: CF:53:25:FA:A9:D2:EF:51:FD:5C:F9:F6:E6:D9:CF:6A:0E:96:75:83 Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0C9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0C8D Signing time: Fri 08 Aug 2025 18:29:42 +0000 Manifest this update: Fri 08 Aug 2025 18:29:42 +0000 Manifest next update: Fri 15 Aug 2025 18:29:42 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: dmotTZ0K9Gfm6v30eDkXO66javySl+HNX4/mL+MgE2M=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: O6ZOPVwxFkNjeJWmRWdaGnVAImdC2WliszZw8u4xZjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Aug 8 18:29:42 2025 GMT Not After : Aug 15 18:29:42 2025 GMT Subject: CN=68964216-37bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:12:68:f6:2a:57:93:6a:fc:15:75:37:75: bb:10:0b:a9:3e:8d:ec:e0:56:d2:b1:bf:77:0f:25: cb:a7:fe:05:80:a2:78:b7:aa:5b:30:f4:86:db:ff: 6c:62:cc:67:44:42:9e:38:5e:9a:e7:b6:0b:d0:93: 41:50:67:55:46:5d:4d:7e:0f:e6:c8:8c:38:78:4a: 42:dc:79:1b:18:3f:43:df:63:0e:ec:87:1a:e6:3c: 3c:19:ea:b1:05:e3:4c:f0:20:f1:75:ed:4a:7b:7a: a7:45:77:cd:19:ca:54:b4:98:ec:18:0d:cb:93:7e: fc:74:46:ab:45:e0:21:a7:45:bf:6c:20:46:20:4a: 07:21:45:e1:c6:b7:3f:9f:f1:94:de:11:89:08:e3: 7c:a2:16:05:1a:29:5c:3b:61:35:c6:de:e1:27:9b: 48:70:38:f6:44:a1:d9:2c:b0:c1:73:2d:65:93:16: 20:a5:18:33:49:e7:16:aa:02:85:aa:99:99:0f:98: 14:c0:93:17:b8:50:9e:3c:26:64:e7:fd:c8:04:a1: a6:3f:4b:6b:fa:52:fc:32:60:7e:11:6e:b6:76:d9: 61:1e:11:80:ea:f5:7d:47:f2:bc:a3:93:c9:d0:58: e0:ad:4c:ec:a7:03:ca:a0:32:4e:73:73:0a:2e:01: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:53:25:FA:A9:D2:EF:51:FD:5C:F9:F6:E6:D9:CF:6A:0E:96:75:83 X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:d7:d7:44:9f:64:dc:09:f6:56:99:ae:e1:74:19:7a:1d:4d: 5b:4b:f4:49:f2:30:9c:84:56:47:e8:e2:04:70:05:92:28:10: 7a:fd:53:5f:b5:4a:57:09:9a:9d:1c:2f:5a:e0:f3:ef:61:56: d3:71:7e:21:44:f4:79:88:d7:3c:24:97:f1:92:89:c9:8e:16: b2:76:d8:92:d8:94:11:e6:06:87:9b:f1:d0:16:43:df:9a:3d: 72:3e:12:08:47:a0:00:64:e0:27:4e:b2:db:90:3d:13:6c:c5: 2e:d3:9e:b6:c6:83:a9:c9:e3:71:8c:ba:d4:ca:de:61:5c:de: bc:aa:a6:16:b2:21:bb:ae:2f:c9:07:0e:01:e1:12:2e:bf:f0: 31:a0:55:d4:77:6d:38:ac:30:21:5e:17:d2:1d:3f:29:98:9c: ee:71:c1:47:15:e6:fd:a4:69:de:0f:34:a7:22:08:71:ec:f4: c0:13:4d:c6:89:0b:78:09:d5:e5:29:2a:ae:cb:3a:dd:9f:c4: 35:58:63:89:12:39:25:4a:b1:31:4f:31:a0:b6:ab:88:84:c5: f0:c1:bc:03:17:41:3f:6b:0e:7d:db:0a:b9:a2:8d:2a:35:d2: 55:e1:b4:d9:14:0f:83:c2:c2:ae:d2:b4:7e:de:b5:37:12:ad: 17:a2:d2:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjUwODA4MTgyOTQyWhcNMjUwODE1MTgyOTQyWjAYMRYwFAYD VQQDEw02ODk2NDIxNi0zN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IsSaPYqV5Nq/BV1N3W7EAupPo3s4FbSsb93DyXLp/4FgKJ4t6pbMPSG2/9s YsxnREKeOF6a57YL0JNBUGdVRl1Nfg/myIw4eEpC3HkbGD9D32MO7Ica5jw8Geqx BeNM8CDxde1Ke3qnRXfNGcpUtJjsGA3Lk378dEarReAhp0W/bCBGIEoHIUXhxrc/ n/GU3hGJCON8ohYFGilcO2E1xt7hJ5tIcDj2RKHZLLDBcy1lkxYgpRgzSecWqgKF qpmZD5gUwJMXuFCePCZk5/3IBKGmP0tr+lL8MmB+EW62dtlhHhGA6vV9R/K8o5PJ 0FjgrUzspwPKoDJOc3MKLgEotQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9TJfqp 0u9R/Vz59ubZz2oOlnWDMB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG19dEn2TcCfZWma7hdBl6HU1bS/RJ8jCchFZH6OIEcAWSKBB6/VNf tUpXCZqdHC9a4PPvYVbTcX4hRPR5iNc8JJfxkonJjhaydtiS2JQR5gaHm/HQFkPf mj1yPhIIR6AAZOAnTrLbkD0TbMUu0562xoOpyeNxjLrUyt5hXN68qqYWsiG7ri/J Bw4B4RIuv/AxoFXUd204rDAhXhfSHT8pmJzuccFHFeb9pGneDzSnIghx7PTAE03G iQt4CdXlKSquyzrdn8Q1WGOJEjklSrExTzGgtquIhMXwwbwDF0E/aw592wq5oo0q NdJV4bTZFA+DwsKu0rR+3rU3Eq0XotJs -----END CERTIFICATE-----Generated at Sun Aug 10 04:14:27 2025 by rpki-client