$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json) Hash identifier: oJaZuZj6rZkXX4aUcHmt4DllxrPb+a6708EMRKI/EtU= Subject key identifier: 4F:2C:88:E2:2F:88:C3:D3:27:37:33:F4:98:3B:0B:BB:26:F2:2F:D1 Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft Manifest number: 0142 Signing time: Thu 07 Aug 2025 04:52:19 +0000 Manifest this update: Thu 07 Aug 2025 04:52:19 +0000 Manifest next update: Thu 14 Aug 2025 04:52:19 +0000 Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: 5yUsqCQWX8REyn//c7Lgfjk8ze67gD3bFQ7wUW/wuu8=) 2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: 1BbW+GzFmicFxrJi47abULi9jqJhPlJkmCnwzd461wM=) 3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: uYX2IlbgkFVHpSI6ncTYHrhhVumZeL9bEclaECevCas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Validity Not Before: Aug 7 04:52:19 2025 GMT Not After : Aug 14 04:52:19 2025 GMT Subject: CN=68943103-2920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:54:59:c2:77:5d:ae:d6:9e:75:60:5a:c2: fc:81:3b:bc:64:9e:5b:9d:40:33:27:d8:68:72:32: 46:ef:b5:7c:34:33:08:ec:be:39:5c:6c:53:60:44: 86:2e:c9:00:b7:1f:8b:b9:5a:2f:c1:03:f4:a5:47: 7d:da:b7:1d:cf:a4:8b:ac:f6:5d:90:8f:af:5f:04: 78:d3:73:10:aa:25:09:0c:37:a2:95:ad:56:18:ff: af:70:90:c7:76:4f:b7:95:0d:62:81:2e:c6:6a:ee: e7:17:4e:19:90:94:00:8f:f5:dd:0e:90:b1:c6:7e: 1f:d0:f5:33:9d:7a:bc:74:6a:3f:e1:bc:e9:d9:78: b2:5c:ca:b8:c3:52:10:89:e8:b1:53:f4:64:3a:92: ed:cb:61:08:49:74:50:ed:08:4f:e9:74:92:75:49: ca:b9:c2:d4:2f:a5:0a:be:99:01:74:2d:ba:ef:b1: 7c:39:7c:15:f7:14:14:0a:d0:63:b2:a8:06:52:89: d8:ef:be:98:b1:1d:42:ce:92:a5:67:35:4c:85:d7: ec:f0:01:df:74:1c:59:32:7c:ad:f0:83:b2:7c:98: 03:0d:9a:0d:28:25:18:5e:54:f4:1d:7d:6c:a1:ad: de:b3:41:59:25:0e:e5:2a:7e:c2:09:72:05:4f:4b: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2C:88:E2:2F:88:C3:D3:27:37:33:F4:98:3B:0B:BB:26:F2:2F:D1 X509v3 Authority Key Identifier: keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:fb:85:28:60:eb:de:14:4f:97:c7:07:ac:1e:15:21:4c:e7: 19:cd:cb:89:3a:49:ac:2f:dd:04:e4:59:f7:9f:8e:b3:45:10: f7:4f:4e:09:55:f8:36:0f:7c:fc:ec:13:c1:70:1d:d0:f8:27: a0:d6:6a:0d:c1:9d:54:36:a1:ae:a2:b1:3c:38:8f:5c:2b:ec: d8:a8:a5:4a:67:cc:24:e5:f3:73:96:ec:98:af:40:04:69:0c: 9b:68:f0:9c:d0:d2:7a:0f:8c:2f:01:08:63:d4:db:7a:f7:90: 2f:2b:ad:56:a5:3f:34:46:06:2b:51:e7:e1:c4:b6:ba:1f:db: 35:ce:77:3f:0e:47:e0:6e:f5:b5:a5:6f:19:d7:e3:32:21:7f: 23:d1:4e:89:1c:cb:bc:c0:e2:78:c5:f3:8b:d3:83:c1:fc:7d: 4e:8f:ab:0e:17:3e:64:a5:5a:2f:28:52:d6:70:db:c1:58:ee: df:af:5a:2d:6e:a4:dc:4e:a1:ff:18:dc:02:7b:77:14:6c:ce: 72:b3:54:86:91:dd:c5:c9:00:1e:84:1c:ed:3e:76:db:16:22: a7:b2:3b:ba:74:7d:59:4f:a7:87:b1:a0:99:e0:0e:00:e5:f3: 69:e1:3a:27:3a:39:9b:6e:4c:47:3d:dd:07:63:6d:11:37:c2: ab:e6:22:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE QjVCNjY3OTEwHhcNMjUwODA3MDQ1MjE5WhcNMjUwODE0MDQ1MjE5WjAYMRYwFAYD VQQDEw02ODk0MzEwMy0yOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAlUWcJ3Xa7WnnVgWsL8gTu8ZJ5bnUAzJ9hocjJG77V8NDMI7L45XGxTYESG LskAtx+LuVovwQP0pUd92rcdz6SLrPZdkI+vXwR403MQqiUJDDeila1WGP+vcJDH dk+3lQ1igS7Gau7nF04ZkJQAj/XdDpCxxn4f0PUznXq8dGo/4bzp2XiyXMq4w1IQ ieixU/RkOpLty2EISXRQ7QhP6XSSdUnKucLUL6UKvpkBdC2677F8OXwV9xQUCtBj sqgGUonY776YsR1CzpKlZzVMhdfs8AHfdBxZMnyt8IOyfJgDDZoNKCUYXlT0HX1s oa3es0FZJQ7lKn7CCXIFT0s70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8siOIv iMPTJzcz9Jg7C7sm8i/RMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv WTNqRWF6NmRyWHpiVzJaNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW+4UoYOveFE+XxwesHhUhTOcZzcuJOkmsL90E5Fn3n46zRRD3T04J Vfg2D3z87BPBcB3Q+Ceg1moNwZ1UNqGuorE8OI9cK+zYqKVKZ8wk5fNzluyYr0AE aQybaPCc0NJ6D4wvAQhj1Nt695AvK61WpT80RgYrUefhxLa6H9s1znc/DkfgbvW1 pW8Z1+MyIX8j0U6JHMu8wOJ4xfOL04PB/H1Oj6sOFz5kpVovKFLWcNvBWO7fr1ot bqTcTqH/GNwCe3cUbM5ys1SGkd3FyQAehBztPnbbFiKnsju6dH1ZT6eHsaCZ4A4A 5fNp4TonOjmbbkxHPd0HY20RN8Kr5iKy -----END CERTIFICATE-----Generated at Fri Aug 8 19:35:04 2025 by rpki-client