$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft File: ISgYkHWJssqEa0nRCd0zrJ4utUM.mft (raw, json) Hash identifier: YJFtVvmmO8tv0lTVA65ZOI+DpAOCkN/rwY05roBDkj8= Subject key identifier: 05:AA:23:5F:EB:7D:DC:F1:6E:D8:6E:6C:2A:D4:C4:B1:B8:5E:56:A8 Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43 Certificate issuer: /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft Manifest number: 15 Signing time: Sun 03 Aug 2025 08:23:41 +0000 Manifest this update: Sun 03 Aug 2025 08:23:40 +0000 Manifest next update: Sun 10 Aug 2025 08:23:40 +0000 Files and hashes: 1: ISgYkHWJssqEa0nRCd0zrJ4utUM.crl (hash: 2X2Z7i5SsKv/yqcRyiDmWf3anA7phcIjnLOoNZouoHU=) 2: 499C2F0A534111F089393B42C4F9AE02.roa (hash: fSSf7ryiBLDRlZlFztp2IYlUMMSWWQRmpXOgQAMLAFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543 Validity Not Before: Aug 3 08:23:40 2025 GMT Not After : Aug 10 08:23:40 2025 GMT Subject: CN=688f1c8c-9482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:19:0a:6e:43:eb:58:c5:e6:81:ff:a6:4b: 49:b5:19:b4:ab:cf:63:d5:4f:75:dc:ab:65:97:b8: 70:65:4d:bc:fb:93:3b:52:fe:b8:c8:86:22:03:b3: d3:4c:9f:a6:87:de:12:00:44:e9:a9:7a:4f:15:e0: 82:36:f6:4a:fe:5b:69:f2:e3:ee:cb:85:b1:45:63: 2d:1e:64:51:af:82:60:75:25:e4:cc:60:9e:3e:e2: 6c:ef:b3:ab:b0:aa:5d:38:a7:b5:cf:68:a4:11:06: 21:61:45:b7:a9:54:76:d4:67:48:8d:b1:a2:dd:8c: e0:16:1c:ac:86:ac:f4:86:27:90:ca:0b:ac:01:0f: 46:77:97:8f:30:6b:8d:fd:6f:3c:f1:7a:d2:ab:c5: 6c:79:ee:6e:a2:1a:bc:1f:4c:1b:19:ae:45:44:ca: 1e:d8:cc:44:2e:0b:95:d3:4e:e1:4f:f1:05:f8:7e: 6b:f0:9e:85:1d:ca:1c:9e:19:bc:56:e3:90:1b:be: ea:a7:7f:04:b3:bb:15:ed:80:51:e2:bd:c6:05:ec: ba:c6:07:71:e5:5c:b5:c8:e9:6d:9a:a7:33:80:f3: 1c:ec:65:09:a7:33:39:84:79:ec:6b:28:73:28:6c: c6:b4:1f:8d:e5:c7:78:79:f4:5e:4d:78:13:0d:7d: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AA:23:5F:EB:7D:DC:F1:6E:D8:6E:6C:2A:D4:C4:B1:B8:5E:56:A8 X509v3 Authority Key Identifier: keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:da:f3:33:3d:73:d3:4b:71:1d:01:42:5d:56:60:02:f6:ec: 12:e1:20:59:e5:fc:0d:85:d0:6d:34:2a:14:f9:8e:e2:84:c2: 8b:38:e2:b0:33:54:d1:72:e0:d1:cd:52:2b:53:ba:ba:ff:29: d4:8d:10:e1:55:a0:2b:65:a5:35:9d:0a:4c:c2:6e:55:fc:8e: 83:4b:5b:36:83:9d:c2:f3:44:c1:82:bc:fb:d5:9d:68:5d:4e: f4:64:14:bb:a3:4f:7e:23:71:09:dc:dc:b7:7b:8b:b6:d4:6e: 6a:a4:6a:4b:8a:44:48:9d:7d:b0:63:b4:87:4f:a1:5c:a0:88: 4f:70:ae:45:48:2a:81:64:a6:c3:b0:ee:ea:87:9f:40:09:bc: cd:37:33:b0:f6:7e:61:8b:fa:2a:0a:ed:11:91:a7:ca:64:95: 2e:6c:d9:fb:f6:6e:ce:da:58:7b:40:46:3c:75:0b:d7:4d:82: 37:f2:cd:75:17:d7:b2:0c:a4:7d:74:b8:04:6b:07:7c:5e:25: 21:f6:ae:fb:e2:3c:0b:7d:fa:47:b8:17:73:6b:20:c6:89:31: de:00:04:5d:14:87:e0:61:f4:b8:b1:ac:8d:51:b4:2f:79:56: 79:90:2a:98:51:81:e5:7a:48:39:d2:0c:df:bf:56:d4:10:9e: a0:b4:81:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Njk1RTExMC8GA1UEBRMoMjEyODE4OTA3NTg5QjJDQTg0NkI0OUQxMDlERDMzQUM5 RTJFQjU0MzAeFw0yNTA4MDMwODIzNDBaFw0yNTA4MTAwODIzNDBaMBgxFjAUBgNV BAMTDTY4OGYxYzhjLTk0ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrfBkKbkPrWMXmgf+mS0m1GbSrz2PVT3Xcq2WXuHBlTbz7kztS/rjIhiIDs9NM n6aH3hIAROmpek8V4II29kr+W2ny4+7LhbFFYy0eZFGvgmB1JeTMYJ4+4mzvs6uw ql04p7XPaKQRBiFhRbepVHbUZ0iNsaLdjOAWHKyGrPSGJ5DKC6wBD0Z3l48wa439 bzzxetKrxWx57m6iGrwfTBsZrkVEyh7YzEQuC5XTTuFP8QX4fmvwnoUdyhyeGbxW 45AbvuqnfwSzuxXtgFHivcYF7LrGB3HlXLXI6W2apzOA8xzsZQmnMzmEeexrKHMo bMa0H43lx3h59F5NeBMNfTF9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBaojX+t9 3PFu2G5sKtTEsbheVqgwHwYDVR0jBBgwFoAUISgYkHWJssqEa0nRCd0zrJ4utUMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2OTVFL0U3QjM0OTcyNTM0 MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL0lTZ1lrSFdKc3NxRWEwblJDZDB6cko0dXRV TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVNnWWtIV0pzc3FFYTBuUkNkMHpySjR1dFVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 OTVFL0U3QjM0OTcyNTM0MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL0lTZ1lrSFdKc3Nx RWEwblJDZDB6cko0dXRVTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAHa8zM9c9NLcR0BQl1WYAL27BLhIFnl/A2F0G00KhT5juKEwos44rAz VNFy4NHNUitTurr/KdSNEOFVoCtlpTWdCkzCblX8joNLWzaDncLzRMGCvPvVnWhd TvRkFLujT34jcQnc3Ld7i7bUbmqkakuKREidfbBjtIdPoVygiE9wrkVIKoFkpsOw 7uqHn0AJvM03M7D2fmGL+ioK7RGRp8pklS5s2fv2bs7aWHtARjx1C9dNgjfyzXUX 17IMpH10uARrB3xeJSH2rvviPAt9+ke4F3NrIMaJMd4ABF0Uh+Bh9LixrI1RtC95 VnmQKphRgeV6SDnSDN+/VtQQnqC0gZI= -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:54 2025 by rpki-client