$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft File: iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json) Hash identifier: nHdanLuYKfoLK/65kivQYQ6PX36w1cK8my/ziDmeUSk= Subject key identifier: 3F:9D:5D:88:DE:FA:90:2B:83:90:9F:66:28:A3:E5:60:72:02:E6:32 Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF Certificate issuer: /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft Manifest number: F4 Signing time: Mon 11 Aug 2025 05:31:08 +0000 Manifest this update: Mon 11 Aug 2025 05:31:08 +0000 Manifest next update: Mon 18 Aug 2025 05:31:07 +0000 Files and hashes: 1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: /+CCzkJoF8F3oUqpACfbRKXkAe7mHF+3AADRMK5IvJg=) 2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: IjBd7XUR2i0dTIqKZWCJ7zm+gZSogWBX4IMREVDmhgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AD90, serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF Validity Not Before: Aug 11 05:31:08 2025 GMT Not After : Aug 18 05:31:07 2025 GMT Subject: CN=6899801c-6a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1c:9f:9b:b7:6b:6d:ef:41:9b:57:e6:64:75: f2:91:ca:b1:db:c6:ea:a4:59:e6:48:a2:19:a1:e1: e6:07:7e:98:45:92:15:cd:8e:b3:ad:5a:a7:f1:2f: e4:ff:c5:e9:26:05:f4:31:03:ae:0e:ff:13:c0:5f: 3d:7a:b2:36:bf:3a:86:04:03:6f:62:c0:b5:9e:1c: 44:b5:60:70:e3:7e:c0:24:a4:9b:39:57:e4:a4:ad: 33:c6:f8:ac:28:65:e5:e7:2e:db:fe:61:98:73:83: 92:91:c4:3f:f9:d2:51:31:67:c8:a5:3c:21:e0:b7: 3f:a2:be:8c:3e:d1:90:5d:fb:6e:5c:5a:cf:3e:c0: e1:68:7c:6e:14:81:77:d6:ac:f7:06:ac:f8:27:3b: fd:ed:27:cd:6c:dc:24:5c:62:d2:b6:b2:2a:04:84: 15:72:8b:7a:6f:12:9f:92:0a:16:01:9f:59:8e:d2: 84:a0:4d:a2:b5:5c:d9:a6:cc:fd:cf:15:91:f7:5b: ae:30:5b:91:38:3f:9f:8d:88:8b:ab:00:fc:3f:d8: b2:57:ce:19:c7:8b:0b:02:1a:54:62:72:3c:db:e6: a2:b3:2b:5a:f8:01:a7:44:39:ca:a5:37:44:b1:e5: d3:27:44:cd:d3:a2:99:fd:9c:b1:f6:17:bc:fe:d8: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9D:5D:88:DE:FA:90:2B:83:90:9F:66:28:A3:E5:60:72:02:E6:32 X509v3 Authority Key Identifier: keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:53:85:99:c5:40:ad:58:1e:56:4c:b7:d2:7b:91:79:ed:3c: b0:8b:16:79:d4:33:55:ce:5c:87:7d:47:8f:44:f1:7a:33:63: 19:56:d5:a6:6a:db:8e:85:17:be:7c:ea:8c:96:d2:99:07:64: 63:ec:0a:11:74:f4:eb:c2:96:b2:1a:20:61:38:fc:aa:29:dd: af:ba:0a:39:68:94:75:8b:4c:b6:2c:65:11:22:f7:c8:8b:ed: f4:e2:3f:10:12:89:25:97:03:76:fc:13:4f:b5:e2:9a:ba:db: 3c:99:7f:8d:fe:13:1f:3d:7a:11:94:0e:3e:84:e9:ab:77:7a: d6:fb:34:45:6c:49:60:dd:ff:2b:b7:2f:e8:a2:d9:c5:b8:85: 1b:e0:22:a6:79:2e:69:fa:47:c3:7f:01:1b:50:f2:74:a2:eb: c1:6b:9b:20:fb:6d:d5:79:92:7b:6a:51:b6:e0:cb:78:12:77: ad:0f:f3:af:c6:cd:c7:2c:da:ce:2f:2a:92:f2:bd:33:68:17: be:64:f7:82:86:0e:cd:84:1f:b6:e3:6d:70:70:6f:20:46:ef: 49:4c:6c:f5:a8:7c:e7:be:64:80:5c:3e:c0:9d:7f:c4:a0:1d: c3:3d:f5:2a:a9:27:00:35:28:4c:94:79:5c:f2:70:61:de:8e: 44:2d:6d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FEOTAxMTAvBgNVBAUTKDg4MDkxOEE4NzU2RjA0OTMxQTMyRjRDRUEzNDFDNEYy M0ZBRDUwRUYwHhcNMjUwODExMDUzMTA4WhcNMjUwODE4MDUzMTA3WjAYMRYwFAYD VQQDEw02ODk5ODAxYy02YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRyfm7drbe9Bm1fmZHXykcqx28bqpFnmSKIZoeHmB36YRZIVzY6zrVqn8S/k /8XpJgX0MQOuDv8TwF89erI2vzqGBANvYsC1nhxEtWBw437AJKSbOVfkpK0zxvis KGXl5y7b/mGYc4OSkcQ/+dJRMWfIpTwh4Lc/or6MPtGQXftuXFrPPsDhaHxuFIF3 1qz3Bqz4Jzv97SfNbNwkXGLStrIqBIQVcot6bxKfkgoWAZ9ZjtKEoE2itVzZpsz9 zxWR91uuMFuROD+fjYiLqwD8P9iyV84Zx4sLAhpUYnI82+aisyta+AGnRDnKpTdE seXTJ0TN06KZ/Zyx9he8/tiWQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+dXYje +pArg5CfZiij5WByAuYyMB8GA1UdIwQYMBaAFIgJGKh1bwSTGjL0zqNBxPI/rVDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUQ5MC8wMzAwQzUxNDBG MEExMUVGOTBDOEExMzJDNEY5QUUwMi9pQWtZcUhWdkJKTWFNdlRPbzBIRThqLXRV TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBa1lxSFZ2QkpNYU12VE9vMEhFOGotdFVPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUQ5MC8wMzAwQzUxNDBGMEExMUVGOTBDOEExMzJDNEY5QUUwMi9pQWtZcUhWdkJK TWFNdlRPbzBIRThqLXRVTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1U4WZxUCtWB5WTLfSe5F57TywixZ51DNVzlyHfUePRPF6M2MZVtWm atuOhRe+fOqMltKZB2Rj7AoRdPTrwpayGiBhOPyqKd2vugo5aJR1i0y2LGURIvfI i+304j8QEokllwN2/BNPteKauts8mX+N/hMfPXoRlA4+hOmrd3rW+zRFbElg3f8r ty/ootnFuIUb4CKmeS5p+kfDfwEbUPJ0ouvBa5sg+23VeZJ7alG24Mt4EnetD/Ov xs3HLNrOLyqS8r0zaBe+ZPeChg7NhB+2421wcG8gRu9JTGz1qHznvmSAXD7AnX/E oB3DPfUqqScANShMlHlc8nBh3o5ELW00 -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:18 2025 by rpki-client