$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: k6ar65i7vwbRCLdeIb83f4Z1GWW9va9ap+0+Lz3IQug= Subject key identifier: 0B:C1:BD:13:EC:4E:FD:24:11:44:AF:3D:25:7F:14:D2:F4:99:7E:3E Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0C63 Signing time: Fri 08 Aug 2025 18:39:32 +0000 Manifest this update: Fri 08 Aug 2025 18:39:31 +0000 Manifest next update: Fri 15 Aug 2025 18:39:31 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: ztHlWPOGpGKybcMIx8yVfMsjbVkVDKGtA5oEO7wpnOk=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: ZF76+TdQMAvJkkO6rvtsiHzBwUDEVkLOtw/tW67c6tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Aug 8 18:39:31 2025 GMT Not After : Aug 15 18:39:31 2025 GMT Subject: CN=68964463-c9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:14:60:4f:46:5a:ab:89:7d:1f:3d:c4:92: 45:b0:8b:1e:33:e0:db:81:da:db:ad:17:24:26:6a: 5e:b1:39:c2:3a:3c:6a:ad:3d:d0:29:40:a5:ee:ad: 77:da:04:04:26:0c:69:49:9f:f4:d9:1c:f0:90:12: 1a:7f:03:d1:8d:2e:42:1c:f6:db:65:cc:f2:84:35: 1e:cb:a0:53:2b:33:9b:90:a6:77:a2:2b:a6:4f:ea: b4:be:67:cf:6f:1f:73:ac:e6:29:58:f4:45:c3:9b: e3:7f:f9:c4:70:1f:2e:08:1a:8f:bb:35:a3:f9:5a: 0d:7d:45:43:d2:98:cf:d5:3b:97:f8:e0:10:d8:7b: dd:d2:43:3e:71:bb:b1:d7:a4:29:2d:21:18:41:11: 8a:f2:a3:65:ac:b7:5e:0b:37:aa:67:13:84:d6:c9: b7:5b:12:fc:be:74:19:74:b3:34:62:73:07:48:e6: 6a:6c:03:da:33:31:f3:bc:6f:f3:53:85:bc:b6:73: 83:ee:58:cd:3b:ef:bc:f8:ea:2e:35:02:fc:5c:15: c4:2b:2a:79:59:b1:8d:07:7b:73:c6:08:52:7d:5f: 3e:9f:18:4b:62:2f:41:b9:f1:cb:d6:9c:4a:78:23: 0b:33:02:32:b4:df:7f:a6:6c:3d:d4:4b:28:bc:4b: 97:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C1:BD:13:EC:4E:FD:24:11:44:AF:3D:25:7F:14:D2:F4:99:7E:3E X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3e:43:7e:5d:d6:d6:e2:6f:5d:fc:6b:2c:da:b2:21:19:8b: 57:36:94:ec:b3:41:38:18:a5:73:b4:e8:26:e9:2f:97:b3:7a: f3:53:05:bb:d1:f4:f4:8c:6e:8f:df:9f:94:0f:3d:7f:51:ed: ec:74:46:ca:77:d6:aa:dd:52:3b:0f:8d:7c:23:2d:30:7a:c1: 28:48:1f:34:0e:0d:ce:c2:80:6e:dd:55:8e:c1:05:80:c8:41: 9d:08:2f:47:d2:16:e9:5a:5b:27:95:fa:12:0d:02:1f:1e:44: e5:aa:b3:bf:c0:60:a7:34:13:bd:ea:1c:56:ca:1a:74:5b:bc: a8:43:9e:be:17:94:65:f9:8c:62:24:a1:b4:e7:4b:53:ba:bf: 3f:49:b7:a3:d5:e6:83:25:48:ca:e3:fe:b0:ea:da:34:9e:95: 9f:72:85:7b:5d:d8:fd:99:0a:4f:fa:b6:33:5f:cb:ad:d3:1d: ab:59:c0:8f:b2:8f:d1:4f:bc:84:f4:81:ff:1e:22:00:ff:fa: d6:d7:75:0b:90:b3:4b:0f:3f:7e:3a:56:80:18:2a:df:bc:39: f6:bb:3b:67:48:5d:3c:74:71:ac:f4:02:72:8c:b8:4c:7c:81: 74:0b:bd:59:3e:da:b6:bf:4c:6a:ed:26:a1:47:d3:14:29:49: a5:5e:1e:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjUwODA4MTgzOTMxWhcNMjUwODE1MTgzOTMxWjAYMRYwFAYD VQQDEw02ODk2NDQ2My1jOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jMUYE9GWquJfR89xJJFsIseM+DbgdrbrRckJmpesTnCOjxqrT3QKUCl7q13 2gQEJgxpSZ/02RzwkBIafwPRjS5CHPbbZczyhDUey6BTKzObkKZ3oiumT+q0vmfP bx9zrOYpWPRFw5vjf/nEcB8uCBqPuzWj+VoNfUVD0pjP1TuX+OAQ2Hvd0kM+cbux 16QpLSEYQRGK8qNlrLdeCzeqZxOE1sm3WxL8vnQZdLM0YnMHSOZqbAPaMzHzvG/z U4W8tnOD7ljNO++8+OouNQL8XBXEKyp5WbGNB3tzxghSfV8+nxhLYi9BufHL1pxK eCMLMwIytN9/pmw91EsovEuXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvBvRPs Tv0kEUSvPSV/FNL0mX4+MB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8PkN+XdbW4m9d/Gss2rIhGYtXNpTss0E4GKVztOgm6S+Xs3rzUwW7 0fT0jG6P35+UDz1/Ue3sdEbKd9aq3VI7D418Iy0wesEoSB80Dg3OwoBu3VWOwQWA yEGdCC9H0hbpWlsnlfoSDQIfHkTlqrO/wGCnNBO96hxWyhp0W7yoQ56+F5Rl+Yxi JKG050tTur8/Sbej1eaDJUjK4/6w6to0npWfcoV7Xdj9mQpP+rYzX8ut0x2rWcCP so/RT7yE9IH/HiIA//rW13ULkLNLDz9+OlaAGCrfvDn2uztnSF08dHGs9AJyjLhM fIF0C71ZPtq2v0xq7SahR9MUKUmlXh6W -----END CERTIFICATE-----Generated at Sun Aug 10 10:45:47 2025 by rpki-client