$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: PKWMwtXh72c4meHAT/D+hYigba+GnPdUNeqhFq9IjjY= Subject key identifier: 75:E5:A3:8B:D0:C4:CB:2A:46:12:58:1F:BD:7A:2B:96:C5:18:CD:83 Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 080D Signing time: Mon 04 Aug 2025 16:24:37 +0000 Manifest this update: Mon 04 Aug 2025 16:24:37 +0000 Manifest next update: Mon 11 Aug 2025 16:24:37 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: HfgqESsWkEm5lJdtZmLthjuO4jJxl3LT0nZRJX7kQAk=) 2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: tG1HGaU5DUimsEMDFRA50jlq68FCzHx0C3arFNqcuaY=) 3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: MfRtvCwn59famvfu05RMk6NPUwzQW1gti+aq8XhNzyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: Aug 4 16:24:37 2025 GMT Not After : Aug 11 16:24:37 2025 GMT Subject: CN=6890dec5-c80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e3:ed:d7:4f:08:1a:79:90:33:70:d0:58:5b: 58:82:72:0d:ca:43:28:5a:64:18:03:53:b8:dc:bb: 18:9d:ef:a7:bb:5e:e1:3e:19:27:0d:6a:a9:20:9b: 14:5a:17:2e:f3:ae:bd:b7:08:b9:97:f8:ca:80:a1: 91:e8:b1:ac:77:39:29:06:2a:2d:8b:4a:67:37:56: 99:e1:7f:61:25:1f:44:d6:aa:ec:82:62:b6:25:22: 20:58:c7:0b:22:28:da:75:78:33:4d:3b:44:e3:12: 7d:e9:7e:07:74:9f:ef:7c:4a:f5:01:04:7b:3a:62: 69:f7:ff:3e:25:50:be:18:03:ce:80:1e:0a:7f:d0: 9f:99:ff:8b:20:cf:9c:a9:53:9b:58:80:25:73:e1: e8:b3:66:0c:13:b2:43:45:1d:1a:12:5f:40:be:77: 97:97:5c:20:a3:5b:42:41:32:33:dd:97:d2:7f:27: 2b:af:57:1b:99:c0:d4:67:98:27:ef:27:ae:e2:2b: ef:e7:78:8d:86:f2:6e:7f:c9:46:52:e2:84:a0:43: 63:6b:74:73:cb:b1:46:de:cc:9d:2a:45:ee:cd:79: 59:c1:39:52:ea:cd:35:26:89:9a:92:4d:b2:3a:bb: b1:c4:21:dd:ba:2d:13:ca:6e:b0:a0:5a:c3:82:97: 31:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E5:A3:8B:D0:C4:CB:2A:46:12:58:1F:BD:7A:2B:96:C5:18:CD:83 X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a7:0e:ed:86:af:69:81:ef:ab:4d:46:12:08:80:ce:52:3b: a4:2f:d2:ae:df:18:6d:9b:b8:f2:44:8d:b2:fd:21:69:95:f4: 31:3b:84:85:8c:12:df:3c:af:09:31:e6:56:6b:f9:1d:64:80: 25:33:da:5e:3e:4c:a3:fe:8d:c3:11:75:da:6c:71:c5:cc:21: 84:5c:ac:37:d2:df:89:ff:29:8a:2f:9e:3e:41:47:e8:6d:4a: be:aa:e3:93:3b:95:fc:26:d4:1a:78:f5:95:6f:83:34:21:4e: 41:e7:6e:98:0d:03:d6:11:f8:1d:02:8e:92:31:53:48:d6:76: 01:a3:87:22:47:f9:fd:8c:e1:d3:11:16:c3:85:b4:55:e4:64: f6:cc:2b:ab:a7:9a:04:e2:72:d6:3d:c2:7b:44:32:fb:e5:ae: b8:69:1d:53:b3:12:9a:9e:12:19:b0:f7:b5:fe:23:30:f2:9f: 0d:c0:76:76:ac:12:42:b8:ef:b1:5f:49:78:be:e1:8c:d0:56: 99:ca:2f:af:8a:6f:3c:e6:e4:db:39:06:1a:5c:5c:22:e5:27: c3:05:b1:28:0f:8f:d3:00:0a:e4:1d:51:ac:ef:44:08:11:81: 62:1f:65:19:63:25:35:a4:c0:8e:ab:14:db:44:b5:0b:7f:a0: 96:79:5b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjUwODA0MTYyNDM3WhcNMjUwODExMTYyNDM3WjAYMRYwFAYD VQQDEw02ODkwZGVjNS1jODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ePt108IGnmQM3DQWFtYgnINykMoWmQYA1O43LsYne+nu17hPhknDWqpIJsU Whcu8669twi5l/jKgKGR6LGsdzkpBioti0pnN1aZ4X9hJR9E1qrsgmK2JSIgWMcL IijadXgzTTtE4xJ96X4HdJ/vfEr1AQR7OmJp9/8+JVC+GAPOgB4Kf9Cfmf+LIM+c qVObWIAlc+Hos2YME7JDRR0aEl9AvneXl1wgo1tCQTIz3ZfSfycrr1cbmcDUZ5gn 7yeu4ivv53iNhvJuf8lGUuKEoENja3Rzy7FG3sydKkXuzXlZwTlS6s01Jomakk2y OruxxCHdui0Tym6woFrDgpcxBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXlo4vQ xMsqRhJYH716K5bFGM2DMB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxpw7thq9pge+rTUYSCIDOUjukL9Ku3xhtm7jyRI2y/SFplfQxO4SF jBLfPK8JMeZWa/kdZIAlM9pePkyj/o3DEXXabHHFzCGEXKw30t+J/ymKL54+QUfo bUq+quOTO5X8JtQaePWVb4M0IU5B526YDQPWEfgdAo6SMVNI1nYBo4ciR/n9jOHT ERbDhbRV5GT2zCurp5oE4nLWPcJ7RDL75a64aR1TsxKanhIZsPe1/iMw8p8NwHZ2 rBJCuO+xX0l4vuGM0FaZyi+vim885uTbOQYaXFwi5SfDBbEoD4/TAArkHVGs70QI EYFiH2UZYyU1pMCOqxTbRLULf6CWeVvh -----END CERTIFICATE-----Generated at Wed Aug 6 04:10:42 2025 by rpki-client