$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: 0AKKf4w1CrAA02cTDVZIainvA/nNhfGz+gh3MtG6xO8= Subject key identifier: 09:FD:9C:92:F3:70:B2:F7:F1:0E:D7:CD:30:F9:46:5B:85:03:A5:E3 Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: 33 Signing time: Fri 08 Aug 2025 20:26:41 +0000 Manifest this update: Fri 08 Aug 2025 20:26:41 +0000 Manifest next update: Fri 15 Aug 2025 20:26:41 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: AkGU22jhs1BFNvmrscuenKxrL5LcujZUsehp7aUblAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Aug 8 20:26:41 2025 GMT Not After : Aug 15 20:26:41 2025 GMT Subject: CN=68965d81-7e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:c8:85:7c:fb:66:f6:0e:68:b4:b1:1f:85: 7d:0e:23:5e:dc:ad:07:ab:3b:96:a6:2b:5c:7e:de: da:64:99:46:cd:58:60:a3:05:3f:c0:30:ef:7d:af: 73:6f:5a:ba:75:60:66:e0:c7:61:f0:8a:09:f9:93: 3a:dc:3f:e7:60:6e:e3:3b:08:2d:d8:bf:49:b7:e4: 16:db:fb:9c:ca:4a:b9:4c:11:01:90:ec:07:44:00: 49:a6:82:d6:d5:0d:97:18:bc:82:5b:60:4d:01:4c: 26:de:09:0f:69:d3:cc:6e:7a:58:82:13:e1:f8:b5: 8a:c0:5e:71:2e:5f:b2:f0:f0:a2:76:17:cc:51:d8: 84:77:9a:cb:bc:00:db:4a:88:f6:7b:df:0c:08:ff: f1:27:99:a4:0e:94:b3:29:c8:69:31:60:24:18:b1: 4f:9b:e7:c2:67:dc:1a:2b:f1:b1:ef:2e:e3:54:ba: 95:8e:0a:8c:10:a9:08:ed:f1:57:a5:4b:97:50:8f: b0:81:99:4b:50:06:b3:cf:82:fa:29:82:92:fa:63: 15:a3:27:37:f0:37:d3:05:45:a1:b9:f9:e8:b7:f6: da:49:77:46:39:9d:ab:06:eb:61:64:f5:25:f7:64: bf:06:cf:46:e8:e6:9f:7a:72:cf:9a:db:32:72:eb: 50:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FD:9C:92:F3:70:B2:F7:F1:0E:D7:CD:30:F9:46:5B:85:03:A5:E3 X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:93:33:72:28:a5:3c:c9:2d:c3:7d:05:cb:e9:7f:e9:38:61: 32:38:8b:fd:66:8e:c0:09:91:74:a9:01:94:32:1a:5e:72:e6: df:06:81:6f:16:44:aa:e8:2c:f2:a7:c2:0e:b3:49:78:7f:1d: ba:dc:16:d9:f9:25:b0:45:16:e6:2a:56:61:64:6c:63:00:87: df:d8:31:6f:48:c0:12:68:b8:46:78:89:6c:7a:f9:6b:d4:69: 06:9e:78:93:2a:68:ac:de:03:63:db:6f:e2:16:0f:7b:23:31: 21:26:03:67:eb:a9:bb:be:4e:a4:93:06:f8:53:32:35:c3:5a: 59:86:7e:c8:74:01:9b:2a:83:ad:ad:81:7a:e9:2c:fa:af:9b: 39:33:36:e6:f6:74:70:ce:37:68:49:f3:28:06:e1:c9:d8:f5: 6a:32:d4:34:64:fe:19:3a:d1:17:6f:94:a6:21:83:e4:61:5e: 99:50:f6:08:50:c9:04:4e:e6:af:02:96:4f:f4:57:64:72:49: c7:6e:41:03:6b:ac:73:d9:56:f5:cb:d2:51:e3:00:4d:aa:85: f4:a1:79:83:7a:e2:a5:88:36:f0:d0:ee:74:cf:b8:3a:6d:34: d1:9d:e8:03:16:46:a0:c3:38:7f:4b:74:12:30:56:38:32:1e: 77:20:fd:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0MwRjExMC8GA1UEBRMoOEExMUVCNzY0QjE1Nzg1MzlENkVEM0IyOTAzQkY2MUY0 QzA4MDA3QzAeFw0yNTA4MDgyMDI2NDFaFw0yNTA4MTUyMDI2NDFaMBgxFjAUBgNV BAMTDTY4OTY1ZDgxLTdlMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj38iFfPtm9g5otLEfhX0OI17crQerO5amK1x+3tpkmUbNWGCjBT/AMO99r3Nv Wrp1YGbgx2Hwign5kzrcP+dgbuM7CC3Yv0m35Bbb+5zKSrlMEQGQ7AdEAEmmgtbV DZcYvIJbYE0BTCbeCQ9p08xueliCE+H4tYrAXnEuX7Lw8KJ2F8xR2IR3msu8ANtK iPZ73wwI//EnmaQOlLMpyGkxYCQYsU+b58Jn3Bor8bHvLuNUupWOCowQqQjt8Vel S5dQj7CBmUtQBrPPgvopgpL6YxWjJzfwN9MFRaG5+ei39tpJd0Y5nasG62Fk9SX3 ZL8Gz0bo5p96cs+a2zJy61AhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCf2ckvNw svfxDtfNMPlGW4UDpeMwHwYDVR0jBBgwFoAUihHrdksVeFOdbtOykDv2H0wIAHww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDQzBGLzQ5RTk5NkM0MkM2 MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFI dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWhIcmRrc1ZlRk9kYnRPeWtEdjJIMHdJQUh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD QzBGLzQ5RTk5NkM0MkM2MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZP ZGJ0T3lrRHYySDB3SUFIdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEGTM3IopTzJLcN9Bcvpf+k4YTI4i/1mjsAJkXSpAZQyGl5y5t8GgW8W RKroLPKnwg6zSXh/HbrcFtn5JbBFFuYqVmFkbGMAh9/YMW9IwBJouEZ4iWx6+WvU aQaeeJMqaKzeA2Pbb+IWD3sjMSEmA2frqbu+TqSTBvhTMjXDWlmGfsh0AZsqg62t gXrpLPqvmzkzNub2dHDON2hJ8ygG4cnY9Woy1DRk/hk60RdvlKYhg+RhXplQ9ghQ yQRO5q8Clk/0V2RyScduQQNrrHPZVvXL0lHjAE2qhfSheYN64qWINvDQ7nTPuDpt NNGd6AMWRqDDOH9LdBIwVjgyHncg/YE= -----END CERTIFICATE-----Generated at Sun Aug 10 20:00:24 2025 by rpki-client