$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: R5GPWaa7/JSAylQ1tVCDBdXg6TEGQBMe1utR+iUam7o= Subject key identifier: 51:7C:B5:9E:BB:80:C2:12:D2:94:92:CC:90:B7:9D:D7:94:A8:AB:C2 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: 0162 Signing time: Mon 11 Aug 2025 04:06:54 +0000 Manifest this update: Mon 11 Aug 2025 04:06:54 +0000 Manifest next update: Mon 18 Aug 2025 04:06:54 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: 3plf62vqDYQTOkNf6FJvcVGfmFIwwbfhpZ1g59lXSZs=) 2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=) 3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Aug 11 04:06:54 2025 GMT Not After : Aug 18 04:06:54 2025 GMT Subject: CN=68996c5e-b658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:ed:9f:14:8e:86:fc:5f:2c:12:b0:39:b5: 36:bc:c6:18:c1:0c:38:ed:72:b0:6c:ea:83:d3:d6: 75:b2:04:af:da:f0:1b:d0:13:5e:1d:78:23:51:6a: e1:d2:39:3c:fd:9d:f4:5e:7c:ff:1f:55:93:46:02: 22:18:ad:31:1b:b3:c6:a9:1f:71:3b:0a:94:d8:2c: 9b:c8:e9:fb:92:61:a5:90:80:30:ba:b4:a9:23:7b: a3:34:bb:0e:dd:80:64:8c:86:eb:d3:f7:21:95:0c: 0f:0d:5f:c0:cf:88:2d:3c:09:92:ca:d8:af:63:84: b2:24:55:93:06:49:60:31:c2:e5:e1:9d:79:b6:03: 91:a9:95:4b:cf:b2:48:46:d7:9f:2b:bc:b7:a6:50: 54:a1:42:18:c4:05:67:f6:14:a9:28:7c:4b:80:8c: d7:0a:3c:3c:85:2c:17:38:d1:08:91:93:35:3a:21: 06:d0:9e:07:59:58:50:a8:bf:94:ba:4a:18:cb:2b: 6e:b0:5e:64:db:c1:7a:5a:78:33:72:86:64:b9:09: 85:5f:30:28:f0:e5:97:7d:40:d7:4a:5d:4e:b1:73: dc:a0:12:33:85:75:5a:2e:5e:4f:f9:e9:4f:8a:c6: 9f:f0:57:22:bd:13:50:8e:c2:45:60:c3:38:5e:72: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7C:B5:9E:BB:80:C2:12:D2:94:92:CC:90:B7:9D:D7:94:A8:AB:C2 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:59:fa:8c:44:de:8a:cb:3f:64:78:36:39:c4:d4:33:87:9d: b1:09:ee:1b:31:a1:2b:95:0a:55:61:b1:97:ae:ca:87:26:24: 58:a7:76:71:43:c5:16:e0:ae:21:65:f0:4c:4c:84:cb:5f:7b: 73:9e:0b:51:b9:03:6f:58:ce:b8:b2:96:60:f3:e3:fc:ee:19: 54:6c:aa:63:c7:11:9b:e9:7c:4a:b0:c7:e9:ce:4f:12:c7:29: 29:47:82:82:d7:21:5b:93:fd:b5:80:e3:e3:db:4f:24:f8:9d: 37:c0:fc:22:b8:43:2a:f1:8e:c9:80:2c:cf:0a:70:b6:2c:c8: 88:4e:d5:45:ef:f1:d6:a6:e2:55:69:66:11:23:18:18:a2:7d: 6a:58:36:37:5a:d6:97:91:42:6a:57:45:4f:91:55:11:96:c9: da:cb:3f:68:95:27:42:5e:2d:59:37:43:1b:b2:9d:37:a4:e8: 4f:fb:70:7b:c1:13:4d:d2:bd:ce:5b:b4:68:45:b7:a8:f0:64: bd:05:6e:17:09:e0:b6:5f:93:9b:db:2f:d3:37:e8:4a:17:93: e6:ef:84:c9:5c:6b:c7:f1:09:c9:44:b3:d9:0d:19:80:4c:53: 8d:ce:1d:54:8d:26:37:c5:3c:e1:10:b8:a9:77:ac:b1:ec:eb: ef:87:45:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjUwODExMDQwNjU0WhcNMjUwODE4MDQwNjU0WjAYMRYwFAYD VQQDEw02ODk5NmM1ZS1iNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBntnxSOhvxfLBKwObU2vMYYwQw47XKwbOqD09Z1sgSv2vAb0BNeHXgjUWrh 0jk8/Z30Xnz/H1WTRgIiGK0xG7PGqR9xOwqU2CybyOn7kmGlkIAwurSpI3ujNLsO 3YBkjIbr0/chlQwPDV/Az4gtPAmSytivY4SyJFWTBklgMcLl4Z15tgORqZVLz7JI RtefK7y3plBUoUIYxAVn9hSpKHxLgIzXCjw8hSwXONEIkZM1OiEG0J4HWVhQqL+U ukoYyytusF5k28F6WngzcoZkuQmFXzAo8OWXfUDXSl1OsXPcoBIzhXVaLl5P+elP isaf8FcivRNQjsJFYMM4XnImUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF8tZ67 gMIS0pSSzJC3ndeUqKvCMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4 bkhyYUlqZzVfRHhUYkgteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5WfqMRN6Kyz9keDY5xNQzh52xCe4bMaErlQpVYbGXrsqHJiRYp3Zx Q8UW4K4hZfBMTITLX3tzngtRuQNvWM64spZg8+P87hlUbKpjxxGb6XxKsMfpzk8S xykpR4KC1yFbk/21gOPj208k+J03wPwiuEMq8Y7JgCzPCnC2LMiITtVF7/HWpuJV aWYRIxgYon1qWDY3WtaXkUJqV0VPkVURlsnayz9olSdCXi1ZN0Mbsp03pOhP+3B7 wRNN0r3OW7RoRbeo8GS9BW4XCeC2X5Ob2y/TN+hKF5Pm74TJXGvH8QnJRLPZDRmA TFONzh1UjSY3xTzhELipd6yx7Ovvh0WD -----END CERTIFICATE-----Generated at Mon Aug 11 07:45:28 2025 by rpki-client