$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json) Hash identifier: S5Vuz9aK/Y7TtxWFFxBa/KO9qgkV2fu4GK6VcWnIJx0= Subject key identifier: 30:FB:35:4C:74:51:9C:58:A4:6A:D1:B5:61:9E:83:18:1B:38:A4:5F Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft Manifest number: B3 Signing time: Sat 09 Aug 2025 06:33:29 +0000 Manifest this update: Sat 09 Aug 2025 06:33:29 +0000 Manifest next update: Sat 16 Aug 2025 06:33:29 +0000 Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: IHFdSdZuPNRAqPJ1QqU0OjJI3VWtqkCBIbKoiLH4Dis=) 2: 10435EE8740511EF93658977C4F9AE02.roa (hash: xmMmx42YHDQ1ahK54oeYt43Mx+x7gEXdRkvJnhnT9V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Validity Not Before: Aug 9 06:33:29 2025 GMT Not After : Aug 16 06:33:29 2025 GMT Subject: CN=6896ebb9-436d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:81:f5:d1:09:6e:25:ed:ac:5e:7c:3f:39: 95:f8:7f:7d:01:e3:e9:bc:6a:09:fb:47:3d:e7:62: f7:3e:2e:ca:54:a6:d2:1b:29:9a:68:a4:24:ae:91: bb:f9:a1:98:61:ec:00:34:e4:bc:b2:e9:ba:1b:e1: bb:55:df:b2:df:3d:79:ac:32:d9:e2:b6:34:6b:a2: cf:d3:ad:22:62:4d:f5:a1:e0:f9:44:49:0c:06:68: 23:2d:0b:81:d1:39:74:1c:3d:f7:b8:00:b1:f7:f6: c7:1f:74:68:3d:a4:17:ff:82:94:d1:80:41:31:35: 05:18:9f:73:5d:3d:04:e1:4b:64:f7:e0:33:17:7f: 89:04:7b:97:20:21:5c:43:5b:ff:d3:1f:a2:6c:0c: 39:32:84:f9:47:10:56:63:6b:db:63:ec:47:67:69: e5:ea:33:f0:c4:75:57:ba:1c:37:e2:a9:b2:aa:b0: 25:af:a9:29:f6:e5:4d:0d:6c:db:80:6f:3c:2d:22: 30:71:15:dc:92:89:7a:bb:d8:3a:69:c2:3b:0d:35: 06:17:99:90:f8:62:69:6e:af:f1:bf:73:ea:d7:b1: 5c:83:06:31:d3:f9:26:50:21:3b:78:78:63:14:49: c7:66:35:7c:9a:f4:66:b3:60:f9:7d:70:c4:c5:88: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FB:35:4C:74:51:9C:58:A4:6A:D1:B5:61:9E:83:18:1B:38:A4:5F X509v3 Authority Key Identifier: keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7e:26:ce:67:5b:46:e8:a1:d2:3e:ba:40:00:33:a7:e6:da: cc:9a:db:b8:52:5e:b6:9d:1f:d2:be:47:84:c5:d3:d5:9e:34: f5:92:75:18:d4:55:4a:e2:93:11:fe:6f:db:45:80:0d:25:d8: fc:8f:84:40:6d:9b:cb:cd:df:4b:09:4f:b1:a6:eb:0b:99:c5: 17:a7:77:83:11:5a:b6:b3:70:46:85:0c:7f:c8:f5:8e:e7:c7: 2d:5d:1f:b8:83:22:a6:9b:9d:49:e8:a6:d1:2c:1d:e0:72:61: 77:62:3c:6e:ac:35:a6:d3:32:27:fb:4c:7b:3f:d3:d0:1b:b7: 0b:ee:80:e5:22:c4:e1:14:c6:19:bc:db:cd:8d:ce:43:e5:cb: d2:f6:c5:e9:55:97:9f:68:d9:8e:18:f9:03:1b:21:8f:01:b6: 0a:ac:61:9a:17:85:97:8a:88:bd:86:92:e6:c0:8b:a6:78:0b: 01:1d:19:33:2a:d8:82:ba:15:aa:19:3b:e7:eb:c2:10:91:fa: 41:cb:3b:ac:98:e0:54:6c:97:b0:30:4a:cc:9a:92:51:e5:02: f4:20:aa:d6:2d:dd:19:4a:12:22:ef:db:f0:2e:a1:24:93:55: d6:af:26:4b:da:66:19:3e:93:9a:45:ec:4c:d7:d5:a0:cd:54: 0b:84:4f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDg4N0UxMTA3QTgzRjExNzRGRjdFM0U3ODA4ODhEQjU3 MjNCNzkyNUIwHhcNMjUwODA5MDYzMzI5WhcNMjUwODE2MDYzMzI5WjAYMRYwFAYD VQQDEw02ODk2ZWJiOS00MzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTSB9dEJbiXtrF58PzmV+H99AePpvGoJ+0c952L3Pi7KVKbSGymaaKQkrpG7 +aGYYewANOS8sum6G+G7Vd+y3z15rDLZ4rY0a6LP060iYk31oeD5REkMBmgjLQuB 0Tl0HD33uACx9/bHH3RoPaQX/4KU0YBBMTUFGJ9zXT0E4Utk9+AzF3+JBHuXICFc Q1v/0x+ibAw5MoT5RxBWY2vbY+xHZ2nl6jPwxHVXuhw34qmyqrAlr6kp9uVNDWzb gG88LSIwcRXckol6u9g6acI7DTUGF5mQ+GJpbq/xv3Pq17FcgwYx0/kmUCE7eHhj FEnHZjV8mvRms2D5fXDExYid8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDD7NUx0 UZxYpGrRtWGegxgbOKRfMB8GA1UdIwQYMBaAFIh+EQeoPxF0/34+eAiI21cjt5Jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9DNzM5QkFFRTZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VYVF9majU0Q0lqYlZ5TzNr bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lINFJCNmdfRVhUX2ZqNTRDSWpiVnlPM2tscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9DNzM5QkFFRTZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VY VF9majU0Q0lqYlZ5TzNrbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8fibOZ1tG6KHSPrpAADOn5trMmtu4Ul62nR/SvkeExdPVnjT1knUY 1FVK4pMR/m/bRYANJdj8j4RAbZvLzd9LCU+xpusLmcUXp3eDEVq2s3BGhQx/yPWO 58ctXR+4gyKmm51J6KbRLB3gcmF3YjxurDWm0zIn+0x7P9PQG7cL7oDlIsThFMYZ vNvNjc5D5cvS9sXpVZefaNmOGPkDGyGPAbYKrGGaF4WXioi9hpLmwIumeAsBHRkz KtiCuhWqGTvn68IQkfpByzusmOBUbJewMErMmpJR5QL0IKrWLd0ZShIi79vwLqEk k1XWryZL2mYZPpOaRexM19WgzVQLhE9y -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:17 2025 by rpki-client