$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json) Hash identifier: U4P8QkuUraR9+YJnstf5M/8Bg84JSVxAAXo3WnCdmao= Subject key identifier: AF:54:AD:FA:57:D1:66:2D:D9:8D:F4:4B:F5:9E:88:C8:4F:C9:CE:43 Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft Manifest number: 073A Signing time: Fri 08 Aug 2025 22:10:23 +0000 Manifest this update: Fri 08 Aug 2025 22:10:22 +0000 Manifest next update: Fri 15 Aug 2025 22:10:22 +0000 Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: 3XhZ9kEfJVB1OEIOocmbmJthnAAhMMdmsftyF6duhX8=) 2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: +6eYgOq04WhTg3h8FMeOxvxeZ5FD+RCHy2rKYTsWlYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Validity Not Before: Aug 8 22:10:22 2025 GMT Not After : Aug 15 22:10:22 2025 GMT Subject: CN=689675ce-a50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:24:e4:94:48:51:65:d9:11:88:55:04:05: 5c:8f:6d:1d:dd:04:be:f8:4f:4d:37:9c:24:cc:21: c5:b3:9d:fa:c5:db:d0:6d:a8:1a:7a:e8:86:99:4e: 20:0a:9c:4b:1b:d8:34:50:c7:c3:92:9d:04:df:7d: b3:f4:7f:b7:ca:10:60:ab:cc:f9:11:84:de:ce:cc: 77:fe:2b:12:da:34:70:ca:ad:81:37:1a:2f:e9:d2: 19:e9:46:af:6f:58:4c:b7:f5:cd:6d:dc:d8:31:e3: ec:a4:02:c1:43:e9:44:93:e5:a2:5c:05:3f:7a:19: a9:13:01:af:a1:59:fb:8a:c1:f9:01:10:80:70:cd: 4a:3a:01:c1:55:92:69:87:05:23:82:d6:a5:cc:7e: 15:a1:3a:bb:80:37:5c:ec:72:c3:97:dc:fb:a6:4f: 58:91:10:f7:70:bb:a7:f1:71:02:7f:04:c2:a5:c9: 40:35:31:00:ab:4b:d4:b7:9b:2a:91:32:7e:c1:2f: bd:37:ab:9f:b9:bf:fe:f6:c6:86:b2:9f:e9:ba:5b: 35:ce:b9:a1:8d:bb:26:4f:17:6a:f6:53:58:b4:30: 09:cd:5c:5f:e4:86:95:e4:85:8c:34:64:14:82:c6: 63:70:73:44:6a:c6:43:b0:c3:77:5e:bc:c4:d9:0e: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:54:AD:FA:57:D1:66:2D:D9:8D:F4:4B:F5:9E:88:C8:4F:C9:CE:43 X509v3 Authority Key Identifier: keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:9b:75:e8:c5:a2:15:1c:da:9c:25:a8:91:73:47:c3:f7:b4: a4:32:73:65:e9:10:ec:c3:c3:fd:03:57:13:b7:12:9d:60:97: 56:ed:6b:91:09:39:b6:0a:2b:20:47:b1:31:4f:90:82:c0:e9: 5d:d4:2c:47:82:e0:56:eb:3e:94:4f:d7:68:a8:6c:4c:20:10: 4f:ff:04:f9:45:6d:dd:96:29:9e:8e:c6:c8:e1:6a:5a:6a:cd: f8:7a:a9:2b:73:9e:ee:4b:3b:2e:78:17:67:5e:ba:3a:cd:5e: 3e:d4:4e:78:ab:dd:85:a1:58:b7:6a:a6:fc:7e:9e:4f:f0:5a: 5c:79:dc:83:ec:3b:59:d3:f7:04:2e:ca:95:b0:eb:cb:8f:6f: f8:c0:a6:30:87:1d:24:a6:10:5a:97:2f:69:97:54:0d:b4:41: 4c:52:0a:4f:e6:4f:d0:b9:5a:87:d7:53:1c:44:b7:74:23:21: 7c:36:8b:be:d6:b2:f8:87:46:39:d9:85:2d:76:7d:f6:d0:46: 01:3f:99:b7:49:4d:f0:a8:6c:3f:33:fe:a9:b3:03:1c:fe:bb: 42:3c:f3:ce:c6:89:7f:45:90:87:9d:1d:e9:54:e9:9a:cf:fb: 90:b3:0e:48:46:68:a1:77:fb:dd:e3:aa:98:ff:ad:de:09:0b: 64:3d:03:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1 MkIxN0I2QkIwHhcNMjUwODA4MjIxMDIyWhcNMjUwODE1MjIxMDIyWjAYMRYwFAYD VQQDEw02ODk2NzVjZS1hNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnEk5JRIUWXZEYhVBAVcj20d3QS++E9NN5wkzCHFs536xdvQbagaeuiGmU4g CpxLG9g0UMfDkp0E332z9H+3yhBgq8z5EYTezsx3/isS2jRwyq2BNxov6dIZ6Uav b1hMt/XNbdzYMePspALBQ+lEk+WiXAU/ehmpEwGvoVn7isH5ARCAcM1KOgHBVZJp hwUjgtalzH4VoTq7gDdc7HLDl9z7pk9YkRD3cLun8XECfwTCpclANTEAq0vUt5sq kTJ+wS+9N6ufub/+9saGsp/puls1zrmhjbsmTxdq9lNYtDAJzVxf5IaV5IWMNGQU gsZjcHNEasZDsMN3XrzE2Q5k4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9UrfpX 0WYt2Y30S/WeiMhPyc5DMB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu ak0wMWtPQzBTY3RTc1h0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIm3XoxaIVHNqcJaiRc0fD97SkMnNl6RDsw8P9A1cTtxKdYJdW7WuR CTm2CisgR7ExT5CCwOld1CxHguBW6z6UT9doqGxMIBBP/wT5RW3dlimejsbI4Wpa as34eqkrc57uSzsueBdnXro6zV4+1E54q92FoVi3aqb8fp5P8FpcedyD7DtZ0/cE LsqVsOvLj2/4wKYwhx0kphBaly9pl1QNtEFMUgpP5k/QuVqH11McRLd0IyF8Nou+ 1rL4h0Y52YUtdn320EYBP5m3SU3wqGw/M/6pswMc/rtCPPPOxol/RZCHnR3pVOma z/uQsw5IRmihd/vd46qY/63eCQtkPQPj -----END CERTIFICATE-----Generated at Sat Aug 9 10:44:22 2025 by rpki-client