$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: ATE8sYiRuvOo/dMJFbC54me0IC7wVeiJPRPgTsKRAzQ= Subject key identifier: 65:2D:3B:DC:7A:38:9A:05:60:54:6B:B8:0B:4F:56:D7:F1:A1:AB:14 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: 0F Signing time: Mon 04 Aug 2025 23:12:20 +0000 Manifest this update: Mon 04 Aug 2025 23:12:19 +0000 Manifest next update: Mon 11 Aug 2025 23:12:19 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: 4snCvusZxGINAnJGYTuDOqIAJYQM1U7xiJDRI+OXjkk=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: tRrklyhCDRycwJaKFRwEZyyD1E5up+J5TjkxJCAvISc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Aug 4 23:12:19 2025 GMT Not After : Aug 11 23:12:19 2025 GMT Subject: CN=68913e53-36d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:ca:a4:51:3b:fa:26:61:f3:fa:49:67:6d: 94:92:1f:f9:9d:3c:8b:f0:aa:5d:5c:40:51:75:4d: e7:81:7b:bf:2e:49:be:b4:a4:11:a7:2e:8c:3e:b9: c0:f1:02:f6:54:52:b2:16:b6:b3:a3:ef:d4:c7:e0: c5:0d:b7:a0:65:83:0c:58:8c:e4:50:19:30:78:5f: 3e:5b:90:ff:9d:ea:fe:47:3d:a4:d8:c7:78:64:22: 94:25:99:f6:7c:4f:3d:a0:50:21:c8:d8:c9:ac:cf: 69:1e:44:9a:b9:ea:7b:f8:7f:9a:df:b7:5c:3c:17: 53:af:08:0e:10:d7:b3:d0:48:b0:02:dd:3b:60:f0: fe:08:4a:95:e7:93:58:f8:77:0f:43:41:1a:3e:6e: 72:e8:04:e8:aa:9c:97:b7:9e:bb:18:25:c4:bf:03: 89:d6:ef:21:93:24:94:d7:22:73:82:2a:08:bf:87: 03:80:3d:b8:b1:5c:12:a6:18:6d:88:24:11:9b:4e: f9:21:9f:f2:f0:26:31:94:22:04:6d:0b:33:11:d2: 0f:63:0e:c6:7d:b3:6f:87:e1:72:3a:68:f8:d5:e0: e5:49:71:c7:f5:d8:13:1b:4b:a8:57:78:ae:56:87: d7:37:39:6e:9b:7d:97:d8:f8:28:0c:40:bb:b9:d3: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2D:3B:DC:7A:38:9A:05:60:54:6B:B8:0B:4F:56:D7:F1:A1:AB:14 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:a6:11:eb:6e:f8:7c:f7:cb:29:9a:06:c4:8d:57:51:c3:ef: 4c:4d:16:f9:a7:af:44:43:f5:14:5d:9b:73:7f:d6:25:05:d4: b7:d3:71:f7:89:46:34:fc:a5:e0:b0:c0:c3:a6:63:6e:f6:4b: ad:a8:c5:5d:8e:8d:09:de:40:19:04:77:e2:2e:81:fb:87:21: 5d:43:45:07:f9:40:49:99:a9:81:ea:d4:94:60:88:b5:05:c5: 4d:96:75:b9:25:16:77:76:52:e6:38:6a:ad:4f:0d:87:55:5b: 7d:a9:61:48:41:37:aa:0f:41:00:a3:11:41:a0:6d:74:3c:1a: 6a:8d:3e:04:4c:2e:60:8b:d5:a4:c4:d2:15:50:5b:55:8f:52: 99:97:d4:97:40:7d:c8:bb:e8:5b:bb:83:3d:18:41:c7:56:db: f4:87:a9:5b:f8:42:e4:10:37:bf:ff:12:04:74:7d:5e:ae:dc: 64:74:92:f7:46:31:5d:e2:fa:ec:ea:65:f0:45:24:5c:48:14: e4:12:ca:bf:0a:1f:75:0c:99:c9:df:fc:88:c8:91:d6:d4:13: 7e:97:73:8f:69:4e:ef:4a:30:b0:90:77:06:08:ac:d7:e8:76: 0b:be:2e:bc:1b:52:c0:20:70:84:dd:cf:1d:69:51:57:f8:ae: 17:c9:f1:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEQwMDExMC8GA1UEBRMoMjE0MjkzM0ZCRTZFN0M1RkI3NjdBODZBNUUyMURENjAx NzhFQTM5RDAeFw0yNTA4MDQyMzEyMTlaFw0yNTA4MTEyMzEyMTlaMBgxFjAUBgNV BAMTDTY4OTEzZTUzLTM2ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtmcqkUTv6JmHz+klnbZSSH/mdPIvwql1cQFF1TeeBe78uSb60pBGnLow+ucDx AvZUUrIWtrOj79TH4MUNt6BlgwxYjORQGTB4Xz5bkP+d6v5HPaTYx3hkIpQlmfZ8 Tz2gUCHI2Mmsz2keRJq56nv4f5rft1w8F1OvCA4Q17PQSLAC3Ttg8P4ISpXnk1j4 dw9DQRo+bnLoBOiqnJe3nrsYJcS/A4nW7yGTJJTXInOCKgi/hwOAPbixXBKmGG2I JBGbTvkhn/LwJjGUIgRtCzMR0g9jDsZ9s2+H4XI6aPjV4OVJccf12BMbS6hXeK5W h9c3OW6bfZfY+CgMQLu50/UhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZS073Ho4 mgVgVGu4C09W1/GhqxQwHwYDVR0jBBgwFoAUIUKTP75ufF+3Z6hqXiHdYBeOo50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RDAwL0YxQUYxMDUyNjFE RjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVVLVFA3NXVmRi0zWjZocVhpSGRZQmVPbzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RDAwL0YxQUYxMDUyNjFERjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYt M1o2aHFYaUhkWUJlT281MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALWmEetu+Hz3yymaBsSNV1HD70xNFvmnr0RD9RRdm3N/1iUF1LfTcfeJ RjT8peCwwMOmY272S62oxV2OjQneQBkEd+IugfuHIV1DRQf5QEmZqYHq1JRgiLUF xU2WdbklFnd2UuY4aq1PDYdVW32pYUhBN6oPQQCjEUGgbXQ8GmqNPgRMLmCL1aTE 0hVQW1WPUpmX1JdAfci76Fu7gz0YQcdW2/SHqVv4QuQQN7//EgR0fV6u3GR0kvdG MV3i+uzqZfBFJFxIFOQSyr8KH3UMmcnf/IjIkdbUE36Xc49pTu9KMLCQdwYIrNfo dgu+LrwbUsAgcITdzx1pUVf4rhfJ8c4= -----END CERTIFICATE-----Generated at Wed Aug 6 10:13:26 2025 by rpki-client