$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: RAY8QBai1tbuNvCwmvnEGM5fYz5646CsZP7g4XwBhWk= Subject key identifier: 1B:B9:75:5D:8B:8F:C4:5D:56:FB:71:67:67:0C:EE:7D:7A:A9:F2:19 Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0B52 Signing time: Fri 08 Aug 2025 19:22:20 +0000 Manifest this update: Fri 08 Aug 2025 19:22:20 +0000 Manifest next update: Fri 15 Aug 2025 19:22:20 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: FDkEn05ieD+g4uxFL2o+Wvbs2OvoAjZUkGVaP9fUyfw=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: Q4J9l++n+la5Zfxccf3dc2lEQlGumKMJ7Sd1OPrz7gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: Aug 8 19:22:20 2025 GMT Not After : Aug 15 19:22:20 2025 GMT Subject: CN=68964e6c-782e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:9f:a9:b8:aa:9b:8d:42:c7:8d:f5:23:15: 4c:99:e3:d3:8d:82:1d:bf:0a:0a:0e:1a:4a:b8:47: fc:f1:56:8c:3f:c6:7e:bd:83:98:2a:9c:5c:0e:e1: e3:5e:e5:f3:68:bf:89:05:6f:d3:74:13:cc:24:81: 32:6d:e9:22:9e:9f:43:9d:1c:7d:af:9b:97:78:19: 92:5f:79:b0:bd:a2:a5:6b:5f:46:bb:5b:91:03:6f: 7b:58:00:91:20:b2:0c:5d:a1:e5:a1:23:45:f8:5a: 73:86:36:03:6a:4d:d8:83:33:13:41:f1:65:8d:28: 1d:bc:33:6c:15:12:92:60:cd:e8:75:6d:4d:28:8d: ba:aa:9a:c6:04:5e:53:65:a3:db:c5:95:7b:9f:45: 42:d4:e8:4a:24:67:35:62:83:53:7a:1d:2e:3c:f0: 45:96:79:8c:8b:a8:67:6c:a0:68:87:2a:af:59:76: d5:3b:a9:98:93:7a:7c:fb:77:c3:8e:b9:9e:d7:3f: 6a:e7:d5:c6:4c:0a:f5:f4:71:33:3c:4c:0e:42:de: 30:93:6b:59:64:eb:87:2b:29:ba:10:45:23:f5:49: c5:22:a0:88:d9:0d:9b:19:e0:54:bb:b8:fd:48:13: 57:b9:a5:91:66:dc:48:8c:e4:06:1e:0d:51:97:0a: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B9:75:5D:8B:8F:C4:5D:56:FB:71:67:67:0C:EE:7D:7A:A9:F2:19 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1b:83:85:c9:80:8b:d2:19:35:3b:c7:a5:0f:a8:59:6c:15: 84:80:f3:a2:59:93:f3:33:fe:46:4d:a1:bc:f4:30:02:1b:97: fe:4d:1c:98:f5:b5:8d:b1:c1:6c:e4:f2:02:38:98:3d:16:15: 4e:9b:05:fe:66:89:1f:7d:fa:de:37:d0:48:f8:87:a6:7a:7d: 22:1d:9e:ba:88:d7:c7:46:35:0c:9d:51:77:fe:06:d2:e2:f8: a2:2f:1a:fc:3b:d5:12:7b:21:b5:12:b1:5d:a9:90:89:ad:e8: e8:d1:a8:6c:b1:db:13:a2:da:15:ba:d4:f1:65:8f:4f:01:6c: 2c:54:50:dc:15:be:c5:db:be:f1:41:19:9b:01:89:7e:9a:d0: 5c:ca:05:89:f4:92:03:28:31:31:d1:a4:83:1d:75:8d:b3:15: 9b:98:c9:0b:d8:3a:6a:84:76:b5:0f:59:be:20:8d:f5:36:64: fb:6f:a8:19:21:60:16:06:15:ad:f4:c7:ac:4c:e9:6c:d1:39: 75:29:66:fc:98:c2:b7:02:b2:e1:be:e4:30:ba:4c:c5:e5:68: f3:66:1b:ef:15:f5:33:1b:8f:3c:bb:cc:9e:34:f4:54:52:cf: 6f:13:d8:ad:c0:fe:ea:c0:8e:c2:c3:b8:2e:8b:e2:0c:d9:4c: 0e:7c:00:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjUwODA4MTkyMjIwWhcNMjUwODE1MTkyMjIwWjAYMRYwFAYD VQQDEw02ODk2NGU2Yy03ODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq52fqbiqm41Cx431IxVMmePTjYIdvwoKDhpKuEf88VaMP8Z+vYOYKpxcDuHj XuXzaL+JBW/TdBPMJIEybekinp9DnRx9r5uXeBmSX3mwvaKla19Gu1uRA297WACR ILIMXaHloSNF+FpzhjYDak3YgzMTQfFljSgdvDNsFRKSYM3odW1NKI26qprGBF5T ZaPbxZV7n0VC1OhKJGc1YoNTeh0uPPBFlnmMi6hnbKBohyqvWXbVO6mYk3p8+3fD jrme1z9q59XGTAr19HEzPEwOQt4wk2tZZOuHKym6EEUj9UnFIqCI2Q2bGeBUu7j9 SBNXuaWRZtxIjOQGHg1RlwoL0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBu5dV2L j8RdVvtxZ2cM7n16qfIZMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqG4OFyYCL0hk1O8elD6hZbBWEgPOiWZPzM/5GTaG89DACG5f+TRyY 9bWNscFs5PICOJg9FhVOmwX+ZokfffreN9BI+Iemen0iHZ66iNfHRjUMnVF3/gbS 4viiLxr8O9USeyG1ErFdqZCJrejo0ahssdsTotoVutTxZY9PAWwsVFDcFb7F277x QRmbAYl+mtBcygWJ9JIDKDEx0aSDHXWNsxWbmMkL2DpqhHa1D1m+II31NmT7b6gZ IWAWBhWt9MesTOls0Tl1KWb8mMK3ArLhvuQwukzF5WjzZhvvFfUzG488u8yeNPRU Us9vE9itwP7qwI7Cw7gui+IM2UwOfABt -----END CERTIFICATE-----Generated at Sat Aug 9 02:59:32 2025 by rpki-client