$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: 9o67gumFba2ps+6K0smBisgF6STLBtwv6L2TDj1H3zI= Subject key identifier: 2C:AD:FD:6F:CA:D5:F7:6E:B2:EC:62:BD:70:A5:5B:9A:7C:3C:BD:41 Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0B5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0B57 Signing time: Sun 10 Aug 2025 19:07:43 +0000 Manifest this update: Sun 10 Aug 2025 19:07:42 +0000 Manifest next update: Sun 17 Aug 2025 19:07:42 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: shO4mmTQQAb/j7y9fnlVwaKIyA3r6q/zHJb57D8F2T8=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: Qsy4TKaFv40VH7rqRhiymRYP7EU8I6x9tTe3ND6Wurc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2911 (0xb5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: Aug 10 19:07:42 2025 GMT Not After : Aug 17 19:07:42 2025 GMT Subject: CN=6898edfe-ca03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:16:19:3c:b2:ae:c6:fb:41:b9:eb:76:5c: 88:bd:8d:89:fb:95:6d:11:c5:c7:21:bb:8a:55:b6: 1e:ea:9c:f7:53:31:f6:89:35:ca:cc:aa:fe:1c:12: 87:04:e9:c3:05:75:e8:c4:8f:ff:60:08:02:8e:4d: be:e3:a2:9b:00:f8:ed:5f:4a:d1:f6:67:59:98:8d: 4e:4c:18:53:95:ec:66:40:c5:b3:3f:2f:76:cb:e3: 60:ee:77:44:49:2c:0f:89:a3:c5:f1:73:51:9d:c4: 55:16:ea:dc:26:f0:24:59:ac:cd:61:d7:ad:fa:63: b6:99:9c:95:53:ac:19:98:f1:2a:5f:0e:fa:1a:fb: af:39:dd:2b:ba:f0:30:e3:1a:5c:18:6b:41:16:e6: 99:84:15:9d:d9:3f:2a:a3:e3:fc:ff:84:e1:f8:3e: 42:d0:18:76:f3:97:9e:f9:d1:8b:6b:89:aa:a2:77: cc:38:e1:6a:a7:8c:16:1a:08:e4:ec:55:34:a2:f7: 36:4a:25:5a:62:7b:a2:8a:09:5d:79:ba:ab:1d:3e: 49:de:51:9a:b8:fd:29:a9:28:05:92:46:03:2c:99: 6c:32:41:4a:0e:ca:96:4d:d3:26:98:60:94:be:1c: cf:ed:ee:2f:f3:ef:15:ff:c2:6a:23:2f:0d:b6:fd: 68:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AD:FD:6F:CA:D5:F7:6E:B2:EC:62:BD:70:A5:5B:9A:7C:3C:BD:41 X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c9:eb:c6:02:b4:b6:2c:eb:d3:e0:55:e7:95:35:49:0e:42: 97:20:84:78:f4:67:c6:6e:64:64:5e:d8:ae:19:19:3a:bf:3c: 52:77:b8:e3:9c:9c:d2:d7:af:b8:94:27:87:52:14:f5:55:7d: 6e:92:41:9a:ff:bf:79:2b:9b:e8:23:96:31:bd:32:1d:54:1a: 97:4f:69:c8:24:15:51:82:07:06:a6:a4:30:d8:31:31:ed:30: aa:fe:d9:6d:cc:95:a2:e8:23:64:c0:8c:4b:36:ad:d5:64:d1: ef:24:02:2d:54:6d:31:9f:81:ca:5a:7d:4b:1c:64:e7:d4:d9: 17:7c:65:33:17:6c:9b:36:88:fc:29:00:c1:e5:76:d6:ea:cd: ef:29:cc:5d:81:f3:93:71:c8:e1:c3:23:67:06:51:63:f6:de: 8f:2e:8a:da:88:d7:53:16:c7:be:f5:cb:bf:0e:d3:bc:0d:21: bb:6e:e4:ce:0e:3c:49:fa:22:b9:ca:f4:97:b4:e5:db:12:44: a1:78:cb:45:51:fb:4c:27:97:76:dc:65:03:fa:77:df:a0:9c: 5a:4c:e2:9b:a9:2e:87:3a:69:6b:ac:76:31:ec:f9:60:44:21: 66:9d:9d:fe:83:49:38:7b:d6:38:d1:86:de:42:19:b9:8b:a9: 97:9e:0c:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjUwODEwMTkwNzQyWhcNMjUwODE3MTkwNzQyWjAYMRYwFAYD VQQDEw02ODk4ZWRmZS1jYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKoWGTyyrsb7QbnrdlyIvY2J+5VtEcXHIbuKVbYe6pz3UzH2iTXKzKr+HBKH BOnDBXXoxI//YAgCjk2+46KbAPjtX0rR9mdZmI1OTBhTlexmQMWzPy92y+Ng7ndE SSwPiaPF8XNRncRVFurcJvAkWazNYdet+mO2mZyVU6wZmPEqXw76GvuvOd0ruvAw 4xpcGGtBFuaZhBWd2T8qo+P8/4Th+D5C0Bh285ee+dGLa4mqonfMOOFqp4wWGgjk 7FU0ovc2SiVaYnuiigldebqrHT5J3lGauP0pqSgFkkYDLJlsMkFKDsqWTdMmmGCU vhzP7e4v8+8V/8JqIy8Ntv1oUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyt/W/K 1fdusuxivXClW5p8PL1BMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdyevGArS2LOvT4FXnlTVJDkKXIIR49GfGbmRkXtiuGRk6vzxSd7jj nJzS16+4lCeHUhT1VX1ukkGa/795K5voI5YxvTIdVBqXT2nIJBVRggcGpqQw2DEx 7TCq/tltzJWi6CNkwIxLNq3VZNHvJAItVG0xn4HKWn1LHGTn1NkXfGUzF2ybNoj8 KQDB5XbW6s3vKcxdgfOTccjhwyNnBlFj9t6PLoraiNdTFse+9cu/DtO8DSG7buTO DjxJ+iK5yvSXtOXbEkSheMtFUftMJ5d23GUD+nffoJxaTOKbqS6HOmlrrHYx7Plg RCFmnZ3+g0k4e9Y40YbeQhm5i6mXngzP -----END CERTIFICATE-----Generated at Mon Aug 11 01:52:47 2025 by rpki-client