$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: hr7Ka1W3otGsvx2GZ+HdLiUHoSoyNR6hmIFjG1c/iP0= Subject key identifier: C7:76:89:9A:DB:7D:29:F2:B8:BB:E3:36:80:EE:CE:0F:03:1C:79:FD Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: E0 Signing time: Tue 05 Aug 2025 06:00:45 +0000 Manifest this update: Tue 05 Aug 2025 06:00:45 +0000 Manifest next update: Tue 12 Aug 2025 06:00:45 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: ynFoICqWqZe5inG9Z9ep/RbcQtpwIUQH5PziQTJ/wKg=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: 2Ea6pfyMHuu7UJGQSJfsHF3FX8pvDKiDVHdhUSz8QqA=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Aug 5 06:00:45 2025 GMT Not After : Aug 12 06:00:45 2025 GMT Subject: CN=68919e0d-8f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fe:fe:39:96:29:23:03:d0:43:12:5f:23:80: 75:19:ae:15:57:a4:98:61:c4:5d:a1:c0:55:24:15: 99:53:93:97:e6:8b:25:e5:4a:e4:e4:91:f8:15:00: 6d:63:16:31:f8:0f:5c:0e:d6:70:74:ce:b4:e1:e8: 40:f7:1f:b2:a3:2f:ce:6f:fe:ff:8b:76:5f:37:8c: c2:43:f4:c8:91:71:14:38:dd:75:58:13:2a:d8:c6: 7d:a9:6c:17:ea:aa:97:f8:bd:49:9a:25:ec:30:1e: 49:ab:b8:b6:ce:d6:cc:96:27:27:00:23:39:e0:a1: f9:08:8d:68:89:d0:93:67:db:3a:4b:68:e7:12:4e: a5:a2:fc:3b:61:4b:3e:45:99:13:a5:51:a2:ad:81: 85:61:5d:96:19:d8:da:be:07:48:15:25:ef:00:a8: 87:0a:0a:60:a5:ab:19:bc:b6:af:ae:ce:31:b6:49: cd:6a:53:f2:19:b9:e0:f7:13:64:71:8d:56:8c:69: 26:bb:58:d1:e4:d0:d1:70:5f:ec:e1:bb:2e:0d:03: 6d:29:c0:fa:75:61:e3:c2:bf:4b:f7:2a:3e:28:07: d7:d1:cc:bb:35:96:e2:28:1c:f3:03:50:7d:84:7c: 85:6f:c6:20:67:75:41:e6:4b:12:0a:0c:9d:56:f4: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:76:89:9A:DB:7D:29:F2:B8:BB:E3:36:80:EE:CE:0F:03:1C:79:FD X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:9d:32:3a:7e:9d:30:79:94:fc:fa:3f:3f:91:16:ce:0f:28: 94:50:e3:1a:23:a1:14:15:df:b2:22:8f:4f:9a:23:6d:f6:04: 71:24:85:b6:c5:f9:18:37:2d:b1:a8:3c:79:ad:fd:d0:68:c3: c6:1b:8a:00:25:8c:8f:7f:5c:48:e6:de:d2:ad:ce:21:01:9f: e5:9f:45:13:d7:94:83:82:28:58:80:0f:19:77:5b:fb:83:33: 95:84:fe:ad:15:a1:cf:2c:df:aa:e9:04:7b:be:9c:c2:47:ae: 6f:d1:88:e4:d0:fd:9d:1a:e7:7e:5d:0f:a2:6c:7c:3b:b2:d2: 3b:c7:de:e0:1c:b7:19:25:b4:f7:de:95:28:07:eb:bb:7b:ee: 4a:28:0a:22:8a:35:d1:03:20:b8:62:94:12:70:b2:28:2a:b9: cd:28:80:11:ef:9f:48:d8:6a:5b:e4:25:0b:66:55:9a:4c:6c: d2:e2:97:de:65:c4:f8:db:42:54:03:b9:d2:77:c3:88:8f:cf: 4a:6f:e5:41:ae:72:59:c1:7c:69:38:64:d7:a6:4a:e6:57:af: a9:b4:70:b7:cf:59:8e:d6:e2:c9:ea:3b:d6:68:f1:88:c4:9d: 49:89:bf:a9:8b:28:43:01:cc:37:d6:06:63:95:eb:b3:39:a4: 10:5c:83:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUwODA1MDYwMDQ1WhcNMjUwODEyMDYwMDQ1WjAYMRYwFAYD VQQDEw02ODkxOWUwZC04ZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1P7+OZYpIwPQQxJfI4B1Ga4VV6SYYcRdocBVJBWZU5OX5osl5Urk5JH4FQBt YxYx+A9cDtZwdM604ehA9x+yoy/Ob/7/i3ZfN4zCQ/TIkXEUON11WBMq2MZ9qWwX 6qqX+L1JmiXsMB5Jq7i2ztbMlicnACM54KH5CI1oidCTZ9s6S2jnEk6lovw7YUs+ RZkTpVGirYGFYV2WGdjavgdIFSXvAKiHCgpgpasZvLavrs4xtknNalPyGbng9xNk cY1WjGkmu1jR5NDRcF/s4bsuDQNtKcD6dWHjwr9L9yo+KAfX0cy7NZbiKBzzA1B9 hHyFb8YgZ3VB5ksSCgydVvTgHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd2iZrb fSnyuLvjNoDuzg8DHHn9MB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWnTI6fp0weZT8+j8/kRbODyiUUOMaI6EUFd+yIo9PmiNt9gRxJIW2 xfkYNy2xqDx5rf3QaMPGG4oAJYyPf1xI5t7Src4hAZ/ln0UT15SDgihYgA8Zd1v7 gzOVhP6tFaHPLN+q6QR7vpzCR65v0Yjk0P2dGud+XQ+ibHw7stI7x97gHLcZJbT3 3pUoB+u7e+5KKAoiijXRAyC4YpQScLIoKrnNKIAR759I2Gpb5CULZlWaTGzS4pfe ZcT420JUA7nSd8OIj89Kb+VBrnJZwXxpOGTXpkrmV6+ptHC3z1mO1uLJ6jvWaPGI xJ1Jib+piyhDAcw31gZjleuzOaQQXIOM -----END CERTIFICATE-----Generated at Thu Aug 7 04:01:49 2025 by rpki-client