$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: WlNcqjyG6iwlsjo+oWefkwkWfK6s7VKomoct346vANo= Subject key identifier: 8A:0F:94:A5:EE:4B:7F:44:D6:EA:3F:C5:83:6F:B2:F6:EA:FF:61:72 Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 2628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 259B Signing time: Wed 06 Aug 2025 15:48:32 +0000 Manifest this update: Wed 06 Aug 2025 15:48:32 +0000 Manifest next update: Wed 13 Aug 2025 15:48:31 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: OIa2cgG/7wvHKL/NWVZtOgkhts6zyxpCGfGJEaIuj2g=) 2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: ezRu4Wadjp9NH7xvxUm1SslQ6GZ7jqHMcsIlTCHPxl0=) 3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: sPjEV8NdOTwFwPMcdQnUOL5yo6ytt7upFB96AA18yK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9768 (0x2628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Aug 6 15:48:32 2025 GMT Not After : Aug 13 15:48:31 2025 GMT Subject: CN=68937950-f59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:cc:e7:0e:e2:5d:7b:6b:84:62:84:12:06: 61:55:1f:37:67:f7:80:b2:ff:8d:42:0a:9b:11:d8: ab:5d:95:35:9f:17:9f:0f:9e:cf:5d:ac:9e:ec:1b: 77:57:92:f7:3c:1e:ce:43:03:29:69:88:63:1b:e2: c1:4a:ad:ca:b5:a5:19:79:74:c6:7b:a8:d6:7a:c0: 55:8a:cd:19:5f:6a:ee:d1:5f:1e:4f:55:2e:d3:1d: 01:8b:b0:d7:53:aa:09:d2:6a:dc:b4:3a:cb:43:2b: d1:8c:53:4b:d1:89:b5:5b:e0:b7:a5:e2:59:7d:82: f2:3a:c7:77:22:aa:4d:fd:61:6b:e9:cc:63:8a:44: 98:2e:09:35:22:ad:09:bb:1a:3b:59:8b:6c:48:24: 08:35:65:4e:70:aa:1c:c7:89:66:3c:ef:b8:b2:47: 3c:b4:93:7e:4c:0a:4e:3f:b7:df:6c:b7:ba:c2:eb: 7d:19:70:9c:f7:c7:5f:5c:a8:e2:67:90:5b:73:8b: 33:8b:2f:4b:08:49:a0:59:c4:e8:b5:68:18:f1:d7: b7:7b:62:ca:04:2c:9c:92:34:db:f0:ce:ca:a6:cd: d1:be:35:40:22:15:72:8e:a3:a8:c6:83:bc:53:e0: 88:41:36:d0:cb:f8:3e:64:87:99:c8:db:5d:54:5f: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0F:94:A5:EE:4B:7F:44:D6:EA:3F:C5:83:6F:B2:F6:EA:FF:61:72 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b6:93:89:3b:a7:63:7c:6a:51:43:d3:66:07:1e:3d:1a:75: 69:2c:72:98:b2:91:d6:99:b2:a2:f7:de:7a:b6:5e:c9:67:b7: b3:a6:ac:f1:fc:80:8b:c4:c9:75:3b:8e:cc:23:c5:d5:90:c7: 33:eb:03:82:0c:38:ee:da:ae:2f:86:4e:ee:7f:70:c4:22:bb: 18:8f:cc:39:05:88:2d:74:16:8b:b0:ba:ea:3f:39:56:3c:5b: 30:d6:80:14:e4:b7:a7:49:09:77:68:d9:c8:17:dd:05:cd:6f: 0a:d8:e4:5e:b9:02:a1:e7:8d:6b:34:91:03:22:59:62:7f:91: 32:e1:f4:dc:68:6a:a1:9e:93:5a:56:f7:16:06:2a:9c:a9:67: 97:a5:b8:cd:c0:56:b9:c1:26:84:6c:c0:03:8a:14:ba:6f:89: 21:58:35:29:4e:93:fe:9f:a5:39:a3:cf:c0:84:50:3b:9a:83: cb:70:58:cb:ce:a3:94:b2:5c:01:bf:5c:a2:7b:08:fe:65:2e: 7f:b3:2c:98:c3:86:f4:ce:48:c7:9d:cc:71:cb:f6:b1:c6:2b: a5:35:d3:dc:1f:34:9e:d9:53:53:6b:b6:fe:81:3e:7a:b7:09: 64:4e:4d:8e:be:19:a2:15:d7:bc:04:85:34:0f:b2:53:ac:0b: 9e:0f:34:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjUwODA2MTU0ODMyWhcNMjUwODEzMTU0ODMxWjAYMRYwFAYD VQQDEw02ODkzNzk1MC1mNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBbM5w7iXXtrhGKEEgZhVR83Z/eAsv+NQgqbEdirXZU1nxefD57PXaye7Bt3 V5L3PB7OQwMpaYhjG+LBSq3KtaUZeXTGe6jWesBVis0ZX2ru0V8eT1Uu0x0Bi7DX U6oJ0mrctDrLQyvRjFNL0Ym1W+C3peJZfYLyOsd3IqpN/WFr6cxjikSYLgk1Iq0J uxo7WYtsSCQINWVOcKocx4lmPO+4skc8tJN+TApOP7ffbLe6wut9GXCc98dfXKji Z5Bbc4sziy9LCEmgWcTotWgY8de3e2LKBCyckjTb8M7Kps3RvjVAIhVyjqOoxoO8 U+CIQTbQy/g+ZIeZyNtdVF8A9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoPlKXu S39E1uo/xYNvsvbq/2FyMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUtpOJO6djfGpRQ9NmBx49GnVpLHKYspHWmbKi9956tl7JZ7ezpqzx /ICLxMl1O47MI8XVkMcz6wOCDDju2q4vhk7uf3DEIrsYj8w5BYgtdBaLsLrqPzlW PFsw1oAU5LenSQl3aNnIF90FzW8K2OReuQKh541rNJEDIllif5Ey4fTcaGqhnpNa VvcWBiqcqWeXpbjNwFa5wSaEbMADihS6b4khWDUpTpP+n6U5o8/AhFA7moPLcFjL zqOUslwBv1yiewj+ZS5/syyYw4b0zkjHncxxy/axxiulNdPcHzSe2VNTa7b+gT56 twlkTk2OvhmiFde8BIU0D7JTrAueDzQf -----END CERTIFICATE-----Generated at Fri Aug 8 00:38:11 2025 by rpki-client