$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: tHt900oDPsAsQ/H+JkUWe5yxphZ1W5zqZEN9K69SODA= Subject key identifier: D3:C1:FE:85:BF:CE:3D:A8:C7:53:94:F2:CE:FE:CC:45:12:A8:20:E0 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 0A05 Signing time: Fri 08 Aug 2025 20:14:20 +0000 Manifest this update: Fri 08 Aug 2025 20:14:20 +0000 Manifest next update: Fri 15 Aug 2025 20:14:20 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: 7NyQ9nCsnZAuA1Qw/WDcMcj5c3Scrtc2ZqtCxKMLjGI=) 2: 794C43721A5F11F080409056C4F9AE02.roa (hash: tliF6bTq6KTU3ampYuLl3Y31z/FfmmETEltl1u+bSdc=) 3: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=) 4: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w=) 5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: 5GewRvUgDB6rcXNpXbxI+RsMmEZ6AmWtSegm+so4e0M=) 6: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: hVI5f3OngSrJ6IFISwTQMQm8YsnsRDaEoKxA88qPW7o=) 7: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: dXngOtAcFhvArc3Tgv9HMRYfy3lpLyOKuQ2Q99Bv4cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Aug 8 20:14:20 2025 GMT Not After : Aug 15 20:14:20 2025 GMT Subject: CN=68965a9c-a0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:5d:74:22:4d:a3:f6:05:b5:f1:07:f0:7e: 20:63:f8:fa:bb:84:e3:af:8c:a8:49:f7:e3:57:85: 42:65:b9:18:64:92:36:72:46:2a:35:c1:26:30:5d: 5b:ec:78:0f:0c:cb:b1:81:ef:98:96:70:54:fb:77: d4:b0:74:26:6d:45:d0:71:e5:6c:be:d3:6c:79:42: 4a:2d:0c:00:84:16:8c:27:8d:27:7c:a6:43:5a:fa: a1:a8:1a:b5:cd:b9:bf:cb:92:a4:8d:43:af:ff:09: 42:ec:53:13:19:c9:cf:03:04:9d:0b:a0:d9:e3:b5: 9a:c0:98:04:71:b6:a9:0d:53:55:c1:79:ba:b4:2b: 97:2f:0c:2c:c0:ab:75:8e:36:67:84:cd:15:0a:d4: 83:d2:2e:81:2f:e6:2b:df:3a:21:2b:63:65:2c:a8: be:d4:29:04:2d:62:35:c3:96:a9:b2:8a:ce:07:52: 0f:69:ec:0e:10:21:e9:1c:fe:34:b3:6f:94:06:b3: 16:94:d9:5f:b2:ae:4e:20:ba:c4:bc:8f:9e:03:0e: 5b:01:da:c0:a8:ec:d9:89:74:74:0e:24:c4:54:bf: 16:ca:89:dd:6c:a6:0b:1d:a9:1e:21:d9:c0:35:5b: f2:57:d2:77:21:73:31:ee:0d:82:18:9e:80:a0:85: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C1:FE:85:BF:CE:3D:A8:C7:53:94:F2:CE:FE:CC:45:12:A8:20:E0 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:41:d5:aa:2f:72:19:1e:ce:b3:aa:f6:29:25:fc:82:65:ad: 04:7f:ee:f8:56:49:c4:cd:d9:ac:e2:dd:ad:11:84:62:77:5d: a4:22:5c:66:03:7f:22:6e:e9:22:57:06:21:d6:a9:14:68:aa: c6:04:7b:4f:31:f7:8e:e0:4a:96:4e:57:95:df:1b:77:6f:45: 84:1f:ea:f1:0e:30:30:50:65:21:65:89:d6:e3:41:7e:28:c2: 4e:c5:2d:68:b4:d6:45:c8:82:88:66:77:25:32:96:cc:9a:f1: 95:f6:8e:42:88:f7:89:04:28:ee:e8:22:5d:ee:85:d1:72:89: 09:dc:11:80:13:7e:67:98:77:0b:db:5d:9c:f2:c4:c3:19:f8: 8c:72:17:9b:be:44:34:c8:fc:17:4f:0b:1b:03:d7:79:7b:0e: 62:c3:8a:a8:a4:f7:03:d8:69:8b:12:38:cd:47:dd:16:aa:9e: d6:11:39:2b:08:c1:f8:fb:0c:25:66:e3:5f:83:c4:2e:80:e1: 41:f0:b3:15:0c:74:41:63:0b:2f:bd:d6:78:1c:e0:c6:de:af: 81:94:f4:c0:7c:49:10:56:af:e0:d9:f7:a7:ef:d9:20:11:9e: a1:8b:a0:c5:31:ed:4d:41:f1:43:ab:92:89:c0:42:cb:be:78: 2d:7d:66:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUwODA4MjAxNDIwWhcNMjUwODE1MjAxNDIwWjAYMRYwFAYD VQQDEw02ODk2NWE5Yy1hMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8NddCJNo/YFtfEH8H4gY/j6u4Tjr4yoSffjV4VCZbkYZJI2ckYqNcEmMF1b 7HgPDMuxge+YlnBU+3fUsHQmbUXQceVsvtNseUJKLQwAhBaMJ40nfKZDWvqhqBq1 zbm/y5KkjUOv/wlC7FMTGcnPAwSdC6DZ47WawJgEcbapDVNVwXm6tCuXLwwswKt1 jjZnhM0VCtSD0i6BL+Yr3zohK2NlLKi+1CkELWI1w5apsorOB1IPaewOECHpHP40 s2+UBrMWlNlfsq5OILrEvI+eAw5bAdrAqOzZiXR0DiTEVL8WyondbKYLHakeIdnA NVvyV9J3IXMx7g2CGJ6AoIXSkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPB/oW/ zj2ox1OU8s7+zEUSqCDgMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlQdWqL3IZHs6zqvYpJfyCZa0Ef+74VknEzdms4t2tEYRid12kIlxm A38ibukiVwYh1qkUaKrGBHtPMfeO4EqWTleV3xt3b0WEH+rxDjAwUGUhZYnW40F+ KMJOxS1otNZFyIKIZnclMpbMmvGV9o5CiPeJBCju6CJd7oXRcokJ3BGAE35nmHcL 212c8sTDGfiMchebvkQ0yPwXTwsbA9d5ew5iw4qopPcD2GmLEjjNR90Wqp7WETkr CMH4+wwlZuNfg8QugOFB8LMVDHRBYwsvvdZ4HODG3q+BlPTAfEkQVq/g2fen79kg EZ6hi6DFMe1NQfFDq5KJwELLvngtfWb2 -----END CERTIFICATE-----Generated at Sat Aug 9 02:45:35 2025 by rpki-client