$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json) Hash identifier: HqSlCjasv/5kHSMIS6AU1cncc7dwYLAER6slFgpjA48= Subject key identifier: 63:51:82:CB:02:A8:C1:7A:9A:D6:8C:BA:FA:E1:36:72:50:C2:5B:33 Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft Manifest number: 014C Signing time: Tue 05 Aug 2025 04:40:19 +0000 Manifest this update: Tue 05 Aug 2025 04:40:19 +0000 Manifest next update: Tue 12 Aug 2025 04:40:19 +0000 Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: 7n7B5ayawqxEcX7+9jYIgcWdLwv19xmfgMs0aFozjKs=) 2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Validity Not Before: Aug 5 04:40:19 2025 GMT Not After : Aug 12 04:40:19 2025 GMT Subject: CN=68918b33-b049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:76:e3:2c:93:b6:8c:f1:09:5e:39:05:e2: 2c:ad:b8:0a:c3:2c:8c:d7:f2:5a:b9:07:e3:d9:ce: f2:0e:9d:44:68:34:1b:ca:d4:7c:4a:66:be:fb:e6: 6a:e5:22:ed:d3:93:d9:a3:8f:9a:5a:98:a6:70:39: d1:7a:e5:fb:b5:3b:2d:b8:78:09:46:b4:bc:42:90: 5a:4a:6e:fd:d2:32:91:4d:79:1c:e5:43:87:34:da: 6a:bd:b9:c9:89:2a:58:c9:c6:90:11:62:91:bd:8f: 7c:12:e3:71:83:9c:5b:56:74:6d:21:fc:c0:15:f8: c6:a6:78:ad:95:22:a7:38:18:ca:ca:4c:26:97:a5: 10:4a:ed:a7:a3:0a:b9:34:15:df:7d:8d:74:38:1b: c9:8e:d8:f0:85:0c:1e:69:72:1b:20:41:dc:f5:41: a6:8f:ec:8e:72:7f:97:4a:4f:91:8a:22:8d:fd:d6: 23:7d:c8:a6:c9:77:16:3e:e6:71:00:d4:e7:61:19: 17:61:b0:6c:49:5e:f1:1f:7f:35:ef:03:0c:e1:60: 23:9f:a1:6b:a5:28:ac:85:55:ae:1f:ff:f3:fa:d3: 63:0d:35:22:10:97:d2:45:72:5b:14:b6:13:c8:e6: 2f:c5:69:bf:68:9a:7d:61:e6:6c:88:00:5b:96:a6: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:51:82:CB:02:A8:C1:7A:9A:D6:8C:BA:FA:E1:36:72:50:C2:5B:33 X509v3 Authority Key Identifier: keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ae:3f:8b:36:21:1b:5a:a9:5f:7a:cc:9a:e7:48:5f:da:28: 49:ce:5c:66:1e:5e:d6:c5:52:f4:0f:6a:49:68:2c:e5:ce:e9: dc:1e:7a:4b:38:63:9a:48:3c:53:28:10:d8:55:84:6f:f9:9a: d3:1d:7a:b3:79:a8:7a:cb:43:07:ba:4a:a3:9b:8f:2e:06:c4: ac:f3:17:4d:94:ef:59:e3:cd:25:e9:0b:05:77:2f:d3:3f:d6: f1:8d:62:ea:02:83:3e:b7:c4:ad:07:95:f3:7c:a6:c0:95:fa: 78:0f:94:64:e3:c9:af:57:f3:70:c4:23:92:ee:2c:bb:63:a7: ac:ee:b4:a0:01:0d:66:5c:bc:43:d3:f0:30:b7:82:23:7b:9d: 78:54:3e:bc:a6:4b:9c:38:e2:eb:fd:70:11:ac:88:a6:d9:e7: 32:ff:64:72:47:84:6d:f8:bf:69:94:a6:01:78:9f:a5:3d:d1: 4d:55:57:40:db:64:a7:94:47:36:09:34:17:73:5f:48:d9:e8: 33:b8:05:a4:75:0f:38:64:d1:40:b5:dd:16:06:88:60:2a:38: 7d:67:c8:d2:57:2e:03:86:70:9f:da:47:b4:de:e0:0d:68:01: 50:53:72:28:5f:9e:83:33:9b:7a:c8:27:ea:a1:30:2e:ff:91: 7c:f0:87:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU5QTQxMTAvBgNVBAUTKDIwQkQzRjdGOTk4RUQ0M0Q1RkM0Rjg2MjlERDBDMTg4 RUM3RERBRTAwHhcNMjUwODA1MDQ0MDE5WhcNMjUwODEyMDQ0MDE5WjAYMRYwFAYD VQQDEw02ODkxOGIzMy1iMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgJ24yyTtozxCV45BeIsrbgKwyyM1/JauQfj2c7yDp1EaDQbytR8Sma+++Zq 5SLt05PZo4+aWpimcDnReuX7tTstuHgJRrS8QpBaSm790jKRTXkc5UOHNNpqvbnJ iSpYycaQEWKRvY98EuNxg5xbVnRtIfzAFfjGpnitlSKnOBjKykwml6UQSu2nowq5 NBXffY10OBvJjtjwhQweaXIbIEHc9UGmj+yOcn+XSk+RiiKN/dYjfcimyXcWPuZx ANTnYRkXYbBsSV7xH3817wMM4WAjn6FrpSishVWuH//z+tNjDTUiEJfSRXJbFLYT yOYvxWm/aJp9YeZsiABblqZ5iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNRgssC qMF6mtaMuvrhNnJQwlszMB8GA1UdIwQYMBaAFCC9P3+ZjtQ9X8T4Yp3QwYjsfdrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTlBNC8wRDVEQzUyNDcz MDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFEMWZ4UGhpbmREQmlPeDky dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lMMF9mNW1PMUQxZnhQaGluZERCaU94OTJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTlBNC8wRDVEQzUyNDczMDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFE MWZ4UGhpbmREQmlPeDkydUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1rj+LNiEbWqlfesya50hf2ihJzlxmHl7WxVL0D2pJaCzlzuncHnpL OGOaSDxTKBDYVYRv+ZrTHXqzeah6y0MHukqjm48uBsSs8xdNlO9Z480l6QsFdy/T P9bxjWLqAoM+t8StB5XzfKbAlfp4D5Rk48mvV/NwxCOS7iy7Y6es7rSgAQ1mXLxD 0/Awt4Ije514VD68pkucOOLr/XARrIim2ecy/2RyR4Rt+L9plKYBeJ+lPdFNVVdA 22SnlEc2CTQXc19I2egzuAWkdQ84ZNFAtd0WBohgKjh9Z8jSVy4DhnCf2ke03uAN aAFQU3IoX56DM5t6yCfqoTAu/5F88IcX -----END CERTIFICATE-----Generated at Wed Aug 6 10:13:01 2025 by rpki-client