$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft File: i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft (raw, json) Hash identifier: GG8g0dSmaVow33CRr1Miy11vqu6kaOjqfyJtnzYyazw= Subject key identifier: 20:0F:86:DA:4A:1A:54:80:6C:CA:D8:BD:73:04:1C:00:5C:5D:28:61 Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C Certificate issuer: /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft Manifest number: 0132 Signing time: Sat 23 Aug 2025 04:40:15 +0000 Manifest this update: Sat 23 Aug 2025 04:40:14 +0000 Manifest next update: Sat 30 Aug 2025 04:40:14 +0000 Files and hashes: 1: i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl (hash: i32VnnKUso1jsORXjuVsCKheqoWMSKXeX21pvVF8fyU=) 2: 2601A296AE1011EE92B7161BC4F9AE02.roa (hash: ruTuAI8tCOCbFuPP+2u83Ib06u3MS/nsClPmyXw7xNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116E68, serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Validity Not Before: Aug 23 04:40:14 2025 GMT Not After : Aug 30 04:40:14 2025 GMT Subject: CN=68a9462e-9755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:96:84:bc:25:8d:42:bf:18:b9:80:5b:8d: 30:f7:72:f9:53:de:20:48:ae:b5:65:6b:53:a3:ca: 76:e5:54:29:dd:02:8e:10:80:c7:59:21:b7:8c:a0: ef:03:7b:38:f9:22:26:25:d7:c9:f8:92:36:00:7a: a6:6f:2f:6e:4b:e4:b1:63:89:eb:6f:43:c4:de:9f: da:97:4e:07:4c:0b:9e:d6:76:cf:98:1a:76:46:7f: 71:c8:2a:c7:0e:32:dd:63:77:d6:d4:57:20:b7:3a: 5c:76:dc:6a:40:cb:6a:b6:b1:5a:de:41:ed:be:3a: da:ba:28:28:83:3c:1e:e5:3f:c9:3b:b0:0b:eb:64: d5:0d:6a:c8:83:a8:8d:dd:8e:f1:b8:a3:7f:fe:fa: 2e:ca:3c:8e:f0:3c:ff:f4:e7:10:bd:81:c8:a5:80: 7a:a1:c5:ff:74:1b:ce:ea:41:ae:5f:e6:dc:ef:09: c8:8d:63:3a:7b:b1:f2:8f:d9:58:8b:de:e4:26:1c: 59:7c:de:66:b3:a7:59:85:ee:3a:b4:50:f1:7a:63: dc:80:b5:ed:2b:ab:5c:cd:a3:2e:0a:fc:0b:cc:b3: 91:2f:3e:ca:b7:3c:57:80:04:91:d0:fd:2e:79:a9: 8c:62:74:57:43:d1:5c:5e:80:13:8d:89:d3:2d:84: e1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0F:86:DA:4A:1A:54:80:6C:CA:D8:BD:73:04:1C:00:5C:5D:28:61 X509v3 Authority Key Identifier: keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:af:3f:88:cb:aa:a8:24:d5:ea:64:c4:79:41:0b:0f:4d:61: ba:d5:54:e9:ae:35:80:eb:a5:1a:d6:21:b6:7b:60:1d:59:d9: 5f:21:fb:da:94:59:23:83:8b:c0:d1:bd:ff:09:6d:7b:39:4d: 8b:36:4b:74:81:66:57:fe:7b:68:ea:f4:89:ce:56:be:7b:a2: ba:eb:ba:bd:f6:f1:eb:c7:07:35:30:9e:16:48:ee:20:6c:c7: d8:e5:3e:70:bf:aa:62:f0:b1:56:0e:90:27:a0:1a:62:fa:91: 87:5d:76:cc:4a:08:ca:03:65:67:aa:b5:5a:99:3a:72:8a:d7: 51:31:a8:f2:8b:54:0a:c1:6c:8c:2d:44:43:cf:63:c4:77:a7: af:ee:c6:34:c1:e8:35:57:31:d6:74:75:37:a7:ad:37:4f:2d: 55:89:12:2b:e3:df:89:99:b6:03:59:ff:70:b5:28:6a:f0:1e: f6:35:0e:e7:a6:43:5b:a5:00:03:40:28:6f:ce:44:d8:49:0f: 3a:bb:76:3c:db:0c:a8:8b:51:84:68:07:31:1d:10:a1:66:a7: 5a:e1:81:26:4b:65:ef:3a:db:d3:0e:29:57:44:13:1b:25:61: 2b:29:48:a1:cd:30:2f:b4:ff:7b:10:48:6d:59:f4:ce:46:7c: c8:d3:98:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZFNjgxMTAvBgNVBAUTKDhCQTk0RTI0NEM4NzAzRTJFMjEyNDU2Qjk4NzFCM0M4 MkQ1MDcwOUMwHhcNMjUwODIzMDQ0MDE0WhcNMjUwODMwMDQ0MDE0WjAYMRYwFAYD VQQDEw02OGE5NDYyZS05NzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC+WhLwljUK/GLmAW40w93L5U94gSK61ZWtTo8p25VQp3QKOEIDHWSG3jKDv A3s4+SImJdfJ+JI2AHqmby9uS+SxY4nrb0PE3p/al04HTAue1nbPmBp2Rn9xyCrH DjLdY3fW1FcgtzpcdtxqQMtqtrFa3kHtvjrauigogzwe5T/JO7AL62TVDWrIg6iN 3Y7xuKN//vouyjyO8Dz/9OcQvYHIpYB6ocX/dBvO6kGuX+bc7wnIjWM6e7Hyj9lY i97kJhxZfN5ms6dZhe46tFDxemPcgLXtK6tczaMuCvwLzLORLz7KtzxXgASR0P0u eamMYnRXQ9FcXoATjYnTLYThHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAPhtpK GlSAbMrYvXMEHABcXShhMB8GA1UdIwQYMBaAFIupTiRMhwPi4hJFa5hxs8gtUHCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkU2OC9EMkJBQUM0QUFF MEYxMUVFQTdBQzk0MUFDNEY5QUUwMi9pNmxPSkV5SEEtTGlFa1ZybUhHenlDMVFj SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2bE9KRXlIQS1MaUVrVnJtSEd6eUMxUWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkU2OC9EMkJBQUM0QUFFMEYxMUVFQTdBQzk0MUFDNEY5QUUwMi9pNmxPSkV5SEEt TGlFa1ZybUhHenlDMVFjSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+rz+Iy6qoJNXqZMR5QQsPTWG61VTprjWA66Ua1iG2e2AdWdlfIfva lFkjg4vA0b3/CW17OU2LNkt0gWZX/nto6vSJzla+e6K667q99vHrxwc1MJ4WSO4g bMfY5T5wv6pi8LFWDpAnoBpi+pGHXXbMSgjKA2VnqrVamTpyitdRMajyi1QKwWyM LURDz2PEd6ev7sY0weg1VzHWdHU3p603Ty1ViRIr49+JmbYDWf9wtShq8B72NQ7n pkNbpQADQChvzkTYSQ86u3Y82wyoi1GEaAcxHRChZqda4YEmS2XvOtvTDilXRBMb JWErKUihzTAvtP97EEhtWfTORnzI05h+ -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:16 2025 by rpki-client