$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft File: Ilh8wstvNRBjeD-xz9pm5E4uysE.mft (raw, json) Hash identifier: E7tox2S4sznAtLW2rEwDz3nV4YIv63D9KaxbqRQMqwU= Subject key identifier: AA:30:06:C9:21:85:48:65:EC:19:A8:77:64:E3:F3:2F:86:4B:3B:9B Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 Certificate issuer: /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft Manifest number: 3F Signing time: Sat 23 Aug 2025 07:42:51 +0000 Manifest this update: Sat 23 Aug 2025 07:42:51 +0000 Manifest next update: Sat 30 Aug 2025 07:42:51 +0000 Files and hashes: 1: Ilh8wstvNRBjeD-xz9pm5E4uysE.crl (hash: SSDfCHK20OyYbfMjtTwnObv0Bp2UQnMWTphi63lFvyU=) 2: BDA4863C1E6111F09E161078C4F9AE02.roa (hash: 3wClZfyrRuvHiw5+gXU2O2uGIydycpdkHEs8+vS/Fqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Validity Not Before: Aug 23 07:42:51 2025 GMT Not After : Aug 30 07:42:51 2025 GMT Subject: CN=68a970fb-43d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:1a:be:8b:b7:a6:9a:9e:e0:64:da:2d:73: 7a:a6:64:6c:88:99:ea:01:80:ad:6f:15:cd:02:32: 46:bc:09:3b:b1:bf:2f:2e:5f:13:e2:da:e7:57:59: a8:dc:63:6e:42:82:41:23:18:bc:fd:8b:ff:c3:e8: 08:82:6f:ca:42:cd:57:c5:60:8a:a1:df:e5:a2:70: a8:66:32:80:ce:f4:f6:70:7f:ff:90:c7:f8:54:51: e7:a2:ee:02:e3:a7:6f:c4:52:0e:8f:13:ba:74:95: 5c:b9:76:7c:44:09:9a:36:c9:93:6a:9d:00:53:e4: 5c:11:07:87:f0:23:90:a9:f8:aa:7f:a8:17:a9:e9: 58:9c:b1:28:96:f8:74:b2:43:55:79:1c:53:0f:0b: db:0b:0f:f9:e0:ba:44:07:9f:29:f5:e2:44:c9:e5: 90:49:9f:53:2a:6d:68:19:88:e9:7b:18:79:41:b5: 3f:5f:c6:81:6b:85:e2:67:73:71:ea:06:e5:3b:11: 63:5c:55:1d:41:20:30:66:fc:b2:59:91:fd:dc:f4: 4c:0b:6b:6c:a0:90:d6:09:3b:b2:20:5c:c6:4b:6b: 0f:93:5d:47:c9:b9:2f:92:24:27:fa:18:aa:84:61: 92:30:83:ce:f4:88:b7:ed:ca:1f:ed:bd:4b:ba:7b: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:30:06:C9:21:85:48:65:EC:19:A8:77:64:E3:F3:2F:86:4B:3B:9B X509v3 Authority Key Identifier: keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:22:0a:2e:8e:4e:4a:59:4b:2e:27:9b:74:47:fd:b8:ce:a7: a5:69:77:a1:11:a2:ff:28:b3:83:6f:5f:ed:44:b0:0b:e1:f1: 5a:b0:b0:2e:5e:ce:f5:d9:ad:15:4e:52:08:04:b8:98:b2:80: aa:6d:4e:12:97:89:73:90:40:81:d6:e8:30:19:be:a5:52:27: 16:69:58:3f:af:53:fd:66:e4:0b:ba:5e:84:9d:39:bc:ab:de: 1c:4e:6b:d5:61:08:e7:e4:bc:89:f5:1a:40:85:08:e1:9e:21: 2d:0e:a3:5e:26:7a:ee:7d:88:42:8c:f0:f0:37:4e:73:01:f0: a3:29:87:5a:e8:69:7a:49:ee:2b:a4:dc:ef:35:05:8e:09:ca: 55:28:1f:5b:5b:82:41:71:83:95:cf:1c:da:de:c3:2c:e0:df: fb:01:76:19:f0:b1:32:9b:9b:60:4e:7a:be:65:75:59:5b:cd: ca:33:3f:97:7d:3a:86:0b:24:ca:74:5c:be:e7:2c:f0:91:a7: be:6c:35:14:ae:b0:20:0b:3b:fe:00:c0:4c:ee:13:09:8f:b5: 42:2d:8c:83:d0:55:d5:dd:7e:54:98:28:8f:b8:bb:84:28:c6: 73:8a:85:de:44:98:49:4e:c7:78:55:5e:e2:74:f0:f4:fa:27: ea:20:13:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OUI5RDExMC8GA1UEBRMoMjI1ODdDQzJDQjZGMzUxMDYzNzgzRkIxQ0ZEQTY2RTQ0 RTJFQ0FDMTAeFw0yNTA4MjMwNzQyNTFaFw0yNTA4MzAwNzQyNTFaMBgxFjAUBgNV BAMTDTY4YTk3MGZiLTQzZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQoBq+i7emmp7gZNotc3qmZGyImeoBgK1vFc0CMka8CTuxvy8uXxPi2udXWajc Y25CgkEjGLz9i//D6AiCb8pCzVfFYIqh3+WicKhmMoDO9PZwf/+Qx/hUUeei7gLj p2/EUg6PE7p0lVy5dnxECZo2yZNqnQBT5FwRB4fwI5Cp+Kp/qBep6VicsSiW+HSy Q1V5HFMPC9sLD/ngukQHnyn14kTJ5ZBJn1MqbWgZiOl7GHlBtT9fxoFrheJnc3Hq BuU7EWNcVR1BIDBm/LJZkf3c9EwLa2ygkNYJO7IgXMZLaw+TXUfJuS+SJCf6GKqE YZIwg870iLftyh/tvUu6e5yJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqjAGySGF SGXsGah3ZOPzL4ZLO5swHwYDVR0jBBgwFoAUIlh8wstvNRBjeD+xz9pm5E4uysEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5QjlELzI0MDJGQjA4MUU2 MTExRjBBREQzRDE3M0M0RjlBRTAyL0lsaDh3c3R2TlJCamVELXh6OXBtNUU0dXlz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWxoOHdzdHZOUkJqZUQteHo5cG01RTR1eXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 QjlELzI0MDJGQjA4MUU2MTExRjBBREQzRDE3M0M0RjlBRTAyL0lsaDh3c3R2TlJC amVELXh6OXBtNUU0dXlzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEYiCi6OTkpZSy4nm3RH/bjOp6Vpd6ERov8os4NvX+1EsAvh8VqwsC5e zvXZrRVOUggEuJiygKptThKXiXOQQIHW6DAZvqVSJxZpWD+vU/1m5Au6XoSdObyr 3hxOa9VhCOfkvIn1GkCFCOGeIS0Oo14meu59iEKM8PA3TnMB8KMph1roaXpJ7iuk 3O81BY4JylUoH1tbgkFxg5XPHNrewyzg3/sBdhnwsTKbm2BOer5ldVlbzcozP5d9 OoYLJMp0XL7nLPCRp75sNRSusCALO/4AwEzuEwmPtUItjIPQVdXdflSYKI+4u4Qo xnOKhd5EmElOx3hVXuJ08PT6J+ogE4I= -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:33 2025 by rpki-client