$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json) Hash identifier: vMV6up4B/uUrcJHIYABWCQpK8+3sEHu9jAi0Fk9oP1Q= Subject key identifier: E5:31:AC:BD:5D:26:11:11:07:0F:A8:A6:6D:C6:18:7B:02:FC:0D:E9 Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft Manifest number: 0359 Signing time: Sat 23 Aug 2025 01:12:29 +0000 Manifest this update: Sat 23 Aug 2025 01:12:29 +0000 Manifest next update: Sat 30 Aug 2025 01:12:29 +0000 Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: La3cQ4Z9644BSB6kaddi8QfDb9yfTWDgGJGuKwICT1U=) 2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: BWjw8ZzgxeIsXktsSggwFqoGIGBV9RKmqBd6UmUawiw=) 3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: w5wAGuBp2YZuw7r2gpx/dOhrAuPlBh9HGiqoIoNxrIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Aug 23 01:12:29 2025 GMT Not After : Aug 30 01:12:29 2025 GMT Subject: CN=68a9157d-dae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:d3:3e:e8:31:3a:04:d5:fa:ae:c8:c6:64: 3e:9b:11:f8:9d:ba:83:63:4d:22:bd:fb:ce:54:64: 9b:00:f0:4f:0a:6a:b4:53:a5:07:28:dd:d3:91:33: 95:d3:aa:e2:7b:9e:90:a2:00:61:d6:46:3e:2e:8d: 34:93:89:c0:7f:ff:64:34:28:de:31:7c:0d:83:40: ee:ec:12:23:f9:c5:af:71:ab:34:47:2f:13:27:fd: 77:58:31:ab:5f:37:77:11:01:39:fa:a0:8f:a2:6e: 3c:7b:0b:1d:7f:17:35:79:e8:fc:68:96:34:88:64: eb:4b:21:41:4a:54:38:bd:b8:48:64:ac:2c:a7:85: 04:e3:4f:8f:e6:04:b3:73:38:34:58:18:ce:ba:65: 33:ef:7e:21:7e:49:7b:c7:87:ed:9a:ed:a4:92:ba: 91:63:03:e7:27:00:a0:30:ba:aa:3a:d0:18:08:31: 84:ee:29:2c:b8:3b:4e:26:19:7a:df:10:8c:70:3f: 69:21:e5:d7:b4:99:c5:9f:86:61:c0:2d:ec:d1:20: 78:ec:82:d9:e7:af:37:ba:6a:00:76:c4:50:f3:6d: 00:df:ac:66:79:b6:90:ed:96:fa:8b:f1:38:01:b4: 8a:2e:fb:ce:42:79:6c:fd:7b:a8:cc:5f:a6:3a:f8: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:31:AC:BD:5D:26:11:11:07:0F:A8:A6:6D:C6:18:7B:02:FC:0D:E9 X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c8:a8:74:76:6f:a2:0e:27:4c:1a:a6:5b:44:b2:e1:58:60: 65:20:30:5d:06:af:9f:26:dc:8e:bf:7a:54:a2:3b:a5:d3:07: 46:e6:25:a5:e2:98:4a:9b:00:aa:50:aa:b2:39:a1:0f:36:8f: 3e:54:d5:de:23:0b:85:01:a7:dc:0f:46:ca:40:31:ef:ed:e3: 99:f8:0d:fa:56:d7:95:39:ec:1a:a2:f4:07:5a:3d:67:98:9f: bc:70:04:e7:d8:49:1a:c3:eb:3b:f6:29:5d:dc:0b:3e:f8:53: 76:fb:b9:dd:a5:b2:a4:24:0e:ac:73:3a:72:05:8b:32:56:05: f7:e6:5c:58:18:e3:f8:24:a9:42:bf:d1:3d:ef:8f:a1:4f:2a: 88:fb:5a:46:89:75:43:28:11:b8:04:4d:93:1f:6e:3a:fe:ba: a1:28:fe:ae:51:9c:d3:00:c4:99:d8:ce:d8:93:de:ed:6c:82: 5e:ab:bb:22:9a:58:0a:29:f8:b0:14:99:fb:fa:f0:e0:f4:77: 69:e8:88:17:11:32:f3:2b:3c:7e:d4:ab:08:cf:ec:2e:5c:df: e7:a6:18:56:ab:e7:3b:ca:54:8c:b7:ea:2c:27:c7:5d:b4:af: be:62:94:c5:d8:c0:bf:0a:38:0c:17:5a:89:26:90:e3:cd:e5: 1f:7b:37:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjUwODIzMDExMjI5WhcNMjUwODMwMDExMjI5WjAYMRYwFAYD VQQDEw02OGE5MTU3ZC1kYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8XTPugxOgTV+q7IxmQ+mxH4nbqDY00ivfvOVGSbAPBPCmq0U6UHKN3TkTOV 06rie56QogBh1kY+Lo00k4nAf/9kNCjeMXwNg0Du7BIj+cWvcas0Ry8TJ/13WDGr Xzd3EQE5+qCPom48ewsdfxc1eej8aJY0iGTrSyFBSlQ4vbhIZKwsp4UE40+P5gSz czg0WBjOumUz734hfkl7x4ftmu2kkrqRYwPnJwCgMLqqOtAYCDGE7iksuDtOJhl6 3xCMcD9pIeXXtJnFn4ZhwC3s0SB47ILZ5683umoAdsRQ820A36xmebaQ7Zb6i/E4 AbSKLvvOQnls/XuozF+mOvjGEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUxrL1d JhERBw+opm3GGHsC/A3pMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtyKh0dm+iDidMGqZbRLLhWGBlIDBdBq+fJtyOv3pUojul0wdG5iWl 4phKmwCqUKqyOaEPNo8+VNXeIwuFAafcD0bKQDHv7eOZ+A36VteVOewaovQHWj1n mJ+8cATn2Ekaw+s79ild3As++FN2+7ndpbKkJA6sczpyBYsyVgX35lxYGOP4JKlC v9E974+hTyqI+1pGiXVDKBG4BE2TH246/rqhKP6uUZzTAMSZ2M7Yk97tbIJeq7si mlgKKfiwFJn7+vDg9Hdp6IgXETLzKzx+1KsIz+wuXN/nphhWq+c7ylSMt+osJ8dd tK++YpTF2MC/CjgMF1qJJpDjzeUfezds -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:58 2025 by rpki-client