$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: S/YBT0CkHmxVRxdgTh8os1ZwR6nttDpryGSjRVBslj4= Subject key identifier: 8E:8E:70:FC:22:D5:D6:68:71:97:44:E8:1B:AF:B0:92:6F:48:B7:F2 Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0C94 Signing time: Fri 22 Aug 2025 18:22:39 +0000 Manifest this update: Fri 22 Aug 2025 18:22:38 +0000 Manifest next update: Fri 29 Aug 2025 18:22:38 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: q7CQHkTtyQhEKKQvWp3PNfZ1LgYIZwl3iDUC/Y/ctVw=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: O6ZOPVwxFkNjeJWmRWdaGnVAImdC2WliszZw8u4xZjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Aug 22 18:22:38 2025 GMT Not After : Aug 29 18:22:38 2025 GMT Subject: CN=68a8b56e-dc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:93:e5:c3:19:21:79:41:de:b8:c8:8a:2a: 22:22:34:d7:e7:37:20:25:44:2f:fe:4c:70:77:d8: 90:b4:3d:b6:fc:40:62:fc:ed:ab:13:18:d1:38:c9: b4:1c:ca:c1:93:b7:2b:21:a2:67:2e:20:53:83:d0: 17:d5:07:da:78:4a:8f:9f:e5:ae:ad:42:25:66:e2: d1:31:5a:e9:6b:14:90:b6:c1:2c:dc:55:a5:0b:c0: 83:c6:18:42:b9:cd:bb:9f:5f:bb:9e:02:aa:7f:83: c7:da:6a:ab:80:63:ab:9c:54:6b:5e:50:8d:76:f5: 38:e9:da:7e:e4:98:66:9c:57:df:f7:a3:e1:6f:09: ac:8a:e1:36:cb:f8:a3:12:6d:99:dd:9d:74:d0:50: 35:1e:de:9a:1c:af:1f:e6:21:14:c6:09:2e:27:05: f3:b8:fc:83:3d:0f:28:d9:84:4b:0b:2f:9a:c4:c0: 0a:b9:2e:12:0e:0d:a5:67:37:37:6e:53:d5:23:65: eb:78:f3:98:7f:f9:88:74:b5:f3:03:a8:77:de:1d: c3:71:5d:d3:94:ea:41:cb:f3:6e:aa:61:55:d6:f7: 64:62:dc:bc:e0:ee:49:ab:35:bd:ac:a3:02:bb:78: 4f:f1:43:76:50:5c:03:02:4f:5f:4d:a7:7f:4f:bb: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8E:70:FC:22:D5:D6:68:71:97:44:E8:1B:AF:B0:92:6F:48:B7:F2 X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ed:6c:cc:24:3d:3c:b3:47:25:0c:91:cc:e0:73:c7:50:35: b6:7d:30:b8:61:63:f3:ee:a7:d9:56:0d:ad:8d:84:e0:9f:dd: 13:84:92:03:96:dd:6c:e9:2d:28:a5:38:65:f6:eb:75:b0:e6: ac:d3:55:cc:f3:4f:23:7e:5a:05:4f:5f:7f:99:2e:aa:e3:db: 1a:1d:d6:9f:f3:d3:08:4a:fc:2a:a2:44:d5:55:c3:f9:6e:bf: 84:b4:6b:df:e5:8a:7a:3c:e0:24:5e:3c:8d:78:18:9d:d7:c0: 9a:9c:45:54:d4:46:51:71:51:85:57:44:68:62:42:13:5a:2a: 79:0a:6d:b6:c3:07:bc:17:fa:ab:a1:d2:2d:08:e1:40:03:98: 03:f5:10:91:cd:8d:40:be:8f:fd:8d:ef:fa:a5:e3:be:ec:5a: f2:09:fb:2c:e9:2b:9e:f1:02:41:bd:78:40:fe:a9:bb:22:26: bd:f7:ea:00:d3:4e:e5:98:cb:ff:5e:47:b1:9a:e0:9f:1d:3b: 2a:89:b7:eb:72:37:7f:98:b3:29:f0:8e:89:b7:a5:44:c6:3f: ec:bc:5d:8e:06:cb:25:fa:7c:aa:39:bf:f8:d4:61:a4:29:e5: ac:6d:3f:ec:f2:65:6c:c4:f3:98:7e:58:6f:8a:c4:11:f0:2b: 59:10:65:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjUwODIyMTgyMjM4WhcNMjUwODI5MTgyMjM4WjAYMRYwFAYD VQQDEw02OGE4YjU2ZS1kYzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVmT5cMZIXlB3rjIiioiIjTX5zcgJUQv/kxwd9iQtD22/EBi/O2rExjROMm0 HMrBk7crIaJnLiBTg9AX1QfaeEqPn+WurUIlZuLRMVrpaxSQtsEs3FWlC8CDxhhC uc27n1+7ngKqf4PH2mqrgGOrnFRrXlCNdvU46dp+5JhmnFff96PhbwmsiuE2y/ij Em2Z3Z100FA1Ht6aHK8f5iEUxgkuJwXzuPyDPQ8o2YRLCy+axMAKuS4SDg2lZzc3 blPVI2XrePOYf/mIdLXzA6h33h3DcV3TlOpBy/NuqmFV1vdkYty84O5JqzW9rKMC u3hP8UN2UFwDAk9fTad/T7sRywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6OcPwi 1dZocZdE6BuvsJJvSLfyMB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM7WzMJD08s0clDJHM4HPHUDW2fTC4YWPz7qfZVg2tjYTgn90ThJID lt1s6S0opThl9ut1sOas01XM808jfloFT19/mS6q49saHdaf89MISvwqokTVVcP5 br+EtGvf5Yp6POAkXjyNeBid18CanEVU1EZRcVGFV0RoYkITWip5Cm22wwe8F/qr odItCOFAA5gD9RCRzY1Avo/9je/6peO+7FryCfss6Sue8QJBvXhA/qm7Iia99+oA 007lmMv/XkexmuCfHTsqibfrcjd/mLMp8I6Jt6VExj/svF2OBssl+nyqOb/41GGk KeWsbT/s8mVsxPOYflhvisQR8CtZEGVI -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:44 2025 by rpki-client