$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json) Hash identifier: tCGiexQ0DMuPJOpvRNpBPAie5bjXYbQbqPGbMAGj6Bo= Subject key identifier: 15:B0:EF:4C:48:79:E1:4D:71:3C:13:F9:B8:E3:C6:8B:03:0E:E2:18 Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft Manifest number: 0419 Signing time: Sat 23 Aug 2025 00:38:53 +0000 Manifest this update: Sat 23 Aug 2025 00:38:52 +0000 Manifest next update: Sat 30 Aug 2025 00:38:52 +0000 Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: oCNgMKWDJBSN3361lqmTQLfYjvILgBvnKhMeKUj9iL8=) 2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: n7VFHzeUDeBuyUWNvkox2wNIAXMws0upgX8rIok/ab4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Validity Not Before: Aug 23 00:38:52 2025 GMT Not After : Aug 30 00:38:52 2025 GMT Subject: CN=68a90d9d-631c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:44:9e:65:84:d8:0c:b2:0c:56:7b:c7:c7: 13:5e:08:e7:7b:9a:78:ec:6c:b4:21:38:44:78:5e: 8e:82:3e:d3:2f:55:98:47:50:23:d8:e5:42:f9:3e: b3:fb:0e:01:30:f2:a5:ef:46:67:37:7d:0a:a2:fd: 34:01:91:08:82:f4:94:fe:d0:c3:a9:64:62:b3:6e: f4:52:94:79:c1:4b:77:ec:02:1c:28:3a:a3:d5:55: 9a:32:be:5d:06:58:13:f0:db:00:76:d2:6d:b7:33: f7:28:5f:6d:89:c9:30:ba:7e:d2:36:9c:4c:18:77: 5c:3f:a3:03:b6:52:9b:21:6c:6c:7d:64:4c:bc:14: 2b:bc:6d:51:ac:50:c1:f9:e7:35:8a:d3:c7:a4:2c: 04:6a:f3:50:dc:b9:12:77:84:b6:54:1c:7c:b2:d5: a5:fc:62:33:f0:0b:fc:0d:60:73:72:0d:a0:38:2a: 1e:1f:70:78:5c:a1:eb:7c:95:2a:58:4f:a1:1f:ef: 21:1c:27:68:de:3a:48:b9:f1:c5:1c:72:a2:e4:8f: be:14:c6:e7:3f:e3:20:fe:0c:4f:09:df:a5:cd:cd: a3:94:df:0b:2e:63:2d:0b:d5:6e:d5:81:63:61:d6: f2:81:ee:61:e8:2e:65:ca:59:91:2d:95:cc:69:c2: a0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B0:EF:4C:48:79:E1:4D:71:3C:13:F9:B8:E3:C6:8B:03:0E:E2:18 X509v3 Authority Key Identifier: keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:8e:b6:99:70:b7:98:77:59:29:5d:ce:b9:06:aa:76:c9: 16:14:77:fb:b8:c1:e2:94:6e:13:28:5c:9e:d5:0e:a7:66:85: e7:3f:ce:cf:54:e6:8c:a6:c8:7b:d0:ab:f8:eb:5d:f4:97:67: 0a:16:01:de:b7:3f:af:86:05:b4:1e:72:07:9e:9f:d4:63:e9: 2f:e0:88:27:e5:44:12:3d:1c:12:05:9b:1a:51:11:0a:11:e8: 20:80:48:65:4a:95:3f:03:28:b0:99:8e:5e:85:63:dd:3b:f2: ae:04:b7:be:a2:a0:90:7d:31:de:35:7e:ba:92:c6:59:4f:b9: 56:86:b0:e0:e1:aa:c1:32:28:e7:46:99:a2:6b:5b:eb:9c:33: 81:8d:27:61:31:99:da:24:1e:4f:e7:ea:13:04:32:48:d9:2f: 98:2d:3c:ba:9e:0a:ec:50:30:85:0e:f4:b0:2e:a4:43:37:c7: bf:5a:75:37:90:cf:00:b5:fa:90:7c:e7:fc:4d:88:30:dc:0f: e2:22:c1:da:31:0e:9e:f3:b3:c6:b5:4b:98:9f:6e:46:f4:34: 99:cc:6b:7c:ea:3c:fd:54:cf:8e:75:52:e5:1b:65:67:36:ad: b4:53:13:12:25:7e:5b:0c:d3:34:8f:7a:1c:9c:d4:77:9d:30: b4:4b:e4:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBNjIxMTAvBgNVBAUTKDg5RjU5NjExMDAzMEJEQzlCM0JBRDc2Q0ZEMDVDMzEy NDYxN0M5NTIwHhcNMjUwODIzMDAzODUyWhcNMjUwODMwMDAzODUyWjAYMRYwFAYD VQQDEw02OGE5MGQ5ZC02MzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOdEnmWE2AyyDFZ7x8cTXgjne5p47Gy0IThEeF6Ogj7TL1WYR1Aj2OVC+T6z +w4BMPKl70ZnN30Kov00AZEIgvSU/tDDqWRis270UpR5wUt37AIcKDqj1VWaMr5d BlgT8NsAdtJttzP3KF9tickwun7SNpxMGHdcP6MDtlKbIWxsfWRMvBQrvG1RrFDB +ec1itPHpCwEavNQ3LkSd4S2VBx8stWl/GIz8Av8DWBzcg2gOCoeH3B4XKHrfJUq WE+hH+8hHCdo3jpIufHFHHKi5I++FMbnP+Mg/gxPCd+lzc2jlN8LLmMtC9Vu1YFj Ydbyge5h6C5lylmRLZXMacKgeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWw70xI eeFNcTwT+bjjxosDDuIYMB8GA1UdIwQYMBaAFIn1lhEAML3Js7rXbP0FwxJGF8lS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE2Mi8xMTY4MjExQzgw NkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3ZjbXp1dGRzX1FYREVrWVh5 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmV1dFUUF3dmNtenV0ZHNfUVhERWtZWHlWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUE2Mi8xMTY4MjExQzgwNkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3Zj bXp1dGRzX1FYREVrWVh5VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjbY62mXC3mHdZKV3OuQaqdskWFHf7uMHilG4TKFye1Q6nZoXnP87P VOaMpsh70Kv46130l2cKFgHetz+vhgW0HnIHnp/UY+kv4Ign5UQSPRwSBZsaUREK EegggEhlSpU/AyiwmY5ehWPdO/KuBLe+oqCQfTHeNX66ksZZT7lWhrDg4arBMijn Rpmia1vrnDOBjSdhMZnaJB5P5+oTBDJI2S+YLTy6ngrsUDCFDvSwLqRDN8e/WnU3 kM8AtfqQfOf8TYgw3A/iIsHaMQ6e87PGtUuYn25G9DSZzGt86jz9VM+OdVLlG2Vn Nq20UxMSJX5bDNM0j3ocnNR3nTC0S+Q1 -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:33 2025 by rpki-client