$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json) Hash identifier: SbT2HwKMGtvp+nIb9zjy6drLu2hSxjtVr5vW09bBSEs= Subject key identifier: 77:4E:F0:61:62:84:B9:03:CA:58:E3:9C:D0:ED:B6:A9:BB:28:18:8B Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft Manifest number: 014A Signing time: Sat 23 Aug 2025 04:25:54 +0000 Manifest this update: Sat 23 Aug 2025 04:25:54 +0000 Manifest next update: Sat 30 Aug 2025 04:25:54 +0000 Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: UuGPiHPfu5Y255d8EWYdimnJsjj1ZfdFHOoM8ppgOlQ=) 2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: 1BbW+GzFmicFxrJi47abULi9jqJhPlJkmCnwzd461wM=) 3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: uYX2IlbgkFVHpSI6ncTYHrhhVumZeL9bEclaECevCas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Validity Not Before: Aug 23 04:25:54 2025 GMT Not After : Aug 30 04:25:54 2025 GMT Subject: CN=68a942d2-65f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:c4:d6:96:07:82:88:d0:3a:77:9e:16:29: 82:cf:6f:c7:a0:ed:2a:b6:de:c3:1d:63:d7:c5:e6: d3:57:7d:d5:f0:de:4c:de:30:cb:9b:fe:2f:20:26: c8:d4:6c:28:4e:57:43:f6:0c:5f:9f:ac:30:4c:04: 1b:23:5d:aa:e8:af:cf:59:cc:3d:97:74:9a:f4:1f: 9b:5d:1d:cf:47:af:0f:a9:f3:6c:51:e2:80:43:03: a9:15:ee:b1:29:96:f9:95:e0:7f:99:26:22:5e:4b: 70:41:55:72:4d:2f:08:d5:9e:f5:1c:ea:ea:62:26: 89:62:f2:f7:2f:20:7e:36:89:7e:3a:0b:f4:25:96: 5d:a8:e4:6e:29:9a:10:37:00:3e:a4:11:7e:58:f7: f0:70:ae:81:8c:f0:0d:49:a2:22:97:ef:08:8c:93: 89:1c:d1:91:1c:b9:e7:a7:3f:2b:e2:03:c8:d9:91: 46:68:e6:40:55:ac:62:b2:00:2a:8d:6f:a2:72:d5: b6:d6:eb:e2:06:29:48:8f:3c:a5:37:2a:a4:20:18: a5:5d:48:ab:8b:d7:b1:a9:c0:4b:c3:b7:c9:f5:4e: 0b:4a:6d:1f:61:ff:a0:c9:94:20:e1:ae:97:3e:45: a5:ab:de:76:a4:2a:d7:0c:af:07:51:41:04:81:76: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4E:F0:61:62:84:B9:03:CA:58:E3:9C:D0:ED:B6:A9:BB:28:18:8B X509v3 Authority Key Identifier: keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:83:60:b1:8d:0f:57:1a:04:0c:b1:05:fa:4b:0a:26:89:bc: ea:fa:df:c6:25:7d:de:8c:dc:2a:02:2c:b1:e5:6d:3a:91:1d: c1:d3:dc:83:5d:5d:55:14:a3:b1:b1:95:cd:d5:ca:ca:c5:6d: 85:49:92:6b:9d:d3:74:4a:5e:0e:3c:ab:6a:9d:46:7a:01:ff: 2e:ba:33:2c:c1:8a:a6:3b:90:07:84:aa:5a:e7:90:52:4b:84: 67:8e:f9:5b:e7:1d:c8:40:03:8f:d3:05:d7:2d:5d:c7:31:ab: c0:01:90:ef:3c:b2:33:57:ff:a1:2a:58:cd:a8:4f:3a:3c:64: 6e:ba:1f:a5:9d:06:de:04:14:d2:49:be:01:42:b2:98:3c:fe: 09:d1:90:9e:b9:e9:c8:68:df:76:85:f0:44:78:c5:b0:98:12: 94:bc:b5:dc:59:9d:7b:7f:53:a3:31:31:55:33:8a:71:ea:e1: 00:2b:06:63:58:91:5f:4d:38:39:3f:2f:9d:c3:d5:9f:23:fa: a6:9b:24:d7:ac:fc:cb:1e:5c:a3:7a:32:25:e7:e7:b6:97:50: 99:02:66:60:52:66:2a:7c:8e:c9:8c:bd:e4:52:e4:d6:cd:06: 71:2e:96:52:fc:f6:d7:7f:79:cf:f2:51:8f:0e:eb:30:ab:22: cb:7a:8d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE QjVCNjY3OTEwHhcNMjUwODIzMDQyNTU0WhcNMjUwODMwMDQyNTU0WjAYMRYwFAYD VQQDEw02OGE5NDJkMi02NWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0nE1pYHgojQOneeFimCz2/HoO0qtt7DHWPXxebTV33V8N5M3jDLm/4vICbI 1GwoTldD9gxfn6wwTAQbI12q6K/PWcw9l3Sa9B+bXR3PR68PqfNsUeKAQwOpFe6x KZb5leB/mSYiXktwQVVyTS8I1Z71HOrqYiaJYvL3LyB+Nol+Ogv0JZZdqORuKZoQ NwA+pBF+WPfwcK6BjPANSaIil+8IjJOJHNGRHLnnpz8r4gPI2ZFGaOZAVaxisgAq jW+ictW21uviBilIjzylNyqkIBilXUiri9exqcBLw7fJ9U4LSm0fYf+gyZQg4a6X PkWlq952pCrXDK8HUUEEgXYybQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdO8GFi hLkDyljjnNDttqm7KBiLMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv WTNqRWF6NmRyWHpiVzJaNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKg2CxjQ9XGgQMsQX6Swomibzq+t/GJX3ejNwqAiyx5W06kR3B09yD XV1VFKOxsZXN1crKxW2FSZJrndN0Sl4OPKtqnUZ6Af8uujMswYqmO5AHhKpa55BS S4Rnjvlb5x3IQAOP0wXXLV3HMavAAZDvPLIzV/+hKljNqE86PGRuuh+lnQbeBBTS Sb4BQrKYPP4J0ZCeuenIaN92hfBEeMWwmBKUvLXcWZ17f1OjMTFVM4px6uEAKwZj WJFfTTg5Py+dw9WfI/qmmyTXrPzLHlyjejIl5+e2l1CZAmZgUmYqfI7JjL3kUuTW zQZxLpZS/PbXf3nP8lGPDuswqyLLeo0i -----END CERTIFICATE-----Generated at Sat Aug 23 18:59:03 2025 by rpki-client