$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft File: ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json) Hash identifier: SyUtwUYph8d9c6HDomjX2af8KD+kQ6OLa9aTdLGw89U= Subject key identifier: 49:1A:1D:CD:86:A0:D6:CF:C1:78:DA:3B:CB:A8:A3:F6:AC:63:DE:E7 Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft Manifest number: 052B Signing time: Fri 22 Aug 2025 23:45:29 +0000 Manifest this update: Fri 22 Aug 2025 23:45:28 +0000 Manifest next update: Fri 29 Aug 2025 23:45:28 +0000 Files and hashes: 1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: elVNRbJ//bzDH5TfatmuBDAZorXrt6mHIQM2ltIhlug=) 2: 47B1CB6E460D11F091179886C4F9AE02.roa (hash: UJrloLrvsoge3wfmese2Zva7x1vRvjjKxNvEsNCfNYE=) 3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: IKJkF5tTVOAg9Gcj+RMqJavUI1QmsLflBy8eIb93AAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Validity Not Before: Aug 22 23:45:28 2025 GMT Not After : Aug 29 23:45:28 2025 GMT Subject: CN=68a90118-392a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:d3:c9:ba:90:ba:95:96:c9:ca:82:7a:14: 3c:97:53:54:25:b8:a4:0a:32:ec:c3:d8:45:0e:70: 2a:9e:55:1b:37:1a:16:10:7e:a4:86:c0:7e:4b:4a: 25:44:10:17:99:3c:de:db:e4:08:e8:e1:bd:32:22: df:fc:3f:78:cb:c9:ca:db:d5:dd:6a:06:77:db:33: 28:59:94:cf:2c:3f:af:59:9f:df:e8:3f:30:c9:44: a3:1d:a1:cf:12:86:0e:00:c6:5e:5c:8e:be:20:76: 2a:e2:eb:01:61:26:08:c7:a6:ec:9b:d4:2f:37:44: b8:8c:51:f9:c4:cb:a2:13:71:e9:ea:07:bd:84:be: 86:cf:40:02:61:69:ad:83:76:39:ef:6e:f3:81:49: 11:7e:7b:ba:2c:85:d9:c2:ab:e6:42:6f:89:c6:81: 86:a2:ab:ea:9e:ed:81:a0:a5:1b:bb:b5:09:53:82: fa:59:8c:e8:f4:0f:eb:57:33:8d:dc:9e:75:df:cd: 96:17:4d:26:2a:89:80:5d:dc:27:b9:82:43:f9:d3: 36:81:f9:0f:bf:0e:37:c9:e2:4d:57:17:e3:6f:81: 59:f5:aa:c8:f8:3f:88:b9:ff:50:4b:92:16:70:d6: 1a:c3:50:7b:08:5f:df:73:bf:54:14:36:55:30:d2: f3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:1D:CD:86:A0:D6:CF:C1:78:DA:3B:CB:A8:A3:F6:AC:63:DE:E7 X509v3 Authority Key Identifier: keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:22:2c:d6:a4:ff:26:06:a0:d4:bb:6e:c4:e0:17:2b:a1:08: 83:72:85:6c:0e:b1:85:09:7d:d0:9a:10:e4:54:48:21:96:b9: c3:79:00:b7:2f:0d:d4:50:da:49:ee:68:7d:7a:1a:6b:ec:90: 37:a6:e0:d9:29:51:98:db:ca:15:6d:51:30:0e:96:b6:e8:5d: 57:95:c0:d0:ca:32:41:89:fb:92:3a:10:13:9c:8e:9f:0a:a3: cb:81:09:d7:a8:84:47:80:03:47:a2:34:8e:f3:91:ff:bd:07: 8c:f9:3d:14:c2:01:03:af:50:06:b4:62:ae:11:4a:83:9e:c0: 2d:9c:ea:4a:a4:a0:b9:2d:c8:bd:3b:6b:42:e3:94:92:3a:7c: d3:a3:ba:da:4d:6e:d9:02:6c:94:3f:f3:99:e3:9c:0d:53:b3: 2a:b8:11:67:c5:b8:3a:4f:91:d3:1e:fb:33:70:aa:e0:89:61: 8c:87:61:a0:82:63:da:71:f9:df:47:b7:cf:17:82:85:c6:bd: 10:95:f5:56:18:65:9b:3c:6c:a0:63:bf:7e:4e:8a:48:c6:20: 6f:dc:72:33:25:58:9a:f9:79:6a:84:a1:4f:14:0d:7f:72:f6: d5:1d:14:3d:0a:67:f5:69:85:b1:c9:51:20:63:da:d0:76:b7: 4b:02:a6:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5 QTUzOUFDRTEwHhcNMjUwODIyMjM0NTI4WhcNMjUwODI5MjM0NTI4WjAYMRYwFAYD VQQDEw02OGE5MDExOC0zOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYLTybqQupWWycqCehQ8l1NUJbikCjLsw9hFDnAqnlUbNxoWEH6khsB+S0ol RBAXmTze2+QI6OG9MiLf/D94y8nK29XdagZ32zMoWZTPLD+vWZ/f6D8wyUSjHaHP EoYOAMZeXI6+IHYq4usBYSYIx6bsm9QvN0S4jFH5xMuiE3Hp6ge9hL6Gz0ACYWmt g3Y5727zgUkRfnu6LIXZwqvmQm+JxoGGoqvqnu2BoKUbu7UJU4L6WYzo9A/rVzON 3J51382WF00mKomAXdwnuYJD+dM2gfkPvw43yeJNVxfjb4FZ9arI+D+Iuf9QS5IW cNYaw1B7CF/fc79UFDZVMNLz7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkaHc2G oNbPwXjaO8uoo/asY97nMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfIizWpP8mBqDUu27E4BcroQiDcoVsDrGFCX3QmhDkVEghlrnDeQC3 Lw3UUNpJ7mh9ehpr7JA3puDZKVGY28oVbVEwDpa26F1XlcDQyjJBifuSOhATnI6f CqPLgQnXqIRHgANHojSO85H/vQeM+T0UwgEDr1AGtGKuEUqDnsAtnOpKpKC5Lci9 O2tC45SSOnzTo7raTW7ZAmyUP/OZ45wNU7MquBFnxbg6T5HTHvszcKrgiWGMh2Gg gmPacfnfR7fPF4KFxr0QlfVWGGWbPGygY79+TopIxiBv3HIzJVia+XlqhKFPFA1/ cvbVHRQ9Cmf1aYWxyVEgY9rQdrdLAqbU -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:09 2025 by rpki-client