$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: tK1lumb/KmB3vAJbh28VwegtiNykojUuRDjZSBBGwf0= Subject key identifier: E2:0F:F5:81:15:68:D9:FD:53:F1:BD:B4:76:C8:44:CA:FB:90:7E:6F Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 0135 Signing time: Sat 23 Aug 2025 04:47:51 +0000 Manifest this update: Sat 23 Aug 2025 04:47:51 +0000 Manifest next update: Sat 30 Aug 2025 04:47:51 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: stOMEFZs7wRVuWbKzBvlBIhh6Qf4kGqIkgoLM8iiFQM=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=) 4: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=) 5: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Aug 23 04:47:51 2025 GMT Not After : Aug 30 04:47:51 2025 GMT Subject: CN=68a947f7-eb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:42:bc:08:99:79:1a:01:ca:8f:70:0b:99: 6e:31:f5:fe:4c:86:f5:31:85:da:20:4d:35:aa:be: 31:aa:8c:a3:cb:8a:2b:59:ba:b5:4f:7a:db:82:6a: 3e:15:df:00:35:ad:75:f3:ff:fd:60:56:76:f8:6c: 1d:52:4b:2b:35:cf:cd:4d:10:3a:72:81:79:29:e7: 81:72:af:dd:15:65:c1:12:2c:c4:8c:25:22:df:31: f7:c5:d6:d9:f3:73:18:64:ea:68:be:d8:a2:9f:59: 7f:0b:de:bd:96:44:d1:5b:28:4b:69:96:f2:5b:8f: b5:de:37:d9:ff:56:7c:3d:4c:2d:f7:3a:a1:60:98: 5a:da:85:1f:f4:52:e3:7a:cf:54:ae:22:df:d0:de: 37:6b:8c:00:67:34:8c:8c:8c:e5:4b:09:67:93:20: bc:e4:92:0b:85:7d:a6:49:42:73:56:61:5e:79:bf: c0:fa:a2:fb:32:c5:96:56:0a:0c:e5:7f:1e:b1:8b: 6c:09:60:f0:5a:87:c9:83:a2:7e:92:4f:00:a7:09: 9d:96:7d:c8:37:d8:22:7c:d6:64:fc:54:87:bb:db: 66:6a:58:d6:87:fa:e4:a6:6c:03:b4:ea:00:34:01: cb:e3:83:53:71:5c:fc:1e:71:f2:11:45:4f:b4:47: 77:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0F:F5:81:15:68:D9:FD:53:F1:BD:B4:76:C8:44:CA:FB:90:7E:6F X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a0:c7:1e:3c:c1:c1:80:85:18:68:8c:e4:87:a7:12:d5:43: b0:24:d0:55:dd:3d:36:68:b4:87:a5:ec:5c:ed:c2:8d:0c:16: fb:c9:3d:c8:a1:16:ae:1d:5b:ab:a0:fb:66:be:b5:f8:9c:92: 31:e5:93:83:6e:db:bb:46:26:8a:b8:47:fd:8d:b5:8b:a4:40: 6b:89:51:78:05:7f:5c:1a:b0:57:28:c4:c3:99:03:6d:2c:72: ae:37:47:99:eb:17:2c:07:a3:3c:63:b7:89:d8:9a:5c:ff:fd: b0:91:fa:7f:d3:6e:a6:6f:4d:bb:06:1e:35:9b:69:c7:b4:7e: 14:da:4a:df:08:fc:4d:5c:df:6c:1e:cb:7a:ee:08:2f:c7:d3: 29:03:fb:88:a8:cb:64:eb:36:66:ea:40:78:54:f6:c3:d7:0a: 80:88:b0:e1:82:6d:af:f3:25:df:4a:1e:71:e3:00:e9:82:2b: 59:b8:df:09:4c:2e:e9:62:25:8c:db:f4:a6:c5:4d:b9:77:33: ba:a1:70:00:1a:76:e5:6c:da:d7:76:8f:62:0e:1b:88:b8:05: 9c:d0:8f:c6:c5:c3:8e:7b:39:75:4f:81:bd:99:72:43:c1:52: fe:ec:bb:52:78:f3:14:8e:02:5d:a4:c0:08:39:bf:cf:e7:94: ef:23:8e:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUwODIzMDQ0NzUxWhcNMjUwODMwMDQ0NzUxWjAYMRYwFAYD VQQDEw02OGE5NDdmNy1lYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/VCvAiZeRoByo9wC5luMfX+TIb1MYXaIE01qr4xqoyjy4orWbq1T3rbgmo+ Fd8ANa118//9YFZ2+GwdUksrNc/NTRA6coF5KeeBcq/dFWXBEizEjCUi3zH3xdbZ 83MYZOpovtiin1l/C969lkTRWyhLaZbyW4+13jfZ/1Z8PUwt9zqhYJha2oUf9FLj es9UriLf0N43a4wAZzSMjIzlSwlnkyC85JILhX2mSUJzVmFeeb/A+qL7MsWWVgoM 5X8esYtsCWDwWofJg6J+kk8Apwmdln3IN9gifNZk/FSHu9tmaljWh/rkpmwDtOoA NAHL44NTcVz8HnHyEUVPtEd3WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIP9YEV aNn9U/G9tHbIRMr7kH5vMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnoMcePMHBgIUYaIzkh6cS1UOwJNBV3T02aLSHpexc7cKNDBb7yT3I oRauHVuroPtmvrX4nJIx5ZODbtu7RiaKuEf9jbWLpEBriVF4BX9cGrBXKMTDmQNt LHKuN0eZ6xcsB6M8Y7eJ2Jpc//2wkfp/026mb027Bh41m2nHtH4U2krfCPxNXN9s Hst67ggvx9MpA/uIqMtk6zZm6kB4VPbD1wqAiLDhgm2v8yXfSh5x4wDpgitZuN8J TC7pYiWM2/SmxU25dzO6oXAAGnblbNrXdo9iDhuIuAWc0I/GxcOOezl1T4G9mXJD wVL+7LtSePMUjgJdpMAIOb/P55TvI462 -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:28 2025 by rpki-client