$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json) Hash identifier: y5Lyall1qpD+rbqMSe0Jnh8R7ckF6AujjUQy0q9bQFM= Subject key identifier: B3:5E:E4:46:BE:24:19:68:95:59:C8:0D:EC:C3:38:5B:95:94:DA:97 Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft Manifest number: 04BC Signing time: Sat 23 Aug 2025 00:05:29 +0000 Manifest this update: Sat 23 Aug 2025 00:05:29 +0000 Manifest next update: Sat 30 Aug 2025 00:05:29 +0000 Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: QiFcuwfzQzuHLBWGu/r9Nrh9wLdZnquyzHCLWaQ3JwY=) 2: F9343F063B0911EC82AE0828C4F9AE02.roa (hash: pIsS/aAz3NlTfiRznLCHJWwJfZnRVJbtBleuPSnoEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Validity Not Before: Aug 23 00:05:29 2025 GMT Not After : Aug 30 00:05:29 2025 GMT Subject: CN=68a905c9-4376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:81:1b:df:66:15:e2:f2:0c:f2:d6:ad:ce: cd:b5:da:4e:37:30:4f:60:e2:8e:36:e9:7c:be:39: 9e:14:b1:85:8e:16:4c:54:20:22:8d:d1:a6:91:b2: 89:e5:3a:63:e7:f9:1b:e7:20:a5:fc:a4:9e:ec:74: b7:83:fa:4c:b3:66:ef:1f:12:a6:20:e3:11:86:d9: ac:39:ab:54:69:3d:51:cf:cd:f5:53:05:38:b0:33: 9b:77:22:03:20:b8:39:e4:85:0c:59:69:80:78:73: 2f:d1:a6:2b:01:f3:87:da:a7:7f:bd:46:18:8a:4c: 72:e0:56:f4:9b:9a:67:f9:73:8a:ef:f0:cc:c8:ee: 57:44:87:92:49:94:c8:30:e9:4a:0f:79:00:d1:7c: ed:43:59:7c:a4:33:32:e7:f9:0d:13:e3:79:02:17: 52:6f:37:21:81:2b:1f:7e:c9:d5:c1:fb:8e:45:08: 30:ec:81:1a:05:a5:e8:b0:d7:8a:13:5a:13:d1:85: 5d:5c:10:c4:ea:1e:84:59:c7:c6:71:43:4c:55:df: d4:c9:87:1a:d0:02:63:73:09:8c:db:f4:43:48:71: 3a:cc:7c:98:2b:90:cf:cd:46:57:8e:2c:ea:a6:9c: 25:32:8b:f7:a5:5f:57:5c:8c:33:cf:81:ba:b9:b5: c5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5E:E4:46:BE:24:19:68:95:59:C8:0D:EC:C3:38:5B:95:94:DA:97 X509v3 Authority Key Identifier: keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:41:05:f8:ea:35:ba:14:fa:16:6c:4c:02:02:89:4f:a1:ae: 41:71:66:ee:69:9a:9d:75:33:d6:b0:81:a2:04:8b:59:0b:ad: 4b:cf:48:7f:f0:84:ed:c5:9e:98:37:fe:99:f2:8d:17:8a:9d: cb:f7:bc:1a:9e:d2:18:0d:f4:a2:1b:32:da:54:b9:08:47:d3: 71:38:96:ee:9a:86:2a:52:ae:39:ac:ba:b4:a4:2d:47:bd:42: 21:95:f0:aa:07:b6:fd:e8:b9:be:4b:6a:1a:13:d6:22:ee:fa: 4f:48:81:3d:b8:2f:72:b0:e0:4a:c2:46:a9:af:62:16:36:51: 74:9c:c9:f9:5f:98:be:3c:56:79:ef:91:85:60:79:c0:dc:90: 27:4a:17:08:23:08:8c:08:73:ba:e3:99:dd:d1:af:90:a1:09: 45:e2:33:84:5c:a5:8f:13:af:7a:21:e0:b6:55:b8:e2:13:22: 9f:e6:2e:65:d7:7f:11:92:b7:69:88:8b:9c:a6:b7:f7:ab:1e: c2:9d:d5:93:f6:c9:a1:11:76:98:a0:41:19:a0:d0:02:5b:1a: 71:76:3b:d0:14:0f:cf:dc:fb:d9:ed:d7:38:1c:ed:79:6a:b3: 71:c4:7f:5c:54:8f:6e:bd:41:fc:85:05:7d:3b:f8:71:75:32: 9b:c8:89:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5N0ExMTAvBgNVBAUTKDg5NDM2NjNEQ0Y4MzA5RkEyNzRBNDY1MkZBODNBQkQy NkQ4NDI2NEYwHhcNMjUwODIzMDAwNTI5WhcNMjUwODMwMDAwNTI5WjAYMRYwFAYD VQQDEw02OGE5MDVjOS00Mzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVWBG99mFeLyDPLWrc7NtdpONzBPYOKONul8vjmeFLGFjhZMVCAijdGmkbKJ 5Tpj5/kb5yCl/KSe7HS3g/pMs2bvHxKmIOMRhtmsOatUaT1Rz831UwU4sDObdyID ILg55IUMWWmAeHMv0aYrAfOH2qd/vUYYikxy4Fb0m5pn+XOK7/DMyO5XRIeSSZTI MOlKD3kA0XztQ1l8pDMy5/kNE+N5AhdSbzchgSsffsnVwfuORQgw7IEaBaXosNeK E1oT0YVdXBDE6h6EWcfGcUNMVd/UyYca0AJjcwmM2/RDSHE6zHyYK5DPzUZXjizq ppwlMov3pV9XXIwzz4G6ubXFywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNe5Ea+ JBlolVnIDezDOFuVlNqXMB8GA1UdIwQYMBaAFIlDZj3Pgwn6J0pGUvqDq9JthCZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDk3QS82MTY3QTZEMjNC MDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENmb25Ta1pTLW9PcjBtMkVK azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVTm1QYy1EQ2ZvblNrWlMtb09yMG0yRUprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDk3QS82MTY3QTZEMjNCMDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENm b25Ta1pTLW9PcjBtMkVKazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9QQX46jW6FPoWbEwCAolPoa5BcWbuaZqddTPWsIGiBItZC61Lz0h/ 8ITtxZ6YN/6Z8o0Xip3L97wantIYDfSiGzLaVLkIR9NxOJbumoYqUq45rLq0pC1H vUIhlfCqB7b96Lm+S2oaE9Yi7vpPSIE9uC9ysOBKwkapr2IWNlF0nMn5X5i+PFZ5 75GFYHnA3JAnShcIIwiMCHO645nd0a+QoQlF4jOEXKWPE696IeC2VbjiEyKf5i5l 138RkrdpiIucprf3qx7CndWT9smhEXaYoEEZoNACWxpxdjvQFA/P3PvZ7dc4HO15 arNxxH9cVI9uvUH8hQV9O/hxdTKbyIkp -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:26 2025 by rpki-client