$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft File: IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json) Hash identifier: 1m0+zhOh323i0+tv6dv0/LybmqJSFN1bD5PVBoQgL8U= Subject key identifier: B6:87:F8:21:21:80:FD:FC:F7:7C:ED:85:A5:B7:D9:78:B6:36:C1:D6 Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft Manifest number: 06B3 Signing time: Fri 22 Aug 2025 22:19:07 +0000 Manifest this update: Fri 22 Aug 2025 22:19:06 +0000 Manifest next update: Fri 29 Aug 2025 22:19:06 +0000 Files and hashes: 1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: auYj4wZDzZj+6D7Q5sMuX0zUqDgB0qyTIwjSFSa9vpY=) 2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: 4G6we2Th1FMc0knctpDnaHzpZ2DpvqNSVPvecBD6QV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Validity Not Before: Aug 22 22:19:06 2025 GMT Not After : Aug 29 22:19:06 2025 GMT Subject: CN=68a8ecdb-b0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:4f:08:7f:4f:83:04:00:e7:5f:a4:61:5c: 0f:32:25:3c:0e:9c:c7:1d:f7:f8:9d:04:15:ee:7b: bc:f8:71:2b:b0:99:2d:a8:90:1f:a5:56:43:20:c5: eb:8a:f9:61:01:6a:ac:a3:12:79:8b:77:0f:f1:1f: ac:ef:ff:c7:62:a6:89:7c:87:e6:ed:10:bd:7e:72: 99:44:82:b8:e4:03:d8:e2:92:24:fa:f5:ba:ee:a7: ab:76:58:65:ef:1b:1f:38:ba:86:6b:78:f8:82:83: d3:74:04:c5:69:09:79:e5:64:d2:95:01:25:63:65: 79:73:02:e8:10:80:69:28:62:2d:84:25:bc:94:0a: 33:48:fa:e1:2d:c3:6e:59:1a:c5:18:3b:ce:3a:d7: 9d:07:f0:23:f1:b2:4b:a6:05:a6:ac:eb:b5:2f:8d: e6:28:1e:84:3e:71:f2:13:1f:46:76:04:a0:50:37: 8d:21:2e:54:ce:14:75:d7:10:01:51:08:13:1c:3f: 84:46:3c:c7:e5:17:31:fb:a7:c9:6b:7c:93:7d:c7: 58:ae:72:e9:45:ad:0a:ea:bb:61:42:d5:da:3e:e7: 58:e3:40:44:10:db:c4:81:30:fd:7c:7c:9d:d2:c6: 03:06:bb:86:ba:4d:34:37:ec:b5:c6:68:4b:92:ea: 29:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:87:F8:21:21:80:FD:FC:F7:7C:ED:85:A5:B7:D9:78:B6:36:C1:D6 X509v3 Authority Key Identifier: keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:af:68:a9:7e:76:3f:66:85:19:af:b0:53:db:df:13:32:b7: 38:02:09:25:e3:bd:9f:13:d8:c9:13:91:af:eb:7b:e6:6c:67: 44:d6:7a:77:9a:f0:b5:2c:18:1f:07:3e:70:f3:80:1d:cb:23: 84:2b:fc:bb:97:02:0c:f8:e7:30:74:7e:38:73:97:8a:86:98: 50:ba:d1:da:fc:02:cf:40:e5:87:cd:9d:47:75:e9:50:44:51: 99:09:cc:d5:5b:a3:4c:cf:93:6c:b8:32:87:ad:95:ab:3f:3c: 9f:55:28:3c:4c:98:07:7c:c3:e0:73:94:41:e3:cd:90:83:82: 60:c9:de:a7:f1:23:a4:57:ee:e7:92:98:62:94:60:8c:58:9a: d2:b6:26:38:97:bc:bd:23:92:a4:a5:78:d5:91:c2:43:f9:b6: 02:d9:15:d2:de:1f:5f:99:b9:45:1c:08:33:30:00:15:e4:b6: cb:43:9c:21:d8:80:51:ef:5e:6f:5d:81:47:f0:11:6a:92:d3: b1:99:70:bc:ab:ed:63:7d:06:7e:4a:51:d2:4a:eb:f0:7a:64: 6a:52:3f:9a:85:55:a1:2c:47:44:a5:74:39:46:db:8c:1d:0d: 00:03:0d:aa:43:29:f3:94:a2:77:36:14:be:bc:69:63:a7:18: 8d:00:fb:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyMkYxMTAvBgNVBAUTKDIxNEIyRkNGNDJCQjJCOTg5MDU4NDVENzMzRDk0NUQ5 NUMyRENBMTIwHhcNMjUwODIyMjIxOTA2WhcNMjUwODI5MjIxOTA2WjAYMRYwFAYD VQQDEw02OGE4ZWNkYi1iMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xtPCH9PgwQA51+kYVwPMiU8DpzHHff4nQQV7nu8+HErsJktqJAfpVZDIMXr ivlhAWqsoxJ5i3cP8R+s7//HYqaJfIfm7RC9fnKZRIK45APY4pIk+vW67qerdlhl 7xsfOLqGa3j4goPTdATFaQl55WTSlQElY2V5cwLoEIBpKGIthCW8lAozSPrhLcNu WRrFGDvOOtedB/Aj8bJLpgWmrOu1L43mKB6EPnHyEx9GdgSgUDeNIS5UzhR11xAB UQgTHD+ERjzH5Rcx+6fJa3yTfcdYrnLpRa0K6rthQtXaPudY40BEENvEgTD9fHyd 0sYDBruGuk00N+y1xmhLkuopwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaH+CEh gP3893zthaW32Xi2NsHWMB8GA1UdIwQYMBaAFCFLL89CuyuYkFhF1zPZRdlcLcoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDIyRi83QzY0NDQyNjc3 NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1aVFXRVhYTTlsRjJWd3R5 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVc3Z6MEs3SzVpUVdFWFhNOWxGMlZ3dHloSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDIyRi83QzY0NDQyNjc3NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1 aVFXRVhYTTlsRjJWd3R5aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAir2ipfnY/ZoUZr7BT298TMrc4Agkl472fE9jJE5Gv63vmbGdE1np3 mvC1LBgfBz5w84AdyyOEK/y7lwIM+OcwdH44c5eKhphQutHa/ALPQOWHzZ1HdelQ RFGZCczVW6NMz5NsuDKHrZWrPzyfVSg8TJgHfMPgc5RB482Qg4Jgyd6n8SOkV+7n kphilGCMWJrStiY4l7y9I5KkpXjVkcJD+bYC2RXS3h9fmblFHAgzMAAV5LbLQ5wh 2IBR715vXYFH8BFqktOxmXC8q+1jfQZ+SlHSSuvwemRqUj+ahVWhLEdEpXQ5RtuM HQ0AAw2qQynzlKJ3NhS+vGljpxiNAPvm -----END CERTIFICATE-----Generated at Sat Aug 23 09:16:20 2025 by rpki-client