$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: jFjf6mMrjPdDy+yzM+t0wNXo069USKdDoiQ580JjulE= Subject key identifier: 7A:FB:56:52:19:C7:CC:A3:0A:81:D7:27:71:35:2B:8C:85:24:50:25 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: 0168 Signing time: Sat 23 Aug 2025 04:02:59 +0000 Manifest this update: Sat 23 Aug 2025 04:02:59 +0000 Manifest next update: Sat 30 Aug 2025 04:02:59 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: sJHJbDpe5/5FI+yjryeaoBOxP99HI0euIOGFNGuoJhE=) 2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=) 3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Aug 23 04:02:59 2025 GMT Not After : Aug 30 04:02:59 2025 GMT Subject: CN=68a93d73-3688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:6c:ee:d2:f0:aa:09:4d:77:fc:b0:d0:3d: 76:7d:b2:b9:ed:72:16:c3:20:13:58:a3:46:ef:d8: 4d:29:74:a3:88:36:79:3f:58:48:b6:c4:43:b6:ea: 34:d1:5e:48:03:42:45:f0:b8:a8:0a:34:a9:14:f5: 3f:7e:45:f3:b1:43:98:c1:ae:45:fe:f6:27:f5:9b: 73:e5:bd:06:a0:8a:96:37:23:65:7e:ad:64:51:2a: f1:98:39:c1:6f:fe:57:7f:e9:28:7e:17:39:81:6d: 5c:fa:7e:80:03:1a:58:45:77:0c:4d:6c:a8:87:9d: a7:20:82:ba:40:e9:a6:1d:40:26:8e:23:cd:88:54: ce:e8:bc:d6:09:47:2a:dc:a2:8a:fe:5e:35:02:d8: b5:c8:0a:75:80:8c:92:fe:e5:63:62:67:47:e7:32: c8:dd:b3:67:8c:8c:74:cf:62:fa:1b:1d:4e:7e:0e: 80:17:0e:98:5a:78:f7:e2:eb:80:d6:e3:09:9d:28: c3:76:6d:06:8c:18:1a:59:24:2a:21:cd:0d:f8:a5: 97:2c:c3:e1:cc:12:86:fa:c3:25:c2:fb:95:a0:ac: ce:a5:d9:ea:0c:15:45:8c:ef:70:4f:94:ed:6a:25: 16:14:c4:d6:39:23:76:3a:0b:da:61:00:74:e3:92: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:56:52:19:C7:CC:A3:0A:81:D7:27:71:35:2B:8C:85:24:50:25 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d1:ab:07:c8:6b:8c:1b:40:7f:d1:23:4a:cf:58:aa:f2:09: f6:58:50:db:d5:a6:3d:e8:13:2d:cc:d0:41:6c:b5:75:53:2c: 6f:1f:e0:21:34:70:a7:d9:cf:11:84:c9:1c:18:0d:01:be:ae: b4:7a:3b:14:e0:d7:73:c6:ac:9d:e5:74:35:79:4d:e9:39:91: f5:c9:c1:aa:09:d7:c5:e7:71:83:6f:7b:cf:2e:bf:0b:d2:24: 55:87:d6:f1:21:1a:27:b9:c2:33:63:00:15:41:54:89:c6:70: c5:fd:64:d2:7f:b6:f9:7b:51:43:59:53:f4:c0:4f:c2:f5:6e: 17:93:d7:a1:f8:25:e1:02:6b:d1:0c:85:1a:c3:a1:27:5e:85: e4:4f:82:59:44:2f:0c:24:47:ad:de:78:3f:ad:77:bb:da:ac: 63:a0:70:c2:c4:3c:1b:ca:3f:44:d8:c5:31:22:07:fe:31:6b: 27:d4:6c:12:c4:c8:b1:70:d6:e5:c8:7d:de:bb:a4:0a:47:64: f6:75:a2:12:26:d1:5f:ee:dc:eb:63:a1:85:a8:37:8c:24:6c: d1:d0:09:82:bb:f1:00:75:e3:49:00:a7:6f:92:42:61:37:d6: a7:9e:1a:b7:cd:3f:dc:a9:6b:75:70:fe:94:2d:82:20:09:a3: e5:c0:f1:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjUwODIzMDQwMjU5WhcNMjUwODMwMDQwMjU5WjAYMRYwFAYD VQQDEw02OGE5M2Q3My0zNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2xs7tLwqglNd/yw0D12fbK57XIWwyATWKNG79hNKXSjiDZ5P1hItsRDtuo0 0V5IA0JF8LioCjSpFPU/fkXzsUOYwa5F/vYn9Ztz5b0GoIqWNyNlfq1kUSrxmDnB b/5Xf+kofhc5gW1c+n6AAxpYRXcMTWyoh52nIIK6QOmmHUAmjiPNiFTO6LzWCUcq 3KKK/l41Ati1yAp1gIyS/uVjYmdH5zLI3bNnjIx0z2L6Gx1Ofg6AFw6YWnj34uuA 1uMJnSjDdm0GjBgaWSQqIc0N+KWXLMPhzBKG+sMlwvuVoKzOpdnqDBVFjO9wT5Tt aiUWFMTWOSN2OgvaYQB045IB9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHr7VlIZ x8yjCoHXJ3E1K4yFJFAlMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4 bkhyYUlqZzVfRHhUYkgteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR0asHyGuMG0B/0SNKz1iq8gn2WFDb1aY96BMtzNBBbLV1UyxvH+Ah NHCn2c8RhMkcGA0Bvq60ejsU4Ndzxqyd5XQ1eU3pOZH1ycGqCdfF53GDb3vPLr8L 0iRVh9bxIRonucIzYwAVQVSJxnDF/WTSf7b5e1FDWVP0wE/C9W4Xk9eh+CXhAmvR DIUaw6EnXoXkT4JZRC8MJEet3ng/rXe72qxjoHDCxDwbyj9E2MUxIgf+MWsn1GwS xMixcNblyH3eu6QKR2T2daISJtFf7tzrY6GFqDeMJGzR0AmCu/EAdeNJAKdvkkJh N9annhq3zT/cqWt1cP6ULYIgCaPlwPE+ -----END CERTIFICATE-----Generated at Sat Aug 23 10:59:14 2025 by rpki-client