$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: PW7wE7N35xEWI2abLVY/d93uXQXyo3Hf+teVJ3+N7Go= Subject key identifier: F2:90:ED:2A:A8:F3:05:D5:78:10:3A:0B:C9:BC:48:33:1A:56:C1:AF Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 34F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 34CB Signing time: Fri 22 Aug 2025 14:19:58 +0000 Manifest this update: Fri 22 Aug 2025 14:19:58 +0000 Manifest next update: Fri 29 Aug 2025 14:19:58 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: 5+5aRnkZDdyV4F+La1ZdIieGrPRXiCF5iOMR0lfcsEo=) 2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: T96snG6T3ksqfKF7mowlYs05xmmtsddFbccqyfqSTxQ=) 3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: aiAqLVoZ6cEM6hY/DjBukcfxFi5I+NxU4FFn5k2CPUQ=) 4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: XONO8AScATR8p+dgN33QWapfnhUPZs7VGzeHh0uX4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13557 (0x34f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: Aug 22 14:19:58 2025 GMT Not After : Aug 29 14:19:58 2025 GMT Subject: CN=68a87c8e-3adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:04:e9:06:43:f1:9a:1b:27:94:7a:a8:52: 0c:cb:e8:4a:08:0a:16:39:73:3c:40:5f:cf:16:c0: e7:37:85:9c:e6:cd:0e:ba:42:f2:c5:cc:e4:63:fe: d4:a7:62:4a:40:85:63:52:0b:e4:22:dc:be:a1:43: ee:93:0f:f5:12:a1:e1:92:11:e5:7b:b4:24:39:ff: e1:f1:00:53:b6:20:f0:11:c2:f7:5b:77:b2:07:16: 54:b1:09:b2:4e:26:53:d6:ad:40:91:e7:29:ad:9d: cf:73:18:5f:d6:bb:73:f8:e1:f5:f0:e8:94:df:0f: aa:7a:fa:d3:28:bf:15:8b:90:b4:99:31:bb:8f:a9: e4:d7:01:7c:1e:94:7c:a7:b4:f6:5b:4f:68:25:c3: 14:fe:e5:38:34:e7:3f:d5:50:3e:84:a0:3a:bd:26: 49:6c:ba:7e:34:28:0e:f0:1a:f0:22:0f:9c:51:0b: be:81:73:03:62:c1:4b:ce:89:9e:50:48:1a:e5:7c: 8c:1f:5d:32:5f:d2:b4:bb:a4:cf:85:db:08:0f:30: 7d:c6:18:6e:87:98:2c:65:ed:cb:93:2f:79:bc:9d: ef:b4:60:ea:c1:c9:5a:7b:b0:3a:fc:9a:be:63:2a: 2f:6f:43:5b:6c:e3:5a:0f:c3:39:7e:0e:de:e0:ae: 89:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:90:ED:2A:A8:F3:05:D5:78:10:3A:0B:C9:BC:48:33:1A:56:C1:AF X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:40:46:9c:cb:80:88:95:33:ad:c5:28:21:ea:38:7f:36:7e: c2:3b:88:b0:1a:11:3e:58:26:df:f4:0b:18:38:71:93:01:6c: 06:dc:b9:2d:73:78:03:4a:f6:ab:71:55:46:bd:05:86:75:7f: b3:5d:2f:2e:94:a1:b0:10:f4:c8:37:9a:cf:1c:ac:31:a5:24: 17:70:c7:d4:9f:dd:d9:51:39:5f:d5:5b:0d:b4:ae:6c:e0:34: b5:7f:50:2a:0e:0c:3e:52:e7:9d:e2:7c:c6:17:e2:c0:09:41: 9f:a6:09:1e:76:3a:ee:7b:24:2b:2b:64:53:38:17:09:98:ff: fb:3b:c1:5f:c7:bb:bb:60:c2:19:46:2c:84:af:c9:1a:a6:64: 09:78:35:c3:63:85:91:e8:c2:c3:d5:49:06:7f:9b:8d:c1:96: e2:68:4c:13:42:df:f4:24:50:bf:ee:b5:7c:fe:96:63:c5:dd: c1:b9:d4:08:94:6f:0c:f3:d8:31:be:d6:bf:fc:56:91:bf:5b: 05:1d:bb:58:2a:8c:8a:ee:6c:61:66:c4:d0:cf:80:55:19:22: 09:70:b8:0c:e3:12:a6:a2:f3:ab:b5:7f:79:fa:30:40:c3:bc: 0a:46:f4:4c:21:b0:53:45:ab:ad:aa:94:3f:00:57:83:46:7f: 56:fd:2d:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjUwODIyMTQxOTU4WhcNMjUwODI5MTQxOTU4WjAYMRYwFAYD VQQDEw02OGE4N2M4ZS0zYWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydME6QZD8ZobJ5R6qFIMy+hKCAoWOXM8QF/PFsDnN4Wc5s0OukLyxczkY/7U p2JKQIVjUgvkIty+oUPukw/1EqHhkhHle7QkOf/h8QBTtiDwEcL3W3eyBxZUsQmy TiZT1q1AkecprZ3Pcxhf1rtz+OH18OiU3w+qevrTKL8Vi5C0mTG7j6nk1wF8HpR8 p7T2W09oJcMU/uU4NOc/1VA+hKA6vSZJbLp+NCgO8BrwIg+cUQu+gXMDYsFLzome UEga5XyMH10yX9K0u6TPhdsIDzB9xhhuh5gsZe3Lky95vJ3vtGDqwclae7A6/Jq+ Yyovb0NbbONaD8M5fg7e4K6JyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKQ7Sqo 8wXVeBA6C8m8SDMaVsGvMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAQEacy4CIlTOtxSgh6jh/Nn7CO4iwGhE+WCbf9AsYOHGTAWwG3Lkt c3gDSvarcVVGvQWGdX+zXS8ulKGwEPTIN5rPHKwxpSQXcMfUn93ZUTlf1VsNtK5s 4DS1f1AqDgw+Uued4nzGF+LACUGfpgkedjrueyQrK2RTOBcJmP/7O8Ffx7u7YMIZ RiyEr8kapmQJeDXDY4WR6MLD1UkGf5uNwZbiaEwTQt/0JFC/7rV8/pZjxd3BudQI lG8M89gxvta//FaRv1sFHbtYKoyK7mxhZsTQz4BVGSIJcLgM4xKmovOrtX95+jBA w7wKRvRMIbBTRautqpQ/AFeDRn9W/S30 -----END CERTIFICATE-----Generated at Sat Aug 23 20:26:38 2025 by rpki-client