$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json) Hash identifier: NlyBmcGxjZTkaH1rM7ATHoiC3RNEjCvzk9ikVTsL1lk= Subject key identifier: 65:FD:19:A6:CA:10:BE:EC:9C:DE:AC:34:0B:69:C9:8A:81:80:DC:03 Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft Manifest number: BA Signing time: Sat 23 Aug 2025 06:15:23 +0000 Manifest this update: Sat 23 Aug 2025 06:15:22 +0000 Manifest next update: Sat 30 Aug 2025 06:15:22 +0000 Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: v32NSE4cvArPFam8tqdZei1lHNnGec0qCu78AHGKhnw=) 2: 10435EE8740511EF93658977C4F9AE02.roa (hash: xmMmx42YHDQ1ahK54oeYt43Mx+x7gEXdRkvJnhnT9V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Validity Not Before: Aug 23 06:15:22 2025 GMT Not After : Aug 30 06:15:22 2025 GMT Subject: CN=68a95c7b-f05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:29:b4:a1:2f:1e:51:f7:96:6a:19:a7:55: 75:89:db:d4:59:b4:9e:7e:51:35:16:cd:5c:95:b5: 03:cb:2a:a7:29:ae:4f:57:16:fa:eb:41:f8:bb:90: 6b:e5:75:6f:af:2d:06:02:d3:3f:e5:bb:d0:f8:d3: 3e:60:66:ce:93:e8:6a:72:a8:4b:38:e8:a8:76:f4: 0d:f0:4f:b5:b8:e7:ad:cb:33:c0:c0:b5:f5:d3:cf: df:11:7d:ec:49:fc:ad:05:1d:c9:1d:0e:67:ed:80: 76:5c:43:3c:33:4a:db:fb:0b:0e:d7:8c:15:df:66: 04:f4:26:d0:96:72:ca:66:a4:ab:38:51:c9:57:5f: f5:94:db:1c:d9:cd:29:b4:46:06:da:38:30:ae:65: 41:cd:af:af:bd:4e:bf:60:fd:dc:c1:83:9c:78:55: 00:f2:5e:5e:c2:85:2b:df:5e:f7:08:a9:b1:6a:73: 5b:d2:d5:c7:d8:bd:cf:d4:dc:9d:91:97:b8:35:7c: f1:a6:b6:cd:f1:fe:36:e1:17:13:e4:f0:6f:36:63: 23:33:4d:1e:1c:7e:82:89:48:75:d6:59:17:d5:13: b1:5a:4d:7d:29:fa:51:62:1c:76:82:01:ce:50:20: 62:9d:3d:f6:b8:ef:57:a1:39:ff:68:5e:fb:55:34: b8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FD:19:A6:CA:10:BE:EC:9C:DE:AC:34:0B:69:C9:8A:81:80:DC:03 X509v3 Authority Key Identifier: keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:53:6c:b0:57:d7:1d:5b:d7:66:85:3e:1b:cd:2f:63:29:26: 7c:e4:a2:a7:2a:e0:38:fa:f4:dc:a3:31:7e:77:7f:98:46:ef: 43:c3:e4:bd:94:2e:e5:32:30:58:55:3f:8f:53:35:ed:d1:1b: 51:76:7c:0e:4e:50:c7:7a:64:69:89:e2:75:72:6e:92:e7:8a: 42:f4:2c:b4:47:51:34:bc:3e:1d:e6:96:b0:12:9a:0f:17:9d: f7:2e:68:84:76:e0:a3:9b:43:10:54:23:58:93:fd:95:a2:7e: ac:83:bd:13:7c:83:82:ca:67:e2:69:07:b3:59:3b:61:97:6f: 38:4a:8c:8b:7f:68:6a:a0:58:bb:99:db:13:4b:63:f5:0a:4e: f5:88:39:de:ed:d3:10:e4:84:60:51:ee:96:b5:82:0b:43:2c: 01:7a:6c:2d:aa:b4:98:02:78:56:bd:8a:e9:6a:3f:0c:f2:b3: dc:af:95:9b:30:81:ff:b2:77:cd:36:74:61:31:c8:64:c2:27: 8d:22:d9:37:96:34:a9:f2:36:d2:24:f3:00:6a:15:4e:91:d4: eb:c2:8e:89:a8:eb:13:04:38:f2:c0:f4:9a:7e:72:ad:24:fc: 0f:91:02:b5:dc:ea:a2:8e:f3:3b:78:24:de:bb:8c:92:74:11: 52:00:c2:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDg4N0UxMTA3QTgzRjExNzRGRjdFM0U3ODA4ODhEQjU3 MjNCNzkyNUIwHhcNMjUwODIzMDYxNTIyWhcNMjUwODMwMDYxNTIyWjAYMRYwFAYD VQQDEw02OGE5NWM3Yi1mMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaYptKEvHlH3lmoZp1V1idvUWbSeflE1Fs1clbUDyyqnKa5PVxb660H4u5Br 5XVvry0GAtM/5bvQ+NM+YGbOk+hqcqhLOOiodvQN8E+1uOetyzPAwLX108/fEX3s SfytBR3JHQ5n7YB2XEM8M0rb+wsO14wV32YE9CbQlnLKZqSrOFHJV1/1lNsc2c0p tEYG2jgwrmVBza+vvU6/YP3cwYOceFUA8l5ewoUr3173CKmxanNb0tXH2L3P1Nyd kZe4NXzxprbN8f424RcT5PBvNmMjM00eHH6CiUh11lkX1ROxWk19KfpRYhx2ggHO UCBinT32uO9XoTn/aF77VTS4XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGX9GabK EL7snN6sNAtpyYqBgNwDMB8GA1UdIwQYMBaAFIh+EQeoPxF0/34+eAiI21cjt5Jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9DNzM5QkFFRTZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VYVF9majU0Q0lqYlZ5TzNr bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lINFJCNmdfRVhUX2ZqNTRDSWpiVnlPM2tscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9DNzM5QkFFRTZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VY VF9majU0Q0lqYlZ5TzNrbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnU2ywV9cdW9dmhT4bzS9jKSZ85KKnKuA4+vTcozF+d3+YRu9Dw+S9 lC7lMjBYVT+PUzXt0RtRdnwOTlDHemRpieJ1cm6S54pC9Cy0R1E0vD4d5pawEpoP F533LmiEduCjm0MQVCNYk/2Von6sg70TfIOCymfiaQezWTthl284SoyLf2hqoFi7 mdsTS2P1Ck71iDne7dMQ5IRgUe6WtYILQywBemwtqrSYAnhWvYrpaj8M8rPcr5Wb MIH/snfNNnRhMchkwieNItk3ljSp8jbSJPMAahVOkdTrwo6JqOsTBDjywPSafnKt JPwPkQK13OqijvM7eCTeu4ySdBFSAMKz -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:12 2025 by rpki-client