$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft File: ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json) Hash identifier: QKZGh5oX6Cu4XFxQo3NbsgP77HsbicZgxrMI9/JesRk= Subject key identifier: BD:18:EB:E6:E0:D8:75:83:8E:33:16:B3:32:76:89:20:61:F5:CA:FE Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft Manifest number: 98 Signing time: Sat 23 Aug 2025 06:38:01 +0000 Manifest this update: Sat 23 Aug 2025 06:38:01 +0000 Manifest next update: Sat 30 Aug 2025 06:38:01 +0000 Files and hashes: 1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: Ify8FWH5Ctg/2lQcAsbwiNvANevyNT4SyndlYjk/TsM=) 2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Validity Not Before: Aug 23 06:38:01 2025 GMT Not After : Aug 30 06:38:01 2025 GMT Subject: CN=68a961c9-f004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:51:dc:f5:be:4d:a8:ab:65:11:a2:d6:9f:34: 95:f9:cd:8c:83:e2:71:16:fd:93:af:84:32:8e:58: b9:9a:bf:5b:c5:fb:4d:40:e5:ee:1d:79:56:7e:dc: 09:aa:d9:c8:da:26:d6:25:15:73:6f:fb:ac:73:80: 43:d0:5b:cc:40:64:0e:24:da:f1:23:ef:c7:c7:f2: 68:95:d3:c6:ea:8e:ec:21:15:25:19:c1:1a:00:66: eb:a7:28:9e:0a:53:52:67:7e:bf:5c:d0:95:2d:c0: 96:fa:de:fb:b4:85:75:7e:57:ee:31:ca:98:c9:80: 2a:60:b1:49:f9:a8:dc:67:7b:90:80:64:1f:02:0c: ed:bc:2e:8c:a9:7f:39:24:b6:e6:d2:98:28:47:30: 19:63:55:da:35:a0:c2:7c:ec:08:00:f7:dc:c1:36: 86:af:84:d9:d2:7c:64:48:e2:63:15:e3:91:2a:9c: 33:36:ef:a3:13:fd:48:49:88:6e:d0:5c:72:66:ab: 56:dc:2e:94:5e:56:9d:8c:9e:27:59:05:bf:5d:49: c9:cc:a1:b9:c1:49:05:e2:0a:73:85:d8:68:3a:04: ae:46:d3:38:d5:91:cf:05:35:98:6c:93:96:bb:33: aa:22:d1:73:10:2f:8a:7c:f3:4b:27:5e:67:d5:7d: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:18:EB:E6:E0:D8:75:83:8E:33:16:B3:32:76:89:20:61:F5:CA:FE X509v3 Authority Key Identifier: keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c0:09:66:75:e0:21:b0:f2:0e:a1:fc:42:7e:b8:81:d9:4f: 94:f1:93:31:86:85:f3:c5:84:96:32:7d:b8:f5:e0:03:2e:8e: 04:30:5b:b1:b9:0c:d1:00:e0:d5:b8:5b:90:43:4b:5b:4f:c0: 9e:8c:2b:fa:39:f6:c3:44:70:f6:96:76:ef:e7:7a:cd:41:94: f9:66:de:fb:b1:b8:7c:3b:c8:f9:ce:fb:e6:49:2f:94:e3:05: 70:51:1d:4f:8c:9e:fa:12:85:ed:3c:14:ad:76:fc:33:2f:8b: 1e:56:55:a8:a3:86:f6:1a:16:68:f1:5a:53:98:67:3d:a3:36: 92:d9:20:e8:5a:d5:47:03:80:48:a4:96:3d:82:5d:b6:48:63: 89:9c:0b:62:65:9c:e7:d2:08:f6:af:69:81:20:69:6e:86:3c: d7:b5:19:7c:f4:d7:eb:19:7e:0b:1c:c4:b0:82:c0:77:1c:88: ac:13:ea:a2:d9:76:11:e1:35:72:de:04:cd:2b:e9:ea:69:82: 49:5a:9f:7c:92:1d:35:ec:e7:c0:ac:ec:fd:40:b8:29:b3:8c: ed:40:8e:05:b8:7a:27:28:15:d4:cb:8d:02:02:32:dc:a4:34: 7d:b5:07:1a:ff:7c:b1:bc:cb:3b:85:64:c9:f8:f3:ec:a7:d0: 85:62:8d:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKDhCMTU0NDBBRTIyNkM5OTBGQzlFNTU5MTVGRThDOTUw OUJDQjY2NzYwHhcNMjUwODIzMDYzODAxWhcNMjUwODMwMDYzODAxWjAYMRYwFAYD VQQDEw02OGE5NjFjOS1mMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31Hc9b5NqKtlEaLWnzSV+c2Mg+JxFv2Tr4Qyjli5mr9bxftNQOXuHXlWftwJ qtnI2ibWJRVzb/usc4BD0FvMQGQOJNrxI+/Hx/JoldPG6o7sIRUlGcEaAGbrpyie ClNSZ36/XNCVLcCW+t77tIV1flfuMcqYyYAqYLFJ+ajcZ3uQgGQfAgztvC6MqX85 JLbm0pgoRzAZY1XaNaDCfOwIAPfcwTaGr4TZ0nxkSOJjFeORKpwzNu+jE/1ISYhu 0FxyZqtW3C6UXladjJ4nWQW/XUnJzKG5wUkF4gpzhdhoOgSuRtM41ZHPBTWYbJOW uzOqItFzEC+KfPNLJ15n1X1QvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0Y6+bg 2HWDjjMWszJ2iSBh9cr+MB8GA1UdIwQYMBaAFIsVRAriJsmQ/J5VkV/oyVCby2Z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9ENDM3MTExMjlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXlaRDhubFdSWC1qSlVKdkxa blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9ENDM3MTExMjlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXla RDhubFdSWC1qSlVKdkxablkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPwAlmdeAhsPIOofxCfriB2U+U8ZMxhoXzxYSWMn249eADLo4EMFux uQzRAODVuFuQQ0tbT8CejCv6OfbDRHD2lnbv53rNQZT5Zt77sbh8O8j5zvvmSS+U 4wVwUR1PjJ76EoXtPBStdvwzL4seVlWoo4b2GhZo8VpTmGc9ozaS2SDoWtVHA4BI pJY9gl22SGOJnAtiZZzn0gj2r2mBIGluhjzXtRl89NfrGX4LHMSwgsB3HIisE+qi 2XYR4TVy3gTNK+nqaYJJWp98kh017OfArOz9QLgps4ztQI4FuHonKBXUy40CAjLc pDR9tQca/3yxvMs7hWTJ+PPsp9CFYo2l -----END CERTIFICATE-----Generated at Sat Aug 23 12:42:03 2025 by rpki-client