$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: hNdIIaxusqrlhXYIOgnfcSZIpc0Ih+59T50Ttd7jCyk= Subject key identifier: F4:6C:E3:83:FC:DD:94:2C:4E:86:39:65:BC:43:04:A9:B9:18:B4:ED Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: 0174 Signing time: Sat 23 Aug 2025 03:56:20 +0000 Manifest this update: Sat 23 Aug 2025 03:56:19 +0000 Manifest next update: Sat 30 Aug 2025 03:56:19 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: yEofwmNhbZRZWXoODx3BYagZZnBaArVwvbI57L2pvUE=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: UvdgbLYF5+vRHqxdggCtIs+aJSz12jANKpYmMkrt0HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Validity Not Before: Aug 23 03:56:19 2025 GMT Not After : Aug 30 03:56:19 2025 GMT Subject: CN=68a93be4-f3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:6f:28:6c:a9:c1:4f:89:22:18:6b:be:03: ba:a2:a5:88:71:f3:c1:b7:61:24:81:ee:1e:ea:9d: 72:cc:a1:41:88:c4:0a:2d:fd:88:54:7f:53:e3:cc: 2c:83:6e:93:81:60:2a:7e:47:b9:98:c4:36:6b:74: e1:43:77:26:90:4a:14:f4:8e:f7:b2:97:de:66:93: 12:2f:bc:91:0b:4f:36:3f:20:c6:a2:ab:10:ca:69: 90:4d:f4:0d:3c:1e:e1:92:42:bf:cd:53:91:07:2f: c6:f0:96:92:5b:3b:03:ba:0e:44:42:97:fd:17:ca: ee:64:74:f8:6c:60:1e:8b:ba:f8:b1:97:a2:9b:24: b3:e8:33:82:61:21:69:3a:73:35:26:8d:40:a6:4c: 66:ee:1f:87:f0:0e:ad:38:a3:41:00:61:4d:4b:a4: ac:3d:2f:87:81:c9:9b:e3:35:15:f1:c8:45:af:12: ee:ed:e4:97:b8:82:d5:76:55:eb:1a:d9:8e:67:7d: 92:83:97:3e:ea:37:44:a6:10:29:d3:05:26:91:ae: 40:0f:05:08:64:20:04:c2:b7:6a:db:fb:10:e6:d9: d2:80:fb:4b:9e:ad:5b:bf:51:a6:8a:e8:7e:f6:01: d1:c5:fc:1f:c9:3e:bf:21:b6:e9:92:f7:f2:a7:f3: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6C:E3:83:FC:DD:94:2C:4E:86:39:65:BC:43:04:A9:B9:18:B4:ED X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:c3:8b:0a:38:40:c3:c2:03:6a:3d:d1:cf:3f:84:c4:6e:65: f6:a9:0e:68:b8:bd:6f:5b:ef:80:a9:65:d6:cb:5b:fc:db:dd: 19:2e:64:18:f8:a1:50:be:6b:46:96:99:64:65:1e:60:62:b7: a2:b3:46:0c:02:d9:14:35:4c:b1:04:0a:45:0e:3d:39:5b:ea: 0e:2c:90:e1:26:25:f1:b4:29:90:31:7c:a1:28:3b:e3:89:9e: b2:70:e0:95:3c:4a:0d:5f:51:0b:da:88:3f:cd:57:35:ab:04: 76:d2:68:cc:00:79:e7:50:43:c4:ad:30:39:3a:01:2d:c9:15: 2c:c4:67:64:1b:3d:52:59:ec:e5:35:b1:55:f6:76:c5:9c:6a: ea:fe:96:8d:8e:85:2a:6f:0c:9c:79:8e:cd:5d:04:5f:85:84: 0b:1f:19:30:7b:6f:48:1c:8e:63:26:2b:c9:76:18:f8:18:95: 4e:e1:c4:2c:23:e1:fa:a2:c5:a8:5b:fc:fc:ee:24:63:57:86: ba:35:18:80:87:ce:c1:d3:91:c3:b3:03:6d:b5:f3:1f:f7:7d: c7:da:a4:01:c9:c4:f4:28:d3:d2:03:5f:89:df:23:00:e2:7f: 19:6a:ef:ea:0a:a3:78:99:7b:c3:dc:c2:07:4b:5e:62:c1:de: 83:e3:cb:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjUwODIzMDM1NjE5WhcNMjUwODMwMDM1NjE5WjAYMRYwFAYD VQQDEw02OGE5M2JlNC1mM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzNvKGypwU+JIhhrvgO6oqWIcfPBt2Ekge4e6p1yzKFBiMQKLf2IVH9T48ws g26TgWAqfke5mMQ2a3ThQ3cmkEoU9I73spfeZpMSL7yRC082PyDGoqsQymmQTfQN PB7hkkK/zVORBy/G8JaSWzsDug5EQpf9F8ruZHT4bGAei7r4sZeimySz6DOCYSFp OnM1Jo1Apkxm7h+H8A6tOKNBAGFNS6SsPS+Hgcmb4zUV8chFrxLu7eSXuILVdlXr GtmOZ32Sg5c+6jdEphAp0wUmka5ADwUIZCAEwrdq2/sQ5tnSgPtLnq1bv1Gmiuh+ 9gHRxfwfyT6/Ibbpkvfyp/OfewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRs44P8 3ZQsToY5ZbxDBKm5GLTtMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1w4sKOEDDwgNqPdHPP4TEbmX2qQ5ouL1vW++AqWXWy1v8290ZLmQY +KFQvmtGlplkZR5gYreis0YMAtkUNUyxBApFDj05W+oOLJDhJiXxtCmQMXyhKDvj iZ6ycOCVPEoNX1EL2og/zVc1qwR20mjMAHnnUEPErTA5OgEtyRUsxGdkGz1SWezl NbFV9nbFnGrq/paNjoUqbwyceY7NXQRfhYQLHxkwe29IHI5jJivJdhj4GJVO4cQs I+H6osWoW/z87iRjV4a6NRiAh87B05HDswNttfMf933H2qQBycT0KNPSA1+J3yMA 4n8Zau/qCqN4mXvD3MIHS15iwd6D48tf -----END CERTIFICATE-----Generated at Sat Aug 23 21:25:40 2025 by rpki-client