$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft File: iuWu7yqR89-GYD7cVP6ExbtXnBU.mft (raw, json) Hash identifier: LAF07Jgf1GDjoQzqQvdnF3YBcm7Pb7hyWaDODaxeRcQ= Subject key identifier: BD:31:E9:9C:CD:BA:B5:04:67:39:86:9C:5D:F2:1D:33:0F:C0:DC:AB Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15 Certificate issuer: /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft Manifest number: E5 Signing time: Sat 23 Aug 2025 05:33:42 +0000 Manifest this update: Sat 23 Aug 2025 05:33:42 +0000 Manifest next update: Sat 30 Aug 2025 05:33:42 +0000 Files and hashes: 1: iuWu7yqR89-GYD7cVP6ExbtXnBU.crl (hash: wru+OxquHx3o9rbs9tumDakrHVqoiQ4OSCPrqTbzR+s=) 2: D055D382225711EF975F6747C4F9AE02.roa (hash: 2DIbbbQohcgsUM76Q6xBDUsyKlfYgqXTFBRbG6OVDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15 Validity Not Before: Aug 23 05:33:42 2025 GMT Not After : Aug 30 05:33:42 2025 GMT Subject: CN=68a952b6-3050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:1a:35:26:f4:af:77:5c:01:54:79:33:c3: c4:3c:de:85:88:9a:f5:ce:95:44:6f:c5:b1:3c:e3: 06:0c:ba:1c:94:e0:3e:06:fc:74:ea:0f:b6:f9:74: 68:f9:ef:03:f9:4c:4a:6d:8f:54:1b:cf:b2:c9:e0: 01:52:f9:d7:b9:a6:08:aa:ef:9b:d9:99:4a:ab:66: a1:93:8e:81:5c:d8:97:13:8c:eb:d7:7b:94:d9:5e: f4:f7:22:5f:2e:89:a3:00:ba:a5:d9:17:f5:6d:a6: 51:a5:66:df:d0:bf:f3:f9:94:63:95:4e:6a:7b:1d: 8c:22:ea:48:14:d8:bf:d1:8c:76:87:b2:9d:41:fb: 74:1d:38:6b:86:4e:be:69:8e:82:b8:0e:93:ae:52: d9:70:8a:54:be:b7:1d:f5:8b:12:d3:ab:7f:7c:3c: 9d:50:80:c0:99:f8:e7:ff:65:18:43:e8:06:33:15: 2f:9b:74:ee:f1:57:92:ac:6a:cb:2e:0a:b7:99:99: 3d:c3:0e:cc:19:a6:56:68:85:51:d7:7f:6b:84:39: a9:04:5c:e8:ad:ab:0d:36:f6:16:20:52:b4:0f:25: 7f:f5:73:04:08:d8:bb:e6:6f:3a:34:96:d9:92:18: dd:3d:96:91:34:a7:48:30:1e:e3:1c:8d:eb:94:47: 5f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:31:E9:9C:CD:BA:B5:04:67:39:86:9C:5D:F2:1D:33:0F:C0:DC:AB X509v3 Authority Key Identifier: keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:05:60:64:8d:e3:0a:8a:bc:c9:3d:21:25:25:7d:61:34:62: 81:48:c7:14:1e:f4:bc:85:ea:40:d0:86:5e:eb:75:12:a5:8e: 26:9e:8c:d1:38:c7:6d:57:2f:3b:8e:8c:2a:c3:b3:26:28:8d: 34:86:7d:39:db:a3:45:18:20:73:21:d8:9b:f4:0c:fe:46:cc: 47:29:5e:16:a1:15:3f:c2:52:ff:a6:1f:82:f7:18:83:9a:c5: 78:d8:88:a1:7a:06:62:c5:0f:20:7d:5e:9f:11:c2:dc:40:00: fb:ff:4f:3d:15:3a:b3:2e:34:eb:5f:10:34:c7:38:d1:bc:f2: 38:62:81:dd:cb:5f:8e:b6:54:bf:8c:40:c3:82:09:8b:95:14: 9f:cb:80:b7:18:b6:55:b8:8b:49:83:f2:cb:3f:38:5c:d2:d2: 33:0e:46:db:9a:38:ca:0a:fd:b2:1e:b1:46:50:ec:22:6b:e2: 96:f6:ad:ca:f1:33:75:a8:e1:a4:0a:31:ef:8c:f2:1e:f6:53: 9d:d4:8c:04:44:66:df:f0:a6:be:78:27:62:af:55:fc:4f:18: 49:b2:ed:f9:fd:0f:c4:25:8a:7d:b9:b5:7f:30:36:a3:d8:16: 29:d7:1e:02:4e:78:42:6b:ff:4d:11:a3:51:9c:c9:6d:fb:4e: fe:61:35:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQjUxMTAvBgNVBAUTKDhBRTVBRUVGMkE5MUYzREY4NjYwM0VEQzU0RkU4NEM1 QkI1NzlDMTUwHhcNMjUwODIzMDUzMzQyWhcNMjUwODMwMDUzMzQyWjAYMRYwFAYD VQQDEw02OGE5NTJiNi0zMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPUaNSb0r3dcAVR5M8PEPN6FiJr1zpVEb8WxPOMGDLoclOA+Bvx06g+2+XRo +e8D+UxKbY9UG8+yyeABUvnXuaYIqu+b2ZlKq2ahk46BXNiXE4zr13uU2V709yJf LomjALql2Rf1baZRpWbf0L/z+ZRjlU5qex2MIupIFNi/0Yx2h7KdQft0HThrhk6+ aY6CuA6TrlLZcIpUvrcd9YsS06t/fDydUIDAmfjn/2UYQ+gGMxUvm3Tu8VeSrGrL Lgq3mZk9ww7MGaZWaIVR139rhDmpBFzorasNNvYWIFK0DyV/9XMECNi75m86NJbZ khjdPZaRNKdIMB7jHI3rlEdfQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0x6ZzN urUEZzmGnF3yHTMPwNyrMB8GA1UdIwQYMBaAFIrlru8qkfPfhmA+3FT+hMW7V5wV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NCNS9FRkQ0N0Q1NDIy NTYxMUVGQjc1NjFGNDZDNEY5QUUwMi9pdVd1N3lxUjg5LUdZRDdjVlA2RXhidFhu QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l1V3U3eXFSODktR1lEN2NWUDZFeGJ0WG5CVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NCNS9FRkQ0N0Q1NDIyNTYxMUVGQjc1NjFGNDZDNEY5QUUwMi9pdVd1N3lxUjg5 LUdZRDdjVlA2RXhidFhuQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzBWBkjeMKirzJPSElJX1hNGKBSMcUHvS8hepA0IZe63USpY4mnozR OMdtVy87jowqw7MmKI00hn0526NFGCBzIdib9Az+RsxHKV4WoRU/wlL/ph+C9xiD msV42IihegZixQ8gfV6fEcLcQAD7/089FTqzLjTrXxA0xzjRvPI4YoHdy1+OtlS/ jEDDggmLlRSfy4C3GLZVuItJg/LLPzhc0tIzDkbbmjjKCv2yHrFGUOwia+KW9q3K 8TN1qOGkCjHvjPIe9lOd1IwERGbf8Ka+eCdir1X8TxhJsu35/Q/EJYp9ubV/MDaj 2BYp1x4CTnhCa/9NEaNRnMlt+07+YTVc -----END CERTIFICATE-----Generated at Sat Aug 23 10:45:56 2025 by rpki-client