$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: ZhIOO8K6xTePcHr08zHr5pJjcDcHT6mMud8Vuttnz44= Subject key identifier: DC:DB:6C:89:9D:ED:8D:0E:0E:92:E3:3D:47:47:5F:E8:69:3F:30:53 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: 18 Signing time: Fri 22 Aug 2025 22:56:39 +0000 Manifest this update: Fri 22 Aug 2025 22:56:39 +0000 Manifest next update: Fri 29 Aug 2025 22:56:39 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: 2wgl4NJuHfrpomEt9n6KNru6F2HCIydd0+dm56Natww=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: tRrklyhCDRycwJaKFRwEZyyD1E5up+J5TjkxJCAvISc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Aug 22 22:56:39 2025 GMT Not After : Aug 29 22:56:39 2025 GMT Subject: CN=68a8f5a7-a454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:45:36:58:62:4a:86:f1:ae:b9:09:77:e2: c5:6a:49:e3:60:bc:52:68:3d:fd:51:36:18:b4:44: b4:05:9a:39:53:e8:84:bc:4a:87:f5:80:4e:ce:25: 21:66:79:6b:92:26:b2:ff:a3:b7:22:17:b3:ae:ac: 10:17:2a:76:1a:3e:f1:ff:6a:9c:24:f1:f8:59:af: c5:5d:c4:ac:fa:4f:bb:c3:27:49:07:85:7b:fc:cd: 7e:41:16:b8:88:30:ca:b9:4d:ec:7f:52:1a:1e:80: 81:b4:e2:a2:0f:ec:65:99:e6:d4:26:13:a3:38:46: 9b:ba:15:10:7f:24:46:46:17:c6:15:57:00:14:33: 1f:f1:eb:d6:2b:07:e4:55:94:4e:22:2b:28:58:20: 10:cc:7d:84:df:f2:7f:0b:72:a2:99:0a:e1:02:24: 4a:9c:72:19:23:cb:ec:8c:87:63:86:56:2b:a2:34: e5:61:36:de:1c:ea:f7:dd:a8:9b:b3:a9:2e:57:93: ca:fe:7a:d4:f8:a9:7b:59:16:7b:ca:1f:8c:b9:5c: af:f2:c8:0f:37:db:ae:d0:5b:64:df:9b:65:39:da: 21:60:41:34:38:6f:f9:2c:d1:32:18:ea:5b:f2:4d: 95:08:77:f7:dc:9f:ea:63:ee:81:03:20:3e:64:f4: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DB:6C:89:9D:ED:8D:0E:0E:92:E3:3D:47:47:5F:E8:69:3F:30:53 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6b:73:f8:ba:81:a2:6b:60:f9:6a:93:3e:87:e4:6f:21:7c: 50:41:81:a0:49:09:cd:0a:af:82:5c:71:f7:93:9b:07:a2:89: ce:fd:a7:06:2a:6e:13:ca:d8:1c:8a:ff:08:af:ba:42:c5:a4: ee:94:4b:b0:fe:f8:57:e1:39:b3:00:56:c8:23:74:51:c3:63: f6:7f:34:05:59:a2:38:c4:0f:2a:af:4f:4a:e6:17:0a:a2:a2: 9c:52:3c:c9:84:78:1c:45:ef:29:f4:31:9b:93:0b:4e:a5:de: 04:c1:1b:7a:84:1f:c7:eb:d2:43:88:93:8b:e0:7d:eb:5f:d8: e6:6a:ef:97:60:ee:28:27:29:3b:1a:1a:30:6b:19:96:02:10: 65:a9:82:ff:ca:4c:7a:ac:2c:70:10:60:2c:dc:68:58:01:82: 89:12:71:ac:58:34:dc:ba:c2:e2:a1:3b:c0:e5:eb:44:b8:58: 22:fb:f8:ec:b5:38:c4:64:e2:7b:1a:16:74:c3:e2:0a:c9:04: aa:ea:f4:f0:04:14:6f:b1:20:2d:76:26:15:e8:75:b2:27:33: 10:6b:9f:4a:00:19:8c:e7:0c:90:99:0b:bc:87:cb:a0:7d:46: b3:0b:0f:91:1c:21:d7:f8:9e:db:c8:10:ad:4b:75:ee:e2:ef: a0:03:86:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEQwMDExMC8GA1UEBRMoMjE0MjkzM0ZCRTZFN0M1RkI3NjdBODZBNUUyMURENjAx NzhFQTM5RDAeFw0yNTA4MjIyMjU2MzlaFw0yNTA4MjkyMjU2MzlaMBgxFjAUBgNV BAMTDTY4YThmNWE3LWE0NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKD0U2WGJKhvGuuQl34sVqSeNgvFJoPf1RNhi0RLQFmjlT6IS8Sof1gE7OJSFm eWuSJrL/o7ciF7OurBAXKnYaPvH/apwk8fhZr8VdxKz6T7vDJ0kHhXv8zX5BFriI MMq5Tex/UhoegIG04qIP7GWZ5tQmE6M4Rpu6FRB/JEZGF8YVVwAUMx/x69YrB+RV lE4iKyhYIBDMfYTf8n8LcqKZCuECJEqcchkjy+yMh2OGViuiNOVhNt4c6vfdqJuz qS5Xk8r+etT4qXtZFnvKH4y5XK/yyA83267QW2Tfm2U52iFgQTQ4b/ks0TIY6lvy TZUId/fcn+pj7oEDID5k9Oo9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3NtsiZ3t jQ4OkuM9R0df6Gk/MFMwHwYDVR0jBBgwFoAUIUKTP75ufF+3Z6hqXiHdYBeOo50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RDAwL0YxQUYxMDUyNjFE RjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVVLVFA3NXVmRi0zWjZocVhpSGRZQmVPbzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RDAwL0YxQUYxMDUyNjFERjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYt M1o2aHFYaUhkWUJlT281MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9rc/i6gaJrYPlqkz6H5G8hfFBBgaBJCc0Kr4JccfeTmweiic79pwYq bhPK2ByK/wivukLFpO6US7D++FfhObMAVsgjdFHDY/Z/NAVZojjEDyqvT0rmFwqi opxSPMmEeBxF7yn0MZuTC06l3gTBG3qEH8fr0kOIk4vgfetf2OZq75dg7ignKTsa GjBrGZYCEGWpgv/KTHqsLHAQYCzcaFgBgokScaxYNNy6wuKhO8Dl60S4WCL7+Oy1 OMRk4nsaFnTD4grJBKrq9PAEFG+xIC12JhXodbInMxBrn0oAGYznDJCZC7yHy6B9 RrMLD5EcIdf4ntvIEK1Lde7i76ADhuU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:39:45 2025 by rpki-client