$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: nk0f7p1WHe7uOaNiFgRlIgoVsIsN0DOoIv6RNGZfC+U= Subject key identifier: BD:94:19:A0:BD:92:05:FB:96:A5:FF:6E:0B:1E:A4:F9:DB:AF:6B:16 Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0B65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0B5D Signing time: Fri 22 Aug 2025 19:14:20 +0000 Manifest this update: Fri 22 Aug 2025 19:14:19 +0000 Manifest next update: Fri 29 Aug 2025 19:14:19 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: 7dCDhzr7CTVkEBIIzkUAWrmg+B2kqstLoN1f1Zgwo2M=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: Qsy4TKaFv40VH7rqRhiymRYP7EU8I6x9tTe3ND6Wurc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: Aug 22 19:14:19 2025 GMT Not After : Aug 29 19:14:19 2025 GMT Subject: CN=68a8c18c-6375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:36:65:93:86:f3:f5:7c:a1:80:a5:a3:a5: 6e:7b:c8:fd:19:38:a4:47:7c:10:23:e0:2a:3b:f9: 44:a9:be:42:e8:22:65:98:8f:33:99:84:54:e4:61: f0:62:9d:b9:e0:e7:9d:9a:24:d1:4b:59:f1:05:91: 8a:db:78:f4:65:af:ed:a1:69:da:8a:f0:05:f9:71: 11:72:3b:54:bc:fa:ce:01:57:73:1d:30:c4:8e:5f: 69:1c:91:0c:b1:b5:0e:a2:8d:9e:71:2d:55:ee:c2: a5:7d:41:cd:0f:09:1c:2f:2e:a7:4b:4c:fe:30:30: 4d:12:a7:8c:25:8a:3b:84:89:45:70:7a:bc:6b:a1: 5f:cb:f2:ea:69:01:20:ae:2c:e1:76:18:79:56:6f: 1c:2c:12:15:a1:65:81:dd:61:2a:31:31:cb:c1:6c: 68:bd:3f:3f:cf:a8:f4:9d:13:4c:0c:96:be:73:2e: c5:64:8c:46:af:2a:69:70:6a:ce:c6:f5:bb:01:51: 96:d0:b1:a4:3a:b7:1a:4f:3f:ea:1e:fd:d6:99:88: 49:81:d1:40:aa:ac:09:1c:96:9e:0e:de:7b:b0:87: 89:da:9a:17:45:06:f8:01:2a:45:d8:69:00:83:57: ef:26:98:e4:b4:a5:e1:95:6c:cd:40:86:99:74:3c: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:94:19:A0:BD:92:05:FB:96:A5:FF:6E:0B:1E:A4:F9:DB:AF:6B:16 X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:bb:d9:8b:d6:cb:fd:1a:20:0d:1e:c9:b4:69:10:59:ac:09: 28:f2:ed:39:4d:69:b4:a0:98:c9:48:07:d6:09:3d:09:5c:c4: d2:73:fd:4a:c9:fe:40:84:81:d1:9f:68:7e:1a:e8:c6:26:c1: 6a:2f:e9:99:07:3c:75:20:4b:ec:2e:b5:51:30:da:1f:c9:42: 07:da:91:83:f5:88:c8:38:ca:c6:5c:bd:92:df:cc:56:7b:18: dc:14:24:6d:60:da:36:e2:cc:5e:7f:54:25:b5:d3:8f:05:b7: e0:58:13:a3:a8:15:28:fc:4e:74:98:40:4b:21:b1:a0:74:b4: 6e:5d:71:0b:c6:1c:9a:c7:4a:a4:fd:d8:a2:55:1a:4b:39:7a: d0:cd:cc:e6:14:f4:54:8c:90:84:40:c4:9a:99:99:0a:b5:8a: ef:da:86:17:a4:af:53:b0:c0:bc:4b:d2:74:5a:63:12:92:2a: 33:fc:f5:cb:57:7b:de:34:92:93:e5:76:34:53:b7:44:aa:6d: 28:0f:9e:52:fb:80:a2:d9:d3:89:bd:72:61:6b:64:13:c0:95: 79:54:99:90:a5:4d:2b:a0:45:80:af:a5:3c:95:82:5d:4f:37: f6:59:33:bc:c3:35:32:2a:e7:c7:30:75:4a:ef:4d:2e:68:05: 21:e3:35:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjUwODIyMTkxNDE5WhcNMjUwODI5MTkxNDE5WjAYMRYwFAYD VQQDEw02OGE4YzE4Yy02Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxL02ZZOG8/V8oYClo6Vue8j9GTikR3wQI+AqO/lEqb5C6CJlmI8zmYRU5GHw Yp254OedmiTRS1nxBZGK23j0Za/toWnaivAF+XERcjtUvPrOAVdzHTDEjl9pHJEM sbUOoo2ecS1V7sKlfUHNDwkcLy6nS0z+MDBNEqeMJYo7hIlFcHq8a6Ffy/LqaQEg rizhdhh5Vm8cLBIVoWWB3WEqMTHLwWxovT8/z6j0nRNMDJa+cy7FZIxGryppcGrO xvW7AVGW0LGkOrcaTz/qHv3WmYhJgdFAqqwJHJaeDt57sIeJ2poXRQb4ASpF2GkA g1fvJpjktKXhlWzNQIaZdDxa2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2UGaC9 kgX7lqX/bgsepPnbr2sWMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmu9mL1sv9GiANHsm0aRBZrAko8u05TWm0oJjJSAfWCT0JXMTSc/1K yf5AhIHRn2h+GujGJsFqL+mZBzx1IEvsLrVRMNofyUIH2pGD9YjIOMrGXL2S38xW exjcFCRtYNo24sxef1QltdOPBbfgWBOjqBUo/E50mEBLIbGgdLRuXXELxhyax0qk /diiVRpLOXrQzczmFPRUjJCEQMSamZkKtYrv2oYXpK9TsMC8S9J0WmMSkioz/PXL V3veNJKT5XY0U7dEqm0oD55S+4Ci2dOJvXJha2QTwJV5VJmQpU0roEWAr6U8lYJd Tzf2WTO8wzUyKufHMHVK700uaAUh4zW1 -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:23 2025 by rpki-client