$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft File: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json) Hash identifier: lxZNEFwQnOWxytJmRvy5VVvpLcR8cKpSd+bta1shqIM= Subject key identifier: CF:F0:F5:85:0B:44:15:11:B9:FC:DC:E4:79:26:4F:E0:F0:B2:32:7B Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F Certificate issuer: /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft Manifest number: 07C9 Signing time: Fri 22 Aug 2025 21:17:54 +0000 Manifest this update: Fri 22 Aug 2025 21:17:54 +0000 Manifest next update: Fri 29 Aug 2025 21:17:54 +0000 Files and hashes: 1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: KZaulv3BXzRVXnURicwJUmlaVXb7Tt7IH6K8RdWEiEI=) 2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: IGUI6ypPN1raHp9GKwNU8LZ6l1B0WS2Xv77ok6Yzg+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AA6, serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F Validity Not Before: Aug 22 21:17:54 2025 GMT Not After : Aug 29 21:17:54 2025 GMT Subject: CN=68a8de82-946e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:db:e9:13:7f:80:50:fa:98:4c:a1:4a:2c: 1e:6e:a6:75:d7:94:52:db:23:9f:fd:0c:71:7d:31: 4d:8d:a8:ae:8e:a0:43:0c:b8:8e:0a:e3:3d:60:ee: 16:6d:05:40:f3:0d:c7:0c:7e:77:4e:94:bb:58:c2: 60:89:5a:72:9c:ca:ba:ab:ca:72:28:09:0c:ea:40: cd:e6:96:45:7b:dd:85:d0:0b:f5:0b:63:46:72:a7: c9:60:7f:00:d3:5f:31:ed:bd:3c:28:a3:4e:a5:97: d1:9d:10:ea:9c:f5:6c:97:62:15:31:99:d1:c1:3d: 22:7e:6c:23:36:23:67:8f:31:6c:c6:79:55:5a:1d: 8b:78:61:7e:9e:b2:0a:70:16:2b:26:44:5f:83:39: 40:af:91:d3:b2:e3:f3:30:59:10:9a:62:02:ed:ff: 9d:dc:01:ee:cf:25:3a:32:f9:71:88:f5:7a:a4:77: f8:7f:4b:ca:21:36:a5:e3:d1:2d:25:8a:d3:7e:f0: 15:53:c4:b6:df:2b:6d:6c:17:3d:75:5a:a1:16:44: 83:0a:4f:9c:3f:47:f4:c5:ea:92:c6:6d:9d:6a:ea: cd:88:a0:92:0b:15:df:ad:d6:42:7f:4d:4f:35:c2: 59:95:21:97:58:27:9e:ed:64:da:90:b9:7a:7f:e4: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F0:F5:85:0B:44:15:11:B9:FC:DC:E4:79:26:4F:E0:F0:B2:32:7B X509v3 Authority Key Identifier: keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:44:09:b5:0d:66:ae:9b:5a:bb:e2:64:08:6c:b1:bd:e2:b1: 88:22:39:46:20:21:62:06:9f:72:40:e8:b2:04:12:0b:b3:82: 31:16:6b:d3:73:0e:d4:48:2d:52:6a:05:82:88:f7:13:bc:1b: ac:8e:e9:5b:a9:61:51:da:2d:99:56:f5:23:49:11:f1:11:4c: 47:68:48:89:8b:22:7d:c3:46:e8:57:f1:b5:52:94:7d:c5:f9: 57:c1:86:ec:00:43:6c:09:c4:59:d3:71:86:8f:7e:d3:3a:7e: fb:e6:6e:c8:42:ae:c3:cb:b2:5a:aa:30:ea:b0:a3:34:10:8c: 67:02:4b:46:53:0b:1f:12:31:d9:84:b5:d5:97:cb:b8:f4:27: a6:7a:a5:74:99:f5:94:48:e8:05:3b:1b:0e:43:4f:e0:67:ad: 1e:45:dc:07:09:09:49:39:0e:b5:f9:a3:86:46:27:e6:36:d6: ab:2a:ea:b4:68:e4:f5:be:7b:fe:0b:20:f0:0a:37:1f:88:0e: 96:77:7f:ef:96:e3:fc:2d:14:bb:93:1d:cc:92:ba:58:7f:9f: 0f:9e:31:23:3b:c6:b4:13:b7:2a:a6:12:9d:5b:40:8e:6b:e2: eb:41:84:c0:0f:d4:a7:eb:bb:b3:cf:11:f1:47:7d:f8:bd:dc: 3b:a1:ef:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVBQTYxMTAvBgNVBAUTKDg4Q0Q2RDQ3MkRDQTE2QjBGNDFGMkVBRThFRDkyMTU4 MUMyNzhENkYwHhcNMjUwODIyMjExNzU0WhcNMjUwODI5MjExNzU0WjAYMRYwFAYD VQQDEw02OGE4ZGU4Mi05NDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwizb6RN/gFD6mEyhSiwebqZ115RS2yOf/QxxfTFNjaiujqBDDLiOCuM9YO4W bQVA8w3HDH53TpS7WMJgiVpynMq6q8pyKAkM6kDN5pZFe92F0Av1C2NGcqfJYH8A 018x7b08KKNOpZfRnRDqnPVsl2IVMZnRwT0ifmwjNiNnjzFsxnlVWh2LeGF+nrIK cBYrJkRfgzlAr5HTsuPzMFkQmmIC7f+d3AHuzyU6MvlxiPV6pHf4f0vKITal49Et JYrTfvAVU8S23yttbBc9dVqhFkSDCk+cP0f0xeqSxm2daurNiKCSCxXfrdZCf01P NcJZlSGXWCee7WTakLl6f+Q9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/w9YUL RBURufzc5HkmT+DwsjJ7MB8GA1UdIwQYMBaAFIjNbUctyhaw9B8uro7ZIVgcJ41v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFBNi9BRDlFREYwNjA2 OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0ZyRDBIeTZ1anRraFdCd25q VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lNMXRSeTNLRnJEMEh5NnVqdGtoV0J3bmpXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUFBNi9BRDlFREYwNjA2OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0Zy RDBIeTZ1anRraFdCd25qVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9RAm1DWaum1q74mQIbLG94rGIIjlGICFiBp9yQOiyBBILs4IxFmvT cw7USC1SagWCiPcTvBusjulbqWFR2i2ZVvUjSRHxEUxHaEiJiyJ9w0boV/G1UpR9 xflXwYbsAENsCcRZ03GGj37TOn775m7IQq7Dy7JaqjDqsKM0EIxnAktGUwsfEjHZ hLXVl8u49CemeqV0mfWUSOgFOxsOQ0/gZ60eRdwHCQlJOQ61+aOGRifmNtarKuq0 aOT1vnv+CyDwCjcfiA6Wd3/vluP8LRS7kx3MkrpYf58PnjEjO8a0E7cqphKdW0CO a+LrQYTAD9Sn67uzzxHxR334vdw7oe+x -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:33 2025 by rpki-client