$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: IT0kYod3Umu+/Hl+QlLmBVUH4xCY/1wnotdHNjT285M= Subject key identifier: 01:0A:39:77:0F:21:7F:4C:B3:E2:95:30:BE:62:B4:14:7E:14:FB:F9 Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 2630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 25A3 Signing time: Fri 22 Aug 2025 15:47:16 +0000 Manifest this update: Fri 22 Aug 2025 15:47:15 +0000 Manifest next update: Fri 29 Aug 2025 15:47:15 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: 1b53xYjGb4Ksao/v70BtNHjwbZdF6X/c4xpu5dh4CZI=) 2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: ezRu4Wadjp9NH7xvxUm1SslQ6GZ7jqHMcsIlTCHPxl0=) 3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: sPjEV8NdOTwFwPMcdQnUOL5yo6ytt7upFB96AA18yK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9776 (0x2630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Aug 22 15:47:15 2025 GMT Not After : Aug 29 15:47:15 2025 GMT Subject: CN=68a89103-e1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8f:91:09:16:84:ca:81:15:5f:40:32:36:26: 25:4c:54:0f:e8:36:9f:b4:1c:7e:ac:5f:f0:d1:fd: 84:e3:ae:d9:8b:51:08:cf:f6:6e:0b:74:45:ed:a0: 0c:7a:74:92:99:03:ab:bc:bb:5d:9e:9d:d7:3f:95: df:32:ef:70:29:1f:5c:88:a4:9a:70:e7:0e:df:52: 8e:c1:f0:59:4e:ef:bb:5e:46:f1:d0:56:6a:e1:b6: c0:b5:28:93:4d:07:d1:ae:42:7b:73:fa:3b:62:1d: 2a:ef:cb:c3:16:f1:8b:5a:af:8c:26:11:ba:5c:e5: 73:f3:15:f7:46:4e:a2:1f:a8:df:c6:9d:80:0c:14: 4a:d3:62:6e:7d:7c:66:66:76:e9:60:36:39:b6:a3: 68:41:c3:10:95:fa:04:41:4a:93:5b:2f:68:a3:a8: 4d:60:d4:06:d8:07:3b:b0:a8:cb:36:20:11:08:5f: aa:d1:b6:35:70:5d:22:a5:6f:83:22:d8:94:f5:f2: 2f:d2:67:9e:62:5b:9f:71:1d:5f:48:93:8a:59:40: d9:2f:d4:99:56:cd:cc:67:2c:4e:32:52:59:1b:7d: d3:34:77:1f:e9:f6:17:f8:78:8d:e3:4b:15:5a:a4: 87:8c:39:a3:7f:e4:29:d5:61:87:67:4c:02:68:1c: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:39:77:0F:21:7F:4C:B3:E2:95:30:BE:62:B4:14:7E:14:FB:F9 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ba:da:95:90:eb:d3:19:43:42:52:ac:fd:00:74:11:fd:d2: 38:89:97:40:88:7c:7f:19:8e:74:2a:5f:4d:90:99:bd:74:49: fb:99:e8:77:ba:86:86:0d:76:84:fa:5f:37:08:48:fc:05:8d: 9e:aa:22:cf:3f:01:bb:69:f7:30:ce:5a:26:c0:d5:0e:64:12: 76:de:46:df:06:1e:79:38:06:37:a3:5b:12:cf:ab:2f:17:7a: 64:3f:b8:a6:90:6b:1b:52:26:d9:e1:f3:14:67:7e:e3:7a:cf: c5:7b:53:a4:31:e2:a5:38:a2:29:e9:3c:be:bf:9e:f0:b1:d8: 39:1c:1c:e2:44:7e:73:da:37:59:be:40:e0:cb:18:b0:95:68: e9:62:fb:52:88:27:c9:64:12:d5:8e:86:df:68:f6:69:d6:58: c5:a6:9c:49:bf:7e:bd:36:b7:77:0b:09:34:90:0b:2d:e6:14: f1:2f:d7:a3:75:45:c3:7f:cf:72:e9:32:88:eb:44:50:01:7c: 57:ad:57:f9:17:9f:dc:77:85:f6:6f:b3:89:0d:cc:a2:dd:de: ea:4f:54:e8:c5:3b:21:2b:3c:3f:1c:d3:76:c1:2b:5b:07:03: 5a:7b:ce:40:77:97:61:7e:c2:64:f7:19:56:f3:08:02:bc:74: d2:15:cc:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjUwODIyMTU0NzE1WhcNMjUwODI5MTU0NzE1WjAYMRYwFAYD VQQDEw02OGE4OTEwMy1lMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5I+RCRaEyoEVX0AyNiYlTFQP6DaftBx+rF/w0f2E467Zi1EIz/ZuC3RF7aAM enSSmQOrvLtdnp3XP5XfMu9wKR9ciKSacOcO31KOwfBZTu+7Xkbx0FZq4bbAtSiT TQfRrkJ7c/o7Yh0q78vDFvGLWq+MJhG6XOVz8xX3Rk6iH6jfxp2ADBRK02JufXxm ZnbpYDY5tqNoQcMQlfoEQUqTWy9oo6hNYNQG2Ac7sKjLNiARCF+q0bY1cF0ipW+D ItiU9fIv0meeYlufcR1fSJOKWUDZL9SZVs3MZyxOMlJZG33TNHcf6fYX+HiN40sV WqSHjDmjf+Qp1WGHZ0wCaBwZjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEKOXcP IX9Ms+KVML5itBR+FPv5MB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACutqVkOvTGUNCUqz9AHQR/dI4iZdAiHx/GY50Kl9NkJm9dEn7meh3 uoaGDXaE+l83CEj8BY2eqiLPPwG7afcwzlomwNUOZBJ23kbfBh55OAY3o1sSz6sv F3pkP7imkGsbUibZ4fMUZ37jes/Fe1OkMeKlOKIp6Ty+v57wsdg5HBziRH5z2jdZ vkDgyxiwlWjpYvtSiCfJZBLVjobfaPZp1ljFppxJv369Nrd3Cwk0kAst5hTxL9ej dUXDf89y6TKI60RQAXxXrVf5F5/cd4X2b7OJDcyi3d7qT1ToxTshKzw/HNN2wStb BwNae85Ad5dhfsJk9xlW8wgCvHTSFcyb -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:42 2025 by rpki-client