$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: MeDLhBObONkbDXhGfYfgk0MgGXR7JkUihoVeLhb6Q9Q= Subject key identifier: 78:F8:AA:A8:5B:7B:BF:91:07:DE:37:B4:40:C0:47:C3:F3:FA:AA:25 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 0A0C Signing time: Fri 22 Aug 2025 20:02:16 +0000 Manifest this update: Fri 22 Aug 2025 20:02:15 +0000 Manifest next update: Fri 29 Aug 2025 20:02:15 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: VQS1N5B6o/PQO8MscM4I05RSfdPkArT+cR+MG6NsmJA=) 2: 794C43721A5F11F080409056C4F9AE02.roa (hash: tliF6bTq6KTU3ampYuLl3Y31z/FfmmETEltl1u+bSdc=) 3: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=) 4: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w=) 5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: 5GewRvUgDB6rcXNpXbxI+RsMmEZ6AmWtSegm+so4e0M=) 6: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: hVI5f3OngSrJ6IFISwTQMQm8YsnsRDaEoKxA88qPW7o=) 7: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: dXngOtAcFhvArc3Tgv9HMRYfy3lpLyOKuQ2Q99Bv4cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Aug 22 20:02:15 2025 GMT Not After : Aug 29 20:02:15 2025 GMT Subject: CN=68a8ccc7-91dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:11:09:8c:bd:9e:5a:fe:78:23:f0:95:a2: 43:c7:a6:f2:d7:18:86:69:35:3a:47:65:55:4f:52: 11:6d:6c:be:fc:2d:24:a0:02:8a:4d:4f:0d:c6:04: b9:83:7c:57:a1:15:35:f6:ce:b5:e6:31:69:b6:f0: 63:56:28:89:47:0d:67:ca:1c:75:f1:b4:49:f8:40: 4a:10:d6:36:04:2c:1a:dc:a3:39:d8:d4:07:c0:52: 04:d5:91:27:a4:3b:5b:3a:52:00:11:6f:fe:df:55: e5:6f:92:f9:49:a2:ba:ac:d9:45:47:a5:d7:46:0c: 83:ab:18:59:e7:f3:a0:4c:00:0d:c6:09:f5:70:55: 60:3a:0b:64:a8:93:e9:b9:62:e6:d0:3f:ab:f3:37: 8a:8c:f3:ba:92:95:7a:da:93:50:db:3d:a3:61:7d: 6c:b0:3a:3a:57:0d:4b:d5:45:87:3a:3b:0d:08:a2: fa:f6:79:53:12:8f:0a:56:19:00:9c:d5:18:c8:e4: ce:76:39:0d:5d:53:47:93:d4:24:0b:49:6b:21:62: 54:d8:b7:0e:ed:48:64:a6:44:af:49:96:7f:86:ec: 1b:b4:7d:e9:28:59:3d:0a:f0:57:da:08:12:fc:65: 23:a9:3a:c8:52:f0:a4:a4:f5:a3:d3:cb:74:06:41: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F8:AA:A8:5B:7B:BF:91:07:DE:37:B4:40:C0:47:C3:F3:FA:AA:25 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:25:5d:66:1e:2e:29:03:96:b1:d2:1a:f4:5f:ad:af:88:99: 5b:0c:2a:33:fe:dd:f7:a7:40:c9:1a:db:38:55:c0:94:a3:eb: a5:f7:2e:69:cd:2d:10:6b:37:ae:2d:1c:9e:9d:dd:55:64:01: c5:78:07:10:02:14:12:92:a3:7d:30:28:e3:b9:e4:8c:3f:1d: d1:aa:fb:ae:cc:44:68:f3:3b:85:4e:08:8b:f7:c9:1a:90:11: 90:ac:b8:a2:fe:91:7b:17:5c:42:8a:04:dd:a8:df:ed:67:69: f4:7b:f5:3d:9a:a4:4f:02:77:75:8f:3a:0c:6c:2f:6a:2a:84: 5a:56:2d:b6:5f:56:10:e3:e6:1f:3e:b5:b4:74:1a:9e:15:5a: 31:7e:fd:6d:1c:97:04:a1:d5:a9:52:25:a9:b9:62:6a:ca:7b: 17:ed:87:4d:83:93:55:96:0b:ed:72:03:ab:59:57:1b:ca:5c: a7:59:0f:69:0e:ed:d0:86:73:a8:5a:c5:4e:1a:8a:ed:46:6f: cd:8e:7d:a9:e8:69:d0:d2:de:8d:d5:89:e1:aa:eb:ac:d1:e3: 5b:02:56:ec:94:60:de:12:1c:c8:c9:57:59:8a:6a:56:4f:17: a6:7c:47:2a:9d:04:7f:5f:3a:1b:10:02:3e:d0:4b:14:f2:cf: 13:cb:50:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUwODIyMjAwMjE1WhcNMjUwODI5MjAwMjE1WjAYMRYwFAYD VQQDEw02OGE4Y2NjNy05MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTkRCYy9nlr+eCPwlaJDx6by1xiGaTU6R2VVT1IRbWy+/C0koAKKTU8NxgS5 g3xXoRU19s615jFptvBjViiJRw1nyhx18bRJ+EBKENY2BCwa3KM52NQHwFIE1ZEn pDtbOlIAEW/+31Xlb5L5SaK6rNlFR6XXRgyDqxhZ5/OgTAANxgn1cFVgOgtkqJPp uWLm0D+r8zeKjPO6kpV62pNQ2z2jYX1ssDo6Vw1L1UWHOjsNCKL69nlTEo8KVhkA nNUYyOTOdjkNXVNHk9QkC0lrIWJU2LcO7UhkpkSvSZZ/huwbtH3pKFk9CvBX2ggS /GUjqTrIUvCkpPWj08t0BkFRpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj4qqhb e7+RB943tEDAR8Pz+qolMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfJV1mHi4pA5ax0hr0X62viJlbDCoz/t33p0DJGts4VcCUo+ul9y5p zS0QazeuLRyend1VZAHFeAcQAhQSkqN9MCjjueSMPx3RqvuuzERo8zuFTgiL98ka kBGQrLii/pF7F1xCigTdqN/tZ2n0e/U9mqRPAnd1jzoMbC9qKoRaVi22X1YQ4+Yf PrW0dBqeFVoxfv1tHJcEodWpUiWpuWJqynsX7YdNg5NVlgvtcgOrWVcbylynWQ9p Du3QhnOoWsVOGortRm/Njn2p6GnQ0t6N1Ynhquus0eNbAlbslGDeEhzIyVdZimpW TxemfEcqnQR/XzobEAI+0EsU8s8Ty1Aw -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:56 2025 by rpki-client