$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: BGccF5gckw7g8+COdDUKJODC9x5Axn1lxqg9ld3/KNA= Subject key identifier: 59:23:F1:BA:80:82:30:92:3B:31:BC:5F:D4:57:D1:EF:16:DA:D0:B2 Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 03E8 Signing time: Sat 23 Aug 2025 00:47:33 +0000 Manifest this update: Sat 23 Aug 2025 00:47:32 +0000 Manifest next update: Sat 30 Aug 2025 00:47:32 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: GT1O8DK+jP11upR5fm6gLmYaHTvb9KOuySTOSfa/fh8=) 2: 58C00854905211EC90E6100FC4F9AE02.roa (hash: 5eLmPskwIg5y4gDpqWBeusWbrOc+t34TIFwmF+boTps=) 3: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: sO6E1E+nR+eYc5iIU6EYUSE2ekfNEYMYq4mKBPQmsro=) 4: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: oJI3ab/8fzhkHDC4Wzdxeh+CGGzoOkYJ9B82+ons7t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Aug 23 00:47:32 2025 GMT Not After : Aug 30 00:47:32 2025 GMT Subject: CN=68a90fa4-5646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:e0:b8:da:42:d6:ef:ba:55:76:e2:b7:d1: e1:c2:69:b3:e4:5a:97:89:13:bd:90:b9:2f:05:63: bd:f4:a1:22:72:2f:85:ec:65:18:35:64:2d:95:61: 95:80:78:79:7e:92:53:93:a0:7e:31:03:2a:6c:7d: a2:a4:0e:d9:12:9c:37:c4:7a:ee:58:d8:fd:87:f0: 2c:89:e0:2a:f4:c7:6a:b5:03:5f:d1:98:88:54:30: 9e:2f:a6:d7:06:b7:4b:5b:1b:42:83:40:fe:24:4a: db:36:87:19:3f:af:21:7e:22:15:ca:10:66:d5:de: 98:5b:2b:40:79:7f:2c:77:73:41:08:13:62:da:55: 67:5d:46:fb:43:b3:64:2c:b9:4c:25:ee:2e:d9:f3: 86:0f:d3:2a:01:ed:e9:00:67:e4:9d:03:c5:97:7d: b4:f0:89:d5:7e:15:97:fd:8e:5c:45:28:a9:98:21: f7:00:43:25:50:e4:15:56:6e:9d:d3:17:ca:28:4a: 17:ca:9c:c9:62:78:79:51:d5:6d:24:29:af:c3:c2: 73:eb:57:90:48:31:a7:ea:c4:33:f3:59:25:c7:eb: 34:ae:8c:b5:4d:6d:75:58:00:cc:db:d2:cc:29:2a: c4:72:8a:14:49:f1:15:d3:ab:fb:d6:8a:c7:7e:5a: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:23:F1:BA:80:82:30:92:3B:31:BC:5F:D4:57:D1:EF:16:DA:D0:B2 X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:23:ec:de:b1:1e:d4:37:7c:60:c8:bf:96:ec:81:54:6b:89: d0:c1:ee:62:02:d3:4c:2c:d7:36:42:4e:e6:83:a5:18:84:ed: fe:61:c5:d4:7b:94:c0:27:db:4d:07:3e:93:0f:25:b6:96:a3: f3:d7:24:28:c2:1e:a6:f1:e2:55:19:4c:c8:e8:81:0c:e8:15: 65:87:26:23:8c:ff:1d:63:12:24:8c:7b:d3:38:92:af:22:7f: 24:a2:ff:0f:a6:ff:c0:b3:57:9a:7e:66:ce:8d:05:2c:14:72: b2:91:c2:df:1a:7b:72:89:92:93:6a:88:1a:01:ca:9f:b9:a5: bf:be:75:56:26:32:c1:c9:9d:c0:06:04:30:55:68:3b:16:f6: 14:67:ac:e9:9e:74:95:7e:08:9c:c3:a6:8d:68:bc:93:49:19: cd:d4:0a:36:37:dc:03:66:29:b5:76:90:fc:17:ec:cc:ee:00: a8:3d:69:9e:1c:ee:46:c6:91:a4:dc:1e:e2:6a:bd:0a:ef:45: 4a:af:e8:f2:40:c2:96:b1:ca:83:fc:1d:64:80:1f:16:5f:23: 39:05:20:31:79:b3:fd:c9:3b:e3:7e:e8:39:0e:c2:56:46:3b: e8:f9:8c:3d:3c:6d:6b:96:1a:26:98:30:35:67:5c:d7:85:ef: 50:70:6e:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjUwODIzMDA0NzMyWhcNMjUwODMwMDA0NzMyWjAYMRYwFAYD VQQDEw02OGE5MGZhNC01NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5/guNpC1u+6VXbit9Hhwmmz5FqXiRO9kLkvBWO99KEici+F7GUYNWQtlWGV gHh5fpJTk6B+MQMqbH2ipA7ZEpw3xHruWNj9h/AsieAq9MdqtQNf0ZiIVDCeL6bX BrdLWxtCg0D+JErbNocZP68hfiIVyhBm1d6YWytAeX8sd3NBCBNi2lVnXUb7Q7Nk LLlMJe4u2fOGD9MqAe3pAGfknQPFl3208InVfhWX/Y5cRSipmCH3AEMlUOQVVm6d 0xfKKEoXypzJYnh5UdVtJCmvw8Jz61eQSDGn6sQz81klx+s0roy1TW11WADM29LM KSrEcooUSfEV06v71orHflpqxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkj8bqA gjCSOzG8X9RX0e8W2tCyMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmI+zesR7UN3xgyL+W7IFUa4nQwe5iAtNMLNc2Qk7mg6UYhO3+YcXU e5TAJ9tNBz6TDyW2lqPz1yQowh6m8eJVGUzI6IEM6BVlhyYjjP8dYxIkjHvTOJKv In8kov8Ppv/As1eafmbOjQUsFHKykcLfGntyiZKTaogaAcqfuaW/vnVWJjLByZ3A BgQwVWg7FvYUZ6zpnnSVfgicw6aNaLyTSRnN1Ao2N9wDZim1dpD8F+zM7gCoPWme HO5GxpGk3B7iar0K70VKr+jyQMKWscqD/B1kgB8WXyM5BSAxebP9yTvjfug5DsJW Rjvo+Yw9PG1rlhommDA1Z1zXhe9QcG5e -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:13 2025 by rpki-client