$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json) Hash identifier: 64MOw3IbFQN6V0MkCecSCMDrzgUnRUC5dQHHhC05/3k= Subject key identifier: 2A:93:5B:DD:67:1D:2A:CE:A6:69:8D:D3:40:04:33:03:93:D2:3E:24 Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Certificate serial: 1045 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft Manifest number: 1039 Signing time: Fri 22 Aug 2025 17:32:27 +0000 Manifest this update: Fri 22 Aug 2025 17:32:27 +0000 Manifest next update: Fri 29 Aug 2025 17:32:27 +0000 Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: fhICtzAKud3GN2i6EEPG20cav+RsIFmglXPhohGRwD8=) 2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: SSjTjiJw3UBo/Mme4Kl37l1zxjxnCDkxVmhI1OR3EOw=) 3: 608836D046B111E98B793856C4F9AE02.roa (hash: Ls4h/fmzmMgVY9fuRoj+7ux+D5fYwsPV37oBSFEiAic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4165 (0x1045) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Validity Not Before: Aug 22 17:32:27 2025 GMT Not After : Aug 29 17:32:27 2025 GMT Subject: CN=68a8a9ab-252f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:e7:6c:97:bd:72:3c:1e:57:9b:35:ab:ab: bc:ba:aa:48:81:cf:5a:c7:ac:a5:c7:7f:17:0e:54: 54:7d:4c:48:26:72:68:6e:90:ba:da:42:08:c6:94: 7b:90:9a:81:64:19:1e:b2:f2:e2:70:cf:f5:bc:e0: ea:02:62:6e:e9:e8:c5:c2:da:42:a3:ab:ae:d7:ef: 36:3c:f7:91:c8:73:4f:af:1d:6a:1e:7d:c5:36:53: d3:6c:3e:3e:06:aa:17:7e:e0:d5:9f:d0:28:f1:21: 42:e7:84:e7:d7:ef:0b:d8:bd:b4:f2:f9:89:4f:b0: 7e:39:e1:4d:ec:8c:9f:1e:0a:96:6a:bc:86:8c:d5: 09:8c:d8:74:1d:5b:99:0c:91:19:0e:0b:fa:98:c7: d0:09:f1:24:23:d9:2e:66:22:5f:8f:83:03:a2:91: 58:4c:7c:6c:8d:b6:92:39:6f:30:fd:55:ac:e0:e9: 2b:21:a0:73:ad:f0:ed:ea:9e:e8:4e:6f:fb:2a:26: 5c:d9:29:a3:61:6e:ff:f4:53:5b:36:8e:0d:77:62: 97:63:f1:e1:0b:03:e7:31:8f:24:96:31:0a:89:cb: 31:41:36:1e:15:93:97:9c:21:57:04:8f:d7:ec:f4: 3d:5f:0b:2a:85:d1:7e:d7:77:81:bb:11:ba:5f:31: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:93:5B:DD:67:1D:2A:CE:A6:69:8D:D3:40:04:33:03:93:D2:3E:24 X509v3 Authority Key Identifier: keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8c:6d:e2:b0:14:25:87:f3:b6:9e:37:2c:a0:01:e6:fc:e4: 38:bd:ad:1f:19:17:35:db:64:b1:44:1a:46:56:a7:f4:a7:86: 6b:55:d8:5c:10:9b:63:59:18:86:2f:97:a0:14:6b:fd:4d:31: 17:ed:c3:8d:da:6a:a5:af:c0:ae:ef:8a:f5:05:d0:59:66:d9: 1e:4f:5c:f6:7e:10:34:5a:30:56:a5:8c:50:3f:b7:b9:a5:2b: 7e:d7:49:e7:b7:a6:99:a8:c0:63:a4:4f:6b:c3:51:7a:03:a4: da:51:f3:a9:e3:1a:a7:55:3f:7c:db:a8:cf:31:d9:0a:64:2e: be:a6:97:e7:b5:0f:70:47:90:be:6c:32:74:b4:4d:54:01:90: 7e:90:f6:dd:c6:a9:05:92:ee:a0:3a:2f:c0:76:d6:c8:dd:fa: e8:ee:33:15:0e:f0:81:33:e9:04:1a:b5:45:1c:03:2a:7d:a4: ed:f8:45:b0:3b:58:27:b3:07:f7:6e:45:77:43:de:b2:93:61: 9b:d5:24:2d:95:b2:2c:f8:9d:7c:39:c5:cb:80:c1:57:33:9c: f5:66:2b:e7:59:4b:58:7e:4a:8c:bd:48:85:18:c7:7e:80:0a: 66:41:48:d6:04:a2:f6:3c:c5:e6:0a:21:bd:53:26:77:3b:67: 0e:c3:1a:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKDIyM0JFMTk4OTJFNkU2Q0I0MDZFNUZBOTk1NkREQkNF QTk1Q0JCNDYwHhcNMjUwODIyMTczMjI3WhcNMjUwODI5MTczMjI3WjAYMRYwFAYD VQQDEw02OGE4YTlhYi0yNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3E3nbJe9cjweV5s1q6u8uqpIgc9ax6ylx38XDlRUfUxIJnJobpC62kIIxpR7 kJqBZBkesvLicM/1vODqAmJu6ejFwtpCo6uu1+82PPeRyHNPrx1qHn3FNlPTbD4+ BqoXfuDVn9Ao8SFC54Tn1+8L2L208vmJT7B+OeFN7IyfHgqWaryGjNUJjNh0HVuZ DJEZDgv6mMfQCfEkI9kuZiJfj4MDopFYTHxsjbaSOW8w/VWs4OkrIaBzrfDt6p7o Tm/7KiZc2SmjYW7/9FNbNo4Nd2KXY/HhCwPnMY8kljEKicsxQTYeFZOXnCFXBI/X 7PQ9XwsqhdF+13eBuxG6XzFZBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqTW91n HSrOpmmN00AEMwOT0j4kMB8GA1UdIwQYMBaAFCI74ZiS5ubLQG5fqZVt286pXLtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9CNkE5RjI2MDQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVzdEFibC1wbFczYnpxbGN1 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lqdmhtSkxtNXN0QWJsLXBsVzNienFsY3UwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9CNkE5RjI2MDQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVz dEFibC1wbFczYnpxbGN1MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbjG3isBQlh/O2njcsoAHm/OQ4va0fGRc122SxRBpGVqf0p4ZrVdhc EJtjWRiGL5egFGv9TTEX7cON2mqlr8Cu74r1BdBZZtkeT1z2fhA0WjBWpYxQP7e5 pSt+10nnt6aZqMBjpE9rw1F6A6TaUfOp4xqnVT9826jPMdkKZC6+ppfntQ9wR5C+ bDJ0tE1UAZB+kPbdxqkFku6gOi/AdtbI3fro7jMVDvCBM+kEGrVFHAMqfaTt+EWw O1gnswf3bkV3Q96yk2Gb1SQtlbIs+J18OcXLgMFXM5z1ZivnWUtYfkqMvUiFGMd+ gApmQUjWBKL2PMXmCiG9UyZ3O2cOwxrD -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:10 2025 by rpki-client