$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: 4rPsdCQxJN7RHIrjSD6k0smg+qfW5Zi61+NJ7358zEk= Subject key identifier: 07:25:D0:71:16:10:AC:8F:E8:0B:60:1F:E3:B5:10:8D:74:5C:3E:40 Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0AED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0ADD Signing time: Fri 22 Aug 2025 19:34:01 +0000 Manifest this update: Fri 22 Aug 2025 19:34:01 +0000 Manifest next update: Fri 29 Aug 2025 19:34:01 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: QIErYCKufrJzw1lYvoWzHjq65SZ/cbd3KDWBVDU2R14=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: jqqBqCZOKu2qIALXNmkWZIy2E6GEnPXSik4fgBrMrDA=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: lxeOojn+XYimi3V1BZ9O9tBljDRntCvGVjoxX3VG+x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2797 (0xaed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: Aug 22 19:34:01 2025 GMT Not After : Aug 29 19:34:01 2025 GMT Subject: CN=68a8c629-0344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5f:bb:9c:ca:5a:c4:b9:85:6e:bb:85:a6:76: 09:c0:75:de:94:58:9f:9f:f5:e7:c3:05:ab:45:11: 63:ce:5e:97:4e:eb:1c:ea:22:28:56:a1:e1:b4:dd: 51:14:ce:c2:d3:8f:47:9f:52:d6:d7:f8:a6:b9:d4: c3:5d:1c:ef:25:d4:a2:e0:29:10:39:a8:01:9d:62: 98:58:b0:6c:4f:ff:ac:28:7f:fe:9c:b3:b4:d3:3b: 64:e8:22:c6:a8:a8:4d:32:48:d4:86:76:3c:1e:6f: cf:80:8a:13:dc:36:02:7d:41:3d:7f:b6:71:85:b8: e3:8e:85:49:e2:b8:8b:62:9f:ca:16:d3:83:93:39: 0b:ab:c6:4e:f3:41:5e:bb:5c:a2:63:20:15:11:14: 0b:2a:08:17:af:97:93:72:8b:fe:b8:99:90:34:cb: f3:30:30:41:ce:00:68:56:52:ef:d0:f9:be:ce:1b: fa:92:f5:b3:2c:8b:de:e7:70:ba:46:64:ca:9e:1f: 8c:de:11:f2:e0:94:81:68:d0:f5:24:f1:62:8c:2a: a5:e5:76:1b:d2:01:71:8c:c0:54:79:ee:25:9e:07: 14:3a:a9:02:0c:5c:0b:e6:e6:d7:7c:65:ee:01:83: d7:23:48:b8:2b:51:55:4a:a5:6c:2f:39:ec:f3:c7: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:25:D0:71:16:10:AC:8F:E8:0B:60:1F:E3:B5:10:8D:74:5C:3E:40 X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a3:a8:f4:b1:f6:ad:ef:87:4e:b1:64:12:54:70:d1:ed:92: 7e:ce:91:aa:cd:6c:8e:13:24:ac:6a:c2:f9:de:fd:f3:04:98: 8e:0b:e1:3a:a5:94:9c:23:4a:da:69:6c:46:f4:a1:e3:3d:0c: 65:f7:93:5b:a0:ef:d4:4a:a4:af:5a:0d:52:92:33:c8:e0:8c: f4:4e:82:eb:50:66:c4:6a:98:bd:81:71:7f:27:14:23:8c:87: 91:11:8c:62:51:0a:02:55:16:17:98:b8:d3:b6:7a:31:66:5a: 90:4c:f7:72:7e:f1:de:c8:2e:2d:eb:df:60:0e:7b:3b:29:a4: 31:c7:bf:d4:23:a4:4f:c8:30:41:84:85:13:16:0b:c3:3c:07: 4b:4e:73:5e:58:be:81:9e:70:5b:33:9b:48:95:d7:ef:4b:1a: 10:7c:36:5e:54:22:17:b8:4d:30:a2:2c:e3:c4:2e:c9:6e:b2: 07:f3:9e:13:76:ac:eb:07:93:8a:c3:98:c7:d3:4a:3e:82:25: ae:2d:fb:c0:7f:7a:96:db:a6:fd:47:3b:ab:d8:4e:41:40:46: c4:ce:93:34:d2:26:b9:0b:a9:43:b1:0e:0e:1a:00:c8:b0:b7: d5:80:db:08:3d:d5:db:50:f9:7b:b7:ac:ce:d6:97:6a:b5:2e: fc:c9:00:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjUwODIyMTkzNDAxWhcNMjUwODI5MTkzNDAxWjAYMRYwFAYD VQQDEw02OGE4YzYyOS0wMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyV+7nMpaxLmFbruFpnYJwHXelFifn/XnwwWrRRFjzl6XTusc6iIoVqHhtN1R FM7C049Hn1LW1/imudTDXRzvJdSi4CkQOagBnWKYWLBsT/+sKH/+nLO00ztk6CLG qKhNMkjUhnY8Hm/PgIoT3DYCfUE9f7ZxhbjjjoVJ4riLYp/KFtODkzkLq8ZO80Fe u1yiYyAVERQLKggXr5eTcov+uJmQNMvzMDBBzgBoVlLv0Pm+zhv6kvWzLIve53C6 RmTKnh+M3hHy4JSBaND1JPFijCql5XYb0gFxjMBUee4lngcUOqkCDFwL5ubXfGXu AYPXI0i4K1FVSqVsLzns88cA9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcl0HEW EKyP6AtgH+O1EI10XD5AMB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBto6j0sfat74dOsWQSVHDR7ZJ+zpGqzWyOEySsasL53v3zBJiOC+E6 pZScI0raaWxG9KHjPQxl95NboO/USqSvWg1SkjPI4Iz0ToLrUGbEapi9gXF/JxQj jIeREYxiUQoCVRYXmLjTtnoxZlqQTPdyfvHeyC4t699gDns7KaQxx7/UI6RPyDBB hIUTFgvDPAdLTnNeWL6BnnBbM5tIldfvSxoQfDZeVCIXuE0woizjxC7JbrIH854T dqzrB5OKw5jH00o+giWuLfvAf3qW26b9Rzur2E5BQEbEzpM00ia5C6lDsQ4OGgDI sLfVgNsIPdXbUPl7t6zO1pdqtS78yQAe -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:14 2025 by rpki-client