$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft File: iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json) Hash identifier: CZFQ+aq0WS/oL+ykY9h84IVZmVc8c6eaDEErHZKEetQ= Subject key identifier: 01:90:B0:30:22:2E:1E:5D:7F:97:B5:B5:6A:4F:B9:A9:10:EC:46:57 Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93 Certificate issuer: /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft Manifest number: 014A Signing time: Sat 23 Aug 2025 04:25:08 +0000 Manifest this update: Sat 23 Aug 2025 04:25:07 +0000 Manifest next update: Sat 30 Aug 2025 04:25:07 +0000 Files and hashes: 1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: DugTKA8BBe0ofYC3eHYKRdwwfuDOFEOvoH6mgwKNiiM=) 2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: B/rfYP/MowjVXl2cDvVI2OTc/iqkJEyxJCeVC3c1JPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993 Validity Not Before: Aug 23 04:25:07 2025 GMT Not After : Aug 30 04:25:07 2025 GMT Subject: CN=68a942a3-072a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:2f:1f:3f:ae:e8:64:28:96:eb:b1:d9:d9: 61:ec:49:df:da:ef:b0:69:41:3c:0b:0c:a8:0d:21: 76:46:3f:ce:4f:ab:44:ae:c7:f5:8c:ec:48:92:70: c7:ba:55:c3:7b:e3:29:58:a4:65:b5:f0:8d:b0:f9: 8f:c9:e1:e4:13:88:a6:31:38:9d:e4:40:09:b3:38: 61:6d:c7:a4:73:3f:4e:cf:3b:6b:a5:44:22:72:51: 5d:80:95:40:90:bd:82:77:a3:1d:d1:3c:12:40:60: 2f:49:5c:73:4a:ae:8e:75:19:b2:fb:da:e7:d8:a6: 24:1d:35:30:c4:78:69:65:33:de:f4:b1:dc:11:c9: 57:65:7b:ac:92:69:02:6b:b0:02:01:0e:8a:a1:8d: 01:5a:97:ac:64:12:82:c1:43:4c:d7:91:4b:5a:9c: af:cb:eb:2c:4a:9d:5c:ec:c8:63:08:15:31:cd:5f: ec:c4:f2:15:6b:40:22:44:7a:3f:6f:13:8e:99:73: 0e:b3:25:57:c2:5b:bb:2c:d9:12:2a:21:80:2a:b5: fa:98:03:09:37:d0:42:c3:85:36:1b:95:83:1f:c3: d3:86:19:d8:fd:fb:8e:5c:88:fc:35:09:16:46:ae: cb:ce:87:9b:ce:69:39:9e:fa:bc:38:4c:14:9c:39: 3b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:90:B0:30:22:2E:1E:5D:7F:97:B5:B5:6A:4F:B9:A9:10:EC:46:57 X509v3 Authority Key Identifier: keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:52:42:17:1d:e1:41:18:87:ec:b7:6c:13:8b:a1:56:8f:c0: eb:74:5f:8f:18:68:89:2d:d5:a4:69:a9:f3:63:22:84:ca:0b: 0b:99:fd:2f:29:7f:d9:38:95:55:48:c8:2c:30:f1:7f:cf:1e: 92:be:9f:17:f9:f1:cc:a0:a6:6a:7c:d3:13:79:a4:0f:29:b0: ff:f4:96:2b:46:3f:3e:0a:6d:be:b7:dd:a1:07:e8:7b:b1:36: fc:00:44:50:41:05:6c:ca:66:18:7d:de:cc:04:b3:9e:e7:13: a9:26:e1:47:df:b9:9d:65:93:c9:88:a2:77:90:b2:f8:6e:63: f2:eb:e1:0d:34:69:60:7c:13:9c:63:56:88:9c:1e:23:35:69: 37:0a:dd:60:02:89:6d:86:45:69:cf:a0:54:e3:b7:5e:e1:74: 81:0b:d9:d3:3e:a3:cb:0f:3d:f5:18:07:31:04:4a:9c:59:b5: e7:31:35:e4:f3:0f:4f:3b:21:63:59:a3:d5:2b:2e:ed:d1:5b: 80:d4:e8:1c:78:74:ee:f2:ca:38:d8:90:35:7f:bb:41:e9:70: 19:33:d3:92:dd:ec:6a:b1:7e:69:c3:a3:69:ad:52:0f:71:a1: 9d:39:32:3d:9c:88:dd:57:f8:8e:27:dc:4b:0b:40:ed:8f:f0: d1:17:d8:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyMUQxMTAvBgNVBAUTKDg4QzE1NDREN0U2N0JDRDkxRDQ4REY1RDExRkNEMTAy MUY4NTM5OTMwHhcNMjUwODIzMDQyNTA3WhcNMjUwODMwMDQyNTA3WjAYMRYwFAYD VQQDEw02OGE5NDJhMy0wNzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmwvHz+u6GQoluux2dlh7Enf2u+waUE8CwyoDSF2Rj/OT6tErsf1jOxIknDH ulXDe+MpWKRltfCNsPmPyeHkE4imMTid5EAJszhhbcekcz9OzztrpUQiclFdgJVA kL2Cd6Md0TwSQGAvSVxzSq6OdRmy+9rn2KYkHTUwxHhpZTPe9LHcEclXZXuskmkC a7ACAQ6KoY0BWpesZBKCwUNM15FLWpyvy+ssSp1c7MhjCBUxzV/sxPIVa0AiRHo/ bxOOmXMOsyVXwlu7LNkSKiGAKrX6mAMJN9BCw4U2G5WDH8PThhnY/fuOXIj8NQkW Rq7Lzoebzmk5nvq8OEwUnDk7zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGQsDAi Lh5df5e1tWpPuakQ7EZXMB8GA1UdIwQYMBaAFIjBVE1+Z7zZHUjfXRH80QIfhTmT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODIxRC9CMkEwNzRFRTg5 QjExMUVFOTg2Q0E2NUNDNEY5QUUwMi9pTUZVVFg1bnZOa2RTTjlkRWZ6UkFoLUZP Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lNRlVUWDVudk5rZFNOOWRFZnpSQWgtRk9aTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODIxRC9CMkEwNzRFRTg5QjExMUVFOTg2Q0E2NUNDNEY5QUUwMi9pTUZVVFg1bnZO a2RTTjlkRWZ6UkFoLUZPWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1UkIXHeFBGIfst2wTi6FWj8DrdF+PGGiJLdWkaanzYyKEygsLmf0v KX/ZOJVVSMgsMPF/zx6Svp8X+fHMoKZqfNMTeaQPKbD/9JYrRj8+Cm2+t92hB+h7 sTb8AERQQQVsymYYfd7MBLOe5xOpJuFH37mdZZPJiKJ3kLL4bmPy6+ENNGlgfBOc Y1aInB4jNWk3Ct1gAolthkVpz6BU47de4XSBC9nTPqPLDz31GAcxBEqcWbXnMTXk 8w9POyFjWaPVKy7t0VuA1OgceHTu8so42JA1f7tB6XAZM9OS3exqsX5pw6NprVIP caGdOTI9nIjdV/iOJ9xLC0Dtj/DRF9j7 -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:12 2025 by rpki-client