$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft File: -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json) Hash identifier: WVIH0HlaIWnxpbjjmgHFCjt0m/Vu8Sp7q2ZZRwWfzM8= Subject key identifier: 4A:06:E4:F2:DF:64:9D:26:A0:8E:E8:63:9A:6C:F9:01:39:59:37:DB Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B Certificate issuer: /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft Manifest number: AE Signing time: Sat 23 Aug 2025 06:25:14 +0000 Manifest this update: Sat 23 Aug 2025 06:25:14 +0000 Manifest next update: Sat 30 Aug 2025 06:25:14 +0000 Files and hashes: 1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: AzpRkngXcuaJAqE+wC1K21HNHewAMwQyAIvbbQ1jYYY=) 2: C276060084F011EF9D52F573C4F9AE02.roa (hash: /tD3m0UAwlMwH5KNwcamave93IXNHxAGbXTHUSH9zMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Validity Not Before: Aug 23 06:25:14 2025 GMT Not After : Aug 30 06:25:14 2025 GMT Subject: CN=68a95eca-9ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:42:d2:54:55:66:c9:fb:0a:45:ef:51:a5: df:75:1f:b5:b9:6e:da:77:d3:37:bf:74:8a:ab:8f: c0:6d:57:c7:de:23:c6:22:65:40:5f:74:be:9e:2c: 0a:d0:9d:05:30:52:6c:05:20:a5:4d:d0:db:ff:4e: 4f:6a:c7:6a:25:f9:c6:fc:7e:e1:30:06:b7:10:17: 7a:64:20:e4:e1:9f:3c:80:91:2e:df:ab:71:25:f7: a6:7b:a7:fd:de:73:d6:81:2e:60:04:4f:d6:70:37: 16:88:ba:d9:14:e1:f8:26:0d:46:de:77:60:23:28: c8:f0:d5:53:dd:85:5e:28:8b:62:77:89:4a:a4:87: 05:b0:da:1c:20:ed:bc:e4:97:83:fb:f5:d5:e0:02: 1b:cb:76:64:c7:cf:76:56:ea:49:5d:67:94:06:16: 19:39:86:c0:7d:ec:da:96:5b:ed:f4:22:98:a8:8f: a2:e5:83:19:13:61:b6:8a:57:04:4f:9e:30:57:c9: 21:e5:b3:a2:22:2e:ae:8b:c8:9e:87:7c:f6:24:92: b2:b9:63:65:b7:5d:2d:98:3e:2e:d3:45:69:68:81: eb:ac:5a:59:b2:36:75:e4:13:15:89:86:78:79:97: 73:70:ac:2d:54:82:2b:c4:7a:20:77:5e:2d:62:c7: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:06:E4:F2:DF:64:9D:26:A0:8E:E8:63:9A:6C:F9:01:39:59:37:DB X509v3 Authority Key Identifier: keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b1:d3:fd:ba:6f:40:75:cf:81:05:e5:6e:5c:86:16:28:91: a6:9f:03:bf:af:a3:b8:53:42:ae:07:b2:15:35:46:82:b0:21: a3:d9:4e:fd:d7:84:cb:56:b7:8f:6e:83:18:6f:c7:fa:05:c4: 0c:27:11:33:78:da:3e:0d:a4:a0:50:50:dd:0c:d7:7e:d3:55: 66:0d:c4:9e:da:a1:43:e1:56:fd:80:39:eb:db:b9:ad:90:cf: 5f:38:b9:96:a9:33:b9:9e:09:33:93:5f:28:35:5e:7c:05:46: 2c:d1:1a:bf:08:22:56:e9:48:de:df:ef:d0:d6:02:54:3d:8a: 2c:f9:a1:c8:58:dd:9a:1b:0a:53:27:64:d3:35:16:e7:8f:c0: 2c:4f:07:49:71:e1:06:73:e7:b6:e4:9f:c4:13:be:69:cb:90: a2:e1:1c:45:b0:30:fb:7c:48:f0:30:27:db:58:96:5b:a6:4d: 29:dc:0b:60:12:0d:f4:44:ef:9e:12:68:0a:b4:85:6c:50:62: 92:4e:9f:7a:66:6a:50:c8:eb:c6:38:e0:ec:0c:fe:40:ce:4b: 3d:67:cd:b4:47:27:11:c1:0e:54:7e:2e:f7:62:0b:b0:ff:64: de:19:67:34:20:ce:59:40:dd:bd:38:25:ac:90:3e:0b:36:ac: fa:57:2c:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1MjUxMTAvBgNVBAUTKEZCRkY4OEFERTk5MzY2ODlCMzI0MTQ1QkZFNjNCNzRE NTdBQUFDMEIwHhcNMjUwODIzMDYyNTE0WhcNMjUwODMwMDYyNTE0WjAYMRYwFAYD VQQDEw02OGE5NWVjYS05Y2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuRC0lRVZsn7CkXvUaXfdR+1uW7ad9M3v3SKq4/AbVfH3iPGImVAX3S+niwK 0J0FMFJsBSClTdDb/05PasdqJfnG/H7hMAa3EBd6ZCDk4Z88gJEu36txJfeme6f9 3nPWgS5gBE/WcDcWiLrZFOH4Jg1G3ndgIyjI8NVT3YVeKItid4lKpIcFsNocIO28 5JeD+/XV4AIby3Zkx892VupJXWeUBhYZOYbAfezallvt9CKYqI+i5YMZE2G2ilcE T54wV8kh5bOiIi6ui8ieh3z2JJKyuWNlt10tmD4u00VpaIHrrFpZsjZ15BMViYZ4 eZdzcKwtVIIrxHogd14tYsehPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoG5PLf ZJ0moI7oY5ps+QE5WTfbMB8GA1UdIwQYMBaAFPv/iK3pk2aJsyQUW/5jt01XqqwL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FQTAyMzQxQzg0 RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpvbXpKQlJiX21PM1RWZXFy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1fLUlyZW1UWm9tekpCUmJfbU8zVFZlcXJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUyNS9FQTAyMzQxQzg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpv bXpKQlJiX21PM1RWZXFyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNsdP9um9Adc+BBeVuXIYWKJGmnwO/r6O4U0KuB7IVNUaCsCGj2U79 14TLVrePboMYb8f6BcQMJxEzeNo+DaSgUFDdDNd+01VmDcSe2qFD4Vb9gDnr27mt kM9fOLmWqTO5ngkzk18oNV58BUYs0Rq/CCJW6Uje3+/Q1gJUPYos+aHIWN2aGwpT J2TTNRbnj8AsTwdJceEGc+e25J/EE75py5Ci4RxFsDD7fEjwMCfbWJZbpk0p3Atg Eg30RO+eEmgKtIVsUGKSTp96ZmpQyOvGOODsDP5Azks9Z820RycRwQ5Ufi73Yguw /2TeGWc0IM5ZQN29OCWskD4LNqz6VyyI -----END CERTIFICATE-----Generated at Sun Aug 24 04:58:40 2025 by rpki-client