$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: aKDxp9b0rh/c8PofAhM42sp9OWaXxwUqDP+DMwQMjYY= Subject key identifier: 33:B0:24:46:49:29:27:C9:14:3B:4C:69:FA:71:F2:19:F6:BC:4C:8C Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: A5 Signing time: Sun 29 Jun 2025 05:14:22 +0000 Manifest this update: Sun 29 Jun 2025 05:14:22 +0000 Manifest next update: Sun 06 Jul 2025 05:14:22 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: ca5eD3h64vCRA34IQrZp1iG7yqBGb7wfnNHA8YWQ9l0=) 2: AA5E96065B9F11EF9F1B175DC4F9AE02.roa (hash: 835GCMndjNXvDx8DWI9YwArs6Gdw+YBn2q/Ep2PzpX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Jun 29 05:14:22 2025 GMT Not After : Jul 6 05:14:22 2025 GMT Subject: CN=6860cbae-ba00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:86:bb:9b:3c:a2:ec:1a:28:bb:54:5c:74: f6:fc:67:bc:b6:8a:0a:63:8f:09:f3:26:6f:25:57: c7:11:cf:43:05:81:53:f8:7f:14:1f:a2:2f:0c:47: 04:82:fd:1b:50:10:d1:2d:cd:c6:10:b4:6d:04:e7: 8f:1c:6f:9a:0a:ec:37:74:14:a1:c1:76:66:04:fe: 63:0e:eb:2f:37:0d:2d:00:2a:fd:f2:51:da:a5:70: ce:f2:81:00:69:fa:4e:54:34:9f:ca:25:f0:04:bc: 95:c3:a8:71:4f:ee:27:94:b8:6c:fb:3d:03:fd:06: 32:ed:84:f8:90:e2:01:ec:d6:17:99:20:4f:33:40: 98:9d:40:49:12:09:49:66:30:49:b9:d8:35:65:7d: 00:21:a1:00:50:af:fa:1a:10:56:c5:e2:49:6d:e7: 99:2d:3a:0b:97:21:e1:e1:b6:21:9b:9d:54:89:11: 1e:3c:f5:09:8c:2b:57:e3:8a:3e:eb:10:69:b2:cb: 35:ee:11:bf:cd:2b:47:56:04:56:44:1f:5b:08:f6: 77:60:46:de:7f:d1:bc:d6:b0:77:4a:42:ab:0a:17: 78:93:73:f6:c3:a0:98:65:0b:d5:31:6e:05:7c:79: 15:ca:01:9c:dd:8a:e7:2a:59:8f:c2:f7:ff:ec:0b: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B0:24:46:49:29:27:C9:14:3B:4C:69:FA:71:F2:19:F6:BC:4C:8C X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:74:c4:67:ec:a3:74:f1:8e:b2:6f:88:c7:25:ea:3b:c2:19: ec:00:a8:33:16:0a:bc:b4:f4:bc:66:7d:c5:72:0d:79:1f:5e: 88:24:3f:cb:1d:c9:e3:e4:d8:ee:d5:a9:ef:d2:88:df:5a:ac: 7a:93:a1:59:9f:4e:63:64:ee:31:b0:ee:aa:2c:b3:a7:dc:3e: d5:fa:af:fc:38:f3:72:91:e0:95:b8:b3:cf:0a:c4:34:a3:76: c4:bd:92:6b:79:ab:7f:01:7e:42:d3:50:f6:95:e6:c4:3e:59: de:cf:fa:06:33:4f:a1:ba:6e:65:2d:43:d3:80:34:72:cc:55: e3:bc:ff:b1:ff:45:00:71:ab:a3:a0:7c:17:5f:59:39:9a:5b: 17:4c:17:fb:e8:3a:58:ef:c1:8b:0d:ab:8a:1d:1c:00:c7:13: e9:36:c4:77:9d:6c:a3:2d:f8:ec:72:32:5c:82:a6:d5:8e:c4: b3:2f:33:8d:04:89:12:5d:78:c2:a3:ca:2e:3c:23:e5:55:db: bd:e1:25:03:24:30:56:f3:11:02:01:b1:27:12:e6:8f:ad:04: 98:b8:3c:84:db:1c:8b:4d:80:77:d1:3b:4f:03:ba:e4:7f:0e: be:12:3c:f0:bc:30:f4:17:cb:ef:3d:00:82:2d:a6:5a:49:11: f2:eb:0d:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0 OUM1Q0FDMTcwHhcNMjUwNjI5MDUxNDIyWhcNMjUwNzA2MDUxNDIyWjAYMRYwFAYD VQQDEw02ODYwY2JhZS1iYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp2Gu5s8ouwaKLtUXHT2/Ge8tooKY48J8yZvJVfHEc9DBYFT+H8UH6IvDEcE gv0bUBDRLc3GELRtBOePHG+aCuw3dBShwXZmBP5jDusvNw0tACr98lHapXDO8oEA afpOVDSfyiXwBLyVw6hxT+4nlLhs+z0D/QYy7YT4kOIB7NYXmSBPM0CYnUBJEglJ ZjBJudg1ZX0AIaEAUK/6GhBWxeJJbeeZLToLlyHh4bYhm51UiREePPUJjCtX44o+ 6xBpsss17hG/zStHVgRWRB9bCPZ3YEbef9G81rB3SkKrChd4k3P2w6CYZQvVMW4F fHkVygGc3YrnKlmPwvf/7AswRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOwJEZJ KSfJFDtMafpx8hn2vEyMMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk UGY2RHJyN3k2akZKeGNyQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBdMRn7KN08Y6yb4jHJeo7whnsAKgzFgq8tPS8Zn3Fcg15H16IJD/L Hcnj5Nju1anv0ojfWqx6k6FZn05jZO4xsO6qLLOn3D7V+q/8OPNykeCVuLPPCsQ0 o3bEvZJreat/AX5C01D2lebEPlnez/oGM0+hum5lLUPTgDRyzFXjvP+x/0UAcauj oHwXX1k5mlsXTBf76DpY78GLDauKHRwAxxPpNsR3nWyjLfjscjJcgqbVjsSzLzON BIkSXXjCo8ouPCPlVdu94SUDJDBW8xECAbEnEuaPrQSYuDyE2xyLTYB30TtPA7rk fw6+EjzwvDD0F8vvPQCCLaZaSRHy6w0R -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:17 2025 by rpki-client