$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: 7jS0ntIqeNlWwKBrDxAUOYPCzqmzNieztPTLpIaC8AI= Subject key identifier: 0D:38:5C:40:45:2F:07:E8:AC:99:91:6F:9D:B0:C9:1E:F2:B8:42:CC Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0D1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0D0D Signing time: Wed 02 Jul 2025 18:17:37 +0000 Manifest this update: Wed 02 Jul 2025 18:17:37 +0000 Manifest next update: Wed 09 Jul 2025 18:17:37 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: vwPCkXONmd8xo+/6wLdWeoORNDOp6hE5p4fHeDKaogo=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: KmGf8Zvcyufmo51iUasTSRX2HWDW8cDhuB6ClqAH62g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: Jul 2 18:17:37 2025 GMT Not After : Jul 9 18:17:37 2025 GMT Subject: CN=686577c1-38b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:75:3a:0e:8b:e7:f1:23:47:63:90:bd:68:31: 00:b5:ce:cf:0b:e6:15:87:dc:d5:38:0d:b0:65:e2: e1:d4:9d:70:38:ee:58:00:ff:a1:a7:9e:49:c9:b8: 44:34:7f:ce:6b:5e:30:74:11:8c:10:6a:29:61:f4: f5:9d:63:dd:5a:a9:0f:1f:82:c1:21:9f:c8:20:47: b0:28:45:47:0f:9d:db:8b:51:41:ea:98:2a:02:33: 47:c5:70:e2:00:d4:06:ae:28:c4:27:c5:7a:3d:dc: 74:df:1e:30:7b:bf:3d:d5:aa:f6:ff:1f:72:0a:60: 55:9c:e0:ea:b6:5b:1d:4c:d5:fd:dd:eb:46:ab:49: ce:6b:a0:a9:85:90:d9:84:d8:24:ec:33:fd:4d:00: e7:da:67:68:66:1d:e4:59:b3:7e:05:6e:38:66:03: 0c:48:ec:2a:b8:35:68:21:4f:54:f4:bc:65:a8:b9: a4:0f:a5:c4:69:84:30:16:c3:12:df:d1:ef:44:49: 3d:00:93:03:e0:e2:cc:b9:31:19:59:0c:33:e6:45: ae:d7:fc:f3:5b:01:63:b7:63:60:54:72:ae:75:ed: 70:4c:40:a3:75:7f:ca:a1:cf:44:b0:89:fd:69:6c: 1c:de:dc:99:42:39:06:f4:63:d2:60:76:63:7b:d3: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:38:5C:40:45:2F:07:E8:AC:99:91:6F:9D:B0:C9:1E:F2:B8:42:CC X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f3:b2:7a:78:d9:1c:4c:eb:06:d0:c3:92:91:75:69:d7:d1: bd:e9:cc:6b:91:0d:06:e7:f2:ff:d6:ef:ad:00:ce:d6:58:9e: 8c:b7:24:8a:c3:1e:80:0b:20:00:56:3d:cc:93:94:15:df:d3: 0b:77:24:ee:75:3b:d3:04:85:31:b3:52:0e:63:b2:f6:41:22: 3e:e4:88:9a:25:4c:2b:0c:24:b7:be:65:8a:98:29:b8:15:f2: 90:2a:c9:5d:3e:a2:d7:ee:fc:c5:1e:7c:12:d3:9c:57:96:77: 3f:d4:03:7a:55:c5:2b:bf:37:b8:c5:23:14:bf:e0:69:b6:42: ee:ae:df:67:04:6c:c9:6f:cd:10:bb:f8:a7:4a:e1:22:24:16: 93:00:a6:8d:5b:58:a8:2b:95:3e:d0:b6:a1:47:46:0c:ef:80: fe:92:73:1a:d5:ca:ae:d9:41:d0:94:d5:9d:9d:ad:7d:d5:17: 40:3a:1c:4a:ae:38:6d:33:55:3d:e8:fd:07:ea:47:54:16:58: 10:f0:de:99:92:4d:12:ff:18:0f:2c:e3:c7:65:e3:c9:66:59: ca:1e:72:40:28:9d:2a:7d:d1:60:fa:23:0c:34:20:19:fb:06: 34:fe:c2:a0:34:c5:6f:d1:cb:2c:aa:23:4f:05:5f:c3:ce:32: 99:3a:24:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjUwNzAyMTgxNzM3WhcNMjUwNzA5MTgxNzM3WjAYMRYwFAYD VQQDEw02ODY1NzdjMS0zOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nU6Dovn8SNHY5C9aDEAtc7PC+YVh9zVOA2wZeLh1J1wOO5YAP+hp55JybhE NH/Oa14wdBGMEGopYfT1nWPdWqkPH4LBIZ/IIEewKEVHD53bi1FB6pgqAjNHxXDi ANQGrijEJ8V6Pdx03x4we7891ar2/x9yCmBVnODqtlsdTNX93etGq0nOa6CphZDZ hNgk7DP9TQDn2mdoZh3kWbN+BW44ZgMMSOwquDVoIU9U9LxlqLmkD6XEaYQwFsMS 39HvREk9AJMD4OLMuTEZWQwz5kWu1/zzWwFjt2NgVHKude1wTECjdX/Koc9EsIn9 aWwc3tyZQjkG9GPSYHZje9OpcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA04XEBF LwforJmRb52wyR7yuELMMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH87J6eNkcTOsG0MOSkXVp19G96cxrkQ0G5/L/1u+tAM7WWJ6MtySK wx6ACyAAVj3Mk5QV39MLdyTudTvTBIUxs1IOY7L2QSI+5IiaJUwrDCS3vmWKmCm4 FfKQKsldPqLX7vzFHnwS05xXlnc/1AN6VcUrvze4xSMUv+BptkLurt9nBGzJb80Q u/inSuEiJBaTAKaNW1ioK5U+0LahR0YM74D+knMa1cqu2UHQlNWdna191RdAOhxK rjhtM1U96P0H6kdUFlgQ8N6Zkk0S/xgPLOPHZePJZlnKHnJAKJ0qfdFg+iMMNCAZ +wY0/sKgNMVv0cssqiNPBV/DzjKZOiTV -----END CERTIFICATE-----Generated at Thu Jul 3 08:07:51 2025 by rpki-client