$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft File: ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json) Hash identifier: spUgvIKwzcPGnNuvtrzdNx2b8Ji4286JY8TDGUkCr20= Subject key identifier: C5:A8:5A:F7:27:E9:D6:8C:3C:7B:60:0A:CA:FB:9B:6E:3E:53:78:4B Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 Certificate issuer: /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft Manifest number: 0276 Signing time: Tue 01 Jul 2025 02:25:13 +0000 Manifest this update: Tue 01 Jul 2025 02:25:13 +0000 Manifest next update: Tue 08 Jul 2025 02:25:13 +0000 Files and hashes: 1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: PF0qvpDuVp4wcAUiiKT4mQ5WdCjLlkogXHLr+ngCQUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91183D4, serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Validity Not Before: Jul 1 02:25:13 2025 GMT Not After : Jul 8 02:25:13 2025 GMT Subject: CN=68634709-3037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:cb:7a:ac:a5:31:7f:09:0c:b8:e0:df:e8:c1: 85:4f:ae:c1:fb:a1:1f:cf:ce:37:89:47:db:f6:8c: 28:79:71:3a:61:41:97:8d:f2:7b:55:33:a9:6a:ca: 4a:77:7b:5f:34:35:21:1e:c5:cf:87:75:f3:0f:ce: 3f:f8:01:52:d6:65:8d:19:c2:4f:e1:23:2f:ab:ce: 6d:e4:b2:53:77:fd:60:52:9b:80:e2:83:e7:b6:cf: cc:f5:85:6e:bc:a9:37:b7:1d:83:08:7b:a3:b5:df: 67:21:f6:1c:cc:7c:66:5e:42:06:77:eb:a2:c6:1e: 05:e6:76:09:d7:ea:33:13:26:25:9d:eb:60:00:be: dc:42:d9:60:e6:a6:a2:f4:74:e0:79:1a:dc:2b:ac: b8:b5:41:54:bd:b5:fe:d4:a2:f4:63:43:b5:a4:a1: 1b:10:56:a1:91:a4:37:8e:62:b9:80:be:cd:3b:da: eb:aa:e3:e8:78:a6:1e:e3:18:29:6b:99:28:fd:7c: f6:fa:73:98:96:c4:0d:4b:13:2c:82:ea:0f:74:d0: eb:0c:74:c8:71:6e:1b:c5:59:12:ff:ae:e2:9e:dd: 66:fa:a4:dd:62:b4:a0:df:13:99:78:4f:d7:20:56: 18:d7:dc:de:30:84:03:db:50:7b:c0:11:89:2f:ee: 6f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A8:5A:F7:27:E9:D6:8C:3C:7B:60:0A:CA:FB:9B:6E:3E:53:78:4B X509v3 Authority Key Identifier: keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f3:f1:c1:4d:9e:a6:01:18:9b:8c:1f:ca:87:ec:da:d0:1e: 75:65:09:b2:03:c3:7c:f2:79:d2:8f:9b:82:84:08:13:f0:5b: 2e:81:49:b3:56:c3:53:99:e5:4d:8c:4d:e3:d9:a2:47:16:ad: b3:9c:71:59:22:eb:e3:47:39:f4:0f:2e:50:ed:f2:43:85:0f: ed:b4:15:cc:fd:e9:1e:1b:ed:23:4a:17:64:99:30:e4:bc:10: ce:e8:d0:9d:a6:4f:77:fe:e8:7b:5e:7c:77:20:3c:bb:89:3d: 77:07:c2:e4:f8:a8:53:8d:2b:a6:2f:a0:aa:87:c0:b0:47:f8: af:1a:be:12:d3:02:0a:f9:d1:63:54:f5:43:9d:2e:11:25:d0: a4:96:91:84:9a:5b:8d:58:97:bf:b8:72:dc:fb:7d:aa:65:9b: 35:14:b6:40:f8:f7:df:51:22:fd:b7:d8:70:09:1a:5c:ed:e7: 31:61:8b:79:ae:87:b4:78:7e:09:bb:99:9e:ae:85:fe:9b:e8: 31:47:47:d2:d1:ea:86:3e:6b:0f:15:3f:c4:88:81:31:38:29: d5:98:ae:a5:dc:80:26:f5:0f:3b:fb:79:7d:cf:6e:4e:74:8b: 4b:bb:6d:50:99:2b:6f:94:00:42:2c:a4:e2:79:76:f9:83:93: 8f:3e:b0:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzRDQxMTAvBgNVBAUTKDhBMzM5MTk1RTJDRTI5NzVCNUY3ODk5QTNEMDJDRTYy RUY5MUJGMzkwHhcNMjUwNzAxMDIyNTEzWhcNMjUwNzA4MDIyNTEzWjAYMRYwFAYD VQQDEw02ODYzNDcwOS0zMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ct6rKUxfwkMuODf6MGFT67B+6Efz843iUfb9owoeXE6YUGXjfJ7VTOpaspK d3tfNDUhHsXPh3XzD84/+AFS1mWNGcJP4SMvq85t5LJTd/1gUpuA4oPnts/M9YVu vKk3tx2DCHujtd9nIfYczHxmXkIGd+uixh4F5nYJ1+ozEyYlnetgAL7cQtlg5qai 9HTgeRrcK6y4tUFUvbX+1KL0Y0O1pKEbEFahkaQ3jmK5gL7NO9rrquPoeKYe4xgp a5ko/Xz2+nOYlsQNSxMsguoPdNDrDHTIcW4bxVkS/67int1m+qTdYrSg3xOZeE/X IFYY19zeMIQD21B7wBGJL+5vuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWoWvcn 6daMPHtgCsr7m24+U3hLMB8GA1UdIwQYMBaAFIozkZXizil1tfeJmj0CzmLvkb85 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODNENC9GNkJFODY5NjE0 QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tYVzE5NG1hUFFMT1l1LVJ2 emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqT1JsZUxPS1hXMTk0bWFQUUxPWXUtUnZ6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODNENC9GNkJFODY5NjE0QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tY VzE5NG1hUFFMT1l1LVJ2emsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA08/HBTZ6mARibjB/Kh+za0B51ZQmyA8N88nnSj5uChAgT8FsugUmz VsNTmeVNjE3j2aJHFq2znHFZIuvjRzn0Dy5Q7fJDhQ/ttBXM/ekeG+0jShdkmTDk vBDO6NCdpk93/uh7Xnx3IDy7iT13B8Lk+KhTjSumL6Cqh8CwR/ivGr4S0wIK+dFj VPVDnS4RJdCklpGEmluNWJe/uHLc+32qZZs1FLZA+PffUSL9t9hwCRpc7ecxYYt5 roe0eH4Ju5meroX+m+gxR0fS0eqGPmsPFT/EiIExOCnVmK6l3IAm9Q87+3l9z25O dItLu21QmStvlABCLKTieXb5g5OPPrD9 -----END CERTIFICATE-----Generated at Wed Jul 2 19:15:21 2025 by rpki-client