$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: ZCcEwxxImIHSF+0Yrqhgk8PkpBnTp53rAH/yU2Xjt2U= Subject key identifier: 1A:60:B8:FC:BF:7E:9D:4E:AA:1D:14:72:C4:07:2F:A9:B1:49:DB:85 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 07A1 Signing time: Wed 02 Jul 2025 21:37:16 +0000 Manifest this update: Wed 02 Jul 2025 21:37:15 +0000 Manifest next update: Wed 09 Jul 2025 21:37:15 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: T0+fa7EoY3poOS66CDcFV+Nd8Dx/JvMltxnISVJrXIo=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Jul 2 21:37:15 2025 GMT Not After : Jul 9 21:37:15 2025 GMT Subject: CN=6865a68b-5bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:65:b9:33:0c:cc:f6:2d:20:2d:62:c4:d4:ea: c0:45:fe:bb:00:56:86:00:19:ef:d1:16:2f:20:c7: 87:83:a3:c7:7e:78:0f:b6:f0:de:08:54:c6:5b:37: 72:88:48:ee:e4:fa:ea:4b:13:bd:54:e3:95:d6:9f: fc:5a:fd:34:19:53:7e:67:05:ee:67:55:a7:35:a3: 21:e7:04:c8:66:b7:3c:19:85:aa:8c:45:54:68:56: 33:6f:80:d4:dc:cc:84:77:fa:6b:3c:b6:98:3f:e0: 15:7a:8c:24:99:eb:d8:65:43:73:06:b0:5b:2d:54: 43:54:86:a0:27:8a:75:c1:16:e6:b2:f4:ad:6b:9d: 65:97:3d:89:bf:e1:8f:e1:07:40:4c:e3:6a:fc:ae: d7:cf:34:59:4d:25:59:f9:86:cc:99:cb:ce:12:c4: ab:c7:82:c6:fc:1c:a9:1a:c0:c6:cb:ed:7a:06:53: e6:b4:ed:61:3f:91:ce:1c:83:6c:83:ee:18:61:da: a3:ea:e0:0d:6d:4c:e5:2a:6e:e5:1d:cf:93:93:f9: 29:a5:48:6a:e1:51:b2:0e:74:63:8f:18:8d:3d:dc: 98:75:e4:6c:6c:37:dc:35:23:c8:be:07:89:0e:27: 9b:9f:e4:38:1c:e7:0f:cf:14:1e:24:d6:56:8e:90: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:60:B8:FC:BF:7E:9D:4E:AA:1D:14:72:C4:07:2F:A9:B1:49:DB:85 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d5:2b:5d:33:53:58:67:41:e1:ab:c6:90:d8:0e:a4:02:37: 93:b6:f1:70:5b:fc:a6:58:1b:28:d0:8c:e6:fa:41:4d:5f:92: 9e:74:fa:48:71:de:13:40:90:94:e2:3a:c3:44:fa:3e:19:55: 45:df:db:b2:cd:21:84:db:a2:58:18:6e:4d:77:dc:2a:cc:2f: 91:47:c2:43:42:77:4f:24:ab:c2:0b:d5:04:8c:84:be:6c:1d: ac:94:0f:51:c3:76:a1:50:bc:4e:49:bf:7d:8f:b5:87:33:68: fd:be:4d:04:85:b6:19:ee:df:7d:12:01:b4:4e:70:81:fa:d1: 1a:ee:aa:f0:af:93:37:e5:94:65:8b:98:27:40:91:ed:67:f1: 6c:2c:a0:89:b0:42:46:ed:c5:f3:3a:cb:8c:23:19:6a:d8:31: 13:64:a8:54:95:12:0b:28:41:3e:ae:ff:7d:97:ff:25:f3:af: 8d:a5:18:a1:fd:ee:e7:fe:5f:f9:62:3e:db:e6:14:49:8d:82: d8:92:f5:de:56:77:b1:a3:82:65:cf:68:5c:da:89:38:9c:4f: a5:1d:1b:b2:71:9a:a6:0a:58:04:a1:a5:32:d7:47:b2:d5:30: a7:58:4e:c7:64:0a:2c:3b:ea:74:81:f5:f7:c6:c8:6b:92:08: a2:15:d5:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjUwNzAyMjEzNzE1WhcNMjUwNzA5MjEzNzE1WjAYMRYwFAYD VQQDEw02ODY1YTY4Yi01YmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2W5MwzM9i0gLWLE1OrARf67AFaGABnv0RYvIMeHg6PHfngPtvDeCFTGWzdy iEju5PrqSxO9VOOV1p/8Wv00GVN+ZwXuZ1WnNaMh5wTIZrc8GYWqjEVUaFYzb4DU 3MyEd/prPLaYP+AVeowkmevYZUNzBrBbLVRDVIagJ4p1wRbmsvSta51llz2Jv+GP 4QdATONq/K7XzzRZTSVZ+YbMmcvOEsSrx4LG/BypGsDGy+16BlPmtO1hP5HOHINs g+4YYdqj6uANbUzlKm7lHc+Tk/kppUhq4VGyDnRjjxiNPdyYdeRsbDfcNSPIvgeJ Diebn+Q4HOcPzxQeJNZWjpClnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpguPy/ fp1Oqh0UcsQHL6mxSduFMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE1StdM1NYZ0Hhq8aQ2A6kAjeTtvFwW/ymWBso0Izm+kFNX5KedPpI cd4TQJCU4jrDRPo+GVVF39uyzSGE26JYGG5Nd9wqzC+RR8JDQndPJKvCC9UEjIS+ bB2slA9Rw3ahULxOSb99j7WHM2j9vk0EhbYZ7t99EgG0TnCB+tEa7qrwr5M35ZRl i5gnQJHtZ/FsLKCJsEJG7cXzOsuMIxlq2DETZKhUlRILKEE+rv99l/8l86+NpRih /e7n/l/5Yj7b5hRJjYLYkvXeVnexo4Jlz2hc2ok4nE+lHRuycZqmClgEoaUy10ey 1TCnWE7HZAosO+p0gfX3xshrkgiiFdVK -----END CERTIFICATE-----Generated at Thu Jul 3 02:27:47 2025 by rpki-client