$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: hWQO0P6zFgAFvn5DVI5CaAYbnWPwL9DNEejEIUWpOJA= Subject key identifier: 76:7F:AA:C9:7D:83:DB:34:3A:86:A2:17:C4:AF:6D:70:97:C2:12:EB Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0C7B Signing time: Fri 04 Jul 2025 18:36:39 +0000 Manifest this update: Fri 04 Jul 2025 18:36:38 +0000 Manifest next update: Fri 11 Jul 2025 18:36:38 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: YM3nDF9M9gx5ulOca7tjyp7l239Nl463A87UO2D2/bs=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: O6ZOPVwxFkNjeJWmRWdaGnVAImdC2WliszZw8u4xZjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Jul 4 18:36:38 2025 GMT Not After : Jul 11 18:36:38 2025 GMT Subject: CN=68681f36-af58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:a7:45:95:01:0a:18:1c:6b:45:42:ac:95: ce:ab:e1:bf:ad:ab:74:3f:cb:82:5a:9f:f6:b7:5c: 21:fa:8a:fc:9b:4b:65:ab:93:47:4d:68:07:7a:fa: 3b:96:e5:d1:6a:09:4c:ec:69:fe:2b:bc:44:ea:fa: 32:2f:a4:d3:45:51:79:ee:e5:91:6e:89:88:8f:e1: ec:7b:d2:cc:82:87:9d:62:67:fe:74:28:72:76:49: 06:8d:48:e2:bf:68:dd:a1:45:0e:67:df:12:81:0e: 1f:93:d9:21:5d:e0:1d:8b:8d:ec:d7:89:69:66:6c: fe:58:6a:52:67:e0:74:c6:1c:78:f0:6e:64:3f:18: d1:05:a5:1c:76:a0:64:8f:fe:09:02:4f:82:bb:7b: 90:be:f6:c2:eb:b6:71:a1:0d:db:73:4e:24:ce:c0: d0:dd:47:14:69:28:5d:87:5b:77:39:d4:5b:82:69: 51:0c:90:af:97:f3:a4:58:9d:89:6d:74:bb:f9:62: 94:82:0b:3a:8d:ed:23:77:4d:a8:61:2f:56:75:dc: d7:cc:a2:44:b5:6e:be:a1:73:b1:61:f3:be:f5:e7: 87:d7:ec:97:d8:dd:3c:d5:44:71:1f:0e:76:bb:64: 06:ba:b7:e7:8e:10:e0:1d:da:62:46:2a:67:dd:11: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7F:AA:C9:7D:83:DB:34:3A:86:A2:17:C4:AF:6D:70:97:C2:12:EB X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1a:bb:83:54:49:56:f3:cb:d2:ac:06:a1:08:e4:91:2a:cf: b4:cc:de:03:49:35:82:9a:8a:cd:e6:79:65:8e:e0:22:1c:3a: ac:46:e1:e9:14:7c:bf:c7:ef:67:dd:c5:df:b5:e6:d9:86:0e: ad:eb:95:13:d5:e0:04:1d:2c:95:d8:1f:00:ab:a1:07:6c:72: fe:04:95:c3:99:78:ed:1b:08:a9:64:c5:bb:b3:a2:c9:5c:75: 28:6c:ce:bb:c1:07:49:2b:9d:62:bc:df:60:6e:be:7a:19:b0: 90:95:c4:55:c2:30:88:4a:d7:e8:ad:af:03:cb:cc:d8:af:42: 94:61:d9:57:1b:22:4f:b0:e2:98:6e:ed:e2:53:4d:31:38:c7: 2a:b2:ff:78:11:d4:24:f6:7e:af:3c:ac:95:3d:53:53:c3:d2: 8b:e8:56:c4:38:3d:6c:34:50:65:45:8a:83:43:7f:9b:d8:b3: 64:2d:b3:b4:24:df:48:d2:94:a1:fa:aa:0f:c9:ef:db:31:60: 55:e5:53:93:53:2f:b4:67:c7:8e:30:b5:cf:4c:dc:19:30:06: 09:bf:a8:67:44:de:63:91:24:bd:f7:a7:35:d9:e6:5e:39:95: 2d:49:60:a5:01:bb:f5:e4:b9:8d:4c:5c:6f:41:34:19:23:d3: ca:3a:ea:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjUwNzA0MTgzNjM4WhcNMjUwNzExMTgzNjM4WjAYMRYwFAYD VQQDEw02ODY4MWYzNi1hZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pGnRZUBChgca0VCrJXOq+G/rat0P8uCWp/2t1wh+or8m0tlq5NHTWgHevo7 luXRaglM7Gn+K7xE6voyL6TTRVF57uWRbomIj+Hse9LMgoedYmf+dChydkkGjUji v2jdoUUOZ98SgQ4fk9khXeAdi43s14lpZmz+WGpSZ+B0xhx48G5kPxjRBaUcdqBk j/4JAk+Cu3uQvvbC67ZxoQ3bc04kzsDQ3UcUaShdh1t3OdRbgmlRDJCvl/OkWJ2J bXS7+WKUggs6je0jd02oYS9WddzXzKJEtW6+oXOxYfO+9eeH1+yX2N081URxHw52 u2QGurfnjhDgHdpiRipn3RE1sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZ/qsl9 g9s0OoaiF8SvbXCXwhLrMB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgGruDVElW88vSrAahCOSRKs+0zN4DSTWCmorN5nlljuAiHDqsRuHp FHy/x+9n3cXftebZhg6t65UT1eAEHSyV2B8Aq6EHbHL+BJXDmXjtGwipZMW7s6LJ XHUobM67wQdJK51ivN9gbr56GbCQlcRVwjCIStfora8Dy8zYr0KUYdlXGyJPsOKY bu3iU00xOMcqsv94EdQk9n6vPKyVPVNTw9KL6FbEOD1sNFBlRYqDQ3+b2LNkLbO0 JN9I0pSh+qoPye/bMWBV5VOTUy+0Z8eOMLXPTNwZMAYJv6hnRN5jkSS996c12eZe OZUtSWClAbv15LmNTFxvQTQZI9PKOuqV -----END CERTIFICATE-----Generated at Sat Jul 5 05:29:39 2025 by rpki-client