$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: wH0GypdrAM48+bAWutU4WO0pdEfFeAQYg67lJkUo7Aw= Subject key identifier: D3:67:D7:75:2F:2B:DA:34:9A:76:7E:93:1B:4A:FD:A9:6B:7C:F5:BF Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 106B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 1065 Signing time: Wed 02 Jul 2025 17:35:18 +0000 Manifest this update: Wed 02 Jul 2025 17:35:17 +0000 Manifest next update: Wed 09 Jul 2025 17:35:17 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: J/8UmilKXNMTaBT8bn/dKQyRv2FjLVnlfGShh7CLs3E=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: 8EmwRqTTi0D6Jqb1QQoQFecB/Y41qpXK3rVqh44z4W0=) 3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: 7SbyZl6WzchDvPbf0/nq4tvYfqbtpgq7UAgLfrYKHTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4203 (0x106b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Jul 2 17:35:17 2025 GMT Not After : Jul 9 17:35:17 2025 GMT Subject: CN=68656dd5-91d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:9f:41:91:69:83:69:95:e0:54:5a:f2:73: b1:ca:f7:83:8f:13:e4:7a:f9:01:5e:0c:cd:09:5e: c0:16:06:0b:07:af:e6:fc:d3:1e:b9:2e:93:96:b4: 94:b7:1b:7e:fc:97:22:66:bd:5b:57:4b:b7:6d:c5: f2:d9:3c:52:4f:40:32:3a:a5:c4:60:1d:c4:71:94: e6:22:bf:80:5f:8d:77:dd:e5:28:6b:72:99:3b:d9: d0:c7:57:9c:49:25:4c:1c:d0:c9:28:c3:c4:81:0f: f1:22:fc:0a:81:79:77:73:a6:68:ca:84:d7:9b:70: 63:ad:63:a7:ef:da:5d:61:db:6b:f3:64:b2:79:7c: 4f:c0:73:0a:a9:7e:9d:17:10:72:60:71:4d:98:2f: cb:38:40:a2:85:f1:9a:4d:4e:b0:08:f5:62:2d:d4: e6:23:af:42:d9:ca:52:82:9b:ee:85:45:4b:72:77: d6:0c:b5:9b:d1:c7:ec:9b:62:35:54:12:32:6f:70: e9:d1:35:55:53:fc:87:38:d1:aa:cd:76:ee:de:98: 0d:f6:af:e6:80:57:a5:7f:fa:ae:fc:e2:b7:a5:75: b7:5f:97:c5:ff:18:a8:14:93:dc:97:e7:f1:b4:8e: d9:e1:75:bc:51:73:5f:0f:a7:e0:41:84:a7:ef:48: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:67:D7:75:2F:2B:DA:34:9A:76:7E:93:1B:4A:FD:A9:6B:7C:F5:BF X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:07:71:98:cf:6c:4a:a4:f6:96:f0:77:c9:f1:ca:60:b2:1a: 06:42:11:92:ff:47:0e:08:e9:d7:7d:20:99:90:56:2d:ad:41: 5a:15:dd:b8:59:49:09:57:04:85:44:dc:a8:ee:67:8e:15:a9: 7b:65:e9:ba:3f:e4:73:f2:ad:f9:94:d5:1a:16:ae:c4:26:a5: 62:0e:8b:1a:33:cb:24:2b:0f:80:80:52:f8:09:6f:f0:5c:f3: 16:dd:13:91:68:0e:e4:52:f6:a4:90:18:7f:d2:3c:52:81:19: d4:2e:d5:ff:4f:51:db:72:d1:54:c8:5c:9f:b2:50:be:e3:bb: cc:24:d0:d8:2e:43:ea:4c:a8:a4:95:ca:1b:7f:33:12:e5:99: 10:17:a6:17:23:cf:d9:08:1a:b0:d7:3d:2b:45:a8:7c:cc:3e: 3d:80:28:95:38:a8:54:55:ba:2e:ec:b4:97:cb:32:65:8a:5f: d6:24:62:a5:ef:0b:a5:7f:57:79:98:52:bc:81:e0:72:43:7e: 16:81:83:6c:04:16:61:ab:1b:a0:78:af:63:25:f4:f9:42:16: 2a:e2:41:a8:a5:b6:a4:15:c4:55:d4:43:44:a8:81:fb:de:30: 57:5b:07:59:67:07:d9:68:f5:34:4c:15:a4:6e:f4:f1:ba:80: fe:5c:55:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjUwNzAyMTczNTE3WhcNMjUwNzA5MTczNTE3WjAYMRYwFAYD VQQDEw02ODY1NmRkNS05MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPefQZFpg2mV4FRa8nOxyveDjxPkevkBXgzNCV7AFgYLB6/m/NMeuS6TlrSU txt+/JciZr1bV0u3bcXy2TxST0AyOqXEYB3EcZTmIr+AX4133eUoa3KZO9nQx1ec SSVMHNDJKMPEgQ/xIvwKgXl3c6ZoyoTXm3BjrWOn79pdYdtr82SyeXxPwHMKqX6d FxByYHFNmC/LOECihfGaTU6wCPViLdTmI69C2cpSgpvuhUVLcnfWDLWb0cfsm2I1 VBIyb3Dp0TVVU/yHONGqzXbu3pgN9q/mgFelf/qu/OK3pXW3X5fF/xioFJPcl+fx tI7Z4XW8UXNfD6fgQYSn70juawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNn13Uv K9o0mnZ+kxtK/alrfPW/MB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxB3GYz2xKpPaW8HfJ8cpgshoGQhGS/0cOCOnXfSCZkFYtrUFaFd24 WUkJVwSFRNyo7meOFal7Zem6P+Rz8q35lNUaFq7EJqViDosaM8skKw+AgFL4CW/w XPMW3RORaA7kUvakkBh/0jxSgRnULtX/T1HbctFUyFyfslC+47vMJNDYLkPqTKik lcobfzMS5ZkQF6YXI8/ZCBqw1z0rRah8zD49gCiVOKhUVbou7LSXyzJlil/WJGKl 7wulf1d5mFK8geByQ34WgYNsBBZhqxugeK9jJfT5QhYq4kGopbakFcRV1ENEqIH7 3jBXWwdZZwfZaPU0TBWkbvTxuoD+XFV7 -----END CERTIFICATE-----Generated at Thu Jul 3 23:33:56 2025 by rpki-client