$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json) Hash identifier: 6uUdibQUKRRdxgyWGalLbD/zIA+xFGEJfSDbBUBPfHI= Subject key identifier: E5:D5:87:64:36:FA:29:0A:BA:26:FA:3E:0D:16:F7:C5:DA:33:C1:58 Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Certificate serial: 084C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft Manifest number: 083E Signing time: Wed 02 Jul 2025 21:29:59 +0000 Manifest this update: Wed 02 Jul 2025 21:29:58 +0000 Manifest next update: Wed 09 Jul 2025 21:29:58 +0000 Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: JkY1jLyp2kbRpio8740yjj3o40S5rBIH7dQvOUtZeII=) 2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aH5SgttT3yBxPoJZcOUIaaeUL8JdCzJhMaUjR/JZqLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Validity Not Before: Jul 2 21:29:58 2025 GMT Not After : Jul 9 21:29:58 2025 GMT Subject: CN=6865a4d7-114c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:c9:e9:29:3a:51:bd:6a:ff:e3:83:f9:83: ce:de:0c:43:85:7f:74:a3:a9:d8:ca:07:99:00:aa: ef:7a:a0:0b:53:5b:0a:69:6c:33:77:4b:95:7d:24: c4:b7:7a:37:0e:0b:92:b0:a2:c0:cd:a7:e5:5b:02: 75:8a:21:5e:7a:0b:79:d7:1c:c2:5f:72:32:e9:94: 70:7d:08:ae:5e:da:24:40:d6:19:1e:fe:0a:8d:0a: 0f:be:60:b2:38:59:5e:15:c2:42:66:e4:7e:03:d1: c0:12:50:29:f3:e5:cd:cd:84:a5:de:67:7b:0b:93: 28:14:06:a6:38:4b:37:ba:72:28:54:9f:95:aa:48: 39:d3:54:93:95:8b:25:6f:e8:de:7a:55:c5:9e:6e: 26:2c:f6:5f:20:f0:24:27:42:0e:7e:8b:8c:87:9a: 16:ad:10:c5:ab:23:be:b1:4a:d7:af:8d:e5:a3:56: 58:4e:37:29:c0:96:4a:13:28:95:64:20:9e:35:2c: 8f:2a:64:58:f5:89:93:a3:53:da:73:c2:1c:6e:98: 8e:5a:1a:06:7f:f5:6e:0f:58:71:77:1a:a9:9a:a3: 2c:5c:4b:15:50:73:c5:1a:f0:97:54:04:41:b8:4e: ae:e3:ca:93:7c:dc:27:39:51:c4:94:95:f2:8f:6f: d3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D5:87:64:36:FA:29:0A:BA:26:FA:3E:0D:16:F7:C5:DA:33:C1:58 X509v3 Authority Key Identifier: keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ea:ec:99:d9:fa:b2:75:7d:4d:f2:9e:d0:47:47:db:43:20: 38:50:86:69:b7:13:db:ac:a5:e8:c6:ec:1e:15:37:51:88:b8: 35:84:9a:d3:8b:1f:3b:a8:09:79:d1:8a:f5:eb:d1:ec:48:59: e3:64:64:20:97:62:29:ae:0e:20:21:a3:a2:1f:67:09:9e:e1: a0:6f:b0:ad:35:14:56:85:2f:fd:94:ee:73:f9:62:25:55:3c: 6e:b3:9c:48:b5:ab:c1:c7:7e:74:d8:f8:db:4e:6a:98:78:2c: 9a:26:3b:1a:41:a9:8e:ae:3a:c3:ce:07:5b:4e:f2:3a:ad:7c: b9:19:0c:22:5c:6f:10:1e:ca:3a:dc:58:cf:62:f4:ac:4f:7f: e2:e1:2b:f7:6a:1d:82:cf:10:99:51:31:d0:df:ef:49:aa:c2: b4:eb:77:78:7c:fc:42:c5:f0:e3:c0:09:38:7e:27:1c:af:16: 6d:7a:c8:07:8c:97:56:b9:64:50:5b:04:68:7d:88:b2:8c:8e: 60:d5:fd:89:34:f8:79:0c:6e:1a:e6:91:1b:31:b2:25:9d:dd: d1:a3:24:3c:ab:4e:a8:ef:7a:62:a3:72:36:5d:83:a8:1d:ea: 9d:fe:0d:ef:35:7c:1e:12:cf:e8:d3:fc:12:3c:ba:d8:d8:90: de:ca:87:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD NDVDMzg1MDMwHhcNMjUwNzAyMjEyOTU4WhcNMjUwNzA5MjEyOTU4WjAYMRYwFAYD VQQDEw02ODY1YTRkNy0xMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaLJ6Sk6Ub1q/+OD+YPO3gxDhX90o6nYygeZAKrveqALU1sKaWwzd0uVfSTE t3o3DguSsKLAzaflWwJ1iiFeegt51xzCX3Iy6ZRwfQiuXtokQNYZHv4KjQoPvmCy OFleFcJCZuR+A9HAElAp8+XNzYSl3md7C5MoFAamOEs3unIoVJ+Vqkg501STlYsl b+jeelXFnm4mLPZfIPAkJ0IOfouMh5oWrRDFqyO+sUrXr43lo1ZYTjcpwJZKEyiV ZCCeNSyPKmRY9YmTo1Pac8IcbpiOWhoGf/VuD1hxdxqpmqMsXEsVUHPFGvCXVARB uE6u48qTfNwnOVHElJXyj2/TpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXVh2Q2 +ikKuib6Pg0W98XaM8FYMB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY VGpFWkR0clZoU3JFWERoUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS6uyZ2fqydX1N8p7QR0fbQyA4UIZptxPbrKXoxuweFTdRiLg1hJrT ix87qAl50Yr169HsSFnjZGQgl2Iprg4gIaOiH2cJnuGgb7CtNRRWhS/9lO5z+WIl VTxus5xItavBx3502PjbTmqYeCyaJjsaQamOrjrDzgdbTvI6rXy5GQwiXG8QHso6 3FjPYvSsT3/i4Sv3ah2CzxCZUTHQ3+9JqsK063d4fPxCxfDjwAk4ficcrxZtesgH jJdWuWRQWwRofYiyjI5g1f2JNPh5DG4a5pEbMbIlnd3RoyQ8q06o73pio3I2XYOo Heqd/g3vNXweEs/o0/wSPLrY2JDeyoeG -----END CERTIFICATE-----Generated at Fri Jul 4 11:30:41 2025 by rpki-client