$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: fvInfi7Iq6++6FxlEs98MRH1fQCXEF8dl//szfvCTu4= Subject key identifier: 7F:EE:87:24:C4:6B:99:56:DA:BA:A1:76:87:44:5C:F5:4D:73:BF:BA Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 0215 Signing time: Thu 03 Jul 2025 02:23:59 +0000 Manifest this update: Thu 03 Jul 2025 02:23:59 +0000 Manifest next update: Thu 10 Jul 2025 02:23:59 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: Rr4Fpj2qV4jyiwF2TE2rY7UhFckeoe5X4DuFgEKjCcw=) 2: 99D6D8089BF111ED8043AD1FC4F9AE02.roa (hash: RN89+S1mBA7UPdGt6AqckCvGseRU/f6VRbIgO417GXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: Jul 3 02:23:59 2025 GMT Not After : Jul 10 02:23:59 2025 GMT Subject: CN=6865e9bf-ba19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:8a:29:86:a4:98:72:4e:f7:8b:1a:19:ac: a3:22:7a:03:1a:f2:d7:84:e6:4d:eb:34:0b:0a:5e: a9:c2:4c:60:cc:2b:40:68:a8:76:ec:86:26:1f:cb: 78:31:d2:ec:e6:0d:87:48:e1:b1:53:4a:1e:99:de: 3c:6b:f4:f5:67:06:95:bc:a9:82:66:e5:f9:36:c7: 00:91:e6:2c:e2:02:14:34:99:bc:c8:4e:1c:a7:e0: 22:aa:78:81:ae:cd:dc:c4:00:c7:c9:6d:90:a5:75: c7:4c:10:2f:2f:0a:ec:e8:a0:6e:5c:4d:9c:b1:dd: e9:51:9a:4d:6a:db:80:ca:7b:74:52:f2:b5:1b:ff: a2:50:14:cf:c3:32:57:74:30:c4:fe:47:d1:d2:ca: b3:78:a9:d4:f8:70:d0:46:fd:23:33:5e:63:da:7c: cd:65:4c:e5:9f:7f:c2:f4:31:9f:51:b4:7b:1e:ae: 40:85:90:5f:73:9a:0b:91:ea:2a:9b:4b:06:e8:bb: b8:e6:fa:76:80:49:8b:6c:0c:57:54:29:41:97:ec: cf:02:99:fd:62:8b:ad:ab:4e:3d:8e:67:fc:5b:47: f5:d2:5c:48:cd:e5:8d:25:6b:3c:6e:12:76:a3:b7: 3e:cc:e6:74:19:e9:65:5a:ab:45:bb:6a:41:cd:1e: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:87:24:C4:6B:99:56:DA:BA:A1:76:87:44:5C:F5:4D:73:BF:BA X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4f:62:d7:78:da:c6:13:d5:e0:14:3d:81:f2:24:5e:ab:c2: fc:ba:bb:23:ac:42:93:f4:f4:20:6e:b3:ab:23:89:63:55:32: 3b:d7:9e:ea:d7:ed:79:68:a4:c8:92:1c:9d:62:a3:74:be:87: 77:98:88:0a:2a:92:45:be:96:e7:c6:68:93:e1:3a:9a:0f:cd: 5c:c7:47:27:ee:bf:23:c8:d1:b1:f7:0f:1f:27:b0:b0:45:c3: 5d:93:c7:31:67:8d:44:93:02:ed:4e:a4:ef:2b:8c:34:b0:77: 57:5b:7b:ee:d3:1d:a6:d2:a6:8a:34:35:70:1a:63:ff:47:e4: 0a:19:6b:aa:41:9c:48:9a:ae:3d:39:a5:b2:a5:96:9b:0c:b6: 47:24:2b:2b:ac:85:3b:d6:da:99:92:c3:57:73:c8:79:36:12: 1d:a2:0d:5f:ca:fb:68:3c:09:6c:d2:e6:b9:20:b2:90:8c:f5: 31:66:16:bf:63:cd:0b:fa:ca:ad:89:7a:61:20:d6:03:19:12: 21:06:94:8b:d6:33:7e:b3:31:29:71:3e:d9:c2:de:a8:b4:fe: 99:0d:d6:2f:43:4b:bf:e4:23:34:c0:77:c3:08:52:75:e6:10: a4:82:ac:5f:b0:61:a3:ef:41:0a:d0:4c:3a:9a:a9:21:15:41: 33:9b:68:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjUwNzAzMDIyMzU5WhcNMjUwNzEwMDIyMzU5WjAYMRYwFAYD VQQDEw02ODY1ZTliZi1iYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5OKKYakmHJO94saGayjInoDGvLXhOZN6zQLCl6pwkxgzCtAaKh27IYmH8t4 MdLs5g2HSOGxU0oemd48a/T1ZwaVvKmCZuX5NscAkeYs4gIUNJm8yE4cp+AiqniB rs3cxADHyW2QpXXHTBAvLwrs6KBuXE2csd3pUZpNatuAynt0UvK1G/+iUBTPwzJX dDDE/kfR0sqzeKnU+HDQRv0jM15j2nzNZUzln3/C9DGfUbR7Hq5AhZBfc5oLkeoq m0sG6Lu45vp2gEmLbAxXVClBl+zPApn9Youtq049jmf8W0f10lxIzeWNJWs8bhJ2 o7c+zOZ0GellWqtFu2pBzR75ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/uhyTE a5lW2rqhdodEXPVNc7+6MB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHT2LXeNrGE9XgFD2B8iReq8L8ursjrEKT9PQgbrOrI4ljVTI7157q 1+15aKTIkhydYqN0vod3mIgKKpJFvpbnxmiT4TqaD81cx0cn7r8jyNGx9w8fJ7Cw RcNdk8cxZ41EkwLtTqTvK4w0sHdXW3vu0x2m0qaKNDVwGmP/R+QKGWuqQZxImq49 OaWypZabDLZHJCsrrIU71tqZksNXc8h5NhIdog1fyvtoPAls0ua5ILKQjPUxZha/ Y80L+sqtiXphINYDGRIhBpSL1jN+szEpcT7Zwt6otP6ZDdYvQ0u/5CM0wHfDCFJ1 5hCkgqxfsGGj70EK0Ew6mqkhFUEzm2jp -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:02 2025 by rpki-client