$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: jS0wgomluEClXrfENgeH3fBgi81NVV5z07X/hJ3zGTA= Subject key identifier: C8:F1:C4:DE:F0:EA:99:AC:13:C7:50:C4:CE:DF:D0:C6:DA:A8:0A:BB Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: 6F Signing time: Thu 03 Jul 2025 07:09:48 +0000 Manifest this update: Thu 03 Jul 2025 07:09:47 +0000 Manifest next update: Thu 10 Jul 2025 07:09:47 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: M57YFKparhL18Pp4stTf3m4yMulTr4RUom263oBk2t0=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Jul 3 07:09:47 2025 GMT Not After : Jul 10 07:09:47 2025 GMT Subject: CN=68662cbb-f124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:31:0d:8c:fb:fe:be:bb:23:db:32:9f:fc: f5:52:85:16:e6:db:22:f1:e3:ea:d7:7f:5b:d5:be: de:5e:a2:20:b8:ea:c6:c6:0e:1c:00:d3:bb:b5:c2: 42:63:15:06:36:46:bd:9e:a2:94:87:7e:db:c6:1e: 19:5c:07:77:1c:d7:58:65:57:cc:31:ab:c4:55:f9: 6d:26:ef:b0:74:da:53:b1:e1:e4:f1:26:e5:27:7e: 38:80:ca:a7:63:30:1c:43:dd:93:98:a2:8e:ef:30: ad:20:69:6e:ba:13:cf:9b:64:a5:b5:8d:4e:1c:e2: ab:2c:cc:66:b3:ec:9d:62:ac:0b:ab:37:39:39:14: 13:76:4a:0f:51:85:c5:c6:0e:17:5c:d5:60:b3:5d: f6:68:27:81:e1:dd:5a:86:d4:6d:03:81:76:b9:68: 47:90:f4:6e:eb:5f:84:e1:2e:8c:d7:98:f1:8a:59: e9:b4:76:b3:7d:8d:a2:29:e4:12:43:61:8e:34:4e: 35:2c:81:7a:91:77:bf:07:fc:81:ff:de:f9:b2:f1: e2:76:e2:f2:fc:6b:58:8f:6d:a1:e8:0b:21:cf:b4: ce:8f:72:38:20:d6:06:d6:62:da:68:c0:de:0f:51: 1e:7a:d6:a5:43:35:16:76:27:e7:73:d9:65:08:59: c4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F1:C4:DE:F0:EA:99:AC:13:C7:50:C4:CE:DF:D0:C6:DA:A8:0A:BB X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:83:49:0d:be:8d:49:7e:82:37:93:59:07:54:b1:4b:97:5b: 3f:7b:2d:ac:83:cc:76:b8:b8:24:57:11:24:38:39:88:92:7c: d5:d0:f7:a1:99:31:29:0c:f7:1f:4e:85:73:99:89:7d:6c:1d: ec:12:f2:d2:dc:62:cf:44:e8:61:68:e1:81:27:b5:3e:46:79: 81:a3:64:ff:dc:0e:d6:ec:01:de:c0:4c:e4:11:42:f6:0a:2a: c0:87:0f:b3:cb:55:fa:75:42:b9:80:a7:44:8f:a3:e8:47:31: fc:86:1b:09:f3:9b:bf:95:db:f1:36:7d:d4:4e:98:06:d8:a2: 77:46:ca:66:c0:0c:f4:00:69:28:ce:25:32:36:cd:57:d3:a2: c1:3b:b3:18:07:92:c1:67:35:5a:c2:8e:47:7c:b5:ce:5f:ca: 51:9f:65:04:92:a9:69:5b:8c:7c:6b:5f:32:7b:6a:d8:61:6f: 7e:3c:1f:f0:6a:3c:0b:71:bf:ee:65:32:66:49:73:e9:cb:b8: cc:6b:3c:dc:cb:16:5a:94:91:5c:c4:25:b3:86:85:b7:e0:8b: 30:24:9e:bf:f6:fc:e5:6b:95:ad:32:42:e8:24:f7:33:62:94: cc:2a:99:ac:ab:64:5f:bb:ab:1c:2b:27:96:8c:5b:56:a1:d5: 9d:de:ef:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNDNzExMC8GA1UEBRMoODkzQUM1NzkwMTQxNTYxODZBRUFGNTAzNEJBMEI0OTI2 RjkyRTM3NDAeFw0yNTA3MDMwNzA5NDdaFw0yNTA3MTAwNzA5NDdaMBgxFjAUBgNV BAMTDTY4NjYyY2JiLWYxMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYYDENjPv+vrsj2zKf/PVShRbm2yLx4+rXf1vVvt5eoiC46sbGDhwA07u1wkJj FQY2Rr2eopSHftvGHhlcB3cc11hlV8wxq8RV+W0m77B02lOx4eTxJuUnfjiAyqdj MBxD3ZOYoo7vMK0gaW66E8+bZKW1jU4c4qsszGaz7J1irAurNzk5FBN2Sg9RhcXG Dhdc1WCzXfZoJ4Hh3VqG1G0DgXa5aEeQ9G7rX4ThLozXmPGKWem0drN9jaIp5BJD YY40TjUsgXqRd78H/IH/3vmy8eJ24vL8a1iPbaHoCyHPtM6Pcjgg1gbWYtpowN4P UR561qVDNRZ2J+dz2WUIWcRRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyPHE3vDq mawTx1DEzt/QxtqoCrswHwYDVR0jBBgwFoAUiTrFeQFBVhhq6vUDS6C0km+S43Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0M3Lzg2NTg4N0I2QjI2 NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVRyRmVRRkJWaGhxNnZVRFM2QzBrbS1TNDNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0M3Lzg2NTg4N0I2QjI2NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmho cTZ2VURTNkMwa20tUzQzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAaDSQ2+jUl+gjeTWQdUsUuXWz97LayDzHa4uCRXESQ4OYiSfNXQ96GZ MSkM9x9OhXOZiX1sHewS8tLcYs9E6GFo4YEntT5GeYGjZP/cDtbsAd7ATOQRQvYK KsCHD7PLVfp1QrmAp0SPo+hHMfyGGwnzm7+V2/E2fdROmAbYondGymbADPQAaSjO JTI2zVfTosE7sxgHksFnNVrCjkd8tc5fylGfZQSSqWlbjHxrXzJ7athhb348H/Bq PAtxv+5lMmZJc+nLuMxrPNzLFlqUkVzEJbOGhbfgizAknr/2/OVrla0yQugk9zNi lMwqmayrZF+7qxwrJ5aMW1ah1Z3e77o= -----END CERTIFICATE-----Generated at Fri Jul 4 22:10:07 2025 by rpki-client