$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: /cvGnKRKWJqg5YAtTBnDc/ZT/uchiTHyzz91WhH96gw= Subject key identifier: 7C:CC:C6:EB:A9:FF:0C:DC:51:6B:1C:9A:55:44:59:C0:31:B4:DD:E0 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 011B Signing time: Thu 03 Jul 2025 05:07:45 +0000 Manifest this update: Thu 03 Jul 2025 05:07:45 +0000 Manifest next update: Thu 10 Jul 2025 05:07:45 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: bOe8UHMZYnyPPdO2IM2Ys5j7JY8GhM1ASbdlCiCCOxo=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: VTp2ABLnUqS/Ob5XrNRvfYj53nTFMS/ZxCFHhPG4kpU=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk=) 4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=) 5: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Jul 3 05:07:45 2025 GMT Not After : Jul 10 05:07:45 2025 GMT Subject: CN=68661021-5096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:42:e8:a6:c1:09:03:39:ac:d2:da:6c:c4: de:12:ac:83:37:c8:ec:1b:d4:53:10:e1:2f:e2:4a: 6f:8c:97:6d:6c:67:cd:15:0b:25:a0:94:e3:65:80: 0c:05:3e:4a:47:d2:02:01:cf:a6:32:9c:08:35:a6: a1:3e:05:40:cc:c7:32:28:20:fe:ff:f9:62:3a:d9: e3:04:ba:44:dc:d2:58:a3:42:e9:46:8d:e0:6d:b9: 0e:5f:03:1a:42:03:42:50:eb:52:64:28:fc:87:cd: 85:65:fe:00:d0:fa:f2:64:6d:88:ad:39:5b:84:13: f9:9e:63:46:90:6f:0e:f4:4f:0e:2a:51:fc:5a:e9: 41:0f:19:cd:a7:c1:93:2f:0a:79:69:ae:f7:af:45: 8e:cd:5b:bb:d5:7e:b0:f5:bb:57:8b:88:03:d6:b5: 9d:2f:cb:11:b5:e5:c6:e8:51:c7:e2:23:88:37:ab: 00:94:65:99:53:d3:9f:ac:bd:d9:d4:8c:2c:11:71: b1:06:22:65:8a:cf:94:e6:0e:d5:ac:2c:97:5b:57: 1d:e8:bd:c6:1d:e8:7e:fd:11:d8:68:9d:b4:99:f9: e6:b4:a7:c2:83:ce:e9:d9:75:b5:e0:03:7e:b2:00: 85:84:1b:1c:4c:f9:2e:bc:55:4a:c0:7d:38:10:2c: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:C6:EB:A9:FF:0C:DC:51:6B:1C:9A:55:44:59:C0:31:B4:DD:E0 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:95:c3:2b:90:2f:e3:b6:0e:10:7f:d5:73:80:9f:76:3b:7c: 0c:32:d0:f8:7d:fc:06:06:f9:6c:ba:64:f1:e8:11:73:11:05: 1d:1a:ea:df:08:1c:3f:33:5a:44:70:0d:d2:e8:9c:21:ce:5d: 5d:74:89:22:84:86:e6:ad:a6:67:c4:c7:48:0c:ed:18:4e:4c: 26:c2:d3:61:90:96:fd:1c:01:3d:46:dd:a7:d6:d0:d4:30:d5: dd:b0:0a:ad:83:5e:45:8c:98:b9:03:21:b5:f5:b6:8e:d5:cf: 4d:b6:9e:bd:eb:61:55:2a:ce:cd:dc:13:41:82:03:1b:74:dd: 4d:ce:35:40:83:b4:75:30:71:6a:c9:11:68:3a:1d:79:b5:9a: 88:c1:23:00:6a:59:63:39:ac:67:8e:af:c5:06:3a:a0:98:ac: 28:c2:ab:da:b7:1b:2c:ed:5d:b0:33:92:ab:8f:39:04:78:56: 10:17:ba:cb:44:79:02:a0:20:6d:0f:74:31:2d:5e:83:b1:33: 16:d5:aa:18:48:b5:ce:8c:90:d0:d8:86:f1:dd:4b:8e:0b:13: 5b:f8:c5:de:76:7e:59:e2:96:28:6d:89:a8:e7:7f:ab:26:06: 83:43:de:f4:f4:cb:bd:4a:58:a2:0c:6a:71:79:b0:2d:3e:1f: d9:e2:c5:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUwNzAzMDUwNzQ1WhcNMjUwNzEwMDUwNzQ1WjAYMRYwFAYD VQQDEw02ODY2MTAyMS01MDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJZC6KbBCQM5rNLabMTeEqyDN8jsG9RTEOEv4kpvjJdtbGfNFQsloJTjZYAM BT5KR9ICAc+mMpwINaahPgVAzMcyKCD+//liOtnjBLpE3NJYo0LpRo3gbbkOXwMa QgNCUOtSZCj8h82FZf4A0PryZG2IrTlbhBP5nmNGkG8O9E8OKlH8WulBDxnNp8GT Lwp5aa73r0WOzVu71X6w9btXi4gD1rWdL8sRteXG6FHH4iOIN6sAlGWZU9OfrL3Z 1IwsEXGxBiJlis+U5g7VrCyXW1cd6L3GHeh+/RHYaJ20mfnmtKfCg87p2XW14AN+ sgCFhBscTPkuvFVKwH04ECzCmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzMxuup /wzcUWscmlVEWcAxtN3gMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAylcMrkC/jtg4Qf9VzgJ92O3wMMtD4ffwGBvlsumTx6BFzEQUdGurf CBw/M1pEcA3S6Jwhzl1ddIkihIbmraZnxMdIDO0YTkwmwtNhkJb9HAE9Rt2n1tDU MNXdsAqtg15FjJi5AyG19baO1c9Ntp6962FVKs7N3BNBggMbdN1NzjVAg7R1MHFq yRFoOh15tZqIwSMAalljOaxnjq/FBjqgmKwowqvatxss7V2wM5KrjzkEeFYQF7rL RHkCoCBtD3QxLV6DsTMW1aoYSLXOjJDQ2Ibx3UuOCxNb+MXedn5Z4pYobYmo53+r JgaDQ9709Mu9SliiDGpxebAtPh/Z4sWZ -----END CERTIFICATE-----Generated at Thu Jul 3 06:39:18 2025 by rpki-client