$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json) Hash identifier: HLQHlvfJQoDNRemzLpJQSTqSDw4j2HUCMtOPHVGYQWQ= Subject key identifier: 8A:40:44:E5:66:9F:69:5C:68:84:8C:D2:BD:E1:C3:C6:F6:F0:45:6F Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft Manifest number: B7 Signing time: Tue 01 Jul 2025 06:38:34 +0000 Manifest this update: Tue 01 Jul 2025 06:38:33 +0000 Manifest next update: Tue 08 Jul 2025 06:38:33 +0000 Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: 68Z0iGjVsTy9EmVqaq8QxUZ1arCE3J7/BhSPuSbaCDI=) 2: A8051CC4508011EF81053074C4F9AE02.roa (hash: cDS5FdTBOYoVAs3WZmJDzExZ2RFGAHrfOHhqQyrBupo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Validity Not Before: Jul 1 06:38:33 2025 GMT Not After : Jul 8 06:38:33 2025 GMT Subject: CN=6863826a-c763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:eb:b6:5c:87:e4:b9:d9:9b:cc:57:b1:d3: 9f:b2:a7:b3:ff:d7:2b:44:79:9d:3a:a5:b5:34:3a: 16:f6:c4:ce:46:da:73:59:61:8a:e9:54:ef:df:0c: 41:bd:33:87:ca:cc:43:7a:79:10:6c:cd:5e:cd:c6: b6:0c:49:30:22:cd:d8:1d:a7:20:c1:fb:a1:31:22: 62:5c:d0:83:ae:18:ee:7c:0b:a8:b8:96:ab:f4:33: 07:31:47:57:a4:45:4d:2d:2b:06:33:5c:fe:a1:62: 53:c5:17:b3:09:6a:0f:62:8e:a4:13:16:e5:3d:69: 45:7a:c9:cf:30:f0:99:f1:c1:63:fa:40:37:5c:a4: 4f:96:6a:13:3a:89:ca:23:fb:51:e5:6e:ab:31:d6: 06:a5:a6:8d:90:d5:5f:75:32:82:9a:07:2a:88:2c: c8:bd:c4:b4:5b:50:78:c8:96:09:29:4d:fe:46:13: f4:19:2a:6e:f1:6d:aa:94:04:5c:00:b3:44:5a:98: 2b:eb:f7:84:b5:62:cd:72:da:fd:07:3d:af:ab:d9: a8:f2:69:51:73:6e:33:d5:54:31:c3:d6:65:50:7b: 81:6e:01:91:62:7c:d8:eb:e8:3d:98:e8:9b:6e:29: 07:8f:a9:9c:55:f6:d4:d2:41:3f:65:35:15:55:23: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:40:44:E5:66:9F:69:5C:68:84:8C:D2:BD:E1:C3:C6:F6:F0:45:6F X509v3 Authority Key Identifier: keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4a:89:27:08:7c:f3:34:79:40:84:0e:d6:a7:62:84:74:6e: f3:2a:a0:ba:b5:29:87:01:68:04:62:f7:07:dc:74:6e:49:4a: 78:9d:c1:39:a5:bb:ef:9a:cd:c4:be:78:b4:94:da:f0:9a:ad: 65:b4:8f:dd:2a:bc:34:b2:ad:88:51:61:0c:c6:53:e3:a9:e0: f4:46:9d:5b:5e:c9:01:eb:4e:d9:a8:10:2f:db:4e:4e:a1:9e: 93:90:08:a9:b4:38:46:ca:db:ec:d8:1f:10:82:c2:bd:f8:43: 47:3f:a1:e1:21:24:39:77:b7:6e:ff:7b:43:ba:b2:81:4b:ef: ff:0f:26:95:be:83:6e:c8:29:1c:cc:7d:37:c9:8f:37:36:88: af:66:4b:6f:f2:1b:7c:67:85:2f:6d:28:ec:f9:5c:c3:7c:a8: 93:3e:c7:5a:da:ca:97:b9:32:b9:5d:da:fe:eb:16:b1:78:f6: 65:19:92:19:5f:3a:d6:22:10:7b:f5:bc:ca:28:68:c5:1f:88: 2f:c0:5a:7b:3b:e6:80:6c:5b:8a:8d:31:3a:ae:11:8d:36:53: f1:ba:f9:e7:d1:e2:c6:1d:aa:8c:6d:78:ca:8b:09:85:8b:d9: 01:44:e5:cd:3c:42:f7:bb:14:bd:84:ef:e6:83:06:db:f6:cb: 5f:a9:81:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz MjMwMzJGMTgwHhcNMjUwNzAxMDYzODMzWhcNMjUwNzA4MDYzODMzWjAYMRYwFAYD VQQDEw02ODYzODI2YS1jNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1APrtlyH5LnZm8xXsdOfsqez/9crRHmdOqW1NDoW9sTORtpzWWGK6VTv3wxB vTOHysxDenkQbM1ezca2DEkwIs3YHacgwfuhMSJiXNCDrhjufAuouJar9DMHMUdX pEVNLSsGM1z+oWJTxRezCWoPYo6kExblPWlFesnPMPCZ8cFj+kA3XKRPlmoTOonK I/tR5W6rMdYGpaaNkNVfdTKCmgcqiCzIvcS0W1B4yJYJKU3+RhP0GSpu8W2qlARc ALNEWpgr6/eEtWLNctr9Bz2vq9mo8mlRc24z1VQxw9ZlUHuBbgGRYnzY6+g9mOib bikHj6mcVfbU0kE/ZTUVVSM/pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpAROVm n2lcaISM0r3hw8b28EVvMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0 MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4 T3pHRUc1Yi1QN1l5TURMeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJSoknCHzzNHlAhA7Wp2KEdG7zKqC6tSmHAWgEYvcH3HRuSUp4ncE5 pbvvms3Evni0lNrwmq1ltI/dKrw0sq2IUWEMxlPjqeD0Rp1bXskB607ZqBAv205O oZ6TkAiptDhGytvs2B8QgsK9+ENHP6HhISQ5d7du/3tDurKBS+//DyaVvoNuyCkc zH03yY83NoivZktv8ht8Z4UvbSjs+VzDfKiTPsda2sqXuTK5Xdr+6xaxePZlGZIZ XzrWIhB79bzKKGjFH4gvwFp7O+aAbFuKjTE6rhGNNlPxuvnn0eLGHaqMbXjKiwmF i9kBROXNPEL3uxS9hO/mgwbb9stfqYG1 -----END CERTIFICATE-----Generated at Wed Jul 2 14:37:56 2025 by rpki-client