$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: BQNSv6dSyJC7BhiQB/OmRNiUwHMVoICAvzI3oMdcVDY= Subject key identifier: 02:4C:E4:49:57:3B:6E:2D:A6:49:C5:3D:05:74:BE:D8:4A:A9:C1:D7 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: 014E Signing time: Thu 03 Jul 2025 04:18:16 +0000 Manifest this update: Thu 03 Jul 2025 04:18:16 +0000 Manifest next update: Thu 10 Jul 2025 04:18:16 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: NYk9BI1ANJ8d45XTQOlpX9X/pvxuEmSAUbKJdgxECng=) 2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=) 3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Jul 3 04:18:16 2025 GMT Not After : Jul 10 04:18:16 2025 GMT Subject: CN=68660488-5255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:c6:db:cf:18:0c:ee:41:42:13:b8:9d:67: a5:71:89:11:0a:93:a6:81:49:d9:1c:14:a3:35:10: 53:b3:c5:9e:d4:d9:96:8b:ff:02:e5:0d:5b:e9:07: 50:e1:e4:f6:9b:2e:ec:b9:89:f8:69:7e:b3:bd:5b: 93:62:3e:9c:5c:ac:84:2c:ce:b2:32:2c:66:e8:73: 43:2a:36:29:50:ac:5d:82:79:4f:fe:c3:7d:25:83: 4e:c8:e4:ce:22:6e:e0:fb:42:c9:d0:19:51:e1:60: ff:b2:d5:fb:94:e8:c0:44:b1:7a:9b:b6:b2:2a:fb: ca:96:eb:1c:4f:2f:9a:4e:20:4d:10:89:c2:00:25: 85:02:08:ee:db:4a:02:f4:32:eb:4a:ae:12:b6:0a: 0d:fd:60:a4:f3:ca:3b:d0:1f:20:9c:56:b3:c1:55: f7:65:b6:a4:c6:b4:09:7d:b8:c5:b6:19:5b:ea:0a: ed:44:5c:29:03:03:24:2d:d3:53:06:58:0f:f0:cd: b8:d8:3d:97:4f:c1:dc:13:2b:d7:52:bf:8c:84:92: bc:91:b1:68:19:eb:cf:4b:d8:9f:ed:6f:45:d8:5e: fd:04:44:06:2b:8a:d7:03:01:68:10:b6:fe:63:68: 78:b3:c3:b2:0d:ce:eb:b7:44:f5:c1:9d:80:4a:40: f6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4C:E4:49:57:3B:6E:2D:A6:49:C5:3D:05:74:BE:D8:4A:A9:C1:D7 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:04:84:fe:e4:03:94:c6:a6:f8:39:4d:11:ed:67:fc:c7:7f: 68:49:c9:6a:fd:0a:32:83:a1:02:4a:86:ae:66:95:5d:a3:56: af:d3:97:f7:3f:08:4a:59:40:0c:57:59:ae:6a:0a:22:1d:e4: 55:b9:94:49:e2:0b:0c:2f:73:20:8a:62:c4:74:fb:9e:5d:05: 2a:c8:a0:d1:93:2d:25:ca:ae:a7:02:fb:87:78:c4:ce:a0:34: b7:6c:a2:f2:12:82:d1:aa:3d:0f:fe:c3:70:c0:ff:66:92:9c: e7:fe:31:da:af:85:8b:d6:86:e7:75:11:c0:71:ba:6a:28:9c: 30:ed:5b:b3:05:e9:91:e2:e9:b2:71:a5:1f:a9:a9:ee:38:7f: 09:47:91:01:12:b2:db:3f:64:01:40:34:f4:a0:1a:8c:d7:03: bc:3c:c2:a6:3a:87:a4:d0:e8:91:ef:35:75:31:67:9c:56:13: 0b:f7:b4:ca:60:a7:80:91:ec:01:a5:ff:66:35:8b:e8:cf:d6: 38:fc:d5:cc:0d:6f:63:02:5c:28:e8:07:8c:d1:bf:a8:99:1a: 85:7e:cd:dc:5b:ca:80:61:a5:8d:87:c6:63:1e:73:0f:ac:70: 1b:3e:23:81:4c:80:1f:d6:a4:86:ee:40:84:ec:a0:83:16:ed: 3f:cd:10:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjUwNzAzMDQxODE2WhcNMjUwNzEwMDQxODE2WjAYMRYwFAYD VQQDEw02ODY2MDQ4OC01MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3DG288YDO5BQhO4nWelcYkRCpOmgUnZHBSjNRBTs8We1NmWi/8C5Q1b6QdQ 4eT2my7suYn4aX6zvVuTYj6cXKyELM6yMixm6HNDKjYpUKxdgnlP/sN9JYNOyOTO Im7g+0LJ0BlR4WD/stX7lOjARLF6m7ayKvvKluscTy+aTiBNEInCACWFAgju20oC 9DLrSq4StgoN/WCk88o70B8gnFazwVX3ZbakxrQJfbjFthlb6grtRFwpAwMkLdNT BlgP8M242D2XT8HcEyvXUr+MhJK8kbFoGevPS9if7W9F2F79BEQGK4rXAwFoELb+ Y2h4s8OyDc7rt0T1wZ2ASkD2cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJM5ElX O24tpknFPQV0vthKqcHXMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4 bkhyYUlqZzVfRHhUYkgteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEBIT+5AOUxqb4OU0R7Wf8x39oSclq/Qoyg6ECSoauZpVdo1av05f3 PwhKWUAMV1muagoiHeRVuZRJ4gsML3MgimLEdPueXQUqyKDRky0lyq6nAvuHeMTO oDS3bKLyEoLRqj0P/sNwwP9mkpzn/jHar4WL1obndRHAcbpqKJww7VuzBemR4umy caUfqanuOH8JR5EBErLbP2QBQDT0oBqM1wO8PMKmOoek0OiR7zV1MWecVhML97TK YKeAkewBpf9mNYvoz9Y4/NXMDW9jAlwo6AeM0b+omRqFfs3cW8qAYaWNh8ZjHnMP rHAbPiOBTIAf1qSG7kCE7KCDFu0/zRBq -----END CERTIFICATE-----Generated at Thu Jul 3 12:01:03 2025 by rpki-client