$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: H01/B5pdOTBykpRT546Zl9IicBgItDPzws/JmUkQStI= Subject key identifier: E5:7D:A3:80:4D:02:11:45:D0:87:B2:63:4A:3B:E8:3B:0B:D2:2C:2E Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 34DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 34B1 Signing time: Wed 02 Jul 2025 14:19:59 +0000 Manifest this update: Wed 02 Jul 2025 14:19:58 +0000 Manifest next update: Wed 09 Jul 2025 14:19:58 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: ue2PDKnzPNPO8R1ZK1zUJ9/GPiwP55+NL7i8bnrCcxI=) 2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: T96snG6T3ksqfKF7mowlYs05xmmtsddFbccqyfqSTxQ=) 3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: aiAqLVoZ6cEM6hY/DjBukcfxFi5I+NxU4FFn5k2CPUQ=) 4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: XONO8AScATR8p+dgN33QWapfnhUPZs7VGzeHh0uX4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13531 (0x34db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: Jul 2 14:19:58 2025 GMT Not After : Jul 9 14:19:58 2025 GMT Subject: CN=6865400e-1df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:f7:49:d4:71:dd:bb:72:77:a6:c4:b7:f8: 8d:2d:62:a8:c0:64:5f:30:4e:22:aa:8a:d8:e4:dd: 4d:d3:ed:57:d1:43:36:4a:b8:34:dc:38:35:15:2c: ce:81:0b:79:ac:6f:20:48:d5:96:9c:89:d5:01:f6: 7d:4c:d0:90:73:f1:3b:ab:e1:49:d1:bf:5a:93:48: 25:b5:35:5c:28:c3:92:26:c0:42:f1:6f:63:6c:a2: f1:9d:97:d3:a5:f3:6a:53:80:a9:11:df:c6:d1:0c: 42:f8:e9:0c:6f:4c:17:e9:b3:dc:c3:e1:f5:38:11: 47:4c:ea:ce:5b:0b:56:da:67:b3:a5:1c:c7:d7:f5: 36:9b:0a:4f:78:38:1f:1e:11:69:ed:6e:09:0f:ac: 19:b1:38:4e:bd:b3:8c:5a:71:5c:f3:bc:5e:f2:16: d2:1e:52:a9:81:e2:31:e3:7b:6a:6c:04:38:3d:96: c7:af:06:56:93:1b:ce:45:29:34:51:d7:ec:11:42: 1c:3b:60:d3:6d:f1:32:01:c6:78:f8:04:c9:1d:4e: 9e:09:f0:fa:b4:e8:74:b5:61:7f:9c:03:72:f9:ea: 7d:8f:f8:fb:6d:94:0a:13:0f:4c:cd:e4:a3:3e:bf: 51:d6:b1:32:16:00:3e:03:15:b3:d7:47:db:ee:4b: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7D:A3:80:4D:02:11:45:D0:87:B2:63:4A:3B:E8:3B:0B:D2:2C:2E X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b5:0b:81:52:fa:9a:cc:fe:3f:b9:78:7a:be:8f:20:b4:a6: 83:1e:c7:8a:7f:dd:20:36:ff:e8:35:17:e3:8e:da:bf:bf:67: ff:8d:01:3b:56:01:98:38:44:31:f9:53:a4:4b:60:e8:02:0f: 44:19:91:9f:19:cd:df:c1:0e:c3:d3:13:fe:e4:fa:43:ce:85: 9c:4c:3f:99:07:28:47:be:20:08:a3:06:ae:58:b5:da:e0:a3: b8:13:17:b8:1b:4c:18:a9:37:e7:11:eb:d5:69:a9:85:8c:08: 36:d3:42:c9:2f:1f:6d:36:94:1f:97:c7:a2:5e:15:4d:16:9d: 44:5a:c6:45:f7:99:6f:ec:b4:79:d8:a2:10:e6:eb:ba:4b:4b: 53:8a:0a:04:f3:8a:89:a7:9e:b5:34:1f:11:4a:1b:81:51:4a: 8d:14:77:80:3c:73:0c:7e:38:99:90:9e:c7:ea:64:fc:5f:30: 92:de:8b:82:3a:62:7f:e4:d2:eb:7c:03:22:ae:5d:0b:d4:06: 39:11:44:23:ab:aa:bf:a3:ea:0e:9a:5b:71:a5:d9:77:dd:b0: e1:d6:a0:e2:4b:2e:a5:90:70:0e:03:64:a0:ec:6e:81:d6:37: 99:e9:f7:57:eb:92:11:a6:e5:ec:70:41:94:e8:0a:93:f1:4b: a6:ce:43:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjUwNzAyMTQxOTU4WhcNMjUwNzA5MTQxOTU4WjAYMRYwFAYD VQQDEw02ODY1NDAwZS0xZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiX3SdRx3btyd6bEt/iNLWKowGRfME4iqorY5N1N0+1X0UM2Srg03Dg1FSzO gQt5rG8gSNWWnInVAfZ9TNCQc/E7q+FJ0b9ak0gltTVcKMOSJsBC8W9jbKLxnZfT pfNqU4CpEd/G0QxC+OkMb0wX6bPcw+H1OBFHTOrOWwtW2mezpRzH1/U2mwpPeDgf HhFp7W4JD6wZsThOvbOMWnFc87xe8hbSHlKpgeIx43tqbAQ4PZbHrwZWkxvORSk0 UdfsEUIcO2DTbfEyAcZ4+ATJHU6eCfD6tOh0tWF/nANy+ep9j/j7bZQKEw9MzeSj Pr9R1rEyFgA+AxWz10fb7kt5pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV9o4BN AhFF0IeyY0o76DsL0iwuMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwtQuBUvqazP4/uXh6vo8gtKaDHseKf90gNv/oNRfjjtq/v2f/jQE7 VgGYOEQx+VOkS2DoAg9EGZGfGc3fwQ7D0xP+5PpDzoWcTD+ZByhHviAIowauWLXa 4KO4Exe4G0wYqTfnEevVaamFjAg200LJLx9tNpQfl8eiXhVNFp1EWsZF95lv7LR5 2KIQ5uu6S0tTigoE84qJp561NB8RShuBUUqNFHeAPHMMfjiZkJ7H6mT8XzCS3ouC OmJ/5NLrfAMirl0L1AY5EUQjq6q/o+oOmltxpdl33bDh1qDiSy6lkHAOA2Sg7G6B 1jeZ6fdX65IRpuXscEGU6AqT8UumzkNe -----END CERTIFICATE-----Generated at Thu Jul 3 15:06:38 2025 by rpki-client