$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json) Hash identifier: e0EOGZIgdY6nMtubdRp5lMco5+v+Hq2t/UOPWl5uqRY= Subject key identifier: 25:43:A6:AD:0C:B2:B3:8A:09:96:C9:3B:77:4E:31:7C:0F:42:05:78 Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft Manifest number: A0 Signing time: Thu 03 Jul 2025 06:32:32 +0000 Manifest this update: Thu 03 Jul 2025 06:32:31 +0000 Manifest next update: Thu 10 Jul 2025 06:32:31 +0000 Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: FQ/DxdTo/pCQlWxxZnA7jCOoOgFBzAUEJCi/+O2cEbU=) 2: 10435EE8740511EF93658977C4F9AE02.roa (hash: xmMmx42YHDQ1ahK54oeYt43Mx+x7gEXdRkvJnhnT9V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Validity Not Before: Jul 3 06:32:31 2025 GMT Not After : Jul 10 06:32:31 2025 GMT Subject: CN=68662400-1a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:7c:fc:9f:da:bb:3e:19:c5:37:4d:15:c9: 8d:4a:94:d5:84:11:a9:ce:c4:24:b3:8d:bd:f8:d0: 0f:7c:4d:47:77:a7:89:dd:1b:66:b9:07:ba:22:47: 54:fa:47:7f:03:56:9a:f2:5b:03:13:2a:8e:1d:d0: 61:fb:cd:56:13:6b:26:e6:ee:da:01:00:01:77:92: d2:dd:ae:43:77:45:ab:f2:b6:eb:5a:6c:cd:aa:3b: a0:84:9e:ce:b7:62:98:1b:ad:ca:62:a8:dc:77:14: 45:5b:45:bf:f1:04:4b:92:16:bf:5a:df:eb:fd:26: 64:61:52:d6:77:9f:fb:81:5f:8d:e5:95:ef:99:36: 57:c7:0a:b8:c3:e6:ab:34:a0:5d:e9:b4:76:0e:e4: 5e:10:10:41:20:44:95:a3:64:0e:7a:f8:9c:8f:52: df:e3:f9:8d:35:8f:51:b2:ba:77:c5:9a:b3:aa:93: b2:cd:fa:25:9f:a1:3d:25:e0:52:bd:40:c2:90:c5: 9e:c6:e3:90:79:5f:f0:6a:b1:67:26:8d:89:df:56: df:aa:81:e4:d7:e2:ae:7e:b2:fc:79:b2:3b:65:b2: ed:8f:2c:70:0f:f3:50:25:e8:08:af:7a:eb:e9:ce: 6d:d2:da:53:35:e3:9d:56:d6:b8:61:ec:7e:d0:2d: 4c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:43:A6:AD:0C:B2:B3:8A:09:96:C9:3B:77:4E:31:7C:0F:42:05:78 X509v3 Authority Key Identifier: keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a0:c7:c6:98:d3:8e:cb:97:b6:a4:d4:80:26:ae:94:25:17: 60:7c:fd:e5:17:c3:9e:ee:19:29:2f:e0:b7:9f:08:11:c9:18: 8e:7f:c6:20:ab:27:a4:43:d9:3c:51:6f:f4:9a:40:c9:da:dc: 50:e9:99:b7:91:3b:3c:d0:1f:a7:14:7e:fd:df:d1:4a:0a:69: b0:03:b7:80:d1:57:61:79:47:0c:db:50:f4:3d:34:62:de:d5: 0b:6d:cf:79:b7:e0:f0:1a:5c:0c:35:13:5e:46:a2:1e:9b:70: 3b:8e:af:a9:f9:dc:6d:eb:48:27:79:ed:5d:fc:e7:77:d6:76: fd:70:7f:2b:59:75:8e:79:01:15:e0:d5:3c:3f:96:c4:07:0e: 6a:aa:49:61:d4:39:81:fc:4d:c6:20:10:49:12:0c:50:09:96: 9e:e9:1f:59:ff:f7:25:82:23:9d:ad:19:2a:fa:7a:b1:61:f1: 24:93:47:79:31:be:3b:c5:a5:16:8d:d7:93:f9:ae:97:bc:19: 83:ee:e1:b1:22:f2:d9:a2:56:ec:cf:24:78:07:89:7d:50:c3: 53:01:6b:96:f0:44:e3:8d:87:e7:58:17:17:33:f5:b1:5d:c9: 3f:f1:c5:98:5b:e1:e4:f0:6c:43:ed:8f:0a:74:67:56:db:d7: f5:01:a9:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDg4N0UxMTA3QTgzRjExNzRGRjdFM0U3ODA4ODhEQjU3 MjNCNzkyNUIwHhcNMjUwNzAzMDYzMjMxWhcNMjUwNzEwMDYzMjMxWjAYMRYwFAYD VQQDEw02ODY2MjQwMC0xYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVF8/J/auz4ZxTdNFcmNSpTVhBGpzsQks429+NAPfE1Hd6eJ3RtmuQe6IkdU +kd/A1aa8lsDEyqOHdBh+81WE2sm5u7aAQABd5LS3a5Dd0Wr8rbrWmzNqjughJ7O t2KYG63KYqjcdxRFW0W/8QRLkha/Wt/r/SZkYVLWd5/7gV+N5ZXvmTZXxwq4w+ar NKBd6bR2DuReEBBBIESVo2QOevicj1Lf4/mNNY9Rsrp3xZqzqpOyzfoln6E9JeBS vUDCkMWexuOQeV/warFnJo2J31bfqoHk1+KufrL8ebI7ZbLtjyxwD/NQJegIr3rr 6c5t0tpTNeOdVta4Yex+0C1M8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVDpq0M srOKCZbJO3dOMXwPQgV4MB8GA1UdIwQYMBaAFIh+EQeoPxF0/34+eAiI21cjt5Jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9DNzM5QkFFRTZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VYVF9majU0Q0lqYlZ5TzNr bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lINFJCNmdfRVhUX2ZqNTRDSWpiVnlPM2tscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9DNzM5QkFFRTZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VY VF9majU0Q0lqYlZ5TzNrbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOoMfGmNOOy5e2pNSAJq6UJRdgfP3lF8Oe7hkpL+C3nwgRyRiOf8Yg qyekQ9k8UW/0mkDJ2txQ6Zm3kTs80B+nFH7939FKCmmwA7eA0VdheUcM21D0PTRi 3tULbc95t+DwGlwMNRNeRqIem3A7jq+p+dxt60gnee1d/Od31nb9cH8rWXWOeQEV 4NU8P5bEBw5qqklh1DmB/E3GIBBJEgxQCZae6R9Z//clgiOdrRkq+nqxYfEkk0d5 Mb47xaUWjdeT+a6XvBmD7uGxIvLZolbszyR4B4l9UMNTAWuW8ETjjYfnWBcXM/Wx Xck/8cWYW+Hk8GxD7Y8KdGdW29f1Aam2 -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:16 2025 by rpki-client