$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: JYLRBe3Fsprp0RfCm6/kkAXWU0qzo6hdakUDBAvO45M= Subject key identifier: 0E:F4:89:4E:06:07:34:75:6E:CD:7E:BD:D0:AD:0F:BE:21:27:36:11 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 5E Signing time: Thu 03 Jul 2025 07:19:12 +0000 Manifest this update: Thu 03 Jul 2025 07:19:11 +0000 Manifest next update: Thu 10 Jul 2025 07:19:11 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: wZb0WOlAI2iiX7C7gjTGvxmLJieZS6dVwobjuYeNZcg=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Jul 3 07:19:11 2025 GMT Not After : Jul 10 07:19:11 2025 GMT Subject: CN=68662eef-944e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bf:1d:e1:4b:30:6e:53:b0:c3:58:dc:fb:9c: 25:46:1c:28:45:ba:01:26:62:bd:21:18:96:e1:eb: 70:a9:68:32:23:7c:f5:2e:34:12:29:18:3d:7a:80: c5:c5:03:10:da:ae:48:ce:b4:4b:60:6f:f4:22:22: 14:ef:42:9c:43:34:2a:04:53:66:bd:27:f6:8d:c3: bb:77:71:f6:e9:71:40:67:8e:80:87:6a:aa:11:94: 2f:1f:5c:ca:e7:c6:ff:37:7d:ff:6c:d1:60:30:63: 9e:57:48:c7:43:1d:71:12:85:05:0e:f1:3f:9f:53: 4a:bf:39:28:b3:d3:1b:ea:12:3e:b5:ba:39:82:1e: c7:24:f6:5f:5d:fd:7d:20:b1:f0:91:e4:bb:30:e8: d8:5c:64:62:e6:b5:34:36:c1:b5:3a:23:e9:ce:68: 9d:d7:c2:b6:f9:2b:e9:ac:ad:3f:ff:a0:05:88:48: 39:ed:ff:d0:d4:91:b7:2c:8c:f1:ca:01:ea:a6:43: 1d:aa:e0:0d:79:38:93:8d:75:77:a6:43:56:ff:b3: 6e:8a:c3:3a:de:a9:91:e6:56:48:36:90:ee:ba:ee: 76:c7:9b:52:e6:74:ee:7a:05:03:68:c5:5a:3f:b7: f9:dd:bb:1f:eb:3b:e8:57:fb:25:c7:5e:ed:ec:0b: cc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F4:89:4E:06:07:34:75:6E:CD:7E:BD:D0:AD:0F:BE:21:27:36:11 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:06:4d:e4:cf:2f:ee:c9:da:f4:92:5a:d1:83:61:1b:3a:a0: bc:34:39:1c:63:43:99:42:62:59:86:ea:4d:00:c9:ae:8e:fd: 1e:fc:36:44:3a:9f:e4:d8:58:60:70:bc:ad:05:83:75:b5:b5: 68:b0:fb:51:ac:d3:e8:28:56:5a:1e:fa:93:9a:cd:64:9c:85: 7c:eb:4a:d8:9e:d2:16:4d:d5:75:f4:5a:93:4b:74:ab:bd:c5: e6:b8:43:66:eb:9f:e3:c4:e3:07:d7:27:9a:ed:47:b5:66:28: 84:53:da:b9:b3:f6:31:88:28:a2:56:48:d7:c3:47:dc:1f:ce: a3:fd:b2:dc:c8:d1:55:a1:bb:67:68:02:d3:8b:4e:cd:12:bf: 74:2a:70:18:3f:24:0c:3c:1e:55:6b:1f:81:84:c3:4e:85:a4: 10:e9:ac:58:af:e1:fd:93:0d:62:97:6e:cf:44:61:42:12:5c: da:1d:a6:fb:c2:81:e1:0b:f8:5a:40:01:93:05:b6:59:94:05: 34:62:b2:1b:cd:f6:7d:d2:77:dd:95:65:d9:c1:3b:0a:68:75: 61:ce:ba:75:08:29:9b:f3:46:c7:75:7d:9b:fc:6a:db:1c:46: 7f:30:3b:95:df:20:2d:35:ed:2d:93:c4:f8:ce:bf:c2:c9:8c: 38:9c:50:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoOEIzNDcxQjkwQjdBNUJDNzZDRTNGQzA5QUNBQzg5MjhF QjREODE3OTAeFw0yNTA3MDMwNzE5MTFaFw0yNTA3MTAwNzE5MTFaMBgxFjAUBgNV BAMTDTY4NjYyZWVmLTk0NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOvx3hSzBuU7DDWNz7nCVGHChFugEmYr0hGJbh63CpaDIjfPUuNBIpGD16gMXF AxDarkjOtEtgb/QiIhTvQpxDNCoEU2a9J/aNw7t3cfbpcUBnjoCHaqoRlC8fXMrn xv83ff9s0WAwY55XSMdDHXEShQUO8T+fU0q/OSiz0xvqEj61ujmCHsck9l9d/X0g sfCR5Lsw6NhcZGLmtTQ2wbU6I+nOaJ3Xwrb5K+msrT//oAWISDnt/9DUkbcsjPHK AeqmQx2q4A15OJONdXemQ1b/s26KwzreqZHmVkg2kO667nbHm1LmdO56BQNoxVo/ t/ndux/rO+hX+yXHXu3sC8xlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDvSJTgYH NHVuzX690K0PviEnNhEwHwYDVR0jBBgwFoAUizRxuQt6W8ds4/wJrKyJKOtNgXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0Q1M0UxQjZFQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXpSeHVRdDZXOGRzNF93SnJLeUpLT3ROZ1hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 ODU0L0Q1M0UxQjZFQ0IyMzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2Vzhk czRfd0pyS3lKS090TmdYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQGTeTPL+7J2vSSWtGDYRs6oLw0ORxjQ5lCYlmG6k0Aya6O/R78NkQ6 n+TYWGBwvK0Fg3W1tWiw+1Gs0+goVloe+pOazWSchXzrStie0hZN1XX0WpNLdKu9 xea4Q2brn+PE4wfXJ5rtR7VmKIRT2rmz9jGIKKJWSNfDR9wfzqP9stzI0VWhu2do AtOLTs0Sv3QqcBg/JAw8HlVrH4GEw06FpBDprFiv4f2TDWKXbs9EYUISXNodpvvC geEL+FpAAZMFtlmUBTRishvN9n3Sd92VZdnBOwpodWHOunUIKZvzRsd1fZv8atsc Rn8wO5XfIC017S2TxPjOv8LJjDicUFI= -----END CERTIFICATE-----Generated at Fri Jul 4 13:53:12 2025 by rpki-client