$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json) Hash identifier: BNHM4tVOx3RfSw6141M8ruWOgpDHApUUAq1qxaRubfw= Subject key identifier: 0A:92:58:09:28:D0:E6:20:61:28:36:94:61:67:2A:49:10:E6:A9:84 Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Certificate serial: 072B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft Manifest number: 0724 Signing time: Mon 30 Jun 2025 22:08:29 +0000 Manifest this update: Mon 30 Jun 2025 22:08:28 +0000 Manifest next update: Mon 07 Jul 2025 22:08:28 +0000 Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: WXMRrkn9E4ciFWJvn8cOGcH5G8GSTYeD9yes6RmQRNg=) 2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: cX9Jr6xc2q7kpQ4bV2j0kItAk4ZpyW8j6vKTdZBHzDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Validity Not Before: Jun 30 22:08:28 2025 GMT Not After : Jul 7 22:08:28 2025 GMT Subject: CN=68630adc-8f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:4e:c9:95:f9:56:c0:70:0b:9c:31:c0:4e: 67:52:be:58:1f:bd:0a:30:6f:b2:70:5e:50:3c:b8: 31:52:8a:88:91:fb:b9:5e:8c:e4:96:1e:81:e7:57: 61:f4:77:ad:0b:8c:25:72:fe:e2:ab:ea:62:28:a5: d0:6c:d9:30:a4:fd:99:27:03:c7:4c:15:53:dd:25: a5:66:d5:a0:27:cd:ab:9e:9d:bf:40:e4:31:fe:31: 35:cb:78:01:5d:a4:af:53:f4:28:4c:5e:d4:60:61: f3:dd:6c:71:82:13:de:13:49:fd:d0:88:c2:76:6b: 19:2b:5d:e1:46:b4:82:34:ec:c6:66:98:b1:b1:28: 0b:18:f2:d5:82:5e:cb:9a:9f:b2:df:54:48:1d:2d: e4:4a:dc:61:60:30:03:d7:f5:de:a3:35:41:0c:cb: 12:2c:0f:23:4a:dc:28:69:4b:fd:f4:3a:db:25:b9: b4:65:31:d9:df:2d:b8:4c:c5:6e:98:d4:d3:4b:60: 80:d8:9a:d6:3b:bb:43:84:01:37:5d:17:53:87:b6: fd:2d:26:01:61:df:d6:ef:6b:09:09:26:a2:3a:86: d1:20:e3:de:5d:d8:85:af:32:1a:55:5a:77:16:ae: c9:96:ea:59:23:ad:78:4d:27:99:57:30:3a:83:72: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:92:58:09:28:D0:E6:20:61:28:36:94:61:67:2A:49:10:E6:A9:84 X509v3 Authority Key Identifier: keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ad:1f:c7:18:d8:ce:b5:e5:05:a1:d4:2d:a5:a8:87:ff:4d: d7:d7:36:2b:17:22:67:9f:09:d4:04:69:72:cd:cb:8d:9c:1c: b9:0e:80:1e:fa:31:bb:67:3d:5d:eb:30:1d:2d:73:e2:fb:c0: 5e:c6:a0:af:18:60:0f:82:be:79:51:c4:b4:68:7d:b0:3b:25: ba:49:8b:70:69:65:29:fc:56:ab:24:04:27:11:54:78:9c:40: 87:a7:44:6b:35:52:61:69:40:12:78:bb:31:98:f7:f2:5e:4b: eb:e6:33:4f:28:2c:46:cc:34:28:af:18:41:2e:f6:5d:51:9d: 49:a0:2a:f3:cb:a8:2e:6a:56:5a:a4:ca:1b:84:01:32:15:83: f8:fd:10:ef:40:f1:d4:c7:12:46:f3:bc:57:60:ee:87:5a:54: 06:ff:0c:79:c5:7e:3a:3c:a9:d2:fa:eb:eb:ef:a2:3a:e4:d3: dd:63:ce:d6:31:d9:cf:24:40:21:09:c1:25:1b:91:85:0c:a2: 53:29:d2:1b:b6:8a:01:56:8c:e9:de:89:1d:8e:f3:d6:27:56: 02:12:88:3d:12:0e:c5:73:3d:c5:f4:f2:8d:6c:8d:4a:e2:8f: 62:28:4a:6d:ba:13:35:6d:35:f9:dc:03:bc:f2:f3:9e:1f:cf: bd:9f:a4:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1 MkIxN0I2QkIwHhcNMjUwNjMwMjIwODI4WhcNMjUwNzA3MjIwODI4WjAYMRYwFAYD VQQDEw02ODYzMGFkYy04ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsVOyZX5VsBwC5wxwE5nUr5YH70KMG+ycF5QPLgxUoqIkfu5Xozklh6B51dh 9HetC4wlcv7iq+piKKXQbNkwpP2ZJwPHTBVT3SWlZtWgJ82rnp2/QOQx/jE1y3gB XaSvU/QoTF7UYGHz3WxxghPeE0n90IjCdmsZK13hRrSCNOzGZpixsSgLGPLVgl7L mp+y31RIHS3kStxhYDAD1/XeozVBDMsSLA8jStwoaUv99DrbJbm0ZTHZ3y24TMVu mNTTS2CA2JrWO7tDhAE3XRdTh7b9LSYBYd/W72sJCSaiOobRIOPeXdiFrzIaVVp3 Fq7JlupZI614TSeZVzA6g3LRdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqSWAko 0OYgYSg2lGFnKkkQ5qmEMB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu ak0wMWtPQzBTY3RTc1h0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHrR/HGNjOteUFodQtpaiH/03X1zYrFyJnnwnUBGlyzcuNnBy5DoAe +jG7Zz1d6zAdLXPi+8BexqCvGGAPgr55UcS0aH2wOyW6SYtwaWUp/FarJAQnEVR4 nECHp0RrNVJhaUASeLsxmPfyXkvr5jNPKCxGzDQorxhBLvZdUZ1JoCrzy6gualZa pMobhAEyFYP4/RDvQPHUxxJG87xXYO6HWlQG/wx5xX46PKnS+uvr76I65NPdY87W MdnPJEAhCcElG5GFDKJTKdIbtooBVozp3okdjvPWJ1YCEog9Eg7Fcz3F9PKNbI1K 4o9iKEptuhM1bTX53AO88vOeH8+9n6TM -----END CERTIFICATE-----Generated at Wed Jul 2 14:06:06 2025 by rpki-client