$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft File: ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json) Hash identifier: ePhJUNLki7XhEyDGWa0q9x22lH5ja5j6sPzDXRX1SHc= Subject key identifier: EB:CC:B8:E5:6A:10:E0:0C:5C:B1:15:D0:CF:D4:E0:29:30:8F:6F:4D Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft Manifest number: 7E Signing time: Thu 03 Jul 2025 06:56:39 +0000 Manifest this update: Thu 03 Jul 2025 06:56:39 +0000 Manifest next update: Thu 10 Jul 2025 06:56:39 +0000 Files and hashes: 1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: QWxLCJRB57VKN3AgPzTgNkiqqKJzCXZtO6hffgPBJxI=) 2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Validity Not Before: Jul 3 06:56:39 2025 GMT Not After : Jul 10 06:56:39 2025 GMT Subject: CN=686629a7-2d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:34:b2:5f:82:54:d5:76:60:ff:b7:81:4e: 4d:a4:bb:8b:e5:e7:c5:69:87:d3:4b:1d:52:32:61: fc:c1:57:07:87:0d:89:39:20:33:03:fc:23:4e:f9: 8e:26:f5:d3:70:9f:68:a7:bb:96:e1:f8:b0:40:a8: a2:41:5e:dd:2a:e2:98:c3:49:5a:e5:e5:5b:2f:cf: f8:3a:d6:2e:a5:64:db:f9:55:24:b8:89:04:65:db: 15:a5:f6:a5:03:77:eb:1e:4c:e0:26:7e:40:d8:ba: 90:83:25:e5:b5:a3:a0:94:48:b4:e7:fc:e8:f3:ce: d8:46:24:a0:3d:35:48:b8:b4:de:9c:f3:6d:52:04: 06:d7:05:8d:6a:ef:7c:74:2d:54:17:65:16:59:d2: bc:29:b0:7f:01:19:c8:45:62:22:b7:13:da:8d:b5: 72:6e:9c:07:11:0f:78:d6:53:8c:36:78:79:58:b1: bf:64:4d:94:f3:27:ec:10:7b:68:18:05:0c:ef:a6: e1:c8:68:4c:d1:a5:c4:66:9b:ec:e4:ae:e6:95:91: c6:7e:20:b6:06:05:c3:7d:7d:99:f0:ab:4b:75:a5: b1:f5:58:b9:26:c7:85:2a:f6:fd:f9:eb:8a:b5:49: e2:13:3e:ef:3a:45:d1:82:5d:11:18:a1:5b:ee:f1: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CC:B8:E5:6A:10:E0:0C:5C:B1:15:D0:CF:D4:E0:29:30:8F:6F:4D X509v3 Authority Key Identifier: keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:78:07:52:72:20:38:60:6b:9c:6d:79:8a:61:9f:90:13:96: 77:1a:21:f8:37:41:f4:d1:39:34:8a:c4:22:9e:29:f7:4d:af: 38:27:9b:10:f3:b5:ed:53:7d:8b:dc:f1:04:62:20:00:a0:0e: ea:45:40:9f:c1:f1:20:be:ff:bc:b5:7f:c5:27:44:94:1a:4f: bb:bb:d7:38:82:b3:39:10:2e:ba:b1:83:a6:0a:2e:3e:69:b4: a8:b9:da:38:27:a5:c3:2d:c7:4c:23:da:d3:03:68:48:cd:73: ed:00:78:40:68:2c:bd:c5:db:9c:89:ef:9b:9f:02:2c:3f:c6: 4d:9f:f2:2d:49:ec:b8:c2:f4:a9:99:7d:08:db:2f:19:62:e4: 8c:dd:b5:41:f9:df:6a:ca:73:4e:62:39:df:81:28:6d:17:e9: 9c:f0:2d:f3:ab:8c:f6:b8:94:5c:9f:05:50:96:a6:f2:a8:22: 75:73:7a:b5:58:5a:e6:4b:97:6d:d0:57:04:24:8c:9b:9f:24: 7b:33:64:6c:ff:5d:b8:e0:64:2a:43:54:73:05:e5:a2:12:41: a6:a2:75:0d:25:a4:8a:10:97:43:b9:5c:1b:fa:0c:e4:a8:ad: e7:6f:ca:bb:cb:07:e8:ed:d5:02:2f:3d:79:17:99:b6:fe:82: 37:91:c7:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKDhCMTU0NDBBRTIyNkM5OTBGQzlFNTU5MTVGRThDOTUw OUJDQjY2NzYwHhcNMjUwNzAzMDY1NjM5WhcNMjUwNzEwMDY1NjM5WjAYMRYwFAYD VQQDEw02ODY2MjlhNy0yZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkk0sl+CVNV2YP+3gU5NpLuL5efFaYfTSx1SMmH8wVcHhw2JOSAzA/wjTvmO JvXTcJ9op7uW4fiwQKiiQV7dKuKYw0la5eVbL8/4OtYupWTb+VUkuIkEZdsVpfal A3frHkzgJn5A2LqQgyXltaOglEi05/zo887YRiSgPTVIuLTenPNtUgQG1wWNau98 dC1UF2UWWdK8KbB/ARnIRWIitxPajbVybpwHEQ941lOMNnh5WLG/ZE2U8yfsEHto GAUM76bhyGhM0aXEZpvs5K7mlZHGfiC2BgXDfX2Z8KtLdaWx9Vi5JseFKvb9+euK tUniEz7vOkXRgl0RGKFb7vGWEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvMuOVq EOAMXLEV0M/U4Ckwj29NMB8GA1UdIwQYMBaAFIsVRAriJsmQ/J5VkV/oyVCby2Z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9ENDM3MTExMjlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXlaRDhubFdSWC1qSlVKdkxa blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9ENDM3MTExMjlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXla RDhubFdSWC1qSlVKdkxablkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAeAdSciA4YGucbXmKYZ+QE5Z3GiH4N0H00Tk0isQinin3Ta84J5sQ 87XtU32L3PEEYiAAoA7qRUCfwfEgvv+8tX/FJ0SUGk+7u9c4grM5EC66sYOmCi4+ abSoudo4J6XDLcdMI9rTA2hIzXPtAHhAaCy9xducie+bnwIsP8ZNn/ItSey4wvSp mX0I2y8ZYuSM3bVB+d9qynNOYjnfgShtF+mc8C3zq4z2uJRcnwVQlqbyqCJ1c3q1 WFrmS5dt0FcEJIybnyR7M2Rs/1244GQqQ1RzBeWiEkGmonUNJaSKEJdDuVwb+gzk qK3nb8q7ywfo7dUCLz15F5m2/oI3kcd1 -----END CERTIFICATE-----Generated at Thu Jul 3 23:34:50 2025 by rpki-client