$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft File: iuWu7yqR89-GYD7cVP6ExbtXnBU.mft (raw, json) Hash identifier: psPsiBrnXZxJS5dE6flzet5cIsG28ZTJTTOuNVDso8Q= Subject key identifier: 46:0B:F6:4C:DC:DD:F4:88:B0:F0:E9:CB:10:50:91:77:93:96:72:AC Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15 Certificate issuer: /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft Manifest number: CB Signing time: Thu 03 Jul 2025 05:53:35 +0000 Manifest this update: Thu 03 Jul 2025 05:53:34 +0000 Manifest next update: Thu 10 Jul 2025 05:53:34 +0000 Files and hashes: 1: iuWu7yqR89-GYD7cVP6ExbtXnBU.crl (hash: 7ttJIun6LxsBqYLRAzn8+3gktvaUfRiK0dxZhJQuYFs=) 2: D055D382225711EF975F6747C4F9AE02.roa (hash: 2DIbbbQohcgsUM76Q6xBDUsyKlfYgqXTFBRbG6OVDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15 Validity Not Before: Jul 3 05:53:34 2025 GMT Not After : Jul 10 05:53:34 2025 GMT Subject: CN=68661ade-cde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:d6:17:98:18:c1:e1:7c:81:57:a7:d8:1b: 0b:cb:9e:9e:11:f9:93:91:d4:a0:3c:27:fd:ba:13: 97:61:10:3d:9e:78:6b:ba:14:d9:0a:6c:a0:80:59: ad:b2:3e:48:46:d6:d0:41:2f:90:07:00:fb:99:d6: df:62:20:29:7a:08:d6:7f:a0:02:c2:53:2e:0b:03: fe:a6:8f:1c:cd:38:ae:ab:d2:98:7f:9d:1d:af:ae: 05:31:a9:65:83:53:fd:4c:b5:d9:32:7e:a7:c2:16: e4:ee:4a:58:14:46:f5:f4:a1:ee:9e:04:b6:47:03: 65:d3:7a:63:9e:2b:60:69:cd:67:de:db:b4:76:a7: b8:19:04:d0:00:9e:20:40:b3:5a:b4:eb:90:b5:0b: 2a:1b:25:d0:cd:3c:a8:e3:10:28:06:5e:b5:ee:70: 75:61:38:1e:01:35:8f:ec:b6:51:f7:72:50:ee:36: 85:d4:3c:5a:8d:df:4c:85:4f:b4:0b:c8:b3:ec:27: d9:7a:bc:5a:73:cb:c1:1e:4a:2c:b3:aa:bb:be:51: a2:44:8b:68:34:33:ca:42:bd:f4:dd:c4:b5:ad:18: 18:42:80:7d:fd:ba:ea:00:d4:8f:a9:79:cc:2f:f4: 37:f4:38:7b:5d:fe:fe:4f:c1:27:a9:72:c2:26:9a: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0B:F6:4C:DC:DD:F4:88:B0:F0:E9:CB:10:50:91:77:93:96:72:AC X509v3 Authority Key Identifier: keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:39:86:d8:ce:37:c6:7d:44:19:8d:81:ad:cc:62:38:b3:5a: 9b:f0:52:71:3d:43:94:27:92:03:79:6a:95:91:06:63:46:cc: 58:0a:0e:c6:72:ce:6f:e2:43:fd:e2:51:dd:54:3b:63:4f:82: a9:ac:1b:93:aa:9f:7d:ae:45:ba:71:52:6f:a3:b3:d3:6e:47: 56:83:05:12:ec:f7:54:7f:cd:fc:40:c7:a4:44:74:c3:63:94: dd:73:43:a3:7b:4f:8f:bb:41:79:6f:3a:d8:de:08:f1:7e:12: 14:7a:62:60:78:44:07:4b:ef:72:b7:d3:b5:ac:c8:3e:b7:de: cb:f8:a5:94:6f:b2:5f:24:79:67:a7:3d:14:65:54:ec:7a:29: e7:f2:28:23:7d:03:7b:d6:64:61:6e:97:11:07:25:36:e9:4f: 70:0b:7e:63:a3:72:fb:95:88:3e:39:11:16:d7:66:e6:23:8f: 7f:2a:25:c9:b0:40:ca:b6:67:6b:f2:98:e1:5f:bd:6a:9f:13: 65:1b:b9:0c:5d:e5:f8:7c:fc:40:77:98:3d:06:c1:70:20:16: 65:fd:94:73:19:11:e9:38:28:ba:24:68:f6:7d:22:71:b4:a0: 03:51:38:ba:b6:f1:8a:ea:66:2f:ec:40:6d:b4:f8:71:31:60: 9f:2b:1f:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQjUxMTAvBgNVBAUTKDhBRTVBRUVGMkE5MUYzREY4NjYwM0VEQzU0RkU4NEM1 QkI1NzlDMTUwHhcNMjUwNzAzMDU1MzM0WhcNMjUwNzEwMDU1MzM0WjAYMRYwFAYD VQQDEw02ODY2MWFkZS1jZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEzWF5gYweF8gVen2BsLy56eEfmTkdSgPCf9uhOXYRA9nnhruhTZCmyggFmt sj5IRtbQQS+QBwD7mdbfYiApegjWf6ACwlMuCwP+po8czTiuq9KYf50dr64FMall g1P9TLXZMn6nwhbk7kpYFEb19KHungS2RwNl03pjnitgac1n3tu0dqe4GQTQAJ4g QLNatOuQtQsqGyXQzTyo4xAoBl617nB1YTgeATWP7LZR93JQ7jaF1Dxajd9MhU+0 C8iz7CfZerxac8vBHkoss6q7vlGiRItoNDPKQr303cS1rRgYQoB9/brqANSPqXnM L/Q39Dh7Xf7+T8EnqXLCJporzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYL9kzc 3fSIsPDpyxBQkXeTlnKsMB8GA1UdIwQYMBaAFIrlru8qkfPfhmA+3FT+hMW7V5wV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NCNS9FRkQ0N0Q1NDIy NTYxMUVGQjc1NjFGNDZDNEY5QUUwMi9pdVd1N3lxUjg5LUdZRDdjVlA2RXhidFhu QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l1V3U3eXFSODktR1lEN2NWUDZFeGJ0WG5CVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NCNS9FRkQ0N0Q1NDIyNTYxMUVGQjc1NjFGNDZDNEY5QUUwMi9pdVd1N3lxUjg5 LUdZRDdjVlA2RXhidFhuQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtOYbYzjfGfUQZjYGtzGI4s1qb8FJxPUOUJ5IDeWqVkQZjRsxYCg7G cs5v4kP94lHdVDtjT4KprBuTqp99rkW6cVJvo7PTbkdWgwUS7PdUf838QMekRHTD Y5Tdc0Oje0+Pu0F5bzrY3gjxfhIUemJgeEQHS+9yt9O1rMg+t97L+KWUb7JfJHln pz0UZVTseinn8igjfQN71mRhbpcRByU26U9wC35jo3L7lYg+OREW12bmI49/KiXJ sEDKtmdr8pjhX71qnxNlG7kMXeX4fPxAd5g9BsFwIBZl/ZRzGRHpOCi6JGj2fSJx tKADUTi6tvGK6mYv7EBttPhxMWCfKx8u -----END CERTIFICATE-----Generated at Fri Jul 4 08:26:43 2025 by rpki-client