$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json) Hash identifier: 7QHz+Ce4TXRridgIxtoV++8Fn9VlNyHNx2BakH+widw= Subject key identifier: 64:2E:1F:57:98:0E:8B:82:61:AF:15:E2:40:C7:0E:C2:F2:CE:22:93 Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 06F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft Manifest number: 06E3 Signing time: Wed 02 Jul 2025 22:18:35 +0000 Manifest this update: Wed 02 Jul 2025 22:18:34 +0000 Manifest next update: Wed 09 Jul 2025 22:18:34 +0000 Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: xkpWlCA/Ng7LXiFd8UwhbhX0pYzmxuG6+RjlM1p9bys=) 2: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: P4RG3Y6nQyOth1GOf+cUq+m33EkNoZAP7s5DUsSNA08=) 3: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: rMVk1ga9cfh7Qo/jkI958sU0c+kJJEruOUO08Z/4CDQ=) 4: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: 0kvZ3EdSky7ksqvtASBmr2Ki7hEXQRI9ENpHrPAoPC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1779 (0x6f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Jul 2 22:18:34 2025 GMT Not After : Jul 9 22:18:34 2025 GMT Subject: CN=6865b03b-82df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:55:71:f9:84:87:53:66:50:0e:67:6c:3c: 2f:f8:62:b2:b6:b4:57:04:7f:74:30:11:9c:b3:f1: 16:15:f0:c2:36:9a:94:23:19:46:37:f8:fd:bb:91: ec:bf:fb:8a:99:28:aa:88:ec:f6:89:fb:0f:2d:7f: 35:d6:cd:17:8a:fb:15:bf:0b:03:3f:f0:f4:7a:3f: 3a:b1:2d:bf:f1:25:86:fa:b4:b9:d8:f3:30:8a:e5: bf:a8:f8:5b:63:9b:af:2c:64:ff:fb:62:82:e1:53: c7:ac:cd:b7:e0:22:92:c7:5b:c0:e6:5e:5f:f3:02: 50:92:54:60:48:d7:b7:dc:36:1e:4b:c9:5d:a6:7a: 33:c9:de:d0:b1:88:8b:ef:35:94:6d:26:43:f5:dc: ef:d8:f2:82:11:73:8d:10:c7:01:3d:f0:75:41:5c: 20:12:a3:f1:fa:36:48:d2:d6:59:af:21:a7:14:ed: 0e:7c:cb:12:77:99:79:ad:d8:24:0d:5e:85:ac:74: 88:db:33:fa:66:a4:9d:4d:9f:77:ed:53:9c:1f:f9: 9b:51:ef:2f:d8:c4:4a:51:5a:7f:1e:42:dd:52:7a: 1b:ed:01:e9:43:e1:9e:1d:9d:2e:3a:d7:0f:74:2a: b1:5c:52:7c:63:d1:68:e8:e1:cd:b2:a5:da:43:e6: 15:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:1F:57:98:0E:8B:82:61:AF:15:E2:40:C7:0E:C2:F2:CE:22:93 X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:5b:e3:a0:1a:29:7d:f4:93:70:c8:c8:7d:69:9c:d4:8f:28: 0d:d2:be:c8:82:92:31:2d:16:66:72:3c:48:c2:28:ab:24:d7: 91:79:dc:45:1b:d7:e6:63:38:a0:b7:a2:cf:93:31:dc:89:64: 17:ca:e0:ed:c1:a0:1d:3e:86:15:e2:0a:5e:65:3f:1d:c4:3d: aa:8d:cb:7b:ad:74:42:34:3a:f7:18:a1:c1:b0:25:9c:3c:bb: 52:6d:4e:ba:e6:e6:fe:7f:8f:30:d5:b7:92:d3:bc:16:60:f0: 46:93:52:6a:ed:35:83:5c:55:ac:01:c1:71:3d:0d:1c:1b:7c: 9b:df:ff:c9:f8:27:62:61:2b:84:ff:4c:f9:75:a1:ba:6d:32: cf:ba:25:bb:58:e6:10:39:75:66:6b:87:74:b7:1d:7d:3f:da: 67:c9:22:be:64:e7:2f:ec:df:04:ac:23:30:50:66:e1:e0:8a: 57:ca:c0:69:77:48:2d:56:82:dd:d2:4e:f4:db:1b:fa:80:f4: b2:f7:3c:36:82:75:fd:90:65:60:1f:e5:61:1d:85:01:2d:10: 50:e4:97:76:bf:00:07:fb:c6:c3:88:85:d2:79:54:d7:ac:6f: af:d3:b0:34:98:a2:8f:58:8b:af:dc:d9:d5:2c:91:ea:d6:2a: 82:bf:48:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjUwNzAyMjIxODM0WhcNMjUwNzA5MjIxODM0WjAYMRYwFAYD VQQDEw02ODY1YjAzYi04MmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt71VcfmEh1NmUA5nbDwv+GKytrRXBH90MBGcs/EWFfDCNpqUIxlGN/j9u5Hs v/uKmSiqiOz2ifsPLX811s0XivsVvwsDP/D0ej86sS2/8SWG+rS52PMwiuW/qPhb Y5uvLGT/+2KC4VPHrM234CKSx1vA5l5f8wJQklRgSNe33DYeS8ldpnozyd7QsYiL 7zWUbSZD9dzv2PKCEXONEMcBPfB1QVwgEqPx+jZI0tZZryGnFO0OfMsSd5l5rdgk DV6FrHSI2zP6ZqSdTZ937VOcH/mbUe8v2MRKUVp/HkLdUnob7QHpQ+GeHZ0uOtcP dCqxXFJ8Y9Fo6OHNsqXaQ+YVPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQuH1eY DouCYa8V4kDHDsLyziKTMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5 R0xEbUFWMGVEN29jamtQeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkW+OgGil99JNwyMh9aZzUjygN0r7IgpIxLRZmcjxIwiirJNeRedxF G9fmYzigt6LPkzHciWQXyuDtwaAdPoYV4gpeZT8dxD2qjct7rXRCNDr3GKHBsCWc PLtSbU665ub+f48w1beS07wWYPBGk1Jq7TWDXFWsAcFxPQ0cG3yb3//J+CdiYSuE /0z5daG6bTLPuiW7WOYQOXVma4d0tx19P9pnySK+ZOcv7N8ErCMwUGbh4IpXysBp d0gtVoLd0k702xv6gPSy9zw2gnX9kGVgH+VhHYUBLRBQ5Jd2vwAH+8bDiIXSeVTX rG+v07A0mKKPWIuv3NnVLJHq1iqCv0gr -----END CERTIFICATE-----Generated at Thu Jul 3 10:22:57 2025 by rpki-client