$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft File: Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json) Hash identifier: pJj+brB+FyOdgJVwYZ911iOijzQo4a4rT7yKo6Chwxs= Subject key identifier: AD:9D:9D:25:8D:57:05:A6:17:ED:B1:AB:51:F7:7B:96:9C:64:83:44 Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB Certificate issuer: /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft Manifest number: BB Signing time: Thu 03 Jul 2025 06:03:09 +0000 Manifest this update: Thu 03 Jul 2025 06:03:09 +0000 Manifest next update: Thu 10 Jul 2025 06:03:09 +0000 Files and hashes: 1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: IWApwYZNqYS3Xx8vJOkSKFR5AXu2iAnLN3LsLsfbows=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Validity Not Before: Jul 3 06:03:09 2025 GMT Not After : Jul 10 06:03:09 2025 GMT Subject: CN=68661d1d-4b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:ae:54:3c:f4:83:c1:ab:0d:5e:7a:9e:42: 87:6a:3e:cf:1b:ae:67:d2:44:08:df:8d:fa:b9:13: 99:c8:44:00:41:e5:b3:29:58:d5:2d:60:00:e1:62: ac:17:eb:82:87:39:80:9b:ae:64:b9:c2:72:fd:e7: 77:aa:fd:50:69:d3:df:ca:e9:25:cc:b8:b5:5f:96: 8e:a9:6d:ec:c3:44:df:15:c6:01:f9:54:6b:f8:c6: d7:8a:20:1e:85:cd:9d:fe:27:03:42:69:0a:3e:b2: ec:01:cc:c6:18:28:48:3c:65:28:7b:6a:d7:0d:f7: 65:4c:73:c7:90:47:bc:c0:ad:29:00:45:17:fe:0d: 38:4c:96:77:73:f6:fa:69:2f:7e:26:92:f5:b0:df: 98:41:75:1e:48:8a:a7:a8:7b:fd:45:b6:e6:7b:59: 50:14:43:ac:c4:9a:5e:50:20:81:50:01:93:8f:23: f5:6d:6b:94:cd:e7:ee:50:03:f7:13:d3:f3:87:8c: d9:66:f8:3f:12:80:7d:d0:7d:7e:4a:ac:ac:32:b2: 7c:3d:99:c1:94:d7:d6:15:cb:04:fc:83:13:e5:a9: ef:ac:7e:ae:03:1b:6c:33:bf:68:d4:36:82:92:f9: b4:75:fd:2b:10:c6:ea:d7:a1:36:49:fe:7a:7e:1e: b2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9D:9D:25:8D:57:05:A6:17:ED:B1:AB:51:F7:7B:96:9C:64:83:44 X509v3 Authority Key Identifier: keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:bf:23:76:af:63:b2:f7:76:5d:5f:a2:96:34:da:f1:f0:a4: 49:f0:f9:a1:17:ce:25:d5:ca:17:e9:9f:63:d6:c4:fa:fd:09: 1a:3a:3f:1f:6f:3e:20:20:e7:12:cc:b2:4d:24:31:8a:ec:a1: 50:50:57:49:ac:8e:e9:17:cb:3f:38:b2:90:cc:3e:58:90:5f: 40:bd:c3:f1:2f:20:5d:5b:29:87:f8:5f:e9:a5:86:64:ac:a9: e7:d8:1f:92:1d:b1:3b:ed:ba:bd:e9:a1:82:26:9b:07:1a:18: 13:9d:ee:24:0d:8e:91:4e:c3:65:6e:45:02:36:9d:64:2a:8c: 53:8f:61:7c:b8:99:78:11:3c:8d:3c:0e:c0:65:08:13:ed:81: 06:bb:79:db:37:59:17:ed:bb:35:5c:48:2d:af:fc:0e:04:20: 2c:74:0d:ba:2c:dd:71:89:9d:e7:79:ef:6f:c0:89:c5:6d:97: 17:4e:73:3a:55:2f:9d:ce:12:b2:98:a3:d8:10:5f:c8:e1:e6: 82:51:8c:ae:03:b2:49:90:74:82:1e:33:31:c0:8b:a9:b5:96: 30:89:a9:da:9b:5f:c2:bf:94:60:49:98:90:ec:ea:f8:58:2c: 39:dc:52:9f:f6:9e:c3:93:ad:1c:b3:07:28:dd:5d:f9:c2:15: 04:d2:6d:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKDIzMUJBOTk5RDhFODgyNEY2MjIyQjg1Njg1RDA3REQ0 N0E3MDQ2REIwHhcNMjUwNzAzMDYwMzA5WhcNMjUwNzEwMDYwMzA5WjAYMRYwFAYD VQQDEw02ODY2MWQxZC00YjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+CuVDz0g8GrDV56nkKHaj7PG65n0kQI3436uROZyEQAQeWzKVjVLWAA4WKs F+uChzmAm65kucJy/ed3qv1QadPfyuklzLi1X5aOqW3sw0TfFcYB+VRr+MbXiiAe hc2d/icDQmkKPrLsAczGGChIPGUoe2rXDfdlTHPHkEe8wK0pAEUX/g04TJZ3c/b6 aS9+JpL1sN+YQXUeSIqnqHv9Rbbme1lQFEOsxJpeUCCBUAGTjyP1bWuUzefuUAP3 E9Pzh4zZZvg/EoB90H1+SqysMrJ8PZnBlNfWFcsE/IMT5anvrH6uAxtsM79o1DaC kvm0df0rEMbq16E2Sf56fh6ypQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2dnSWN VwWmF+2xq1H3e5acZINEMB8GA1UdIwQYMBaAFCMbqZnY6IJPYiK4VoXQfdR6cEbb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81QTE5QkRDQTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi9JeHVwbWRqb2drOWlJcmhXaGRCOTFIcHdS dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l4dXBtZGpvZ2s5aUlyaFdoZEI5MUhwd1J0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81QTE5QkRDQTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi9JeHVwbWRqb2dr OWlJcmhXaGRCOTFIcHdSdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxvyN2r2Oy93ZdX6KWNNrx8KRJ8PmhF84l1coX6Z9j1sT6/QkaOj8f bz4gIOcSzLJNJDGK7KFQUFdJrI7pF8s/OLKQzD5YkF9AvcPxLyBdWymH+F/ppYZk rKnn2B+SHbE77bq96aGCJpsHGhgTne4kDY6RTsNlbkUCNp1kKoxTj2F8uJl4ETyN PA7AZQgT7YEGu3nbN1kX7bs1XEgtr/wOBCAsdA26LN1xiZ3nee9vwInFbZcXTnM6 VS+dzhKymKPYEF/I4eaCUYyuA7JJkHSCHjMxwIuptZYwianam1/Cv5RgSZiQ7Or4 WCw53FKf9p7Dk60cswco3V35whUE0m0o -----END CERTIFICATE-----Generated at Thu Jul 3 14:27:35 2025 by rpki-client