$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json) Hash identifier: Gnl2H7eir1uQmzBSYUUBl0i1+keM8vrUYBdpa/U/JnI= Subject key identifier: C0:FA:64:52:44:27:08:8A:95:ED:9E:3B:3F:5C:55:41:A3:A1:D8:E9 Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft Manifest number: BF Signing time: Thu 03 Jul 2025 06:02:43 +0000 Manifest this update: Thu 03 Jul 2025 06:02:43 +0000 Manifest next update: Thu 10 Jul 2025 06:02:43 +0000 Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: meZMaoSBQwLMmmcZIGSxlk9qCvEmn8HjMcyHAMfqZTc=) 2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: J7/kiN3L5QvG4wInB+6wlLOPrN0QJOnlQzSphywWm/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Validity Not Before: Jul 3 06:02:43 2025 GMT Not After : Jul 10 06:02:43 2025 GMT Subject: CN=68661d03-f591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:ad:53:40:fd:83:97:92:3a:e8:26:9e:b0: e7:5e:1f:37:ca:a2:32:8b:f1:11:8e:ee:21:d5:cf: 8d:38:ab:0b:ec:6e:cd:61:4c:46:b2:1f:3e:ff:09: 0c:2c:f3:ff:60:d1:ea:8d:50:2d:79:de:06:6d:ef: a3:9b:8e:96:ba:d2:a2:c5:7f:33:25:f8:e4:a3:8c: 01:4e:7d:74:26:fa:09:4d:cb:6f:f1:9d:94:05:6a: ab:53:9c:4a:d1:2a:08:ce:a7:89:ee:b5:7e:38:d0: c3:cf:0b:79:90:63:b4:60:b1:8c:fd:e8:95:f5:26: 24:1d:7e:24:cc:4f:e2:53:15:ce:d1:e1:71:06:35: 48:5d:2c:d3:b0:81:dd:00:d5:1e:79:c1:cd:df:61: a5:b9:05:c5:6b:e6:22:f3:82:bf:a3:22:1f:71:f3: b9:40:20:96:67:a9:d2:70:ec:d8:d0:b3:1e:91:79: 05:f0:01:eb:30:73:85:bf:a1:d9:90:53:a8:db:11: 98:32:6c:9e:04:4c:14:66:46:a3:6e:df:3d:cb:3e: ec:7e:70:f9:b9:ec:60:4c:6f:01:b0:0c:34:2b:e5: e2:51:8f:43:19:4a:50:6b:c4:60:02:7d:ad:cf:86: 2e:a2:de:f4:d8:a1:83:f8:f7:fd:50:0d:d5:8a:ed: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FA:64:52:44:27:08:8A:95:ED:9E:3B:3F:5C:55:41:A3:A1:D8:E9 X509v3 Authority Key Identifier: keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:64:29:c5:2b:17:16:e8:5e:2c:01:8a:30:89:2d:e9:a0:fe: a1:87:01:65:77:3d:f9:95:02:34:2e:55:57:e9:b3:db:30:96: d2:03:44:ff:b3:c6:d3:0d:ef:d3:d1:fc:64:df:b4:22:17:c8: d2:14:1e:69:c8:41:20:b7:2a:72:43:1c:a9:40:42:34:d1:8b: 46:92:a1:46:98:f3:79:97:b9:23:ef:7a:53:55:dd:ab:c0:ef: 56:1f:cc:36:ed:57:5d:2f:d8:d6:67:67:0f:40:d4:34:4e:00: 01:d9:ec:44:d8:6e:c4:c9:5a:a0:cc:5d:a5:a6:5d:0a:cf:46: 19:2c:80:69:2c:9e:df:5d:a5:0a:13:e1:c1:f9:d1:5d:89:a4: 88:30:8f:e9:22:12:73:97:f1:ef:a1:b5:8c:98:fe:4c:0f:e3: 7e:31:b4:97:7d:72:56:7d:69:c9:6a:39:ba:fa:15:ce:2c:86: 0a:75:08:85:dd:23:76:2e:05:73:bf:b5:fe:de:3d:3d:47:ed: b2:c9:96:49:f9:43:11:bd:ad:08:77:69:04:a6:54:97:cc:aa: 9a:fd:57:be:e6:8e:02:21:8d:41:63:42:10:67:cd:30:93:44: 3b:66:10:56:3f:56:2d:aa:6e:98:aa:19:cd:4b:d4:24:4d:9a: a3:a4:58:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw NDdEQUE1QTQwHhcNMjUwNzAzMDYwMjQzWhcNMjUwNzEwMDYwMjQzWjAYMRYwFAYD VQQDEw02ODY2MWQwMy1mNTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwitU0D9g5eSOugmnrDnXh83yqIyi/ERju4h1c+NOKsL7G7NYUxGsh8+/wkM LPP/YNHqjVAted4Gbe+jm46WutKixX8zJfjko4wBTn10JvoJTctv8Z2UBWqrU5xK 0SoIzqeJ7rV+ONDDzwt5kGO0YLGM/eiV9SYkHX4kzE/iUxXO0eFxBjVIXSzTsIHd ANUeecHN32GluQXFa+Yi84K/oyIfcfO5QCCWZ6nScOzY0LMekXkF8AHrMHOFv6HZ kFOo2xGYMmyeBEwUZkajbt89yz7sfnD5uexgTG8BsAw0K+XiUY9DGUpQa8RgAn2t z4Yuot702KGD+Pf9UA3Viu3EkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD6ZFJE JwiKle2eOz9cVUGjodjpMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3 NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1 eVh0X0VoWVg3WkVFZmFwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYZCnFKxcW6F4sAYowiS3poP6hhwFldz35lQI0LlVX6bPbMJbSA0T/ s8bTDe/T0fxk37QiF8jSFB5pyEEgtypyQxypQEI00YtGkqFGmPN5l7kj73pTVd2r wO9WH8w27VddL9jWZ2cPQNQ0TgAB2exE2G7EyVqgzF2lpl0Kz0YZLIBpLJ7fXaUK E+HB+dFdiaSIMI/pIhJzl/HvobWMmP5MD+N+MbSXfXJWfWnJajm6+hXOLIYKdQiF 3SN2LgVzv7X+3j09R+2yyZZJ+UMRva0Id2kEplSXzKqa/Ve+5o4CIY1BY0IQZ80w k0Q7ZhBWP1Ytqm6YqhnNS9QkTZqjpFjq -----END CERTIFICATE-----Generated at Fri Jul 4 07:26:01 2025 by rpki-client