$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft File: IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json) Hash identifier: Ox1tXbYlLXa7D+u7U/t8YItVtLTNXzQwWxv8BT3xwio= Subject key identifier: 9F:DD:F8:ED:EC:CA:06:D4:C6:48:F6:7C:58:B7:5E:6B:D6:AB:70:A1 Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft Manifest number: BF Signing time: Thu 03 Jul 2025 06:03:29 +0000 Manifest this update: Thu 03 Jul 2025 06:03:29 +0000 Manifest next update: Thu 10 Jul 2025 06:03:28 +0000 Files and hashes: 1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: zT/GRr4qR/WOYD4pQylCh326vgZGM4IXDAmrw94w3hE=) 2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: wZz+OlqUMy/mBTlpV+JPL6/+u7+0FBG8gjwEC4u2wAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Validity Not Before: Jul 3 06:03:29 2025 GMT Not After : Jul 10 06:03:28 2025 GMT Subject: CN=68661d31-6a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c4:d8:3e:27:52:ac:e8:a1:4e:d7:8d:f7:58: 9a:08:ea:bd:57:15:71:ae:2e:b4:b8:27:41:54:4f: 93:c1:f8:7f:0d:b1:d5:b3:3e:86:2c:8d:aa:f5:9e: ee:4c:a4:61:ab:ed:29:b8:d1:64:ac:56:fb:36:ff: ce:cc:6f:87:80:9c:4a:e0:65:5f:51:b6:d9:8b:71: 94:72:ad:ee:f7:01:4d:4f:8b:b5:07:48:5e:a1:e1: 3b:19:73:97:60:99:b0:a7:cf:68:f0:5b:ad:23:cc: 06:f0:06:5e:f7:31:29:bd:d5:43:bd:af:11:4f:5f: ec:6c:2b:97:17:5f:2d:2e:d9:64:95:f8:bc:6e:7c: 4f:f4:2c:cf:9a:c8:d1:37:22:b5:93:c1:95:0a:8f: 2a:7c:2b:f2:ba:ce:d3:ec:bc:b3:98:81:94:3a:1b: 41:e8:cb:ae:2d:eb:8e:a5:3e:75:8f:39:df:44:ff: fa:f5:dd:ac:4b:c9:2e:70:bb:52:b4:bb:15:e7:47: 89:54:7f:7a:9f:28:a2:36:ff:5e:50:8f:de:91:82: c6:f8:c3:24:d1:88:bb:7b:07:fc:81:ea:aa:9a:16: 4f:77:94:9c:e0:9c:40:aa:53:76:24:82:e2:57:20: 22:24:97:64:ec:58:3a:18:e2:50:55:a5:20:8e:8e: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DD:F8:ED:EC:CA:06:D4:C6:48:F6:7C:58:B7:5E:6B:D6:AB:70:A1 X509v3 Authority Key Identifier: keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:60:52:70:13:07:64:13:06:97:ad:92:ea:2e:b2:74:df:c1: 71:04:f3:0c:95:cd:3f:8f:0d:75:98:f1:43:b0:6d:a9:95:5e: f9:0e:10:71:bb:5d:67:95:7b:41:33:eb:61:ae:a5:bc:0c:64: 5f:6a:fa:72:59:16:75:53:86:ac:01:a9:af:18:5f:4b:73:62: 02:a5:d4:db:b9:7b:62:20:22:1c:b4:a7:e1:33:8c:dc:af:9c: b7:e5:0c:f9:13:a7:9b:1d:bf:8d:6c:b1:b7:5b:08:c2:27:dc: c9:88:1a:71:a0:f7:21:2c:db:66:eb:29:c4:a7:d8:90:8b:fa: a1:2e:b7:3b:e4:ef:d6:18:d1:e2:ce:98:36:28:17:44:19:b0: c5:da:3c:0c:b1:7b:e8:91:5c:a9:48:f3:ab:15:8a:f3:89:d9: 56:5f:6a:9b:62:37:81:14:86:b7:14:7f:ce:1b:63:4d:8e:cb: 20:3d:7e:bb:c2:44:de:a4:6a:de:e2:3b:43:ec:23:ae:13:9c: 17:c0:72:86:99:63:7d:92:da:fa:3b:7b:0a:ab:48:9d:0d:38: c5:25:89:31:e9:30:63:20:ed:02:ac:65:73:25:2a:79:ee:e7: 01:8c:1e:b2:ad:e0:26:61:af:4c:37:c1:4e:ae:a6:6c:4e:c5: cc:85:c6:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQTcxMTAvBgNVBAUTKDIyQTYyQzE0RDJCRDMyRTNFNTk2RDhBM0U2MkJCQzMy NzQ0NjhGOTkwHhcNMjUwNzAzMDYwMzI5WhcNMjUwNzEwMDYwMzI4WjAYMRYwFAYD VQQDEw02ODY2MWQzMS02YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sTYPidSrOihTteN91iaCOq9VxVxri60uCdBVE+Twfh/DbHVsz6GLI2q9Z7u TKRhq+0puNFkrFb7Nv/OzG+HgJxK4GVfUbbZi3GUcq3u9wFNT4u1B0heoeE7GXOX YJmwp89o8FutI8wG8AZe9zEpvdVDva8RT1/sbCuXF18tLtlklfi8bnxP9CzPmsjR NyK1k8GVCo8qfCvyus7T7LyzmIGUOhtB6MuuLeuOpT51jznfRP/69d2sS8kucLtS tLsV50eJVH96nyiiNv9eUI/ekYLG+MMk0Yi7ewf8geqqmhZPd5Sc4JxAqlN2JILi VyAiJJdk7Fg6GOJQVaUgjo7EPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/d+O3s ygbUxkj2fFi3XmvWq3ChMB8GA1UdIwQYMBaAFCKmLBTSvTLj5ZbYo+YrvDJ0Ro+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVBNy9CMUIzRTJENjM4 NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11UGxsdGlqNWl1OE1uUkdq NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVBNy9CMUIzRTJENjM4NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11 UGxsdGlqNWl1OE1uUkdqNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAYFJwEwdkEwaXrZLqLrJ038FxBPMMlc0/jw11mPFDsG2plV75DhBx u11nlXtBM+thrqW8DGRfavpyWRZ1U4asAamvGF9Lc2ICpdTbuXtiICIctKfhM4zc r5y35Qz5E6ebHb+NbLG3WwjCJ9zJiBpxoPchLNtm6ynEp9iQi/qhLrc75O/WGNHi zpg2KBdEGbDF2jwMsXvokVypSPOrFYrzidlWX2qbYjeBFIa3FH/OG2NNjssgPX67 wkTepGre4jtD7COuE5wXwHKGmWN9ktr6O3sKq0idDTjFJYkx6TBjIO0CrGVzJSp5 7ucBjB6yreAmYa9MN8FOrqZsTsXMhcYA -----END CERTIFICATE-----Generated at Fri Jul 4 02:52:28 2025 by rpki-client