$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json) Hash identifier: xitWPFzKoAUQZAYT4k1iq5gGbvMnobsGOnCeebnArc8= Subject key identifier: B5:87:9A:24:B6:81:93:D2:EA:0B:C9:0A:7C:9B:5F:F7:89:17:47:07 Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft Manifest number: 0678 Signing time: Mon 30 Jun 2025 22:41:07 +0000 Manifest this update: Mon 30 Jun 2025 22:41:07 +0000 Manifest next update: Mon 07 Jul 2025 22:41:07 +0000 Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: pMx1A3bLuq3DJwA0l6oPJnhHUteFEZeRlc+KwxNlKwE=) 2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: 87anj6ScVkwh+H5EUFqHglOTYr+0YgLiGreNRecvlKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Validity Not Before: Jun 30 22:41:07 2025 GMT Not After : Jul 7 22:41:07 2025 GMT Subject: CN=68631283-b9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:0f:f4:7e:a0:12:96:46:11:df:7a:d1:a6: 6e:37:9f:dd:93:f4:03:f5:c3:cd:76:e6:21:64:24: 15:39:38:ae:9c:22:c1:6e:a5:b5:a0:36:ab:01:0b: 1c:72:a5:b8:d5:2e:f1:2a:fd:35:6b:c5:13:70:c2: 30:bd:b4:0a:43:ae:3b:5d:10:82:ef:13:3d:53:a2: 1e:a7:9c:e7:85:cf:59:31:2f:b8:0b:3d:2d:7f:16: 59:27:a0:33:48:08:f3:e7:48:e3:67:ea:6e:b5:cb: b2:38:41:7b:2d:8d:81:34:1c:46:e3:df:d7:f3:f6: 05:30:a0:e3:a7:bf:da:7f:b6:2b:ed:94:2f:ce:bf: 84:b5:e9:27:be:c1:06:ee:c1:20:0f:94:1d:26:c6: 83:54:96:cc:a1:5b:ca:a5:86:f9:4d:7d:c5:13:d4: cd:79:d4:26:35:c8:84:b1:7d:36:26:9c:f5:c9:4d: 13:d5:a2:ef:8b:b8:3e:d6:17:f9:f2:70:7a:31:fe: 66:2a:21:9c:cc:e3:c2:d4:df:0c:62:5c:6a:a5:6f: 19:e0:6d:ee:d7:ad:3f:26:21:c8:f2:08:54:55:28: 6b:c7:0a:aa:30:64:67:6a:11:84:ad:55:11:b8:2c: bd:b4:dd:cb:dc:4d:73:29:51:dc:fc:f7:24:a7:10: d3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:87:9A:24:B6:81:93:D2:EA:0B:C9:0A:7C:9B:5F:F7:89:17:47:07 X509v3 Authority Key Identifier: keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2b:e8:61:00:41:2a:4c:0d:30:93:0b:aa:f1:30:ca:89:80: b2:04:16:5e:0a:d6:ad:34:fa:4e:57:d6:d2:72:6e:20:82:90: a6:fc:48:a4:a8:ea:cf:34:e7:a7:3f:77:f7:0f:9d:c9:9f:62: ee:0e:91:0c:33:0b:c1:9b:0b:92:df:88:5b:aa:48:67:3e:fe: 29:53:8b:9b:90:08:6e:8f:63:1f:55:5b:67:1e:3e:ad:bd:57: 44:22:c9:06:0c:70:0e:e7:44:15:29:79:b2:f4:b8:57:3a:10: 95:b6:5e:d5:c7:62:8e:80:31:2c:e6:2f:bc:e2:62:44:0e:0d: 4d:01:ce:3f:9c:59:4d:27:18:e0:8c:44:3f:4b:30:09:1b:e5: d7:02:fb:fc:e3:1c:bc:a5:17:78:79:e4:1e:0c:2d:18:fd:5d: 10:36:e0:77:e0:4a:7b:69:9a:49:b6:f2:d0:28:f0:22:4d:b6: ad:0e:8e:f3:3c:fa:db:60:2c:ec:42:06:c6:79:e6:f6:e4:23: 30:d5:5b:42:c4:83:3d:85:3d:5d:a7:10:2e:e3:85:1a:0b:72: 34:b1:6c:4b:ba:f5:da:67:61:46:63:8c:a0:f1:3f:77:db:cf: b0:49:0d:6d:36:6a:44:46:85:10:d6:11:5a:7e:60:2b:3d:ab: 15:88:12:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQUYxMTAvBgNVBAUTKEZFMkE0OTM5OEU2NTAwNkIwNkU5REZFQzI3MERFMkU5 NzZGOEFBRjYwHhcNMjUwNjMwMjI0MTA3WhcNMjUwNzA3MjI0MTA3WjAYMRYwFAYD VQQDEw02ODYzMTI4My1iOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOwP9H6gEpZGEd960aZuN5/dk/QD9cPNduYhZCQVOTiunCLBbqW1oDarAQsc cqW41S7xKv01a8UTcMIwvbQKQ647XRCC7xM9U6Iep5znhc9ZMS+4Cz0tfxZZJ6Az SAjz50jjZ+putcuyOEF7LY2BNBxG49/X8/YFMKDjp7/af7Yr7ZQvzr+EteknvsEG 7sEgD5QdJsaDVJbMoVvKpYb5TX3FE9TNedQmNciEsX02Jpz1yU0T1aLvi7g+1hf5 8nB6Mf5mKiGczOPC1N8MYlxqpW8Z4G3u160/JiHI8ghUVShrxwqqMGRnahGErVUR uCy9tN3L3E1zKVHc/PckpxDT7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWHmiS2 gZPS6gvJCnybX/eJF0cHMB8GA1UdIwQYMBaAFP4qSTmOZQBrBunf7CcN4ul2+Kr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBBRi8wRUYzREZBNDgw N0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFHc0c2ZF9zSnczaTZYYjRx dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pcEpPWTVsQUdzRzZkX3NKdzNpNlhiNHF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBBRi8wRUYzREZBNDgwN0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFH c0c2ZF9zSnczaTZYYjRxdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgK+hhAEEqTA0wkwuq8TDKiYCyBBZeCtatNPpOV9bScm4ggpCm/Eik qOrPNOenP3f3D53Jn2LuDpEMMwvBmwuS34hbqkhnPv4pU4ubkAhuj2MfVVtnHj6t vVdEIskGDHAO50QVKXmy9LhXOhCVtl7Vx2KOgDEs5i+84mJEDg1NAc4/nFlNJxjg jEQ/SzAJG+XXAvv84xy8pRd4eeQeDC0Y/V0QNuB34Ep7aZpJtvLQKPAiTbatDo7z PPrbYCzsQgbGeeb25CMw1VtCxIM9hT1dpxAu44UaC3I0sWxLuvXaZ2FGY4yg8T93 28+wSQ1tNmpERoUQ1hFafmArPasViBJr -----END CERTIFICATE-----Generated at Tue Jul 1 16:08:20 2025 by rpki-client