$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: ktji/7cRfvNubrtLC+lcdOqiELE4YP9taU8870BuySc= Subject key identifier: 94:1B:FC:06:7C:74:D8:FF:1E:57:E7:71:C1:44:F9:C1:BD:8B:67:B2 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 09F2 Signing time: Wed 02 Jul 2025 20:11:12 +0000 Manifest this update: Wed 02 Jul 2025 20:11:12 +0000 Manifest next update: Wed 09 Jul 2025 20:11:12 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: MnR/56gL5bvWl0rYZsUQ+SAXv266t1XWgyKnN8C+RM0=) 2: 794C43721A5F11F080409056C4F9AE02.roa (hash: tliF6bTq6KTU3ampYuLl3Y31z/FfmmETEltl1u+bSdc=) 3: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=) 4: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w=) 5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: 5GewRvUgDB6rcXNpXbxI+RsMmEZ6AmWtSegm+so4e0M=) 6: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: hVI5f3OngSrJ6IFISwTQMQm8YsnsRDaEoKxA88qPW7o=) 7: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: dXngOtAcFhvArc3Tgv9HMRYfy3lpLyOKuQ2Q99Bv4cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Jul 2 20:11:12 2025 GMT Not After : Jul 9 20:11:12 2025 GMT Subject: CN=68659260-74d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:11:e9:3b:a5:ba:51:65:d8:d4:e4:be:70: df:ed:77:31:1d:78:c4:f7:be:f1:33:17:44:5e:19: 9c:cd:60:84:25:fd:0f:da:be:96:06:fd:ec:5f:1f: e2:50:39:ed:75:0b:c2:57:fe:d6:38:e2:6c:7b:7e: 89:3c:ca:12:ae:ea:33:a2:cb:ec:67:10:c3:86:d1: 28:e3:a0:84:dd:e8:4e:bc:ac:f3:51:7e:fc:ea:c7: b0:41:ba:35:bb:e5:0d:5c:bd:21:cb:c5:86:37:39: 26:64:27:1e:17:12:9b:ec:c3:56:83:8d:a4:9a:d1: 50:29:32:ae:90:75:91:be:a8:ab:2e:1c:00:dd:85: e3:6c:00:35:5a:9e:51:7d:57:57:e7:c4:a0:f6:e1: 93:36:e1:65:80:e7:69:e6:2d:f6:5f:05:5c:a8:08: c7:32:b8:05:1e:d1:dd:29:8a:9b:3e:2f:ab:0f:f1: 1d:79:c7:ce:d0:d4:23:f1:91:b0:ca:63:f9:a7:fe: 05:55:5c:63:48:95:60:dc:f9:d2:f4:da:cc:de:76: ac:83:cb:e2:2d:ff:7e:84:fe:b9:65:5f:5a:03:c1: 7f:d5:10:2e:0e:c5:cf:5e:69:12:ae:2f:04:46:57: 9a:ca:07:94:f6:46:ef:b1:82:1e:ee:15:cd:3f:19: c7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1B:FC:06:7C:74:D8:FF:1E:57:E7:71:C1:44:F9:C1:BD:8B:67:B2 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d5:7a:52:9b:31:72:88:b1:33:fd:65:0f:9e:60:7d:36:a3: 0c:ee:5f:cc:38:dd:42:73:ed:a8:a5:52:f8:3a:37:96:f4:8f: df:1e:76:6b:dc:64:e7:7c:02:b5:3d:0f:df:4d:2c:f6:a0:1b: d7:30:fc:0e:32:d7:a1:4c:1a:ad:39:d5:ae:dc:6d:10:32:f4: 23:c7:41:cb:82:1b:10:ba:a4:19:d6:fd:ae:22:2c:23:33:83: 6e:7f:8c:b6:61:a8:b7:8a:d6:84:72:91:a1:40:c8:51:ef:d1: a5:78:9d:bd:39:60:d0:7d:d7:90:a3:5c:1a:61:63:72:f3:1b: 5b:b9:c2:54:4d:3f:84:af:f0:30:87:8c:b3:8b:d2:ce:88:0d: db:f3:7d:a4:e0:65:e6:ae:df:36:ee:d1:3a:27:d2:f8:c8:18: bd:5d:bc:1a:8b:c5:88:53:d7:03:46:7d:60:91:11:fe:fa:78: f3:21:17:9b:9d:21:18:d5:c1:ea:fc:a9:d3:b4:48:2a:08:0b: c0:9a:f6:29:4f:a6:7f:79:7d:46:df:fa:15:a6:60:7b:b1:14: 3b:89:7a:07:03:c3:88:50:e9:46:97:ae:dc:96:53:77:80:6f: 31:1d:87:87:3a:79:92:45:38:dd:7c:50:b5:e8:72:a0:5b:b1: 1c:69:65:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUwNzAyMjAxMTEyWhcNMjUwNzA5MjAxMTEyWjAYMRYwFAYD VQQDEw02ODY1OTI2MC03NGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+cR6TululFl2NTkvnDf7XcxHXjE977xMxdEXhmczWCEJf0P2r6WBv3sXx/i UDntdQvCV/7WOOJse36JPMoSruozosvsZxDDhtEo46CE3ehOvKzzUX786sewQbo1 u+UNXL0hy8WGNzkmZCceFxKb7MNWg42kmtFQKTKukHWRvqirLhwA3YXjbAA1Wp5R fVdX58Sg9uGTNuFlgOdp5i32XwVcqAjHMrgFHtHdKYqbPi+rD/EdecfO0NQj8ZGw ymP5p/4FVVxjSJVg3PnS9NrM3nasg8viLf9+hP65ZV9aA8F/1RAuDsXPXmkSri8E RleaygeU9kbvsYIe7hXNPxnHwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQb/AZ8 dNj/HlfnccFE+cG9i2eyMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu1XpSmzFyiLEz/WUPnmB9NqMM7l/MON1Cc+2opVL4OjeW9I/fHnZr 3GTnfAK1PQ/fTSz2oBvXMPwOMtehTBqtOdWu3G0QMvQjx0HLghsQuqQZ1v2uIiwj M4Nuf4y2Yai3itaEcpGhQMhR79GleJ29OWDQfdeQo1waYWNy8xtbucJUTT+Er/Aw h4yzi9LOiA3b832k4GXmrt827tE6J9L4yBi9Xbwai8WIU9cDRn1gkRH++njzIReb nSEY1cHq/KnTtEgqCAvAmvYpT6Z/eX1G3/oVpmB7sRQ7iXoHA8OIUOlGl67cllN3 gG8xHYeHOnmSRTjdfFC16HKgW7EcaWWQ -----END CERTIFICATE-----Generated at Thu Jul 3 03:55:31 2025 by rpki-client