$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json) Hash identifier: fo99Lf2zJ9AHndXQF03zU4AfIicVIUrJYwPwjFwyiL4= Subject key identifier: 0F:E4:5D:0F:14:6A:CA:04:2A:36:46:8E:23:ED:E7:53:6C:D4:BF:3A Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Certificate serial: 102B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft Manifest number: 101F Signing time: Wed 02 Jul 2025 17:38:01 +0000 Manifest this update: Wed 02 Jul 2025 17:38:01 +0000 Manifest next update: Wed 09 Jul 2025 17:38:01 +0000 Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: UNLCN/vZZX6QwczafkNO03CN6iWdcLH13rNRuP2IiiA=) 2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: SSjTjiJw3UBo/Mme4Kl37l1zxjxnCDkxVmhI1OR3EOw=) 3: 608836D046B111E98B793856C4F9AE02.roa (hash: Ls4h/fmzmMgVY9fuRoj+7ux+D5fYwsPV37oBSFEiAic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4139 (0x102b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Validity Not Before: Jul 2 17:38:01 2025 GMT Not After : Jul 9 17:38:01 2025 GMT Subject: CN=68656e79-47a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:68:cd:9c:eb:a5:ac:04:14:db:7d:e0:58: e5:4d:a8:b9:41:5b:9f:6e:7f:e9:3e:32:23:d2:2f: 2c:59:dd:c1:f0:3c:b6:07:7b:7c:92:a2:4b:a7:1c: e4:45:0c:fd:11:8a:2e:98:ac:38:65:82:70:d2:7c: 67:9d:6b:7e:14:be:2b:2a:a4:ba:b0:0d:2e:db:53: 44:f3:d8:95:d3:50:fc:95:54:b2:b9:18:da:61:25: 77:00:3e:b3:0f:99:65:ac:a5:b5:2a:ea:4c:a0:40: b9:d7:5e:77:f3:79:3f:60:89:2f:0d:60:dd:cd:23: cd:ed:01:f0:36:e8:93:e1:59:5a:d9:2d:a1:c8:b0: 24:20:32:34:b7:fc:1f:74:74:27:43:bf:28:9e:ff: 4c:d9:b7:5f:6a:87:61:39:88:e0:be:0a:79:0f:4c: d6:ae:91:3d:74:a1:26:16:7a:28:1c:ae:1c:45:e7: f2:ce:28:b7:64:d1:13:bc:e8:23:81:0c:d2:1f:1a: 07:43:33:72:d8:db:05:ff:6f:16:30:54:90:26:b9: 0d:31:40:57:89:90:88:f9:55:8c:ed:a2:87:cb:7b: cc:7d:82:b5:0a:94:3b:c3:15:62:bf:d8:e0:91:3d: 2b:14:21:d1:1f:a2:c8:15:b3:e2:e6:15:1f:46:44: 6e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E4:5D:0F:14:6A:CA:04:2A:36:46:8E:23:ED:E7:53:6C:D4:BF:3A X509v3 Authority Key Identifier: keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:9a:6f:92:a0:b4:03:89:72:85:8f:d9:4f:b2:fd:88:79:d7: 29:75:e7:4a:ba:7f:e1:33:78:ed:ea:2e:7f:8a:e7:a0:fb:c2: 15:a3:fb:ef:86:36:93:90:7d:44:c9:25:6a:70:70:13:fa:5e: 5e:d8:9b:84:46:6e:20:8e:67:64:cc:98:46:86:d4:b6:5a:1e: 8d:48:6c:c6:c1:35:77:22:77:dc:de:e3:4f:f4:2e:22:27:51: 3f:65:65:cb:0a:fb:78:ad:f1:5b:b0:d7:c8:c0:25:df:db:97: 51:f8:19:38:d4:1e:83:4b:ae:df:ec:87:39:95:d1:ae:ab:dc: 6b:07:ab:7e:e2:5b:ba:97:44:86:44:d9:1d:a1:3b:66:29:ac: b3:cb:dc:71:67:75:fc:c9:c6:aa:aa:74:2c:cc:50:c2:39:1a: 5c:57:c5:a8:34:57:33:bf:50:5f:f2:12:d6:7f:e3:85:07:bf: c2:b5:aa:03:9b:f0:a3:42:a8:52:a6:16:a8:6a:1b:08:81:4c: 3b:eb:18:d6:9a:18:35:dd:19:a8:7d:c7:6c:b5:93:13:9f:63: 1a:bd:0b:c8:6a:9a:32:9d:20:2f:92:dc:23:0d:69:eb:c7:fe: ba:2f:89:c8:5b:8a:79:64:d0:63:27:8f:bc:23:4a:4c:86:ec: 46:24:c9:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKDIyM0JFMTk4OTJFNkU2Q0I0MDZFNUZBOTk1NkREQkNF QTk1Q0JCNDYwHhcNMjUwNzAyMTczODAxWhcNMjUwNzA5MTczODAxWjAYMRYwFAYD VQQDEw02ODY1NmU3OS00N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPhozZzrpawEFNt94FjlTai5QVufbn/pPjIj0i8sWd3B8Dy2B3t8kqJLpxzk RQz9EYoumKw4ZYJw0nxnnWt+FL4rKqS6sA0u21NE89iV01D8lVSyuRjaYSV3AD6z D5llrKW1KupMoEC5115383k/YIkvDWDdzSPN7QHwNuiT4Vla2S2hyLAkIDI0t/wf dHQnQ78onv9M2bdfaodhOYjgvgp5D0zWrpE9dKEmFnooHK4cRefyzii3ZNETvOgj gQzSHxoHQzNy2NsF/28WMFSQJrkNMUBXiZCI+VWM7aKHy3vMfYK1CpQ7wxViv9jg kT0rFCHRH6LIFbPi5hUfRkRumQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/kXQ8U asoEKjZGjiPt51Ns1L86MB8GA1UdIwQYMBaAFCI74ZiS5ubLQG5fqZVt286pXLtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9CNkE5RjI2MDQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVzdEFibC1wbFczYnpxbGN1 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lqdmhtSkxtNXN0QWJsLXBsVzNienFsY3UwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9CNkE5RjI2MDQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVz dEFibC1wbFczYnpxbGN1MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5mm+SoLQDiXKFj9lPsv2IedcpdedKun/hM3jt6i5/iueg+8IVo/vv hjaTkH1EySVqcHAT+l5e2JuERm4gjmdkzJhGhtS2Wh6NSGzGwTV3Infc3uNP9C4i J1E/ZWXLCvt4rfFbsNfIwCXf25dR+Bk41B6DS67f7Ic5ldGuq9xrB6t+4lu6l0SG RNkdoTtmKayzy9xxZ3X8ycaqqnQszFDCORpcV8WoNFczv1Bf8hLWf+OFB7/CtaoD m/CjQqhSphaoahsIgUw76xjWmhg13RmofcdstZMTn2MavQvIapoynSAvktwjDWnr x/66L4nIW4p5ZNBjJ4+8I0pMhuxGJMkj -----END CERTIFICATE-----Generated at Thu Jul 3 08:59:15 2025 by rpki-client