$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json) Hash identifier: T0w6DZsDtwruTgeiWY2o2FNnk/Ddkim7deevqklIpoc= Subject key identifier: 58:84:E6:5B:6A:32:43:E0:C4:40:99:7C:EF:76:F4:53:1E:BA:B8:BB Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft Manifest number: 013A Signing time: Tue 01 Jul 2025 04:54:08 +0000 Manifest this update: Tue 01 Jul 2025 04:54:07 +0000 Manifest next update: Tue 08 Jul 2025 04:54:07 +0000 Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: tiMcPaFoeH5ceJtr4BYLu2Rgike5XlrFVBUePIgkpq4=) 2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Validity Not Before: Jul 1 04:54:07 2025 GMT Not After : Jul 8 04:54:07 2025 GMT Subject: CN=686369f0-8384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:26:57:77:4b:c3:88:78:42:3f:3c:4e:c2:93: 9d:30:30:d9:7b:80:7e:22:98:51:31:99:70:3c:e4: 59:08:c4:a2:eb:37:57:66:41:60:17:fb:98:87:ac: f6:34:46:b8:b8:0e:22:e9:1f:c8:b9:8a:bd:68:cb: 0d:d4:78:a9:f6:af:2c:4d:50:ce:b2:61:9c:6e:dd: 00:be:a8:ed:04:0a:fd:50:58:9d:9f:3e:c5:9e:e8: 1a:73:aa:a1:c1:59:3d:e0:38:10:12:90:7b:f7:c1: a8:90:c6:32:8d:4c:07:51:11:54:37:ae:c0:c0:83: a4:a3:07:b9:ca:d9:7e:98:01:78:d6:89:b7:15:20: 49:3f:8b:88:4d:2c:37:46:12:63:40:41:50:b3:09: 45:0e:c2:83:8a:62:cd:71:92:77:06:c9:ce:d8:ae: fd:b6:80:b4:ac:3b:e9:0d:0a:d4:99:d9:c8:ca:49: aa:02:57:5c:37:82:36:19:8f:57:86:65:6d:22:b3: de:fc:4e:a6:3f:4e:b1:f0:fb:8d:3f:a5:aa:31:bd: e9:9d:70:93:7c:ed:d6:98:d9:90:8c:9d:2e:06:dc: 68:5c:d8:03:fd:b3:0c:73:a2:80:cb:f2:a1:88:c5: 02:59:32:7f:03:f6:6a:4d:18:e3:aa:43:7f:cf:e4: 28:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:84:E6:5B:6A:32:43:E0:C4:40:99:7C:EF:76:F4:53:1E:BA:B8:BB X509v3 Authority Key Identifier: keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f2:ef:76:97:70:90:c3:c4:46:5c:88:24:15:68:3e:d3:7f: 3d:75:1d:be:20:52:c3:63:e0:ad:6b:06:d4:bd:1a:63:90:88: 9f:88:06:dc:49:b0:f0:43:59:16:ab:75:73:cb:08:1a:0d:ab: 88:f9:9d:20:ae:01:b3:57:a2:79:38:0e:40:70:27:c4:e0:54: 38:a5:ac:d9:4d:8c:cc:0d:8d:6c:d2:98:78:60:81:a3:72:2f: 4f:e4:aa:21:2d:9e:a0:42:81:7d:31:93:a4:02:d7:c2:80:35: a0:e7:0f:ff:c7:f7:f0:aa:1c:82:23:b5:85:57:d8:70:8f:d9: 2e:6d:f9:0d:9c:eb:57:b9:2e:fa:23:3e:4d:0d:f3:12:3e:c7: 51:09:46:e8:40:16:3d:ed:f0:7c:df:69:c1:02:b3:46:8c:1c: 5f:26:c1:2a:48:55:3b:68:f4:2b:54:ad:7b:d6:5e:63:95:a1: b3:d2:81:d9:8c:6c:02:17:f8:44:7a:48:70:d3:f3:f3:2d:06: 20:e6:e5:20:36:21:5f:04:23:31:65:aa:e3:9a:0d:34:2f:ed: d8:cf:ba:0c:fd:da:33:95:db:8e:c5:86:ee:f9:f7:05:02:7d: e4:bc:32:b6:f3:2f:b6:e2:d5:e9:63:38:dd:5b:f5:41:be:84: 40:5b:5d:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU5QTQxMTAvBgNVBAUTKDIwQkQzRjdGOTk4RUQ0M0Q1RkM0Rjg2MjlERDBDMTg4 RUM3RERBRTAwHhcNMjUwNzAxMDQ1NDA3WhcNMjUwNzA4MDQ1NDA3WjAYMRYwFAYD VQQDEw02ODYzNjlmMC04Mzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6yZXd0vDiHhCPzxOwpOdMDDZe4B+IphRMZlwPORZCMSi6zdXZkFgF/uYh6z2 NEa4uA4i6R/IuYq9aMsN1Hip9q8sTVDOsmGcbt0AvqjtBAr9UFidnz7Fnugac6qh wVk94DgQEpB798GokMYyjUwHURFUN67AwIOkowe5ytl+mAF41om3FSBJP4uITSw3 RhJjQEFQswlFDsKDimLNcZJ3BsnO2K79toC0rDvpDQrUmdnIykmqAldcN4I2GY9X hmVtIrPe/E6mP06x8PuNP6WqMb3pnXCTfO3WmNmQjJ0uBtxoXNgD/bMMc6KAy/Kh iMUCWTJ/A/ZqTRjjqkN/z+QoGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiE5ltq MkPgxECZfO929FMeuri7MB8GA1UdIwQYMBaAFCC9P3+ZjtQ9X8T4Yp3QwYjsfdrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTlBNC8wRDVEQzUyNDcz MDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFEMWZ4UGhpbmREQmlPeDky dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lMMF9mNW1PMUQxZnhQaGluZERCaU94OTJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTlBNC8wRDVEQzUyNDczMDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFE MWZ4UGhpbmREQmlPeDkydUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ8u92l3CQw8RGXIgkFWg+0389dR2+IFLDY+CtawbUvRpjkIifiAbc SbDwQ1kWq3VzywgaDauI+Z0grgGzV6J5OA5AcCfE4FQ4pazZTYzMDY1s0ph4YIGj ci9P5KohLZ6gQoF9MZOkAtfCgDWg5w//x/fwqhyCI7WFV9hwj9kubfkNnOtXuS76 Iz5NDfMSPsdRCUboQBY97fB832nBArNGjBxfJsEqSFU7aPQrVK171l5jlaGz0oHZ jGwCF/hEekhw0/PzLQYg5uUgNiFfBCMxZarjmg00L+3Yz7oM/dozlduOxYbu+fcF An3kvDK28y+24tXpYzjdW/VBvoRAW13f -----END CERTIFICATE-----Generated at Tue Jul 1 16:00:18 2025 by rpki-client