$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: 7GTLQRN2pDkhWS2Rc6Gdc9/d2b/UobvV77KF3ulF2Ls= Subject key identifier: D7:05:BD:58:3D:7B:24:2E:88:CA:16:83:B6:00:5B:5C:15:BA:7A:6D Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 047A Signing time: Tue 01 Jul 2025 00:35:56 +0000 Manifest this update: Tue 01 Jul 2025 00:35:55 +0000 Manifest next update: Tue 08 Jul 2025 00:35:55 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: wOJ2K1JLwcdq49jsIb4LxCRecy1NFAuPOqQs8xWU3yc=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qTXBNw7mfhaErKZnovnNFuD402t8u0aLC3Cx70bCvCg=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: 6iwr6VYb5feSdMcufjsCe6jPARf4GSvhQnloLGq2csk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Jul 1 00:35:55 2025 GMT Not After : Jul 8 00:35:55 2025 GMT Subject: CN=68632d6b-55b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:f8:e5:39:2f:3e:d8:1d:20:8a:81:0a:ca: b0:8f:85:df:24:35:a5:f6:62:0c:fb:0d:8b:4f:31: 63:7c:32:ca:10:80:70:ff:ba:3a:d7:a7:db:f5:bb: 60:ae:8a:fa:ce:8f:c6:3b:3f:7f:e3:de:5d:65:b2: 11:05:a7:9a:71:08:3c:7b:fa:c1:0b:3f:c9:6e:bf: b8:db:f8:81:1a:51:64:07:9b:5e:ed:dc:18:b9:be: 88:79:ca:be:7c:08:fd:2e:20:26:af:32:82:87:39: 66:19:df:e7:74:21:61:d4:83:54:5c:99:cb:ed:ea: 5a:43:15:ec:4c:e8:0c:4f:fd:e2:db:33:71:86:df: 91:f4:da:4a:9d:9a:47:a2:dd:e4:b0:b0:6e:cb:49: 95:43:50:dd:5d:7d:78:23:30:69:57:7a:7b:cf:9d: 13:04:76:ed:36:e9:a3:13:23:24:af:b5:12:7a:66: 53:9a:db:20:71:a0:0f:1d:b5:ee:62:87:81:98:95: 3b:5a:ba:91:44:9a:93:ee:19:7a:48:59:7f:73:fd: 37:71:bc:0b:ab:14:5e:74:48:eb:94:9e:43:26:1a: b1:59:b1:cb:8b:3f:78:03:dc:86:bd:2a:96:04:65: f9:5a:17:cb:f4:9b:4f:11:e5:bb:e1:f9:09:ce:02: 35:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:05:BD:58:3D:7B:24:2E:88:CA:16:83:B6:00:5B:5C:15:BA:7A:6D X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:af:dc:b3:61:e7:dd:00:c4:9f:4b:ce:3b:e3:4d:aa:0b:0f: 2a:e7:b7:a4:2d:d9:b9:02:fe:a5:28:26:b6:be:08:39:43:59: d0:9b:db:6c:1d:6b:1f:c8:1e:50:79:7a:02:61:9e:79:c1:53: d5:50:ac:25:39:c4:64:da:36:f3:07:56:c4:7b:b0:4a:45:38: 08:48:ac:96:90:f9:d1:c0:48:2b:48:68:af:67:65:14:1a:19: 37:54:3d:ee:92:c4:2c:b7:53:8e:b4:e4:aa:02:5f:a2:38:c1: e6:f6:14:84:5c:e0:a9:9c:26:5a:f8:ca:2e:42:85:e1:7c:33: 30:79:a5:a3:fb:0f:6f:8f:f4:ae:72:d4:05:65:a6:0e:91:45: ed:8e:5c:02:dd:e8:a0:88:ff:d1:76:2d:36:5a:ff:cb:3b:bd: 12:1a:9d:e7:9f:62:31:9c:a1:e6:7f:2d:e9:a3:ae:65:38:68: 66:58:3b:9c:d8:5f:e6:58:87:3c:6d:64:83:bb:fc:d3:b5:b7: e0:46:68:60:ba:96:84:85:20:40:a3:d3:f1:f5:e1:df:15:b7: cf:62:43:54:e4:f6:84:da:ef:59:7f:01:e1:df:00:ba:a8:96: 33:e6:41:5b:ea:90:9a:bd:cd:56:00:99:a1:40:23:71:63:7e: 26:63:b9:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUwNzAxMDAzNTU1WhcNMjUwNzA4MDAzNTU1WjAYMRYwFAYD VQQDEw02ODYzMmQ2Yi01NWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29345TkvPtgdIIqBCsqwj4XfJDWl9mIM+w2LTzFjfDLKEIBw/7o616fb9btg ror6zo/GOz9/495dZbIRBaeacQg8e/rBCz/Jbr+42/iBGlFkB5te7dwYub6Iecq+ fAj9LiAmrzKChzlmGd/ndCFh1INUXJnL7epaQxXsTOgMT/3i2zNxht+R9NpKnZpH ot3ksLBuy0mVQ1DdXX14IzBpV3p7z50TBHbtNumjEyMkr7USemZTmtsgcaAPHbXu YoeBmJU7WrqRRJqT7hl6SFl/c/03cbwLqxRedEjrlJ5DJhqxWbHLiz94A9yGvSqW BGX5WhfL9JtPEeW74fkJzgI1VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcFvVg9 eyQuiMoWg7YAW1wVunptMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYr9yzYefdAMSfS847402qCw8q57ekLdm5Av6lKCa2vgg5Q1nQm9ts HWsfyB5QeXoCYZ55wVPVUKwlOcRk2jbzB1bEe7BKRTgISKyWkPnRwEgrSGivZ2UU Ghk3VD3uksQst1OOtOSqAl+iOMHm9hSEXOCpnCZa+MouQoXhfDMweaWj+w9vj/Su ctQFZaYOkUXtjlwC3eigiP/Rdi02Wv/LO70SGp3nn2IxnKHmfy3po65lOGhmWDuc 2F/mWIc8bWSDu/zTtbfgRmhgupaEhSBAo9Px9eHfFbfPYkNU5PaE2u9ZfwHh3wC6 qJYz5kFb6pCavc1WAJmhQCNxY34mY7nR -----END CERTIFICATE-----Generated at Wed Jul 2 21:57:38 2025 by rpki-client