$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft File: -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json) Hash identifier: PZzeKAaKVNJSeEgsTL0yO5UyVgzua54hQ2CSkItzOB0= Subject key identifier: 1B:09:2D:F9:04:1C:A3:E4:76:66:56:45:41:EA:C1:1D:42:F9:18:D0 Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B Certificate issuer: /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft Manifest number: 94 Signing time: Thu 03 Jul 2025 06:42:25 +0000 Manifest this update: Thu 03 Jul 2025 06:42:25 +0000 Manifest next update: Thu 10 Jul 2025 06:42:25 +0000 Files and hashes: 1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: L88tnXakgmVKYPcVLG5dTgcAvacD05u2JSRf+C7bMJQ=) 2: C276060084F011EF9D52F573C4F9AE02.roa (hash: /tD3m0UAwlMwH5KNwcamave93IXNHxAGbXTHUSH9zMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Validity Not Before: Jul 3 06:42:25 2025 GMT Not After : Jul 10 06:42:25 2025 GMT Subject: CN=68662651-d5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:85:ee:da:b1:7a:4e:74:4b:70:a0:90:46: b2:b7:2d:33:a6:da:6f:4f:c5:00:2c:45:8e:99:a1: 11:95:9f:ea:8e:f1:69:dc:e3:86:c3:a6:d4:4b:d8: 95:61:a8:ca:d6:bf:3d:1e:1d:c2:35:3a:59:b2:aa: e8:a2:c1:96:74:ec:18:66:28:2b:e6:21:25:47:55: 33:0c:15:6a:df:b7:6e:57:c4:af:8b:79:58:2e:de: 1e:40:ac:0c:ad:57:b2:5f:93:52:95:3d:c1:21:90: c8:ef:dc:91:02:d7:2c:bc:59:39:43:92:c9:4f:6d: bc:24:5f:20:52:63:01:dd:24:1b:e6:52:43:43:7e: ab:e1:12:07:fa:4c:e4:2e:35:5f:78:72:80:32:47: e8:cf:53:e7:2b:65:96:01:ce:f6:ff:63:71:c4:7f: 39:f9:80:a5:5f:be:81:7f:b3:1a:d8:b6:19:8f:54: ae:d9:7d:ba:c2:f0:76:bd:c7:52:a9:a3:c4:ae:e8: 23:6e:42:0f:34:1f:b3:e5:c0:c5:9d:d6:5c:77:57: d4:84:5f:2e:d2:f0:79:df:68:1b:ad:d7:c0:d3:32: 97:4a:70:c1:c0:52:71:b1:03:f5:e2:d0:2c:e4:2f: 9e:b0:ec:60:af:2d:02:28:5d:e7:aa:77:c9:58:fb: e5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:09:2D:F9:04:1C:A3:E4:76:66:56:45:41:EA:C1:1D:42:F9:18:D0 X509v3 Authority Key Identifier: keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:00:5b:2f:e0:58:ac:1c:3d:88:fa:9a:01:3a:8f:8c:52:7e: fa:2d:05:b7:ae:86:b7:fa:51:3e:7d:f5:83:7c:e0:8d:a8:ac: b6:10:27:36:b6:87:5d:05:35:9a:69:49:b9:47:ca:54:fa:b6: 1d:05:91:e6:55:3c:83:3e:a2:10:7f:33:91:2a:43:66:ce:a7: eb:7c:cd:c4:85:3d:a8:0b:56:79:30:85:1a:14:59:07:1f:0e: 11:39:2f:9d:f8:ca:c5:38:4e:71:ae:4c:bd:cc:f9:8a:78:7e: c7:9e:54:4a:60:88:a9:a6:f9:be:73:af:b0:36:3d:ed:1f:1c: 23:8e:ae:cd:63:be:c0:08:1b:c3:75:7b:f2:40:21:13:c6:81: 90:df:a9:55:9b:db:05:30:f5:7b:e8:9b:cc:bd:e9:f7:1a:62: 8c:1a:a0:f3:95:90:04:a5:31:5e:17:56:7e:eb:a2:23:b4:e0: cf:3b:bf:da:22:7c:db:52:55:57:93:76:32:34:a0:cc:3b:9e: a6:6e:e8:b2:55:17:50:48:89:90:01:e6:58:b3:b6:cd:ea:14: 03:49:16:86:af:b3:9c:00:26:00:20:0b:e6:42:a7:98:b6:c7: 60:e0:79:50:bf:bb:20:a6:47:2c:af:a0:8a:6a:21:a4:47:3d: 89:0c:c2:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1MjUxMTAvBgNVBAUTKEZCRkY4OEFERTk5MzY2ODlCMzI0MTQ1QkZFNjNCNzRE NTdBQUFDMEIwHhcNMjUwNzAzMDY0MjI1WhcNMjUwNzEwMDY0MjI1WjAYMRYwFAYD VQQDEw02ODY2MjY1MS1kNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgGF7tqxek50S3CgkEayty0zptpvT8UALEWOmaERlZ/qjvFp3OOGw6bUS9iV YajK1r89Hh3CNTpZsqroosGWdOwYZigr5iElR1UzDBVq37duV8Svi3lYLt4eQKwM rVeyX5NSlT3BIZDI79yRAtcsvFk5Q5LJT228JF8gUmMB3SQb5lJDQ36r4RIH+kzk LjVfeHKAMkfoz1PnK2WWAc72/2NxxH85+YClX76Bf7Ma2LYZj1Su2X26wvB2vcdS qaPErugjbkIPNB+z5cDFndZcd1fUhF8u0vB532gbrdfA0zKXSnDBwFJxsQP14tAs 5C+esOxgry0CKF3nqnfJWPvlGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsJLfkE HKPkdmZWRUHqwR1C+RjQMB8GA1UdIwQYMBaAFPv/iK3pk2aJsyQUW/5jt01XqqwL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FQTAyMzQxQzg0 RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpvbXpKQlJiX21PM1RWZXFy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1fLUlyZW1UWm9tekpCUmJfbU8zVFZlcXJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUyNS9FQTAyMzQxQzg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpv bXpKQlJiX21PM1RWZXFyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPAFsv4FisHD2I+poBOo+MUn76LQW3roa3+lE+ffWDfOCNqKy2ECc2 toddBTWaaUm5R8pU+rYdBZHmVTyDPqIQfzORKkNmzqfrfM3EhT2oC1Z5MIUaFFkH Hw4ROS+d+MrFOE5xrky9zPmKeH7HnlRKYIippvm+c6+wNj3tHxwjjq7NY77ACBvD dXvyQCETxoGQ36lVm9sFMPV76JvMven3GmKMGqDzlZAEpTFeF1Z+66IjtODPO7/a InzbUlVXk3YyNKDMO56mbuiyVRdQSImQAeZYs7bN6hQDSRaGr7OcACYAIAvmQqeY tsdg4HlQv7sgpkcsr6CKaiGkRz2JDMKY -----END CERTIFICATE-----Generated at Thu Jul 3 23:36:38 2025 by rpki-client