$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: luuCDD8fbmz0kX9HF/ASOMm1k8D2cRK0vb4f1VQhkec= Subject key identifier: 8C:BC:48:64:76:B8:17:6F:56:68:85:3A:1D:D7:C2:5D:AA:56:00:C4 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 0182 Signing time: Tue 01 Jul 2025 04:01:57 +0000 Manifest this update: Tue 01 Jul 2025 04:01:57 +0000 Manifest next update: Tue 08 Jul 2025 04:01:57 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: N+FDCjrjnUVqDPuKXVbxHx2gf3kl3n6oC1+Xs0dp3t4=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 2Dnxh30mhffjOkqJSVSDIOGgOimqWD/AADTc7ZuBX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Jul 1 04:01:57 2025 GMT Not After : Jul 8 04:01:57 2025 GMT Subject: CN=68635db5-9297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:26:39:66:44:9c:38:e4:96:8e:9f:6d:5e: e2:ae:34:5f:02:c9:ad:4c:00:5f:48:86:9d:4f:05: c5:c0:6a:75:4a:d5:d5:d0:a7:2d:f0:a1:33:8b:5e: f5:e2:60:9c:46:0a:e2:d7:92:f6:44:d9:16:e7:2b: 0f:2a:0a:65:0a:69:61:13:2f:b0:8e:51:50:cd:60: 64:d0:74:70:2a:f6:e3:bc:d6:56:25:ab:d4:4d:3f: 35:75:96:d1:0a:c4:97:3c:fd:59:18:4c:3e:8c:f8: 08:9d:32:eb:d0:35:4a:45:57:c5:4a:e3:35:2a:da: 89:3d:7c:c0:1b:64:17:95:88:e0:2b:ca:13:76:55: fe:99:d7:4c:1d:78:f7:6e:66:da:77:7a:ac:b3:c3: 89:5e:ca:09:a1:76:65:af:18:d7:6f:84:e3:e8:1c: 0c:7b:3f:fd:02:a1:2d:18:86:8e:12:18:96:c1:3a: dc:e7:47:c1:fa:fd:8e:ce:e7:ac:7b:23:4e:55:ff: 1c:29:e7:58:ee:70:28:72:a0:96:8b:27:6b:6d:92: 13:0e:ad:11:f8:79:70:6f:79:05:b1:74:f7:fc:f2: 07:88:32:cf:ea:d4:77:eb:4d:54:e7:d1:f2:c5:65: fb:1d:3c:61:c8:98:e7:df:a1:59:3e:10:d8:61:bf: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BC:48:64:76:B8:17:6F:56:68:85:3A:1D:D7:C2:5D:AA:56:00:C4 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:6f:0e:27:67:4c:a5:4b:7f:4b:f9:6a:b2:ff:a0:78:9d:1b: 18:31:60:72:3a:7e:ae:63:49:32:e2:9d:86:5d:2d:95:47:33: cf:90:7a:d0:2b:6f:fc:1d:5a:2e:77:b4:48:62:88:20:3e:8f: 66:1f:70:fd:2c:bb:39:93:70:54:15:d9:52:a1:be:1d:9d:dc: 50:93:eb:3e:28:63:9e:fc:0d:e8:0a:3b:6d:ae:90:b7:1f:63: 81:ac:2a:47:56:46:29:01:1e:a9:df:0d:16:95:66:83:0f:74: 98:e6:5c:7a:5a:9d:c1:3d:fa:d6:b1:48:dc:b1:12:db:69:1c: 7e:d2:34:fe:cf:03:24:67:c1:47:81:69:09:86:58:ec:57:83: a0:25:5b:8f:04:1e:78:54:a8:2e:bd:67:31:d7:a6:ff:e0:06: 17:52:ed:c2:42:5e:90:22:70:89:5e:74:ab:03:0a:b9:b3:b5: f1:72:d4:be:55:76:ea:55:c9:43:c9:cd:2a:02:08:4b:7d:e9: 2b:ca:9a:39:ff:59:64:e3:a9:e0:6c:fc:d8:7d:de:b5:15:38: 4d:3f:d5:13:67:11:5a:82:ef:a0:13:fc:67:8b:14:b5:6f:bd: ab:ac:dd:38:82:97:7d:0a:26:9e:11:2d:90:53:9e:3c:97:e5: 46:1c:71:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjUwNzAxMDQwMTU3WhcNMjUwNzA4MDQwMTU3WjAYMRYwFAYD VQQDEw02ODYzNWRiNS05Mjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM8mOWZEnDjklo6fbV7irjRfAsmtTABfSIadTwXFwGp1StXV0Kct8KEzi171 4mCcRgri15L2RNkW5ysPKgplCmlhEy+wjlFQzWBk0HRwKvbjvNZWJavUTT81dZbR CsSXPP1ZGEw+jPgInTLr0DVKRVfFSuM1KtqJPXzAG2QXlYjgK8oTdlX+mddMHXj3 bmbad3qss8OJXsoJoXZlrxjXb4Tj6BwMez/9AqEtGIaOEhiWwTrc50fB+v2Ozues eyNOVf8cKedY7nAocqCWiydrbZITDq0R+Hlwb3kFsXT3/PIHiDLP6tR3601U59Hy xWX7HTxhyJjn36FZPhDYYb/7oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy8SGR2 uBdvVmiFOh3Xwl2qVgDEMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZbw4nZ0ylS39L+Wqy/6B4nRsYMWByOn6uY0ky4p2GXS2VRzPPkHrQ K2/8HVoud7RIYoggPo9mH3D9LLs5k3BUFdlSob4dndxQk+s+KGOe/A3oCjttrpC3 H2OBrCpHVkYpAR6p3w0WlWaDD3SY5lx6Wp3BPfrWsUjcsRLbaRx+0jT+zwMkZ8FH gWkJhljsV4OgJVuPBB54VKguvWcx16b/4AYXUu3CQl6QInCJXnSrAwq5s7XxctS+ VXbqVclDyc0qAghLfekrypo5/1lk46ngbPzYfd61FThNP9UTZxFagu+gE/xnixS1 b72rrN04gpd9CiaeES2QU548l+VGHHEX -----END CERTIFICATE-----Generated at Wed Jul 2 22:23:34 2025 by rpki-client