$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json) Hash identifier: olU04MY3hKwdDACG26YRRb2rGjUOi1eZZaVtb9RIfkg= Subject key identifier: DF:54:2B:F7:98:4D:5D:02:63:81:5F:1E:84:A6:11:4F:24:79:1C:1D Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Certificate serial: 0764 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft Manifest number: 0759 Signing time: Wed 02 Jul 2025 21:54:08 +0000 Manifest this update: Wed 02 Jul 2025 21:54:07 +0000 Manifest next update: Wed 09 Jul 2025 21:54:07 +0000 Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: ev4I+oZQf5nYq0q6lTOafM0elrcVW/yWq1TtaD63ZWk=) 2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: CNZBv4FK9ZWvTtzm+cWIR1zfUXJg63OkryMkTZVFNpg=) 3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: BlNMvykSVEqNeWKjQSI6MISWgcMVQUYKsr+oWp8+db0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED Validity Not Before: Jul 2 21:54:07 2025 GMT Not After : Jul 9 21:54:07 2025 GMT Subject: CN=6865aa80-9bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:20:4f:37:bc:ef:4c:81:e4:20:cb:60:a7: f3:ac:db:ef:c9:98:3f:8b:76:7c:19:eb:63:05:46: b4:2e:ba:d3:2f:f9:f9:1e:a6:ae:a8:5b:72:da:46: 05:2f:f5:df:19:7a:47:3b:13:41:62:8f:74:9c:8d: fd:5b:e0:86:3b:90:97:47:50:a7:d8:84:b7:02:96: 5f:54:b3:c6:55:84:d8:76:3f:3e:f6:30:b5:bd:ef: 29:3c:17:70:3f:64:a5:d1:16:33:60:52:62:e4:52: cc:c7:b9:83:2b:c9:bb:6f:31:75:4e:15:0c:bd:4d: 75:36:2d:bd:90:17:a7:a8:e8:fe:77:96:58:3e:8b: ff:88:db:bd:08:e9:cb:df:51:af:e5:a3:80:03:c6: 73:e1:73:fa:cc:de:69:81:be:07:ed:eb:40:a1:85: 7f:29:32:c9:57:2e:d4:2e:7d:21:21:c3:80:45:ab: 78:35:1e:4e:c9:6f:38:89:f4:d0:c5:d9:bb:e3:ae: f1:42:4c:4c:a8:7f:1e:02:04:d5:64:ff:17:69:fb: 5f:3d:c0:04:6f:8d:46:ef:d6:5c:e7:3f:03:b9:cb: c0:26:af:5e:37:3d:c9:4a:68:2e:cf:75:ac:76:54: 24:75:5a:19:58:50:12:f1:bc:1f:c8:07:46:d4:10: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:54:2B:F7:98:4D:5D:02:63:81:5F:1E:84:A6:11:4F:24:79:1C:1D X509v3 Authority Key Identifier: keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:11:00:c8:d4:f1:09:ff:33:fc:82:39:68:72:3c:bf:ec:e8: 8e:a1:bd:e3:d9:60:c9:8b:1f:57:b3:88:24:8e:81:9e:ab:39: 78:ee:b6:75:b9:cb:e9:2b:f3:9a:c9:46:0f:c1:2d:a7:1d:c2: f3:af:a6:2b:0b:6a:57:9c:74:2e:df:d4:b5:d6:26:1e:55:11: 4e:f5:e7:91:b3:ac:11:22:ce:b8:be:70:1d:23:7c:6b:54:cc: 06:90:1d:33:71:08:e2:f8:18:e9:bd:f7:b2:d4:83:7d:56:ac: 60:1e:e8:0b:4c:d8:7c:4e:c8:a9:54:c9:23:e3:90:cf:79:87: de:46:f6:e8:fb:26:05:22:34:bc:7d:f6:af:58:4e:cd:11:36: c5:73:42:56:64:12:3f:73:76:2c:6f:29:5e:06:da:a7:1f:45: 1d:79:cd:a8:7c:65:2a:da:b0:91:d2:78:36:15:7a:2b:51:7a: aa:aa:d0:84:a7:fc:a5:a3:57:b0:f4:a6:f8:99:d5:a2:f7:08: 25:2f:23:75:73:70:bc:d0:b3:4f:fb:01:1d:aa:e0:55:eb:77: c9:93:9e:4c:53:f1:97:48:9d:d5:77:11:7a:71:45:3d:d2:12: c3:29:d1:d9:43:78:91:b3:b7:45:07:77:44:8b:f8:71:06:80: 11:48:22:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy QjgzOUZCRUQwHhcNMjUwNzAyMjE1NDA3WhcNMjUwNzA5MjE1NDA3WjAYMRYwFAYD VQQDEw02ODY1YWE4MC05YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreAgTze870yB5CDLYKfzrNvvyZg/i3Z8GetjBUa0LrrTL/n5HqauqFty2kYF L/XfGXpHOxNBYo90nI39W+CGO5CXR1Cn2IS3ApZfVLPGVYTYdj8+9jC1ve8pPBdw P2Sl0RYzYFJi5FLMx7mDK8m7bzF1ThUMvU11Ni29kBenqOj+d5ZYPov/iNu9COnL 31Gv5aOAA8Zz4XP6zN5pgb4H7etAoYV/KTLJVy7ULn0hIcOARat4NR5OyW84ifTQ xdm7467xQkxMqH8eAgTVZP8XaftfPcAEb41G79Zc5z8DucvAJq9eNz3JSmguz3Ws dlQkdVoZWFAS8bwfyAdG1BBlowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9UK/eY TV0CY4FfHoSmEU8keRwdMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5 MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6EQDI1PEJ/zP8gjlocjy/7OiOob3j2WDJix9Xs4gkjoGeqzl47rZ1 ucvpK/OayUYPwS2nHcLzr6YrC2pXnHQu39S11iYeVRFO9eeRs6wRIs64vnAdI3xr VMwGkB0zcQji+Bjpvfey1IN9VqxgHugLTNh8TsipVMkj45DPeYfeRvbo+yYFIjS8 ffavWE7NETbFc0JWZBI/c3YsbyleBtqnH0Udec2ofGUq2rCR0ng2FXorUXqqqtCE p/ylo1ew9Kb4mdWi9wglLyN1c3C80LNP+wEdquBV63fJk55MU/GXSJ3VdxF6cUU9 0hLDKdHZQ3iRs7dFB3dEi/hxBoARSCIo -----END CERTIFICATE-----Generated at Thu Jul 3 11:04:50 2025 by rpki-client