$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json) Hash identifier: ZE6yuP+4I5Eg5GJv6W6mkmu5VICiSGccNiaUG7bcwCw= Subject key identifier: 4B:4D:AF:9D:BF:A1:0C:C7:B0:17:A7:68:F0:11:37:2C:C2:28:48:28 Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft Manifest number: 86 Signing time: Thu 03 Jul 2025 06:55:58 +0000 Manifest this update: Thu 03 Jul 2025 06:55:57 +0000 Manifest next update: Thu 10 Jul 2025 06:55:57 +0000 Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: exFUXUIJhhG2jloOzkoZZW2eTuCroaJZ88xr7jPssk0=) 2: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: ipUtH6de1n3QDXNmS4idd62IMEQfE9S8Kl6BBzpD9nQ=) 3: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: ofbztl5uVlglZWvlUxP/w/vzUs13H0jw290VgxrDPX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Validity Not Before: Jul 3 06:55:57 2025 GMT Not After : Jul 10 06:55:57 2025 GMT Subject: CN=6866297e-301c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:f9:00:ce:8e:1a:64:4b:f6:59:c5:51:f8: 05:93:b7:e1:25:4a:99:7a:dc:1c:ef:61:02:d7:c6: 1d:24:dd:6a:14:1c:a6:ff:6e:2b:65:17:08:ba:11: b3:8b:12:89:47:84:04:26:70:59:d6:ea:be:93:8a: 75:ca:a2:cc:d2:2e:d1:52:8f:50:0b:42:1b:db:95: 00:ef:e8:fa:bb:cd:9e:d9:8d:cb:6b:85:b7:23:c7: 8a:57:b8:27:47:94:f4:84:4c:68:72:db:66:41:84: 78:69:bd:f5:0c:10:45:8a:4b:a4:8d:9d:60:c9:bb: 9e:4a:68:ef:fb:9d:46:c9:a7:44:38:e5:30:14:67: 76:a0:1a:f8:2d:1f:14:c2:3a:b8:06:7a:6b:f2:cf: be:c8:a6:ac:dd:07:08:c2:53:ac:65:5b:16:0e:ca: d4:7c:43:12:e2:10:a1:a7:65:3c:4c:e3:52:e1:52: a7:22:92:77:a2:0e:a6:4b:fb:bb:6c:47:67:c8:22: a3:66:92:23:35:01:39:ca:c4:e4:26:62:b9:38:46: 1e:4b:92:0f:ab:96:a3:e5:43:ec:89:4b:bb:ae:fe: 42:c1:30:d1:c4:21:9c:a8:0b:ea:06:49:87:2b:7b: 60:75:cf:87:02:7d:55:8e:8b:5b:ff:4b:d0:1e:fb: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4D:AF:9D:BF:A1:0C:C7:B0:17:A7:68:F0:11:37:2C:C2:28:48:28 X509v3 Authority Key Identifier: keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:ca:30:c8:31:8f:d9:aa:9a:ef:db:78:bd:3b:83:49:ff:ce: d9:17:6e:ac:1b:a0:22:67:90:b4:01:ad:8f:16:8f:b4:9d:02: 20:48:a2:de:8b:30:53:dc:48:9c:ab:13:c5:c4:3b:3a:ab:81: 00:a8:99:58:76:81:18:f5:29:33:30:1d:e0:a4:fa:4a:44:19: b0:e0:a2:37:8e:60:6a:fa:b9:7a:63:f9:88:57:d7:df:39:ae: 30:27:ec:00:20:f4:9e:d8:19:b8:e3:15:a5:18:65:46:90:53: 15:db:5e:14:f2:05:7d:16:0b:d4:48:a3:1e:c7:e4:c2:5f:70: b3:cb:cb:14:50:3f:a4:63:9e:7c:65:87:b3:70:69:59:e0:b6: e5:bc:94:ef:b0:69:87:d8:d3:44:c4:0d:8f:0a:b3:84:2b:59: 47:82:80:05:d2:78:a7:ec:3c:4d:a7:94:72:a2:11:4f:3a:b0: 94:fc:89:df:9d:59:51:8c:8d:1d:f8:d2:fe:a4:4e:18:4b:26: 18:23:33:a0:7b:f9:88:15:ff:c5:7c:80:13:9d:27:03:b2:46: ea:b2:ef:60:c7:da:31:ef:55:34:ec:e3:b7:04:68:58:bb:c4: 18:ba:41:fa:94:ce:51:38:8a:95:24:5e:6f:c8:48:42:52:10: 92:d2:55:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwNDcxMTAvBgNVBAUTKDg4NDhBQUNERjI5NTEzMDNFNzA5OEY0MTlEOENBMDA0 MjI4OTBDNjkwHhcNMjUwNzAzMDY1NTU3WhcNMjUwNzEwMDY1NTU3WjAYMRYwFAYD VQQDEw02ODY2Mjk3ZS0zMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qP5AM6OGmRL9lnFUfgFk7fhJUqZetwc72EC18YdJN1qFBym/24rZRcIuhGz ixKJR4QEJnBZ1uq+k4p1yqLM0i7RUo9QC0Ib25UA7+j6u82e2Y3La4W3I8eKV7gn R5T0hExocttmQYR4ab31DBBFikukjZ1gybueSmjv+51GyadEOOUwFGd2oBr4LR8U wjq4Bnpr8s++yKas3QcIwlOsZVsWDsrUfEMS4hChp2U8TONS4VKnIpJ3og6mS/u7 bEdnyCKjZpIjNQE5ysTkJmK5OEYeS5IPq5aj5UPsiUu7rv5CwTDRxCGcqAvqBkmH K3tgdc+HAn1Vjotb/0vQHvt1UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtNr52/ oQzHsBenaPARNyzCKEgoMB8GA1UdIwQYMBaAFIhIqs3ylRMD5wmPQZ2MoAQiiQxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODA0Ny8zNDRBMDFBMjlC MTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3UG5DWTlCbll5Z0JDS0pE R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFaXF6ZktWRXdQbkNZOUJuWXlnQkNLSkRHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODA0Ny8zNDRBMDFBMjlCMTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3 UG5DWTlCbll5Z0JDS0pER2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLyjDIMY/Zqprv23i9O4NJ/87ZF26sG6AiZ5C0Aa2PFo+0nQIgSKLe izBT3EicqxPFxDs6q4EAqJlYdoEY9SkzMB3gpPpKRBmw4KI3jmBq+rl6Y/mIV9ff Oa4wJ+wAIPSe2Bm44xWlGGVGkFMV214U8gV9FgvUSKMex+TCX3Czy8sUUD+kY558 ZYezcGlZ4LblvJTvsGmH2NNExA2PCrOEK1lHgoAF0nin7DxNp5RyohFPOrCU/Inf nVlRjI0d+NL+pE4YSyYYIzOge/mIFf/FfIATnScDskbqsu9gx9ox71U07OO3BGhY u8QYukH6lM5ROIqVJF5vyEhCUhCS0lW1 -----END CERTIFICATE-----Generated at Thu Jul 3 09:48:29 2025 by rpki-client