$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: h8lbLgZRB7ly5vCSn9w5v/wQA81F+SE0tmnMCgvdBhU= Subject key identifier: 9C:C2:BF:80:42:8A:53:C8:B2:65:67:B5:F0:17:96:E4:03:1E:66:C8 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 0998 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 0989 Signing time: Wed 02 Jul 2025 20:22:25 +0000 Manifest this update: Wed 02 Jul 2025 20:22:25 +0000 Manifest next update: Wed 09 Jul 2025 20:22:25 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: UXUp7iFoXDjPBoxRGBpe91uTApWX0FDZyBHQvpCmQe4=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: 8JSwEQed2eJqn9OytcIj9IctVhOahjE7HP6K7LQO8mE=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: rFSplheoWDm+5MPYS0jTevwHFfJ593Fp0RQ1ghGpvEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2456 (0x998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: Jul 2 20:22:25 2025 GMT Not After : Jul 9 20:22:25 2025 GMT Subject: CN=68659501-75d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b6:8e:a6:93:19:a8:22:86:d0:27:48:d9:5e: 97:d5:72:4a:a1:d7:08:ab:81:4b:45:9b:75:d5:46: 14:bf:dd:40:20:7e:77:43:b7:8c:b0:eb:21:f1:1b: 77:09:e5:8d:dd:b6:2f:32:78:ab:e4:f0:47:1a:f2: 62:ce:26:71:3a:0a:c1:65:bf:b6:1d:dd:7e:f0:38: b7:18:3e:50:88:1d:e1:e6:8f:24:2e:19:1e:d7:17: d8:66:ef:03:82:27:ee:af:6a:59:ac:c7:db:27:b3: 77:3f:65:9a:90:24:ff:44:dd:27:bc:c7:0b:ff:3a: 73:1a:c6:98:63:e5:97:08:99:83:37:76:89:dc:d5: d0:34:39:5a:5f:32:a6:4f:50:62:b6:4f:22:4c:48: 23:72:c9:77:21:ca:c0:67:c1:e6:d3:c8:8f:d6:d2: 89:80:7c:49:b4:3d:88:b7:5d:71:80:d5:03:e9:8a: 00:1e:a9:a5:63:52:7a:6c:9d:51:67:79:f3:6c:42: 0f:cd:ac:ab:92:3f:e0:91:6a:98:2b:91:0f:ef:70: c3:00:5e:97:80:2c:66:1b:e2:44:56:39:92:16:05: e0:b5:bf:05:c0:f4:47:cf:61:b9:e6:f6:15:19:b4: 39:25:5c:72:9d:e0:79:74:b8:33:ea:64:b1:90:50: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C2:BF:80:42:8A:53:C8:B2:65:67:B5:F0:17:96:E4:03:1E:66:C8 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:1d:39:66:b0:51:e0:f6:25:d5:4b:d7:c1:58:6f:09:a8:42: 8a:9c:f8:ff:f9:d6:76:68:17:96:01:e9:2c:44:f4:2e:5e:bd: 0e:2e:2d:38:a7:61:63:93:4c:a8:33:cf:ec:e3:56:af:f3:4b: b6:85:cc:d2:fa:5e:a0:61:4a:b9:ad:5c:63:e1:e3:30:0e:66: de:62:d6:70:d7:5a:59:f2:df:e4:7d:5f:49:55:5a:e4:39:e2: 9d:f9:fa:ea:59:1f:c8:35:ef:c4:29:92:b3:33:cc:eb:ca:d0: 4c:07:9d:b7:d8:64:6e:3f:6e:28:72:cd:7e:34:b2:54:a0:26: 33:30:00:9b:74:24:f9:02:1d:97:bc:7a:9a:8d:e1:93:9b:a9: 11:06:e3:ed:d2:73:49:cc:35:6d:85:53:69:5b:be:cd:6f:45: a4:a0:83:07:1a:2e:52:c6:c7:ca:c6:2a:e4:fa:ae:29:f4:00: 26:18:69:49:8a:31:ad:79:f9:c7:5a:7a:01:46:07:cf:1f:17: 91:41:e3:9e:61:07:c4:3d:df:9a:c0:47:6a:b6:34:c9:19:cd: 15:fe:c3:a9:c7:f9:d8:f0:9a:ef:46:1d:6a:62:a7:35:f3:c4: 96:64:6a:dc:58:f6:c0:e7:ef:2c:40:47:85:c8:69:be:f3:61: e8:7c:e4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjUwNzAyMjAyMjI1WhcNMjUwNzA5MjAyMjI1WjAYMRYwFAYD VQQDEw02ODY1OTUwMS03NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4baOppMZqCKG0CdI2V6X1XJKodcIq4FLRZt11UYUv91AIH53Q7eMsOsh8Rt3 CeWN3bYvMnir5PBHGvJiziZxOgrBZb+2Hd1+8Di3GD5QiB3h5o8kLhke1xfYZu8D gifur2pZrMfbJ7N3P2WakCT/RN0nvMcL/zpzGsaYY+WXCJmDN3aJ3NXQNDlaXzKm T1Bitk8iTEgjcsl3IcrAZ8Hm08iP1tKJgHxJtD2It11xgNUD6YoAHqmlY1J6bJ1R Z3nzbEIPzayrkj/gkWqYK5EP73DDAF6XgCxmG+JEVjmSFgXgtb8FwPRHz2G55vYV GbQ5JVxyneB5dLgz6mSxkFCMAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzCv4BC ilPIsmVntfAXluQDHmbIMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+HTlmsFHg9iXVS9fBWG8JqEKKnPj/+dZ2aBeWAeksRPQuXr0OLi04 p2Fjk0yoM8/s41av80u2hczS+l6gYUq5rVxj4eMwDmbeYtZw11pZ8t/kfV9JVVrk OeKd+frqWR/INe/EKZKzM8zrytBMB5232GRuP24ocs1+NLJUoCYzMACbdCT5Ah2X vHqajeGTm6kRBuPt0nNJzDVthVNpW77Nb0WkoIMHGi5SxsfKxirk+q4p9AAmGGlJ ijGtefnHWnoBRgfPHxeRQeOeYQfEPd+awEdqtjTJGc0V/sOpx/nY8JrvRh1qYqc1 88SWZGrcWPbA5+8sQEeFyGm+82HofOS8 -----END CERTIFICATE-----Generated at Fri Jul 4 02:53:40 2025 by rpki-client