$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: R2v52TgonxeAlrsySWNlN7HmN4BWpviVZM17m9ekNbg= Subject key identifier: 6C:DC:DC:E9:35:C9:C6:2F:27:93:CB:F3:16:8B:D9:E1:12:D8:AD:E7 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 01E3 Signing time: Sun 29 Jun 2025 01:50:53 +0000 Manifest this update: Sun 29 Jun 2025 01:50:52 +0000 Manifest next update: Sun 06 Jul 2025 01:50:52 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: 2iRhLB6MkWdcGmrqmE7/4ldLYSr/RfAnAqFp+qv5nzU=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: mzTY+yHaxiOoTmhIGnRxe8TteP35OSc9TDFULhxG7es=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: TCA2TacY4ZsDEXX4IqBFag6vpZrZlhAMEJDWvtGJDWs=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Tjdi12mwJxE8vytdEEm6LYs9NXU4cX9jhBUfI2VO1fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Jun 29 01:50:52 2025 GMT Not After : Jul 6 01:50:52 2025 GMT Subject: CN=68609bfd-45a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:58:de:36:0c:25:6d:87:5d:d6:ab:d3:b1: 15:a2:03:67:48:e5:d0:e3:13:1b:89:de:a6:9c:8c: 5f:15:98:14:e1:54:65:2c:9c:40:ae:68:be:b7:fe: a9:85:64:49:64:50:ad:4c:c2:a4:95:49:bd:ae:c1: e4:b0:13:6a:f9:21:4d:70:49:61:2e:3b:a7:69:16: 15:8d:e4:1f:de:ed:b8:cf:f3:b1:2b:20:ae:5b:42: 29:45:09:95:e5:98:22:44:9d:9c:e8:f4:37:14:16: 7c:15:47:c0:fe:de:99:9f:b9:b5:bc:a8:1a:30:53: 5f:34:26:6b:c8:e8:eb:d0:1c:fe:9d:e5:24:85:ad: 5c:80:54:d8:29:7c:ed:54:09:29:48:d1:70:d7:09: 6e:ed:fd:c1:66:87:74:93:7c:e6:ba:2b:36:68:8f: c0:5e:72:7b:5a:77:fc:f1:63:38:2d:dc:70:93:0c: ad:49:a6:bf:e9:22:ac:3d:a4:f0:22:ce:a4:74:37: aa:ad:1c:ff:db:e9:40:05:80:44:f6:67:5d:42:df: 25:ff:83:c9:58:69:cb:49:04:2c:73:f3:cc:74:fb: 1c:8c:7a:45:f2:dd:ad:4b:53:1e:61:f0:04:81:4d: 1b:24:bf:23:59:4a:7d:92:b5:0e:8d:61:f0:7f:6c: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DC:DC:E9:35:C9:C6:2F:27:93:CB:F3:16:8B:D9:E1:12:D8:AD:E7 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:26:55:f6:bf:46:bb:db:a2:6b:4b:18:6b:07:26:8a:48:7d: 84:42:d8:71:98:c4:cd:8e:bb:55:0a:33:a7:ab:30:77:07:be: 8b:6d:65:9b:c3:a8:69:3e:6b:37:ee:81:8c:8b:73:51:df:36: 19:e9:08:98:22:67:11:34:0a:ed:ef:19:c8:8f:cb:b8:d1:2f: d4:94:c2:4b:89:70:1d:f6:22:02:b9:d1:c3:f4:a8:d5:1b:d5: c9:a1:f6:bf:3d:d7:31:3d:c4:4b:f8:23:07:4e:3c:72:94:5e: ab:99:5a:d5:26:49:cc:3f:16:14:ef:b5:96:50:08:5d:f0:36: 46:c5:53:a7:6e:35:16:8d:19:5e:0c:70:b5:7e:66:7f:53:19: 9b:e7:97:8c:fb:73:7e:d2:f3:11:82:15:a1:ca:3d:df:41:3e: c3:3b:5d:b1:7b:ab:69:2a:e7:c1:c9:28:6f:55:21:dd:7f:64: c0:e5:d1:4b:dc:75:3f:55:b2:fe:8b:c2:70:1b:db:0c:35:d5: 6e:ea:54:22:fc:1e:e9:9d:2e:7e:0c:6c:e9:89:3a:91:53:a1: 5e:12:1e:2f:62:1e:e0:04:a8:92:a2:12:09:17:70:04:82:ab: 9f:d1:7e:be:97:55:d8:92:48:ae:37:bc:70:85:50:cd:b1:24: fb:94:73:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUwNjI5MDE1MDUyWhcNMjUwNzA2MDE1MDUyWjAYMRYwFAYD VQQDEw02ODYwOWJmZC00NWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA255Y3jYMJW2HXdar07EVogNnSOXQ4xMbid6mnIxfFZgU4VRlLJxArmi+t/6p hWRJZFCtTMKklUm9rsHksBNq+SFNcElhLjunaRYVjeQf3u24z/OxKyCuW0IpRQmV 5ZgiRJ2c6PQ3FBZ8FUfA/t6Zn7m1vKgaMFNfNCZryOjr0Bz+neUkha1cgFTYKXzt VAkpSNFw1wlu7f3BZod0k3zmuis2aI/AXnJ7Wnf88WM4LdxwkwytSaa/6SKsPaTw Is6kdDeqrRz/2+lABYBE9mddQt8l/4PJWGnLSQQsc/PMdPscjHpF8t2tS1MeYfAE gU0bJL8jWUp9krUOjWHwf2xy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzc3Ok1 ycYvJ5PL8xaL2eES2K3nMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNJlX2v0a726JrSxhrByaKSH2EQthxmMTNjrtVCjOnqzB3B76LbWWb w6hpPms37oGMi3NR3zYZ6QiYImcRNArt7xnIj8u40S/UlMJLiXAd9iICudHD9KjV G9XJofa/PdcxPcRL+CMHTjxylF6rmVrVJknMPxYU77WWUAhd8DZGxVOnbjUWjRle DHC1fmZ/Uxmb55eM+3N+0vMRghWhyj3fQT7DO12xe6tpKufByShvVSHdf2TA5dFL 3HU/VbL+i8JwG9sMNdVu6lQi/B7pnS5+DGzpiTqRU6FeEh4vYh7gBKiSohIJF3AE gquf0X6+l1XYkkiuN7xwhVDNsST7lHNl -----END CERTIFICATE-----Generated at Sun Jun 29 18:00:49 2025 by rpki-client