$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: 9bmw16FHPHmlwFAxTYu7raTg2u29NfEUedLn52psYgE= Subject key identifier: 5B:38:FD:17:D3:98:0F:E3:6A:B0:E6:CD:CA:2E:D3:CC:14:22:88:0D Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 0141 Signing time: Tue 01 Jul 2025 04:50:16 +0000 Manifest this update: Tue 01 Jul 2025 04:50:16 +0000 Manifest next update: Tue 08 Jul 2025 04:50:16 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: Zvm+mIGSUGqRxakS6xhP+7H1U926901+JE4erDw4Zfo=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: YEagGQfd4UV4nz53l/WybeYAt4w6+zm6QyFgV48pGBc=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: zzpFcIYATvvz+ehYyoXcGsAYVOBFYBXyZDv/oX18Mx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Jul 1 04:50:16 2025 GMT Not After : Jul 8 04:50:16 2025 GMT Subject: CN=68636908-775d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:37:d0:02:d5:2a:a2:41:b2:da:0a:d0:12: fc:bc:11:f2:6d:67:0b:c7:e2:ba:25:25:5a:c1:85: 4b:5f:08:2f:21:50:63:ba:4b:86:4a:8b:9a:88:7e: 9e:75:a1:ee:d6:7a:68:b0:1c:3b:45:f6:6f:e3:8c: e9:dc:41:74:b0:bc:d9:f0:5b:9f:3d:a6:52:8f:e8: 61:d9:6c:3f:f6:f2:fd:2a:14:29:29:2b:4d:79:da: c7:0e:e0:7c:a8:42:1b:a3:8f:b5:30:d6:bf:5e:30: c3:89:57:b6:be:9f:23:4f:4a:48:0c:56:4c:b4:34: 30:49:4b:25:db:f9:7a:90:16:5c:0c:97:00:c9:76: 2c:a0:30:e7:50:9d:24:23:8b:ca:0e:a1:0a:27:51: c7:71:95:be:0e:4f:9c:4d:87:06:ad:74:7a:be:08: e1:51:a9:2c:66:36:34:26:3d:09:6a:2d:a5:06:74: 42:87:e9:db:7e:02:b6:cf:96:0a:77:fc:26:2d:6a: c6:fd:2f:fd:00:99:d0:9a:97:2e:c3:f5:8b:e9:1b: 5a:8d:13:45:e3:6a:d6:72:28:b6:c4:e6:22:68:b2: 14:14:b0:ff:2e:93:a2:cd:ef:01:8e:68:74:2f:75: 91:65:02:b2:00:fc:98:e8:50:67:b9:77:2e:a3:7f: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:FD:17:D3:98:0F:E3:6A:B0:E6:CD:CA:2E:D3:CC:14:22:88:0D X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:59:3c:16:b8:8e:b4:70:e0:f6:ec:3b:aa:2a:df:e4:13:68: df:59:bb:72:4e:2b:ad:fe:6c:c6:1a:b5:13:e7:b9:63:ea:24: 29:5c:a4:0f:d1:c6:95:27:16:db:ab:cf:66:8c:c2:d4:e9:a9: d0:41:44:ab:a1:5c:4c:a2:2f:c7:63:20:08:da:73:6e:0d:bf: 24:b6:33:27:50:2a:5b:87:d7:9a:d9:c7:31:7f:dc:7f:b2:63: a7:f0:74:2d:e3:ab:ff:8d:ef:dd:9c:28:a8:17:c1:dd:0f:1e: 0e:89:f6:bf:aa:eb:1b:01:c6:5e:1a:18:23:7e:cd:33:c6:98: b0:54:af:22:ba:31:f3:0d:db:cb:ce:91:4f:b1:dd:bc:d3:23: 05:6d:a8:35:a9:b5:60:29:3a:3b:c1:ae:16:34:c9:38:ee:36: 4b:a1:9a:88:e1:8b:12:89:ae:66:db:11:87:75:ab:61:c9:27: e0:3b:a3:b2:d2:ef:27:ff:09:76:62:86:ab:4c:b6:24:ac:40: dc:9d:6d:16:e0:35:6d:21:2e:27:d5:38:01:85:89:a3:9d:f4: a3:ec:c1:12:d1:2a:1e:6e:b1:5f:2a:f5:b7:9c:9a:7f:56:57: 76:ba:80:1b:06:d2:05:bb:8e:2b:0b:c7:e2:3a:7b:39:07:f2: 3b:9d:f8:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUwNzAxMDQ1MDE2WhcNMjUwNzA4MDQ1MDE2WjAYMRYwFAYD VQQDEw02ODYzNjkwOC03NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1t830ALVKqJBstoK0BL8vBHybWcLx+K6JSVawYVLXwgvIVBjukuGSouaiH6e daHu1nposBw7RfZv44zp3EF0sLzZ8FufPaZSj+hh2Ww/9vL9KhQpKStNedrHDuB8 qEIbo4+1MNa/XjDDiVe2vp8jT0pIDFZMtDQwSUsl2/l6kBZcDJcAyXYsoDDnUJ0k I4vKDqEKJ1HHcZW+Dk+cTYcGrXR6vgjhUaksZjY0Jj0Jai2lBnRCh+nbfgK2z5YK d/wmLWrG/S/9AJnQmpcuw/WL6RtajRNF42rWcii2xOYiaLIUFLD/LpOize8Bjmh0 L3WRZQKyAPyY6FBnuXcuo3+KbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFs4/RfT mA/jarDmzcou08wUIogNMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWWTwWuI60cOD27DuqKt/kE2jfWbtyTiut/mzGGrUT57lj6iQpXKQP 0caVJxbbq89mjMLU6anQQUSroVxMoi/HYyAI2nNuDb8ktjMnUCpbh9ea2ccxf9x/ smOn8HQt46v/je/dnCioF8HdDx4Oifa/qusbAcZeGhgjfs0zxpiwVK8iujHzDdvL zpFPsd280yMFbag1qbVgKTo7wa4WNMk47jZLoZqI4YsSia5m2xGHdathySfgO6Oy 0u8n/wl2YoarTLYkrEDcnW0W4DVtIS4n1TgBhYmjnfSj7MES0SoebrFfKvW3nJp/ Vld2uoAbBtIFu44rC8fiOns5B/I7nfjW -----END CERTIFICATE-----Generated at Tue Jul 1 22:44:41 2025 by rpki-client