$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json) Hash identifier: zZ5Ec8Ej8GcWNlSqK0+kvYh51E1u5wlb1L4FtFtaZgU= Subject key identifier: 15:57:83:FF:4C:75:1B:98:92:33:BD:92:73:B3:FF:CD:BC:BD:7C:8B Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft Manifest number: 0AFD Signing time: Wed 02 Jul 2025 19:36:00 +0000 Manifest this update: Wed 02 Jul 2025 19:35:59 +0000 Manifest next update: Wed 09 Jul 2025 19:35:59 +0000 Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: KcnG83OmtnEZh6VvA6sOYyGjDWOHCjaHBvHb8Lf4Guw=) 2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: kISEPEmE2ZLNGr7M+gIIuLb+wfjhIl0pN5Ozrn7290M=) 3: A558194E801F11EFB86B2647C4F9AE02.roa (hash: yZl4Rgg31ofEgyuQezY4Q6zD53Q3cflOAAa2hJJAiIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Validity Not Before: Jul 2 19:35:59 2025 GMT Not After : Jul 9 19:35:59 2025 GMT Subject: CN=68658a1f-03ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:b7:8f:bb:04:a7:87:6a:15:65:d9:2a:f4: 97:99:5c:2b:91:9e:4e:9f:e5:62:3c:46:47:00:8e: 0e:51:2c:ca:71:78:2a:52:8c:f6:54:2e:17:d1:a9: 6d:f7:7c:e5:8e:7d:c2:6d:35:41:66:ce:c4:ff:74: 09:86:1a:97:18:bf:6d:55:1e:7b:09:9b:14:9d:a8: 34:9a:eb:e1:f6:39:b9:78:55:3b:2a:16:aa:b1:02: cb:18:4b:b4:5c:13:90:7f:77:fd:49:d3:6b:56:30: a7:0e:37:6b:12:70:eb:dc:17:bb:ce:6a:42:25:25: a8:bb:3c:1d:33:99:bb:06:64:9a:f4:5c:eb:b3:dc: 38:ae:eb:1c:2c:92:34:75:85:ee:7e:0d:96:7a:35: aa:3a:18:af:c6:d2:66:3c:01:49:b0:44:6b:52:ed: 61:d7:5c:03:af:2c:25:8b:81:d7:6f:19:49:b9:98: ea:bb:d8:62:e4:5b:12:34:c0:88:14:01:f5:c6:d4: 76:46:80:6f:ac:f9:2e:32:57:f1:6f:b7:e7:20:ab: b0:71:13:4d:56:4e:7f:5c:aa:eb:5e:38:7d:1d:f2: 61:e5:4a:80:d5:f2:4f:2f:a7:ce:b6:87:19:73:53: fe:75:cf:75:53:5f:2a:fa:2e:8f:05:4f:d5:3f:00: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:57:83:FF:4C:75:1B:98:92:33:BD:92:73:B3:FF:CD:BC:BD:7C:8B X509v3 Authority Key Identifier: keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0c:dd:77:79:3f:d8:7a:e1:2b:f6:85:a0:3d:58:b4:b5:b6: 79:ab:2b:8d:98:18:0c:c4:1c:1f:0e:70:d1:ee:ef:a0:de:6d: 08:55:b3:0f:e1:45:bd:c8:18:55:d1:c1:f5:32:6e:ed:6b:01: 93:3c:39:4c:29:17:8d:d0:77:57:dd:29:96:eb:74:37:b6:7f: 74:8a:4a:b1:93:eb:fc:1f:b8:c3:87:f6:2e:86:f5:b5:76:76: 01:6d:ea:9b:bd:bd:3f:d5:c4:d7:74:ba:d1:a5:d6:a5:6e:3a: b6:0b:f2:39:45:cb:b9:fd:05:f4:23:7b:6f:c2:1f:c4:32:43: a4:4b:5a:35:b4:a3:c0:79:47:fd:5f:35:f5:e0:48:8a:88:37: 1d:4e:46:fd:78:67:05:f7:1b:fb:56:cc:67:4d:e6:b1:bf:3f: 16:e4:ed:87:b9:11:fc:08:00:79:f2:56:65:67:95:47:83:6e: 1b:cb:8d:af:63:00:20:32:1d:b7:09:a3:19:0c:d4:59:d9:dc: 51:b0:ed:03:c9:53:c9:b7:92:e1:b4:bb:f9:75:fb:35:82:20: 6e:d4:48:3b:b7:7b:6e:01:71:97:ae:ed:63:06:1e:fc:ba:4e: 00:54:bb:8b:18:75:c6:0b:be:cd:35:3c:df:b4:f1:66:9c:ec: 89:e8:3c:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE MTgwN0ExNEMwHhcNMjUwNzAyMTkzNTU5WhcNMjUwNzA5MTkzNTU5WjAYMRYwFAYD VQQDEw02ODY1OGExZi0wM2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnce3j7sEp4dqFWXZKvSXmVwrkZ5On+ViPEZHAI4OUSzKcXgqUoz2VC4X0alt 93zljn3CbTVBZs7E/3QJhhqXGL9tVR57CZsUnag0muvh9jm5eFU7KhaqsQLLGEu0 XBOQf3f9SdNrVjCnDjdrEnDr3Be7zmpCJSWouzwdM5m7BmSa9Fzrs9w4ruscLJI0 dYXufg2WejWqOhivxtJmPAFJsERrUu1h11wDrywli4HXbxlJuZjqu9hi5FsSNMCI FAH1xtR2RoBvrPkuMlfxb7fnIKuwcRNNVk5/XKrrXjh9HfJh5UqA1fJPL6fOtocZ c1P+dc91U18q+i6PBU/VPwCsbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVXg/9M dRuYkjO9knOz/828vXyLMB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4 RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjkwNS8xRkE3QzQ2QzQ4RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6 TmNCN2ttQmFMZF9SZ0hvVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTDN13eT/YeuEr9oWgPVi0tbZ5qyuNmBgMxBwfDnDR7u+g3m0IVbMP 4UW9yBhV0cH1Mm7tawGTPDlMKReN0HdX3SmW63Q3tn90ikqxk+v8H7jDh/YuhvW1 dnYBbeqbvb0/1cTXdLrRpdalbjq2C/I5Rcu5/QX0I3tvwh/EMkOkS1o1tKPAeUf9 XzX14EiKiDcdTkb9eGcF9xv7VsxnTeaxvz8W5O2HuRH8CAB58lZlZ5VHg24by42v YwAgMh23CaMZDNRZ2dxRsO0DyVPJt5LhtLv5dfs1giBu1Eg7t3tuAXGXru1jBh78 uk4AVLuLGHXGC77NNTzftPFmnOyJ6DxB -----END CERTIFICATE-----Generated at Thu Jul 3 10:40:35 2025 by rpki-client