$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft File: imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json) Hash identifier: d2GRF3JGjJuJpT4KiBegY+gcoENMqsuX1JEUz27SEes= Subject key identifier: 1E:5C:EC:B4:35:C8:B5:26:7F:B6:D2:E9:33:68:50:BD:86:FE:71:92 Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 Certificate issuer: /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft Manifest number: 0132 Signing time: Thu 03 Jul 2025 04:37:22 +0000 Manifest this update: Thu 03 Jul 2025 04:37:22 +0000 Manifest next update: Thu 10 Jul 2025 04:37:22 +0000 Files and hashes: 1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: 3bvMyBxm+ouJVcBObx+oMc31ZXFmVsSubTodHJoIn9s=) 2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: MIl/OMgyucN0EutmGHMH29cPoxdMejUcwQsKGNX20nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Validity Not Before: Jul 3 04:37:22 2025 GMT Not After : Jul 10 04:37:22 2025 GMT Subject: CN=68660902-ecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:c3:a2:4f:2c:01:1d:47:c8:10:70:38:1a: 6f:c2:d6:05:80:c8:7a:6c:1e:d3:7e:2c:f6:01:22: e6:21:78:30:52:56:c4:db:43:df:f3:c8:86:e6:00: eb:f0:00:0e:d3:96:b8:73:cf:50:d4:1d:b5:c9:f4: 5f:91:ec:13:88:a5:e4:9c:11:3f:dc:c4:d4:89:06: 0b:6c:96:fe:45:2a:9c:21:56:1b:df:33:58:18:ac: cc:06:1a:96:0f:2c:12:13:be:26:79:a2:f3:a1:1c: 30:d5:73:e2:af:76:29:f7:45:8f:3d:68:a9:85:a4: 09:7d:c5:db:d9:c8:8e:c5:7c:d0:df:c1:84:0e:b4: 5c:d9:e3:36:f8:da:c4:72:2e:26:59:e8:46:00:0a: 24:55:8f:79:3b:da:01:6d:6f:0d:41:2b:54:e2:43: af:0d:57:32:c7:08:78:f0:9d:bb:f4:9a:a1:22:75: 26:23:57:40:5b:47:2e:21:9f:12:7e:5f:4e:d1:5c: 45:1d:ea:98:86:ee:4b:69:90:5c:9f:26:93:12:e9: c4:2c:be:1c:73:dc:d1:74:d3:5f:3a:6b:87:8b:25: 68:e0:56:cf:ba:86:79:06:ce:4c:b4:05:30:d9:7b: c4:fa:8f:cc:6d:08:3d:1c:a0:09:a8:0d:77:7b:6c: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5C:EC:B4:35:C8:B5:26:7F:B6:D2:E9:33:68:50:BD:86:FE:71:92 X509v3 Authority Key Identifier: keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a1:8b:ed:ed:78:cb:8e:84:07:89:75:c0:24:6e:d4:3d:9b: 34:55:d8:7c:84:87:c5:9f:4d:ee:39:75:e5:e2:ec:0d:79:4d: 97:a5:eb:af:ce:a5:36:b5:06:f5:6b:59:42:4a:5a:f7:b4:c8: 67:3c:c8:c9:74:36:b5:c6:1d:81:0c:fb:36:00:43:51:4c:18: d7:96:2e:28:d3:9e:35:ea:8e:ac:fe:a5:da:81:62:f5:da:28: 9c:ba:81:a1:02:47:87:84:3d:2d:e8:14:82:5c:30:7d:3a:6e: 21:93:3a:25:ed:05:c6:cf:26:13:8c:0f:0e:70:55:fd:40:0d: 38:79:cc:ac:a4:6e:92:f2:29:c1:9d:7a:29:f8:fa:6e:81:e7: fa:54:c4:26:0d:30:3b:68:75:bc:77:f1:f2:ac:07:33:c4:7a: 29:51:ee:11:5d:d9:45:86:64:66:06:ae:0b:35:54:17:d4:f3: 2d:64:39:4b:69:f0:63:a4:e0:23:3e:fd:25:c9:2f:1c:f9:41: 62:10:88:8d:37:d8:ce:7f:e0:7e:2b:9a:e5:12:50:ac:64:e3: b3:fe:33:48:6b:84:18:4c:22:ea:de:48:b0:d6:8d:e9:1a:fe: 4e:a2:cb:d5:c3:e7:60:7c:91:4d:e6:9a:8e:de:55:06:c3:01: f5:25:ce:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI0QzUxMTAvBgNVBAUTKDhBNjIxQkM3N0EzREQ0MTcwQ0I5MTAzRkY4Nzg4QkM5 MDkwMDgyRDEwHhcNMjUwNzAzMDQzNzIyWhcNMjUwNzEwMDQzNzIyWjAYMRYwFAYD VQQDEw02ODY2MDkwMi1lY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmLDok8sAR1HyBBwOBpvwtYFgMh6bB7Tfiz2ASLmIXgwUlbE20Pf88iG5gDr 8AAO05a4c89Q1B21yfRfkewTiKXknBE/3MTUiQYLbJb+RSqcIVYb3zNYGKzMBhqW DywSE74meaLzoRww1XPir3Yp90WPPWiphaQJfcXb2ciOxXzQ38GEDrRc2eM2+NrE ci4mWehGAAokVY95O9oBbW8NQStU4kOvDVcyxwh48J279JqhInUmI1dAW0cuIZ8S fl9O0VxFHeqYhu5LaZBcnyaTEunELL4cc9zRdNNfOmuHiyVo4FbPuoZ5Bs5MtAUw 2XvE+o/MbQg9HKAJqA13e2ynDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5c7LQ1 yLUmf7bS6TNoUL2G/nGSMB8GA1UdIwQYMBaAFIpiG8d6PdQXDLkQP/h4i8kJAILR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjRDNS9EMUUyRDk2ODgz NTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFCY011UkFfLUhpTHlRa0Fn dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltSWJ4M285MUJjTXVSQV8tSGlMeVFrQWd0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjRDNS9EMUUyRDk2ODgzNTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFC Y011UkFfLUhpTHlRa0FndEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHoYvt7XjLjoQHiXXAJG7UPZs0Vdh8hIfFn03uOXXl4uwNeU2Xpeuv zqU2tQb1a1lCSlr3tMhnPMjJdDa1xh2BDPs2AENRTBjXli4o05416o6s/qXagWL1 2iicuoGhAkeHhD0t6BSCXDB9Om4hkzol7QXGzyYTjA8OcFX9QA04ecyspG6S8inB nXop+Ppugef6VMQmDTA7aHW8d/HyrAczxHopUe4RXdlFhmRmBq4LNVQX1PMtZDlL afBjpOAjPv0lyS8c+UFiEIiNN9jOf+B+K5rlElCsZOOz/jNIa4QYTCLq3kiw1o3p Gv5OosvVw+dgfJFN5pqO3lUGwwH1Jc40 -----END CERTIFICATE-----Generated at Fri Jul 4 13:37:21 2025 by rpki-client