$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: B0orTc4HMOvCO7ApOth50/j1aSgPhRjCq7zIhVC72E4= Subject key identifier: F8:4B:BB:AC:D8:EC:A6:84:8C:EE:5E:B7:A5:E6:37:D8:51:0B:34:F5 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 04BE Signing time: Thu 03 Jul 2025 00:13:22 +0000 Manifest this update: Thu 03 Jul 2025 00:13:21 +0000 Manifest next update: Thu 10 Jul 2025 00:13:21 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: hvqqm9UW+Guc8E8jt59pTE6gX7PFxYuDBcgsNNEdiIk=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Jul 3 00:13:21 2025 GMT Not After : Jul 10 00:13:21 2025 GMT Subject: CN=6865cb21-825c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ee:d5:ec:53:fe:a2:f5:e1:a4:48:30:61:93: 85:e2:09:ff:92:90:7b:96:55:7b:a5:4e:1d:c2:fa: 94:03:8e:f9:1f:e7:8b:d4:d1:8e:80:29:27:14:f3: b4:fe:96:cf:f4:81:bb:4d:d2:7b:76:c2:24:89:54: 40:31:02:9c:b2:53:f8:74:69:60:ea:0a:b8:2a:4f: ae:b0:4b:37:c4:53:34:cb:c5:b5:75:1e:27:d8:22: 4f:ce:b5:73:29:96:e5:6c:63:a1:7f:1f:ea:d8:8c: 83:85:0f:a3:c9:03:d1:ac:0a:6f:f0:85:d2:25:cc: af:68:07:1e:03:77:99:a1:87:dd:1c:74:6e:ba:11: 8a:ee:59:c9:6e:14:d3:ea:e3:d1:81:51:51:dc:ad: 32:de:e4:e8:d1:2c:92:e0:38:b3:06:ee:e2:4d:14: aa:da:d7:20:b6:ff:c0:f4:52:0f:91:15:03:6d:e6: f6:d8:e2:49:19:8f:03:e0:c3:b3:72:e2:2f:c9:0f: 43:e2:75:43:f0:f3:7d:cc:c0:0c:83:35:ce:5f:e9: 1f:9c:9b:06:a4:d8:2f:ad:fb:81:e2:ad:1a:e8:3b: c8:b2:2d:00:c7:7e:07:f0:7e:b6:c8:6a:2c:74:d6: b6:31:88:36:04:44:b9:11:80:5b:87:dd:28:6a:d2: ba:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4B:BB:AC:D8:EC:A6:84:8C:EE:5E:B7:A5:E6:37:D8:51:0B:34:F5 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a8:47:49:11:ab:5c:ab:72:af:b5:12:2e:03:11:ce:67:d5: 55:a8:0b:25:d4:22:ec:7b:bd:9b:8c:3a:06:bb:f8:5d:96:60: da:cf:49:f2:30:c2:bd:33:d5:73:32:00:9f:e9:2a:b6:53:06: 70:a0:17:82:39:4f:e3:ec:ef:b8:8d:4e:9a:bc:f1:2f:b8:e3: c6:58:13:e4:0e:05:d3:a2:73:50:a2:de:15:fa:af:8f:c9:40: db:40:bb:35:59:84:6f:1a:80:ed:03:82:7d:80:16:79:90:71: 8d:07:b4:8f:24:0a:bd:99:ee:35:24:d6:f2:1f:bf:b6:c3:89: 72:e5:5b:da:b5:b6:11:01:69:45:9b:0c:2d:90:c3:37:0f:80: 40:13:e9:26:b0:3a:5d:2d:36:93:a6:42:8e:b2:2e:d6:99:e1: 71:b7:f4:c3:f5:b8:f4:3f:e9:7b:2a:7f:cb:9b:e9:e1:9a:1e: 6b:a6:c6:58:9e:77:a1:15:bd:33:9c:29:cd:54:6f:28:27:18: fc:34:e7:ea:5a:c7:3f:94:1c:6b:9a:bc:be:ae:16:3b:9c:cb: 65:29:dd:86:43:cf:08:ed:cd:92:96:62:cc:19:9a:b7:c8:00: 5b:4d:2e:56:f1:f5:80:53:a9:f1:26:ca:71:3d:67:04:f4:e9: 9b:fa:1a:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUwNzAzMDAxMzIxWhcNMjUwNzEwMDAxMzIxWjAYMRYwFAYD VQQDEw02ODY1Y2IyMS04MjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3O7V7FP+ovXhpEgwYZOF4gn/kpB7llV7pU4dwvqUA475H+eL1NGOgCknFPO0 /pbP9IG7TdJ7dsIkiVRAMQKcslP4dGlg6gq4Kk+usEs3xFM0y8W1dR4n2CJPzrVz KZblbGOhfx/q2IyDhQ+jyQPRrApv8IXSJcyvaAceA3eZoYfdHHRuuhGK7lnJbhTT 6uPRgVFR3K0y3uTo0SyS4DizBu7iTRSq2tcgtv/A9FIPkRUDbeb22OJJGY8D4MOz cuIvyQ9D4nVD8PN9zMAMgzXOX+kfnJsGpNgvrfuB4q0a6DvIsi0Ax34H8H62yGos dNa2MYg2BES5EYBbh90oatK6WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhLu6zY 7KaEjO5et6XmN9hRCzT1MB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXqEdJEatcq3KvtRIuAxHOZ9VVqAsl1CLse72bjDoGu/hdlmDaz0ny MMK9M9VzMgCf6Sq2UwZwoBeCOU/j7O+4jU6avPEvuOPGWBPkDgXTonNQot4V+q+P yUDbQLs1WYRvGoDtA4J9gBZ5kHGNB7SPJAq9me41JNbyH7+2w4ly5VvatbYRAWlF mwwtkMM3D4BAE+kmsDpdLTaTpkKOsi7WmeFxt/TD9bj0P+l7Kn/Lm+nhmh5rpsZY nnehFb0znCnNVG8oJxj8NOfqWsc/lBxrmry+rhY7nMtlKd2GQ88I7c2SlmLMGZq3 yABbTS5W8fWAU6nxJspxPWcE9Omb+hoc -----END CERTIFICATE-----Generated at Thu Jul 3 16:24:55 2025 by rpki-client