$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: CY/XBEa8bcgktE4wOEtK7vrG5qMAukowVYrUuSD+yEA= Subject key identifier: B9:32:5C:48:BF:FF:F2:38:29:2F:66:09:14:EB:E8:D0:0F:FF:95:EB Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 0352 Signing time: Tue 01 Jul 2025 01:35:22 +0000 Manifest this update: Tue 01 Jul 2025 01:35:22 +0000 Manifest next update: Tue 08 Jul 2025 01:35:22 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: uL7CoAJRTP2vjI/KnCKL+GOirlxC9tdrqnFChVnJDN4=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Jul 1 01:35:22 2025 GMT Not After : Jul 8 01:35:22 2025 GMT Subject: CN=68633b5a-edae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:0f:fc:a2:2d:91:bf:b0:1f:e1:99:27:14: ff:19:7d:4e:9a:a6:48:a2:4d:b0:62:aa:d6:89:a3: 70:f8:6a:55:8d:a7:05:8a:38:b8:51:92:69:b7:a6: 50:b2:4a:97:ca:65:45:40:72:a3:66:ca:0f:ea:2c: eb:d2:c1:f9:bb:8a:3d:62:f1:68:4b:00:f9:ba:f1: a2:61:d1:e9:96:8e:0f:27:a6:05:8e:3e:c7:26:f0: e7:e2:4a:e0:e5:33:d3:80:9a:d9:15:59:d7:a2:00: 09:2d:89:90:74:9f:31:db:d9:7a:b0:83:8e:d4:52: b6:2a:52:c5:9a:21:db:0d:ce:07:fb:77:ad:f2:51: db:2f:73:13:ce:8e:d3:bd:c7:27:b9:46:7c:f3:27: c6:d2:d7:65:0c:21:f0:a1:94:1f:e6:c2:37:21:9b: 84:6f:9d:2f:af:00:df:8b:d5:ad:bc:98:1e:7a:66: f5:dd:a0:cb:73:65:6c:81:6e:32:a4:0d:b0:2a:1c: 4a:80:be:47:a8:25:b4:33:0d:4e:27:90:07:10:71: a3:e5:6b:24:11:26:80:06:ac:ef:89:ab:9c:3e:be: 7f:0c:3e:12:bf:4e:e5:81:cc:cd:20:f4:8b:12:aa: 21:80:0e:4c:e7:6a:ca:36:3d:18:34:bb:85:37:73: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:32:5C:48:BF:FF:F2:38:29:2F:66:09:14:EB:E8:D0:0F:FF:95:EB X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a7:46:e9:53:83:87:b3:14:af:b5:00:21:06:01:16:23:0e: 78:e5:13:bb:73:4b:f9:d0:37:c1:bb:04:7b:fe:5c:47:d0:b8: cb:25:bd:2c:8f:a6:65:fe:07:57:e1:f3:7f:22:42:1d:af:ce: f7:e1:81:9d:72:96:ae:43:9e:ad:35:a0:bd:3f:b9:80:6c:26: 92:32:2e:15:f9:0f:b0:0a:06:0e:41:3c:85:69:18:fc:4a:55: 6e:6c:94:ec:22:f5:16:49:3d:40:e0:63:9a:25:24:01:4b:8f: 74:a6:74:9c:1f:b4:de:7e:6e:ab:de:98:79:d1:30:c7:83:9f: c7:bc:89:57:15:fa:99:a5:f1:93:5e:fd:58:eb:3c:16:81:7e: 72:ab:14:d7:87:ad:d4:2f:b1:cf:93:da:b6:36:39:10:c2:79: c1:22:bf:e5:e1:89:5e:69:2c:e5:b3:fe:de:0a:dd:a1:de:68: 39:49:e5:d0:e6:df:30:07:5d:9a:25:2c:5d:0f:02:45:54:a8: e6:4d:f7:fd:e3:2a:31:ef:ec:f7:b7:03:14:5a:fd:91:6a:f5: 24:93:e8:b6:66:bd:06:e7:f8:9e:d2:1f:9c:93:56:64:3d:3d: 1f:ee:3b:f7:f4:9b:d6:7d:5b:b5:fb:36:c1:82:9e:c5:ab:d7: 89:ae:6a:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwNzAxMDEzNTIyWhcNMjUwNzA4MDEzNTIyWjAYMRYwFAYD VQQDEw02ODYzM2I1YS1lZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0AP/KItkb+wH+GZJxT/GX1OmqZIok2wYqrWiaNw+GpVjacFiji4UZJpt6ZQ skqXymVFQHKjZsoP6izr0sH5u4o9YvFoSwD5uvGiYdHplo4PJ6YFjj7HJvDn4krg 5TPTgJrZFVnXogAJLYmQdJ8x29l6sIOO1FK2KlLFmiHbDc4H+3et8lHbL3MTzo7T vccnuUZ88yfG0tdlDCHwoZQf5sI3IZuEb50vrwDfi9WtvJgeemb13aDLc2VsgW4y pA2wKhxKgL5HqCW0Mw1OJ5AHEHGj5WskESaABqzviaucPr5/DD4Sv07lgczNIPSL EqohgA5M52rKNj0YNLuFN3M1bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkyXEi/ //I4KS9mCRTr6NAP/5XrMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCep0bpU4OHsxSvtQAhBgEWIw545RO7c0v50DfBuwR7/lxH0LjLJb0s j6Zl/gdX4fN/IkIdr8734YGdcpauQ56tNaC9P7mAbCaSMi4V+Q+wCgYOQTyFaRj8 SlVubJTsIvUWST1A4GOaJSQBS490pnScH7Tefm6r3ph50TDHg5/HvIlXFfqZpfGT Xv1Y6zwWgX5yqxTXh63UL7HPk9q2NjkQwnnBIr/l4YleaSzls/7eCt2h3mg5SeXQ 5t8wB12aJSxdDwJFVKjmTff94yox7+z3twMUWv2RavUkk+i2Zr0G5/ie0h+ck1Zk PT0f7jv39JvWfVu1+zbBgp7Fq9eJrmrz -----END CERTIFICATE-----Generated at Thu Jul 3 00:19:46 2025 by rpki-client