$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: 8C2pVCFiCzmryayVpJVX3T+RfWHdJS0HwzUEHBKQwwg= Subject key identifier: B0:38:0F:E7:5F:CB:D4:01:CD:5D:60:A6:D6:F0:40:4B:19:46:29:7A Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 0112 Signing time: Thu 03 Jul 2025 05:09:31 +0000 Manifest this update: Thu 03 Jul 2025 05:09:31 +0000 Manifest next update: Thu 10 Jul 2025 05:09:31 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: lHe8X0nni9YcP9kLqWJ+hyUR8Lt8xOC5sNwP913Ag4M=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Jul 3 05:09:31 2025 GMT Not After : Jul 10 05:09:31 2025 GMT Subject: CN=6866108b-d9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:36:ba:06:f3:78:0a:5f:b6:59:d5:91:5b: e4:ba:a7:ce:af:cc:b7:de:b4:8f:0d:70:f3:72:59: 78:13:ff:22:25:7e:ca:2d:aa:46:89:93:82:fe:c8: f8:00:84:bd:a3:5e:55:a3:83:c0:f0:0e:76:0a:eb: 55:3d:b7:97:5b:a5:7d:40:c7:6a:fd:1a:61:23:b8: f4:0b:dc:13:df:42:57:37:59:91:2e:28:98:34:54: f9:d2:71:76:3c:72:ee:d2:23:41:87:06:ae:98:50: 69:24:76:26:d8:0b:0f:a4:26:83:37:c6:3c:1d:10: 25:64:69:cf:f4:cb:61:7e:d0:3f:c7:f7:c3:d5:f6: e8:2f:6f:4d:ec:bf:d0:1a:5a:e1:ca:6b:08:7c:8e: f1:d5:86:2c:ab:03:65:d6:30:de:cc:aa:6a:9f:8c: 08:ef:6e:e1:16:b0:14:fc:b4:0e:7a:60:31:a9:29: e7:78:a1:c2:7b:6e:c0:60:cc:24:50:5d:78:b1:1c: a4:24:f1:93:84:c4:cd:e3:ad:67:0b:f4:ef:bd:3e: bd:4b:7f:eb:c5:3c:cb:d7:a0:38:7b:44:22:4a:9e: 0c:9f:9a:5e:88:59:69:eb:82:ab:b6:47:12:4e:c0: 69:2b:cb:1b:83:22:19:6c:c5:0c:82:c3:20:5d:44: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:38:0F:E7:5F:CB:D4:01:CD:5D:60:A6:D6:F0:40:4B:19:46:29:7A X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:1f:8a:53:53:36:32:b0:b9:6b:68:ee:fc:8c:e5:50:32:99: 82:89:87:51:ff:9c:1f:26:d3:73:af:9f:47:3f:93:1a:df:b6: 9e:c4:8a:20:2a:14:f4:3c:8b:ef:b7:05:72:ce:68:3f:cc:e6: a9:cc:9f:47:6b:24:13:41:6f:9e:b1:b7:13:d0:ef:34:a1:c5: ed:fc:b3:a7:cd:3a:6f:db:5a:a5:7b:58:95:11:9a:1a:0a:15: 22:53:e5:59:0f:fe:3a:67:86:ad:b0:82:14:c2:e9:be:bc:2e: ba:94:74:5a:11:f6:91:41:ee:89:d0:24:b3:c5:eb:e5:35:57: 3b:b2:75:53:f7:c7:72:f1:99:86:d9:d7:39:94:be:35:e5:c5: 57:bf:c0:2d:b1:cd:c4:f0:4d:58:74:9f:ca:bb:54:10:2d:74: 49:f5:08:12:4d:24:80:d8:91:21:e0:24:2b:bb:58:c2:1e:43: ad:42:b0:13:3c:fd:61:28:c5:cc:00:9b:ea:9c:33:02:83:6a: 51:0e:63:cd:77:69:3c:5d:2e:70:c9:d0:e1:06:9f:25:3f:9b: 0e:00:7c:03:27:6a:a2:89:be:2b:54:0e:75:6f:e0:dd:fa:61: 93:69:ce:f8:7c:54:d9:cf:87:25:08:21:4e:47:71:96:60:2e: 52:17:7a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjUwNzAzMDUwOTMxWhcNMjUwNzEwMDUwOTMxWjAYMRYwFAYD VQQDEw02ODY2MTA4Yi1kOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHk2ugbzeApftlnVkVvkuqfOr8y33rSPDXDzcll4E/8iJX7KLapGiZOC/sj4 AIS9o15Vo4PA8A52CutVPbeXW6V9QMdq/RphI7j0C9wT30JXN1mRLiiYNFT50nF2 PHLu0iNBhwaumFBpJHYm2AsPpCaDN8Y8HRAlZGnP9MthftA/x/fD1fboL29N7L/Q GlrhymsIfI7x1YYsqwNl1jDezKpqn4wI727hFrAU/LQOemAxqSnneKHCe27AYMwk UF14sRykJPGThMTN461nC/TvvT69S3/rxTzL16A4e0QiSp4Mn5peiFlp64KrtkcS TsBpK8sbgyIZbMUMgsMgXUS4pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLA4D+df y9QBzV1gptbwQEsZRil6MB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBH4pTUzYysLlraO78jOVQMpmCiYdR/5wfJtNzr59HP5Ma37aexIog KhT0PIvvtwVyzmg/zOapzJ9HayQTQW+esbcT0O80ocXt/LOnzTpv21qle1iVEZoa ChUiU+VZD/46Z4atsIIUwum+vC66lHRaEfaRQe6J0CSzxevlNVc7snVT98dy8ZmG 2dc5lL415cVXv8Atsc3E8E1YdJ/Ku1QQLXRJ9QgSTSSA2JEh4CQru1jCHkOtQrAT PP1hKMXMAJvqnDMCg2pRDmPNd2k8XS5wydDhBp8lP5sOAHwDJ2qiib4rVA51b+Dd +mGTac74fFTZz4clCCFOR3GWYC5SF3oV -----END CERTIFICATE-----Generated at Sat Jul 5 02:24:45 2025 by rpki-client