$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json) Hash identifier: i2AITWOhqllPaXBX9zaSZ9yVonW+eQVcJrV6/w9GCRQ= Subject key identifier: 11:44:9A:CB:D2:DB:AB:10:2F:B1:45:C0:87:79:EA:05:37:79:CB:94 Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft Manifest number: 69 Signing time: Thu 03 Jul 2025 07:14:17 +0000 Manifest this update: Thu 03 Jul 2025 07:14:17 +0000 Manifest next update: Thu 10 Jul 2025 07:14:17 +0000 Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: bK1Vx84iGJ4ZvNU2H0oEUUtwivB770u3QSA0OEYOgLA=) 2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: NJttL+qjjIMKQduatRuB9wCf9GQJviKk9JlU07XKUgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Validity Not Before: Jul 3 07:14:17 2025 GMT Not After : Jul 10 07:14:17 2025 GMT Subject: CN=68662dc9-94be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:db:8e:5d:d4:65:82:94:8b:4f:95:56:eb:6c: 1f:84:bd:bc:ab:c5:17:22:e6:a8:7b:25:db:61:d5: 20:22:20:40:44:c7:59:d9:f4:53:7f:dd:1d:e0:b5: 8d:37:45:a0:0f:97:a8:f9:77:05:56:4c:38:ef:ee: 04:2e:07:06:e7:09:42:31:d9:a8:7c:dc:d5:fe:b1: 91:89:11:92:00:96:87:42:88:b9:2b:8a:db:96:27: 13:7c:61:a5:e7:77:ba:4f:4d:01:07:54:75:46:6a: 17:ba:e0:92:2b:93:65:79:8b:10:00:44:48:34:8e: a2:fa:38:20:8d:97:5c:42:8c:c4:af:d5:63:b8:6f: c5:89:ed:e3:1b:05:40:1c:67:a7:da:a0:4b:69:f2: f8:f0:a2:6f:10:d5:dd:36:fe:a6:04:4f:64:69:27: 0a:cc:71:d9:77:5b:86:64:78:01:c3:48:dc:1b:e8: 8e:4b:76:e0:7c:77:88:f6:41:0e:76:85:00:f0:2b: 29:be:b1:af:3f:88:4f:ba:74:82:c4:11:a1:92:15: 24:dd:00:a2:71:39:4a:60:51:7b:cf:d7:d5:b3:2a: 8f:c8:94:06:b1:c3:d0:74:d3:01:42:32:e3:b2:b9: 23:b3:53:25:7d:24:20:58:78:dd:f2:72:02:a1:99: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:44:9A:CB:D2:DB:AB:10:2F:B1:45:C0:87:79:EA:05:37:79:CB:94 X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:26:7a:24:5c:54:b6:39:e9:4c:8a:a6:5d:85:eb:67:e9:2e: 83:32:cc:f6:4e:2d:77:c1:37:23:fe:f5:ed:f3:6c:c3:c8:75: f4:b3:61:83:c8:b2:30:02:33:8e:a0:57:e9:0d:a0:2b:27:6c: 0d:14:6f:d5:95:de:06:6e:23:87:f0:64:ed:29:3b:2b:34:1b: 3c:3e:84:5d:e5:3e:25:1a:07:ff:75:9b:cd:ca:bb:f1:9c:26: 44:32:46:03:06:10:be:3f:cd:d9:13:8e:3c:5f:51:8b:88:9b: f4:6b:79:7d:f2:20:60:82:92:ad:e1:8a:81:96:78:74:d9:aa: 45:5a:16:a0:ef:c5:a1:d0:61:80:a9:5f:dd:e5:59:d9:76:84: ff:5f:95:9a:ce:a9:e8:12:33:07:bf:08:96:88:b3:3e:5b:dc: e7:56:14:c7:7b:4b:00:c5:7f:af:3c:a9:38:64:b0:f5:9e:af: 30:62:35:e9:64:10:a8:9c:b9:41:3a:f8:6f:2f:b7:74:af:35: de:c0:98:af:7c:02:f5:c3:e0:ad:3d:5b:9f:9c:2e:ce:14:4b: 4e:0f:b5:55:8f:ba:96:43:fd:50:c9:37:e6:66:23:f5:f0:09: fa:bc:c7:c8:e0:10:dd:35:47:f0:0f:d5:2d:bf:6f:ed:c3:a4: c1:07:47:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODM3QjExMC8GA1UEBRMoRkEyMjgwMUM1MkFFMkE1RkM0OTFCN0NCRUJFNjhFRkNB MkM4RDFEOTAeFw0yNTA3MDMwNzE0MTdaFw0yNTA3MTAwNzE0MTdaMBgxFjAUBgNV BAMTDTY4NjYyZGM5LTk0YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi245d1GWClItPlVbrbB+EvbyrxRci5qh7Jdth1SAiIEBEx1nZ9FN/3R3gtY03 RaAPl6j5dwVWTDjv7gQuBwbnCUIx2ah83NX+sZGJEZIAlodCiLkrituWJxN8YaXn d7pPTQEHVHVGahe64JIrk2V5ixAAREg0jqL6OCCNl1xCjMSv1WO4b8WJ7eMbBUAc Z6faoEtp8vjwom8Q1d02/qYET2RpJwrMcdl3W4ZkeAHDSNwb6I5LduB8d4j2QQ52 hQDwKym+sa8/iE+6dILEEaGSFSTdAKJxOUpgUXvP19WzKo/IlAaxw9B00wFCMuOy uSOzUyV9JCBYeN3ycgKhmZvDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEUSay9Lb qxAvsUXAh3nqBTd5y5QwHwYDVR0jBBgwFoAU+iKAHFKuKl/EkbfL6+aO/KLI0dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MzdCLzE1OEQ3RjNDQjk5 QzExRUY5NjM4Rjc2OUM0RjlBRTAyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWlLQUhGS3VLbF9Fa2JmTDYtYU9fS0xJMGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MzdCLzE1OEQ3RjNDQjk5QzExRUY5NjM4Rjc2OUM0RjlBRTAyLy1pS0FIRkt1S2xf RWtiZkw2LWFPX0tMSTBkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJAmeiRcVLY56UyKpl2F62fpLoMyzPZOLXfBNyP+9e3zbMPIdfSzYYPI sjACM46gV+kNoCsnbA0Ub9WV3gZuI4fwZO0pOys0Gzw+hF3lPiUaB/91m83Ku/Gc JkQyRgMGEL4/zdkTjjxfUYuIm/RreX3yIGCCkq3hioGWeHTZqkVaFqDvxaHQYYCp X93lWdl2hP9flZrOqegSMwe/CJaIsz5b3OdWFMd7SwDFf688qThksPWerzBiNelk EKicuUE6+G8vt3SvNd7AmK98AvXD4K09W5+cLs4US04PtVWPupZD/VDJN+ZmI/Xw Cfq8x8jgEN01R/AP1S2/b+3DpMEHR0M= -----END CERTIFICATE-----Generated at Fri Jul 4 21:52:30 2025 by rpki-client