$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: PCcFllcTVY6btAMyrcaAzqUmJF4n5c8JgYZzhoB5/k4= Subject key identifier: 84:2E:B6:9A:15:37:F1:0B:3B:C5:C3:91:B8:BF:4C:A1:26:1C:36:99 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 074E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 06CF Signing time: Mon 30 Jun 2025 22:48:59 +0000 Manifest this update: Mon 30 Jun 2025 22:48:58 +0000 Manifest next update: Mon 07 Jul 2025 22:48:58 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: YkHmUe63VAVd+njzNQd1JVuD6kQ8Xi41r/NJV5URNaA=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: gLMJhNvQtjkqWgYHOYJrflnpuLe5m/iNQsn8pAjqC+o=) 3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) 4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) 7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: IjGCmqfeR6dWCwkTJerprQJ5jh4UJlY6ZGEM3z029yo=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: wLYW8B6Rn+O3Hc7orBE129yGkBtSqh6g59+DMKOYlkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Jun 30 22:48:58 2025 GMT Not After : Jul 7 22:48:58 2025 GMT Subject: CN=6863145a-5de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:ab:5f:88:2e:2f:9f:8f:d4:b9:8a:73:6e: 21:21:1a:53:fb:eb:ba:eb:96:3d:64:52:87:0c:17: f3:24:84:9b:ed:54:b9:0c:ef:97:46:9d:5d:24:7e: ee:36:a9:ec:9c:34:64:f6:33:81:f7:0f:06:cc:bf: b6:97:93:84:f8:fd:30:68:ed:c1:86:5d:1e:04:8e: d1:ff:5f:c3:7a:48:c9:25:b0:30:ae:e1:df:91:1c: 27:ed:28:a7:ba:88:ae:cc:f7:f2:33:c8:07:e4:dd: 72:26:d1:cc:44:82:af:3a:a0:0c:14:db:2f:b3:72: bd:d9:69:23:91:a7:95:c2:a5:00:55:d3:c1:34:e6: 74:25:2c:fa:c2:7b:8e:33:3d:c4:2e:48:42:ab:d0: 69:cc:ed:fa:e9:09:2e:e6:bd:8a:fa:06:23:82:d1: 49:fe:1d:3b:53:70:69:51:0f:c2:30:08:29:f8:a1: e6:5d:91:5b:00:1f:99:54:63:e3:a5:d3:a4:78:68: f8:26:eb:6e:e2:2b:a9:27:3c:d9:77:43:13:fb:3b: 7c:be:33:96:07:70:59:f1:55:01:c7:ff:5f:2a:51: 00:59:18:20:d1:f1:cf:f0:7c:00:d3:34:0b:ae:a9: cf:bb:00:a0:c8:62:1a:2d:cc:01:8d:ef:24:a8:86: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:B6:9A:15:37:F1:0B:3B:C5:C3:91:B8:BF:4C:A1:26:1C:36:99 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:7d:3b:c5:b7:30:5a:fd:4b:0c:1b:78:d8:4d:30:71:52:f7: 11:47:e9:54:41:53:d2:15:ae:4e:20:63:c6:58:46:6c:62:d7: 52:14:a7:fa:67:4d:ad:b5:a8:56:c5:32:fe:b2:d5:a7:7f:a0: 3e:65:6f:d1:11:88:50:c1:71:db:4b:56:2f:da:28:39:fa:30: 5b:df:23:e0:d6:16:c9:76:63:fc:b6:cb:2f:28:42:f0:3a:ad: c8:88:79:c7:70:3b:d0:6e:db:ff:7d:8c:72:f9:d5:f3:89:e5: 60:3f:4b:0a:62:02:cd:39:b9:f0:2b:55:31:f4:a3:61:0d:58: 3c:d9:9d:f6:68:73:62:f9:80:be:7a:67:5e:50:f6:1e:5d:e7: 52:9e:98:f8:b0:34:94:37:c4:00:c9:1b:9a:38:8b:97:90:1e: 8c:4a:f2:a2:be:30:bd:c6:59:60:79:e3:6e:5a:be:2f:19:ba: 5a:25:1e:ce:ba:97:66:42:e8:76:f2:68:ac:d0:5b:04:87:e5: 08:6f:de:fd:2b:e1:d7:62:cc:32:2a:44:35:80:63:a8:2b:03: 1f:b4:56:d0:8a:37:b2:19:6a:a6:12:90:ba:8d:8d:7c:9e:e8: f0:21:06:2a:31:cf:a8:b4:9a:87:43:b5:37:af:8d:af:09:7e: a3:96:87:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwNjMwMjI0ODU4WhcNMjUwNzA3MjI0ODU4WjAYMRYwFAYD VQQDEw02ODYzMTQ1YS01ZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+arX4guL5+P1LmKc24hIRpT++u665Y9ZFKHDBfzJISb7VS5DO+XRp1dJH7u NqnsnDRk9jOB9w8GzL+2l5OE+P0waO3Bhl0eBI7R/1/DekjJJbAwruHfkRwn7Sin uoiuzPfyM8gH5N1yJtHMRIKvOqAMFNsvs3K92WkjkaeVwqUAVdPBNOZ0JSz6wnuO Mz3ELkhCq9BpzO366Qku5r2K+gYjgtFJ/h07U3BpUQ/CMAgp+KHmXZFbAB+ZVGPj pdOkeGj4Jutu4iupJzzZd0MT+zt8vjOWB3BZ8VUBx/9fKlEAWRgg0fHP8HwA0zQL rqnPuwCgyGIaLcwBje8kqIarXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQutpoV N/ELO8XDkbi/TKEmHDaZMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARfTvFtzBa/UsMG3jYTTBxUvcRR+lUQVPSFa5OIGPGWEZsYtdSFKf6 Z02ttahWxTL+stWnf6A+ZW/REYhQwXHbS1Yv2ig5+jBb3yPg1hbJdmP8tssvKELw Oq3IiHnHcDvQbtv/fYxy+dXzieVgP0sKYgLNObnwK1Ux9KNhDVg82Z32aHNi+YC+ emdeUPYeXedSnpj4sDSUN8QAyRuaOIuXkB6MSvKivjC9xllgeeNuWr4vGbpaJR7O updmQuh28mis0FsEh+UIb979K+HXYswyKkQ1gGOoKwMftFbQijeyGWqmEpC6jY18 nujwIQYqMc+otJqHQ7U3r42vCX6jloev -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:33 2025 by rpki-client