$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: fsWILNqov0g8pt+2f2u1x07SVaiH5zdw9KXP/Fh6TOw= Subject key identifier: 98:A8:C9:AC:4D:E4:F1:8F:3F:FE:38:50:B6:13:AD:ED:1D:BB:9B:EB Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 18FD Signing time: Wed 02 Jul 2025 16:34:28 +0000 Manifest this update: Wed 02 Jul 2025 16:34:28 +0000 Manifest next update: Wed 09 Jul 2025 16:34:28 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: POWkN+5u4L3xxe71B9ySOvfHVsu4SI5ZlFk7lDEKYrU=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: CS+09tEdeSx7uIOBkaLSiPeVYQX/xw7ybPJk0cnYVHY=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: mbcYtTY7pzkjLAPzzBYkqLR1semAFFI9aiFhIVq/OQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6407 (0x1907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Jul 2 16:34:28 2025 GMT Not After : Jul 9 16:34:28 2025 GMT Subject: CN=68655f94-7dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0d:73:a7:af:e6:79:68:bc:6f:85:85:c1:8c: 4a:96:af:79:8c:97:8d:d3:71:f6:99:f9:10:e7:00: dc:f3:a8:35:14:2e:8a:a7:ce:b4:74:d3:ae:80:f0: 83:9b:d5:6c:a1:46:81:34:13:08:1f:88:bf:90:15: 5a:af:90:90:b2:f4:1a:3b:36:5f:4e:4a:21:80:05: 29:de:79:78:f3:b9:2f:2e:dc:b9:e8:72:c5:38:9d: 16:81:53:0d:2d:bf:48:d3:cc:df:7d:2e:a0:cc:e9: 92:94:b4:86:9c:76:97:2c:24:65:f5:c4:99:83:fb: 0a:bd:27:6e:bd:a3:f5:1f:2c:6a:40:00:3e:66:af: 27:7a:8a:0e:f7:43:c8:ff:e5:d6:ec:db:bc:62:d9: 81:6d:70:e0:7c:08:14:da:0d:e4:22:cf:fc:6e:88: 39:52:9d:87:4f:82:9d:cc:7a:05:e4:92:cb:7d:d0: c1:17:06:a6:52:01:fa:14:e4:4e:4d:27:82:9c:5e: c5:55:20:0f:3f:a8:31:88:cd:9b:4c:d9:7d:f6:47: 32:07:35:73:1b:b6:a6:29:ce:ad:b4:c7:09:11:e1: b9:1e:80:21:f8:16:84:99:2e:6f:99:34:35:0e:8c: 9a:6b:f8:f5:21:a4:33:8f:47:4b:1a:72:3e:74:f2: 8d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A8:C9:AC:4D:E4:F1:8F:3F:FE:38:50:B6:13:AD:ED:1D:BB:9B:EB X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:f2:01:fe:90:26:81:d1:30:56:b2:1d:d7:af:ae:6e:b9:c8: 91:4c:57:7b:29:d9:5a:69:08:0a:4b:2f:03:f9:33:de:e4:4c: f1:54:b9:01:89:ee:87:a7:ab:e5:19:bb:df:8e:5a:04:c0:e0: a5:d6:db:2d:cc:85:d0:4c:df:4e:cb:6a:9e:77:12:68:7b:89: b1:cd:53:04:80:73:12:69:00:62:34:25:ff:b8:8d:24:64:f2: 29:46:cb:50:65:68:4e:cb:1e:5b:b8:6a:e8:f1:bd:88:7f:e4: e1:15:04:54:5e:e5:d5:5f:d9:1c:43:bf:da:3a:19:02:01:c9: 38:e9:bb:aa:7c:a1:22:c7:5d:b6:2c:6a:09:40:b1:09:15:dc: 7d:cc:86:6e:d4:e9:96:63:af:b5:59:7b:d1:de:3f:91:c2:44: 75:ae:21:5e:c1:6a:e9:56:c2:89:fe:d8:78:76:c4:db:cd:16: ba:cd:c8:fc:a5:4a:7b:66:ae:ed:d7:c5:98:c2:6f:01:d2:9c: 34:4a:01:c6:1b:9e:0e:bf:a8:0f:d9:c1:95:90:c8:c2:dd:cf: 0a:64:e1:b7:14:f5:d9:f1:c5:af:4c:7f:33:07:7c:d7:9f:c4: be:f5:32:d8:f4:8b:d4:4c:9d:94:c6:82:b8:10:7f:39:3b:9e: 5c:d8:15:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUwNzAyMTYzNDI4WhcNMjUwNzA5MTYzNDI4WjAYMRYwFAYD VQQDEw02ODY1NWY5NC03ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3A1zp6/meWi8b4WFwYxKlq95jJeN03H2mfkQ5wDc86g1FC6Kp860dNOugPCD m9VsoUaBNBMIH4i/kBVar5CQsvQaOzZfTkohgAUp3nl487kvLty56HLFOJ0WgVMN Lb9I08zffS6gzOmSlLSGnHaXLCRl9cSZg/sKvSduvaP1HyxqQAA+Zq8neooO90PI /+XW7Nu8YtmBbXDgfAgU2g3kIs/8bog5Up2HT4KdzHoF5JLLfdDBFwamUgH6FORO TSeCnF7FVSAPP6gxiM2bTNl99kcyBzVzG7amKc6ttMcJEeG5HoAh+BaEmS5vmTQ1 Doyaa/j1IaQzj0dLGnI+dPKNuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJioyaxN 5PGPP/44ULYTre0du5vrMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR8gH+kCaB0TBWsh3Xr65uuciRTFd7KdlaaQgKSy8D+TPe5EzxVLkB ie6Hp6vlGbvfjloEwOCl1tstzIXQTN9Oy2qedxJoe4mxzVMEgHMSaQBiNCX/uI0k ZPIpRstQZWhOyx5buGro8b2If+ThFQRUXuXVX9kcQ7/aOhkCAck46buqfKEix122 LGoJQLEJFdx9zIZu1OmWY6+1WXvR3j+RwkR1riFewWrpVsKJ/th4dsTbzRa6zcj8 pUp7Zq7t18WYwm8B0pw0SgHGG54Ov6gP2cGVkMjC3c8KZOG3FPXZ8cWvTH8zB3zX n8S+9TLY9IvUTJ2UxoK4EH85O55c2BWX -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:20 2025 by rpki-client