$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: SfoisrSyvcGtspDl5CVpU9Pyw0xV+m54or1pjruKFIc= Subject key identifier: AC:A7:68:8B:2A:E9:C3:1C:6E:2C:0F:ED:A4:41:AC:9D:D3:93:9B:C4 Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 04FA Signing time: Thu 03 Jul 2025 00:01:09 +0000 Manifest this update: Thu 03 Jul 2025 00:01:08 +0000 Manifest next update: Thu 10 Jul 2025 00:01:08 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: aRLS/v30ZWSo1ttjX8Er44wMQrOJ4Y1rkjSWcXsE3q0=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: Jul 3 00:01:08 2025 GMT Not After : Jul 10 00:01:08 2025 GMT Subject: CN=6865c845-641a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:6f:85:78:1f:64:ed:ad:3d:3f:1e:e4:a0: 8f:2e:22:60:13:50:15:e4:78:00:ed:8b:c1:34:26: 21:28:29:75:22:0e:b2:f2:6b:58:0e:91:e3:69:ed: 5f:be:5d:2f:52:83:c0:e3:ff:9c:64:5a:21:5d:6c: d3:c4:a0:0e:19:52:07:0a:55:cf:2a:4a:2a:1f:77: 6a:37:ff:7e:45:58:0f:cd:9d:4b:6d:cd:2c:a3:72: 0f:4d:ee:43:1a:4e:66:8d:3f:68:24:97:6a:6e:b9: 31:0d:2b:b5:a1:1d:d6:9d:31:36:69:29:0a:1d:73: 0a:b2:45:77:91:c4:77:eb:81:72:f3:cd:b6:38:53: 20:4d:d9:a2:24:82:c0:b6:64:55:d3:04:54:e9:4c: ab:8e:14:a2:2b:29:a5:1a:10:31:87:79:f4:e3:c0: e7:93:65:5e:37:0b:0f:d1:d6:04:ab:c7:78:b6:ec: 00:d9:ab:74:f2:dc:8b:84:a9:58:eb:05:fd:b2:74: 75:ee:d4:3c:6e:c7:e8:5f:f9:67:eb:77:a6:12:52: 71:c0:c2:f0:4b:23:c5:d1:85:87:ee:7b:cf:3f:13: 68:40:05:25:27:1c:e9:5a:e3:60:9b:b8:06:96:ea: 7c:70:d3:ee:d9:35:73:ea:de:9e:59:10:f4:72:cf: 94:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:68:8B:2A:E9:C3:1C:6E:2C:0F:ED:A4:41:AC:9D:D3:93:9B:C4 X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3c:f1:c5:6e:9f:35:4c:cc:6d:ee:3b:be:72:be:db:28:02: b6:a4:d2:45:91:6d:2f:82:a5:35:10:bd:69:85:29:c5:62:eb: 76:4f:3f:9b:29:e3:a6:22:b9:ca:94:aa:af:54:6c:e1:95:b3: 30:6a:7c:ae:24:96:74:03:a3:17:ae:af:cf:b9:84:86:78:a4: 1e:57:cb:7b:84:ef:d1:57:56:5a:eb:c8:06:66:76:4e:da:9c: a4:22:48:80:86:91:70:50:3e:14:7e:10:97:9e:70:8a:65:a0: e8:3c:bb:51:52:bd:dd:a0:07:5b:d7:10:84:43:96:5d:e5:94: 05:ab:db:d3:5f:74:7d:5a:65:57:84:c3:7c:5f:e2:12:50:a5: 73:c3:78:3a:12:94:e0:d8:5a:3f:dd:cb:0f:23:0d:ee:2c:27: 2c:2d:93:54:41:88:0a:98:a8:4c:90:64:ee:0a:67:27:7b:00: 80:30:2e:bd:6d:7d:f3:2c:88:31:d3:c9:d7:5d:b9:b2:51:a3: 4f:e9:89:70:a5:f3:b8:30:57:ca:db:73:1f:71:2e:17:b7:c8: be:ac:be:38:ee:ee:86:5f:23:40:a6:f1:62:58:67:c5:58:8c: 91:52:55:dd:87:b8:38:51:0d:7e:2a:63:f1:df:95:a9:f1:99: e6:3c:dd:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUwNzAzMDAwMTA4WhcNMjUwNzEwMDAwMTA4WjAYMRYwFAYD VQQDEw02ODY1Yzg0NS02NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdFvhXgfZO2tPT8e5KCPLiJgE1AV5HgA7YvBNCYhKCl1Ig6y8mtYDpHjae1f vl0vUoPA4/+cZFohXWzTxKAOGVIHClXPKkoqH3dqN/9+RVgPzZ1Lbc0so3IPTe5D Gk5mjT9oJJdqbrkxDSu1oR3WnTE2aSkKHXMKskV3kcR364Fy8822OFMgTdmiJILA tmRV0wRU6UyrjhSiKymlGhAxh3n048Dnk2VeNwsP0dYEq8d4tuwA2at08tyLhKlY 6wX9snR17tQ8bsfoX/ln63emElJxwMLwSyPF0YWH7nvPPxNoQAUlJxzpWuNgm7gG lup8cNPu2TVz6t6eWRD0cs+UsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKynaIsq 6cMcbiwP7aRBrJ3Tk5vEMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsPPHFbp81TMxt7ju+cr7bKAK2pNJFkW0vgqU1EL1phSnFYut2Tz+b KeOmIrnKlKqvVGzhlbMwanyuJJZ0A6MXrq/PuYSGeKQeV8t7hO/RV1Za68gGZnZO 2pykIkiAhpFwUD4UfhCXnnCKZaDoPLtRUr3doAdb1xCEQ5Zd5ZQFq9vTX3R9WmVX hMN8X+ISUKVzw3g6EpTg2Fo/3csPIw3uLCcsLZNUQYgKmKhMkGTuCmcnewCAMC69 bX3zLIgx08nXXbmyUaNP6YlwpfO4MFfK23MfcS4Xt8i+rL447u6GXyNApvFiWGfF WIyRUlXdh7g4UQ1+KmPx35Wp8ZnmPN00 -----END CERTIFICATE-----Generated at Thu Jul 3 23:30:05 2025 by rpki-client