$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: 3yRq8INqDVsK9iqaLTTOBWgNEKR/aL+K6/5vddLlqRk= Subject key identifier: C4:FF:B1:E1:D7:5B:F6:B3:03:2D:E7:C5:F1:43:E4:3C:34:88:98:AE Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 2792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2742 Signing time: Wed 02 Jul 2025 15:46:39 +0000 Manifest this update: Wed 02 Jul 2025 15:46:39 +0000 Manifest next update: Wed 09 Jul 2025 15:46:39 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: rFbbHrznuXcOb5JLNYLRw90BINihuiE1xcHAAPvsQAU=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: UoNQyiMbzRM8LTAnCH5+6vt93Lw53vJESQHvBWYcjss=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: cpPBl2HZl2WMGx0/E7w0QxRgBvloFKsPNiFCwchG+b8=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: E4bRuOYL0PbWjvuEwOPUx/0a/V7xxHGCiOOjV2Kufg0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: lXtCcZI3WY8OIlNn2pthb5U4nO4x25l4CIfkoHRn3ik=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: g3qXc5xzXRuZuGvrf+0l5unc13/FwmeQdJGJ36GeWJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10130 (0x2792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Jul 2 15:46:39 2025 GMT Not After : Jul 9 15:46:39 2025 GMT Subject: CN=6865545f-559d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:30:79:61:1d:a0:36:8c:07:96:00:f5:00: 84:5d:12:bb:e2:c1:c6:6a:e3:e7:39:3a:f9:18:cc: 1e:48:2e:7c:76:67:b0:30:07:d3:1e:8c:13:53:03: af:15:93:70:5a:fb:e2:c9:9c:9d:00:73:23:3e:00: 3d:eb:3f:35:62:05:c8:c3:f9:ea:92:dc:4f:42:77: 83:94:91:64:e4:4c:75:28:fa:fd:c1:10:fb:05:c2: b6:f1:3d:42:e9:29:8a:f1:9c:c9:1a:52:fa:db:53: c6:1a:ff:1d:ea:3a:b7:c9:d8:dc:95:72:78:d9:1d: 85:5d:ac:09:92:17:c3:17:a1:08:46:e3:99:2b:6a: 09:c4:1b:5c:2d:59:ac:cf:0d:90:41:68:67:9a:6c: 2e:20:64:05:ea:3e:8c:12:20:44:9d:74:7e:9e:0a: 4e:da:c4:8e:ac:7c:e2:97:9d:b0:69:e8:aa:ae:3f: 5a:09:df:a0:3d:99:5c:39:84:42:b9:d3:c1:fd:2a: 26:80:44:08:ec:91:1f:6b:b9:00:41:5e:9e:ee:65: b4:78:d6:51:e3:77:c4:7e:5d:b2:0e:22:9d:e3:ca: 52:ca:af:e8:03:f0:e1:07:e7:75:d0:8d:58:8b:83: b8:c2:ce:1a:63:f0:21:c7:6e:7f:16:88:9a:45:04: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FF:B1:E1:D7:5B:F6:B3:03:2D:E7:C5:F1:43:E4:3C:34:88:98:AE X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:13:3a:29:85:c6:f3:08:f5:0e:de:6f:64:d9:fe:5e:0a:1b: cf:69:11:81:44:7a:c1:1b:fb:3a:01:40:55:b1:94:a9:25:ed: 34:3e:0d:27:1e:8d:6c:a9:09:51:56:b3:da:c0:e7:a6:76:fb: 0e:8b:9d:c5:ca:47:28:96:89:29:7a:8f:d4:b9:02:f0:4b:17: 43:70:42:51:db:7c:52:48:a4:45:6b:3f:e7:39:c6:5c:c9:b3: db:dd:ec:a3:df:74:27:8c:b7:b1:0e:4f:b6:bb:92:f0:30:9f: ce:97:1f:9a:67:b6:f9:b9:ca:2f:ba:48:6c:ea:b4:75:98:6d: 71:2a:bc:45:39:3f:3d:38:58:a4:5e:31:12:cd:3c:4b:0a:65: 56:18:0d:3f:d0:b1:77:91:95:69:2b:6d:b0:7f:1e:9f:20:3e: 89:18:35:4a:d1:26:57:db:30:e0:93:ad:39:5a:f5:c8:25:78: fc:1a:ab:91:9b:26:6d:77:6d:bf:b4:04:59:93:ba:b0:bc:f7: b6:59:bb:83:99:5c:af:7d:17:18:a2:d6:75:af:22:33:dc:2b: c4:f7:4d:86:ec:a6:eb:3d:81:39:93:24:3e:a6:bd:7f:ba:19: 3a:b1:a0:3b:e3:75:7a:63:37:d7:04:76:1d:68:6f:34:c1:2b: e7:58:1e:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwNzAyMTU0NjM5WhcNMjUwNzA5MTU0NjM5WjAYMRYwFAYD VQQDEw02ODY1NTQ1Zi01NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGEweWEdoDaMB5YA9QCEXRK74sHGauPnOTr5GMweSC58dmewMAfTHowTUwOv FZNwWvviyZydAHMjPgA96z81YgXIw/nqktxPQneDlJFk5Ex1KPr9wRD7BcK28T1C 6SmK8ZzJGlL621PGGv8d6jq3ydjclXJ42R2FXawJkhfDF6EIRuOZK2oJxBtcLVms zw2QQWhnmmwuIGQF6j6MEiBEnXR+ngpO2sSOrHzil52waeiqrj9aCd+gPZlcOYRC udPB/SomgEQI7JEfa7kAQV6e7mW0eNZR43fEfl2yDiKd48pSyq/oA/DhB+d10I1Y i4O4ws4aY/Ahx25/FoiaRQTcOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMT/seHX W/azAy3nxfFD5Dw0iJiuMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdEzophcbzCPUO3m9k2f5eChvPaRGBRHrBG/s6AUBVsZSpJe00Pg0n Ho1sqQlRVrPawOemdvsOi53Fykcolokpeo/UuQLwSxdDcEJR23xSSKRFaz/nOcZc ybPb3eyj33QnjLexDk+2u5LwMJ/Olx+aZ7b5ucovukhs6rR1mG1xKrxFOT89OFik XjESzTxLCmVWGA0/0LF3kZVpK22wfx6fID6JGDVK0SZX2zDgk605WvXIJXj8GquR myZtd22/tARZk7qwvPe2WbuDmVyvfRcYotZ1ryIz3CvE902G7KbrPYE5kyQ+pr1/ uhk6saA743V6YzfXBHYdaG80wSvnWB4p -----END CERTIFICATE-----Generated at Fri Jul 4 14:17:29 2025 by rpki-client