$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json) Hash identifier: 2yG8+qXmD7Qymz2YXCicXzhR5JDM4XuIjIdWMCHzLF8= Subject key identifier: 6F:16:C8:E9:F4:16:C0:A3:E3:56:30:C1:91:6F:99:0A:49:90:06:9D Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft Manifest number: 0BBE Signing time: Wed 02 Jul 2025 19:09:07 +0000 Manifest this update: Wed 02 Jul 2025 19:09:07 +0000 Manifest next update: Wed 09 Jul 2025 19:09:07 +0000 Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: AwoNUINBFDc79rH3XZUb6jqdrJOSI82Ep+ebP9kTLIY=) 2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: ygQ6vfqXgCOjWaI/M9+8sSQcLe6CReohgnbLpV4rvKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Validity Not Before: Jul 2 19:09:07 2025 GMT Not After : Jul 9 19:09:07 2025 GMT Subject: CN=686583d3-659b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:ff:2d:d7:cc:11:90:17:51:03:19:1d:72: 14:de:93:fb:ba:b4:c7:4b:88:a9:6b:c3:b2:7a:ca: 67:21:ae:44:df:0e:c0:c7:70:b1:20:f2:cd:75:fe: c4:70:ef:66:2c:8d:a0:a0:b6:a7:dc:54:94:cb:2c: 22:e6:84:1d:06:e2:7f:4a:b6:59:2c:54:0d:bf:fd: 54:cc:9e:10:5c:34:48:c9:3c:3b:a4:0e:f1:1a:62: bc:ba:11:79:a4:27:a1:f9:f8:5d:21:f1:c7:d5:d5: 0a:c2:d5:7d:a7:e7:93:0d:cc:2b:fe:71:cf:7d:81: 4c:f8:80:07:f6:c4:df:da:5a:23:4e:5d:5d:22:4a: 03:2f:e4:57:ec:0d:6a:02:b9:76:18:a3:3a:b2:df: c1:f9:6d:35:73:18:b1:6e:7a:15:57:a6:83:38:d0: bb:53:be:fc:23:3c:9d:11:ae:1a:8c:4a:38:34:84: 3b:49:78:24:f9:7b:95:f8:09:cd:9f:36:d6:f4:be: 7a:21:d1:9e:a9:fe:c5:cf:f1:71:7d:b4:f0:dd:c4: 39:5b:25:1e:c3:a3:9b:d5:41:ba:7a:16:2c:93:44: 4c:60:fd:1a:c3:87:63:0f:99:90:19:a5:ce:e5:e7: 06:3a:2a:26:5f:3a:95:90:79:9b:c7:22:1e:c3:71: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:16:C8:E9:F4:16:C0:A3:E3:56:30:C1:91:6F:99:0A:49:90:06:9D X509v3 Authority Key Identifier: keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:58:ef:6e:4a:1d:34:27:a6:81:96:28:44:99:62:a0:1d:7f: c5:37:e6:2c:21:6d:39:c5:0d:11:5e:57:3e:a7:b0:7b:2b:88: 9d:b3:ac:6d:79:fc:b5:dd:14:d6:e3:4f:42:30:99:f2:78:65: 56:3b:73:df:13:c4:5c:aa:fe:58:fd:ea:3f:79:fe:f8:e1:88: 8e:24:3e:bc:fb:1e:ea:11:49:d2:f1:00:fd:96:24:89:76:52: 5a:82:63:90:de:27:14:b7:d9:fe:b4:eb:83:ce:65:26:96:ba: 44:b5:48:27:44:1a:76:b4:8f:21:60:ed:b0:c2:49:74:73:1d: 48:2a:02:a1:ed:a0:b3:2b:cd:0f:9c:5f:c7:da:bf:81:6b:e5: 1b:e1:ba:58:82:5c:76:dd:97:0d:69:8b:d4:2a:10:61:6f:f4: d9:01:c9:65:14:a4:a6:28:4d:94:e6:4d:32:e4:83:dc:b0:0a: 93:84:cf:b0:42:3e:c4:6f:c2:71:44:f9:54:17:d7:4c:12:56: 82:b4:6b:8c:c3:5a:d8:20:18:fe:40:a3:1c:b3:92:61:a4:4e: ab:cc:e3:99:26:47:7c:b9:22:94:b4:d6:01:40:46:3c:43:1d: 6b:8a:37:e0:fc:48:2c:69:58:c7:75:32:0c:b1:59:98:d0:62: e1:65:83:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAyRDIyNzNEMDM0 RDE0MTRCMkQwHhcNMjUwNzAyMTkwOTA3WhcNMjUwNzA5MTkwOTA3WjAYMRYwFAYD VQQDEw02ODY1ODNkMy02NTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgL/LdfMEZAXUQMZHXIU3pP7urTHS4ipa8OyespnIa5E3w7Ax3CxIPLNdf7E cO9mLI2goLan3FSUyywi5oQdBuJ/SrZZLFQNv/1UzJ4QXDRIyTw7pA7xGmK8uhF5 pCeh+fhdIfHH1dUKwtV9p+eTDcwr/nHPfYFM+IAH9sTf2lojTl1dIkoDL+RX7A1q Arl2GKM6st/B+W01cxixbnoVV6aDONC7U778IzydEa4ajEo4NIQ7SXgk+XuV+AnN nzbW9L56IdGeqf7Fz/FxfbTw3cQ5WyUew6Ob1UG6ehYsk0RMYP0aw4djD5mQGaXO 5ecGOiomXzqVkHmbxyIew3EKrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8WyOn0 FsCj41YwwZFvmQpJkAadMB8GA1UdIwQYMBaAFOyCsZ+QeYbes7uALSJz0DTRQUst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDQS84MTM4NjA0NjIx ODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0Nnp1NEF0SW5QUU5ORkJT eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJS3huNUI1aHQ2enU0QXRJblBRTk5GQlN5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0 Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlWO9uSh00J6aBlihEmWKgHX/FN+YsIW05xQ0RXlc+p7B7K4ids6xt efy13RTW409CMJnyeGVWO3PfE8Rcqv5Y/eo/ef744YiOJD68+x7qEUnS8QD9liSJ dlJagmOQ3icUt9n+tOuDzmUmlrpEtUgnRBp2tI8hYO2wwkl0cx1IKgKh7aCzK80P nF/H2r+Ba+Ub4bpYglx23ZcNaYvUKhBhb/TZAcllFKSmKE2U5k0y5IPcsAqThM+w Qj7Eb8JxRPlUF9dMElaCtGuMw1rYIBj+QKMcs5JhpE6rzOOZJkd8uSKUtNYBQEY8 Qx1rijfg/EgsaVjHdTIMsVmY0GLhZYPZ -----END CERTIFICATE-----Generated at Wed Jul 2 23:31:17 2025 by rpki-client