$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft File: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json) Hash identifier: inokbyXT681ACRPxrmyMl2qH98eC7jU7cT7qiIC6b0c= Subject key identifier: 9E:F4:A5:2D:2A:38:FC:02:1A:4F:00:34:63:C6:0B:D0:92:1B:1C:B5 Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 Certificate issuer: /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934 Certificate serial: 0C09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft Manifest number: 0C02 Signing time: Wed 02 Jul 2025 18:57:51 +0000 Manifest this update: Wed 02 Jul 2025 18:57:51 +0000 Manifest next update: Wed 09 Jul 2025 18:57:51 +0000 Files and hashes: 1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: P9zHnJF1n6P9A5CBrrUq55Zexti8jFDglenBLsOIJo8=) 2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: LIAL0RVUWvTNgpPqawClJ1GtfpOkeD0nFPnq/+uTw9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934 Validity Not Before: Jul 2 18:57:51 2025 GMT Not After : Jul 9 18:57:51 2025 GMT Subject: CN=6865812f-3319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:10:ae:db:a2:e1:3e:86:49:9e:0f:59:e6: ba:dc:97:dc:a8:88:d3:46:1d:9f:25:c2:b9:c6:a5: 09:b3:41:e6:49:9b:f4:7c:a6:40:44:35:95:2e:ec: a3:e2:3a:b7:7a:af:9d:fc:48:bb:ef:42:69:d5:39: 56:47:d3:36:23:46:5e:27:9c:f2:0e:dd:54:a6:31: 33:8a:c5:8f:d8:61:46:bf:79:b3:c9:cc:37:eb:98: 88:53:04:b7:0d:07:a3:69:2b:39:8d:dc:d0:da:5c: 27:ad:15:14:ac:cd:f5:52:9a:0b:5f:68:e7:7b:2b: e2:d8:23:20:07:8b:8d:7a:19:f9:bb:85:a2:43:93: 95:2f:6c:27:a2:6c:46:13:60:fd:c9:33:c4:73:3e: 61:58:fc:38:bb:a6:c6:a1:30:49:0e:5f:02:e8:52: 41:63:47:27:19:a6:61:54:81:22:2b:21:66:85:eb: 8e:f9:95:4d:a5:3b:99:7c:dc:46:ad:22:d0:ab:a6: 01:41:a6:38:3e:5f:ba:e4:3f:0b:94:1b:b9:f6:70: 4d:4b:1b:da:6c:9f:b0:06:8b:23:f3:bd:ba:e7:5c: 38:45:e7:99:91:39:e1:36:fe:c9:82:fd:4c:5a:4e: 90:a2:4b:b1:e5:86:36:18:bb:58:cc:5a:e9:73:21: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F4:A5:2D:2A:38:FC:02:1A:4F:00:34:63:C6:0B:D0:92:1B:1C:B5 X509v3 Authority Key Identifier: keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:d2:19:15:1a:c3:50:e8:27:39:ed:f5:85:cc:41:de:2c:b2: 38:66:67:95:eb:d4:e2:92:f7:6a:a7:44:e7:97:34:0c:7e:03: 18:2b:5d:6b:b2:fe:6d:0f:07:a1:02:ec:72:b2:65:4a:20:db: a5:dd:83:cd:53:f8:93:02:30:bf:f5:de:64:b5:47:d2:59:8b: 93:e6:aa:9f:90:a3:a8:19:12:55:a3:1d:e5:49:40:79:e4:7d: 47:28:4d:96:b4:bf:27:b0:c6:ff:48:5b:ee:45:37:c2:99:40: 4b:be:3c:a7:d5:fa:6d:b8:6b:22:89:bf:53:63:88:5a:e9:f5: 1a:27:e7:ad:aa:32:be:8c:3a:95:1b:65:d5:4b:de:ab:1c:05: bf:27:2c:07:00:5a:b3:7a:69:ed:da:b6:1c:b1:ef:14:8f:9c: 32:5f:cd:3c:d9:0f:78:32:0f:5b:e6:db:a5:24:6f:8e:1a:8e: 81:34:d6:2c:66:13:e6:03:c2:41:68:d9:24:8d:d3:25:c0:9e: b3:27:52:c5:30:9a:71:2b:13:3d:b9:c4:fe:df:5b:98:be:c2: d4:4c:b9:84:7f:64:9c:b2:c0:27:0b:3f:45:d6:db:9a:1c:f9: 1f:d1:3e:e4:2e:6a:f7:f9:fa:7d:3d:3f:05:3a:00:9d:67:90: 2b:dd:28:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwNDYxMTAvBgNVBAUTKDg5NDgwOTYzMDk1NjkyNDM4MkNDMzlENDYwRkE0NzY0 QjAxNzU5MzQwHhcNMjUwNzAyMTg1NzUxWhcNMjUwNzA5MTg1NzUxWjAYMRYwFAYD VQQDEw02ODY1ODEyZi0zMzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4UQrtui4T6GSZ4PWea63JfcqIjTRh2fJcK5xqUJs0HmSZv0fKZARDWVLuyj 4jq3eq+d/Ei770Jp1TlWR9M2I0ZeJ5zyDt1UpjEzisWP2GFGv3mzycw365iIUwS3 DQejaSs5jdzQ2lwnrRUUrM31UpoLX2jneyvi2CMgB4uNehn5u4WiQ5OVL2wnomxG E2D9yTPEcz5hWPw4u6bGoTBJDl8C6FJBY0cnGaZhVIEiKyFmheuO+ZVNpTuZfNxG rSLQq6YBQaY4Pl+65D8LlBu59nBNSxvabJ+wBosj872651w4ReeZkTnhNv7Jgv1M Wk6Qokux5YY2GLtYzFrpcyHNkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ70pS0q OPwCGk8ANGPGC9CSGxy1MB8GA1UdIwQYMBaAFIlICWMJVpJDgsw51GD6R2SwF1k0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA0Ni8zRkIwMkFFMjE0 RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2trT0N6RG5VWVBwSFpMQVhX VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVZ0pZd2xXa2tPQ3pEblVZUHBIWkxBWFdUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA0Ni8zRkIwMkFFMjE0RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2tr T0N6RG5VWVBwSFpMQVhXVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC10hkVGsNQ6Cc57fWFzEHeLLI4ZmeV69Tikvdqp0TnlzQMfgMYK11r sv5tDwehAuxysmVKINul3YPNU/iTAjC/9d5ktUfSWYuT5qqfkKOoGRJVox3lSUB5 5H1HKE2WtL8nsMb/SFvuRTfCmUBLvjyn1fptuGsiib9TY4ha6fUaJ+etqjK+jDqV G2XVS96rHAW/JywHAFqzemnt2rYcse8Uj5wyX8082Q94Mg9b5tulJG+OGo6BNNYs ZhPmA8JBaNkkjdMlwJ6zJ1LFMJpxKxM9ucT+31uYvsLUTLmEf2ScssAnCz9F1tua HPkf0T7kLmr3+fp9PT8FOgCdZ5Ar3Sji -----END CERTIFICATE-----Generated at Fri Jul 4 03:50:57 2025 by rpki-client