$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft File: IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json) Hash identifier: blaReWeu6x8Uiqqfp5AuSDyS42BL8xKvzHJQxeFg90w= Subject key identifier: 8A:A0:72:53:89:47:D7:E5:C2:56:9A:49:3D:FF:46:3F:0C:28:9E:81 Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft Manifest number: 031C Signing time: Thu 03 Jul 2025 01:33:35 +0000 Manifest this update: Thu 03 Jul 2025 01:33:34 +0000 Manifest next update: Thu 10 Jul 2025 01:33:34 +0000 Files and hashes: 1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: nPKC9LsTImEXD2SNmd0exfFr4wxMtw1ObqC54RO5TrQ=) 2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: du3inK9qkjwR/A2n6vO6SMQjDynHJ0y0PAziJifzAng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Validity Not Before: Jul 3 01:33:34 2025 GMT Not After : Jul 10 01:33:34 2025 GMT Subject: CN=6865ddee-c71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:b4:4e:45:d6:02:48:68:4d:5a:c5:a6:a9: db:53:0a:b1:54:93:0a:1d:e6:0f:5a:96:71:44:da: 52:a4:e6:3b:ba:7a:0b:a8:4c:9a:2a:1a:ae:73:7d: 3b:16:0c:9b:3b:8c:ff:2c:17:ce:f8:93:76:26:48: 3c:99:7e:0c:da:e7:b0:e1:d9:58:ac:8f:78:b5:71: 40:6d:6f:4a:f4:62:08:b5:89:46:47:4c:d4:b3:ae: be:cc:4c:f8:69:0d:f7:7e:a7:e9:3f:9d:a9:8b:4e: 28:61:ec:9e:6e:2d:4e:bb:cc:f3:ec:f5:9b:20:07: bb:10:17:bc:c2:35:d5:98:d2:15:b3:99:23:57:4a: 68:69:d3:af:6a:75:7c:2f:de:6d:ea:ac:b1:3a:5b: 9a:5a:2d:e5:49:20:cf:c1:aa:4b:63:4c:4a:05:b7: 58:75:89:34:dd:6f:c5:bd:d2:59:67:15:f3:69:61: ad:2b:94:3f:4a:62:01:52:02:62:24:90:20:6a:a3: 9d:a6:d8:40:53:d7:3d:19:86:e0:39:69:45:a0:ad: 5d:31:6b:9d:33:2b:3a:c1:bc:c2:42:2b:c0:e4:1f: 26:d4:52:a2:11:3d:5c:8b:8a:6a:fb:ed:8d:09:67: 39:0b:ba:62:68:0e:08:e7:76:7f:81:6b:91:e3:73: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A0:72:53:89:47:D7:E5:C2:56:9A:49:3D:FF:46:3F:0C:28:9E:81 X509v3 Authority Key Identifier: keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:43:6d:53:ea:72:c7:17:21:cb:83:c9:bf:d8:de:97:cd:63: 4e:56:44:66:7a:7d:93:1a:79:97:30:2f:87:52:52:9d:4c:8b: 76:b1:a7:83:4b:48:5b:19:2c:ba:a7:20:de:b0:3b:11:a5:31: 99:f4:79:a3:39:1c:f3:f4:d7:22:69:6e:03:40:66:99:bf:1c: ef:35:d5:f6:cb:66:86:4e:13:72:62:ee:cc:0c:81:14:6a:64: f1:15:36:8e:0b:b5:9f:e9:d1:49:9b:cf:51:f1:d8:97:19:3c: de:92:58:8b:1d:31:23:73:50:22:66:a0:e8:30:4a:79:8b:fd: 00:ca:73:b5:f4:62:e0:90:3d:25:d3:31:92:f4:fe:b1:4a:0e: 52:98:50:c7:00:e1:33:e2:93:a5:35:53:16:4d:cf:13:dc:06: 89:41:62:83:9a:39:0a:56:9a:42:d4:8c:6a:fc:65:ab:f5:b5: e7:e1:8c:d1:ab:b7:6c:33:b9:19:8c:1a:9c:8b:b1:82:94:40: ce:d4:86:43:0b:65:f4:f5:59:d9:d2:b4:84:8f:e2:9e:8f:73: c2:2a:cc:a9:e1:fc:41:4e:a0:dd:73:58:80:6b:c7:50:3f:86: 1f:d7:23:c9:83:5b:ef:0a:e5:6b:97:22:ac:4b:19:af:41:66: aa:a1:d0:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG RjFEQjY2NzUwHhcNMjUwNzAzMDEzMzM0WhcNMjUwNzEwMDEzMzM0WjAYMRYwFAYD VQQDEw02ODY1ZGRlZS1jNzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusC0TkXWAkhoTVrFpqnbUwqxVJMKHeYPWpZxRNpSpOY7unoLqEyaKhquc307 FgybO4z/LBfO+JN2Jkg8mX4M2uew4dlYrI94tXFAbW9K9GIItYlGR0zUs66+zEz4 aQ33fqfpP52pi04oYeyebi1Ou8zz7PWbIAe7EBe8wjXVmNIVs5kjV0poadOvanV8 L95t6qyxOluaWi3lSSDPwapLY0xKBbdYdYk03W/FvdJZZxXzaWGtK5Q/SmIBUgJi JJAgaqOdpthAU9c9GYbgOWlFoK1dMWudMys6wbzCQivA5B8m1FKiET1ci4pq++2N CWc5C7piaA4I53Z/gWuR43P22QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqgclOJ R9flwlaaST3/Rj8MKJ6BMB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0 RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI1NC83MjczNzVCNEQ0RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBL VVJLODJNdnhlcGpfSGJablUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQQ21T6nLHFyHLg8m/2N6XzWNOVkRmen2TGnmXMC+HUlKdTIt2saeD S0hbGSy6pyDesDsRpTGZ9HmjORzz9NciaW4DQGaZvxzvNdX2y2aGThNyYu7MDIEU amTxFTaOC7Wf6dFJm89R8diXGTzekliLHTEjc1AiZqDoMEp5i/0AynO19GLgkD0l 0zGS9P6xSg5SmFDHAOEz4pOlNVMWTc8T3AaJQWKDmjkKVppC1Ixq/GWr9bXn4YzR q7dsM7kZjBqci7GClEDO1IZDC2X09VnZ0rSEj+Kej3PCKsyp4fxBTqDdc1iAa8dQ P4Yf1yPJg1vvCuVrlyKsSxmvQWaqodAD -----END CERTIFICATE-----Generated at Fri Jul 4 02:54:33 2025 by rpki-client