$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json) Hash identifier: 3ziie5mSQTZsZSu4m8JFNmTgwZCzEU6ujNyVfNfy2sQ= Subject key identifier: 17:B0:66:90:61:61:AB:F9:4D:BE:4C:16:D0:C7:EE:F7:14:13:D0:D3 Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft Manifest number: 76 Signing time: Tue 01 Jul 2025 07:33:42 +0000 Manifest this update: Tue 01 Jul 2025 07:33:42 +0000 Manifest next update: Tue 08 Jul 2025 07:33:42 +0000 Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: 0J/QQ1eHLRASlfY29zz67qKwMxsCXpyfhZFVgJTYQgk=) 2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: S974N0P9f8Bg6Jc7BIscRXeUqpVDlIBE/NP1Bo0j0PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Validity Not Before: Jul 1 07:33:42 2025 GMT Not After : Jul 8 07:33:42 2025 GMT Subject: CN=68638f56-c42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:54:32:cc:ca:b6:0b:00:0b:5f:20:7a:4b: aa:71:1d:25:2b:0b:07:92:f5:32:be:97:69:07:4f: 6d:43:60:8b:54:9e:f1:c2:fc:87:7f:94:25:69:93: 20:2a:20:ab:ad:96:3c:92:ec:18:ab:e1:e0:45:d3: 3b:28:05:25:ac:a7:51:99:d5:f3:94:f6:a6:60:26: db:ae:97:d0:d9:b0:81:93:71:8d:5e:fe:17:d8:23: 5f:55:be:33:71:b4:60:8a:74:7a:1c:48:e3:e0:ac: bc:3d:ef:29:fc:e1:56:95:b3:3e:ea:d1:17:e9:3f: ee:a7:23:c6:94:c3:87:cb:d4:51:b9:0a:71:1d:ce: a2:3a:1e:59:61:1b:b0:01:84:6f:a3:b9:ed:82:82: b2:0a:9c:fc:20:e9:1c:35:63:cf:94:78:e0:85:7b: d8:3c:75:a8:92:75:ac:8a:36:13:7e:98:1b:2e:cc: 44:75:87:b5:d7:b2:0f:95:a3:54:06:dd:2b:ed:94: f2:91:65:06:f6:6f:31:f6:8e:6b:0c:8a:75:df:b0: 56:3b:18:44:fe:3d:7b:a8:18:58:f4:b7:a2:09:df: 5a:30:53:58:1f:fb:1d:13:20:ce:e2:7a:f9:44:ca: 71:7d:f6:cf:24:36:4a:5b:8e:6c:79:77:15:77:86: af:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B0:66:90:61:61:AB:F9:4D:BE:4C:16:D0:C7:EE:F7:14:13:D0:D3 X509v3 Authority Key Identifier: keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0d:32:36:8c:7f:4d:5a:fa:47:b9:ef:cd:45:98:2f:31:aa: b2:6d:36:f4:e5:1d:cf:c5:51:fa:30:3e:69:f7:e0:e9:95:ae: a8:e9:e9:04:67:f1:bf:b6:ac:0b:aa:33:35:a7:b8:75:65:67: 8b:ce:d5:c7:ab:83:b0:24:24:f2:8f:4b:f9:de:33:f3:c6:e0: 2a:cc:9a:20:e4:37:af:af:44:af:33:1d:d3:c9:c6:44:fb:73: 9a:8c:41:13:95:b8:3c:5a:bc:83:74:a8:dc:37:45:ed:12:b0: 1f:5b:2e:95:93:53:d4:88:95:b5:e2:29:94:da:e9:38:79:00: 4b:33:ce:c7:12:4c:93:f8:f4:7f:0a:09:6d:93:01:96:28:68: 42:f8:60:c0:14:d1:ee:c4:96:a1:e5:7a:aa:8b:6a:2a:c1:e5: 44:d3:70:89:83:2b:90:58:71:87:7e:cc:d6:30:29:b9:e6:1d: bb:b3:19:f8:1a:9e:79:59:5a:e9:8d:44:71:f2:cb:6e:3d:91: 2e:1b:d9:0b:89:39:83:ea:a2:d5:25:bc:bc:80:3a:d2:0b:bf: 7b:8c:58:86:ec:e1:aa:c6:b0:a7:00:8f:ef:a0:d9:bc:b9:10: 39:1c:eb:c8:3a:7a:50:f7:58:8a:4f:09:bf:20:ca:36:f4:3f: db:96:13:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzUzNzExMC8GA1UEBRMoMjEwOTQ2Q0RBOURFNzVERUY5NjA5ODk1RkJGMjFFRDg0 QzcyRjRFNzAeFw0yNTA3MDEwNzMzNDJaFw0yNTA3MDgwNzMzNDJaMBgxFjAUBgNV BAMTDTY4NjM4ZjU2LWM0MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyGlQyzMq2CwALXyB6S6pxHSUrCweS9TK+l2kHT21DYItUnvHC/Id/lCVpkyAq IKutljyS7Bir4eBF0zsoBSWsp1GZ1fOU9qZgJtuul9DZsIGTcY1e/hfYI19VvjNx tGCKdHocSOPgrLw97yn84VaVsz7q0RfpP+6nI8aUw4fL1FG5CnEdzqI6HllhG7AB hG+jue2CgrIKnPwg6Rw1Y8+UeOCFe9g8daiSdayKNhN+mBsuzER1h7XXsg+Vo1QG 3SvtlPKRZQb2bzH2jmsMinXfsFY7GET+PXuoGFj0t6IJ31owU1gf+x0TIM7ievlE ynF99s8kNkpbjmx5dxV3hq8zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF7BmkGFh q/lNvkwW0Mfu9xQT0NMwHwYDVR0jBBgwFoAUIQlGzanedd75YJiV+/Ie2Exy9Ocw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3Lzg3REQ1NDhDQTI3 MTExRUZBMzkyRjA3OUM0RjlBRTAyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlP Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVFsR3phbmVkZDc1WUppVi1fSWUyRXh5OU9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTM3Lzg3REQ1NDhDQTI3MTExRUZBMzkyRjA3OUM0RjlBRTAyL0lRbEd6YW5lZGQ3 NVlKaVYtX0llMkV4eTlPYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0NMjaMf01a+ke5781FmC8xqrJtNvTlHc/FUfowPmn34OmVrqjp6QRn 8b+2rAuqMzWnuHVlZ4vO1cerg7AkJPKPS/neM/PG4CrMmiDkN6+vRK8zHdPJxkT7 c5qMQROVuDxavIN0qNw3Re0SsB9bLpWTU9SIlbXiKZTa6Th5AEszzscSTJP49H8K CW2TAZYoaEL4YMAU0e7ElqHleqqLairB5UTTcImDK5BYcYd+zNYwKbnmHbuzGfga nnlZWumNRHHyy249kS4b2QuJOYPqotUlvLyAOtILv3uMWIbs4arGsKcAj++g2by5 EDkc68g6elD3WIpPCb8gyjb0P9uWE/c= -----END CERTIFICATE-----Generated at Wed Jul 2 19:11:06 2025 by rpki-client