$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: Fls2ummygzPJGtYV7eUwl4s5UVnuQEpWNwz0NWe0lF8= Subject key identifier: 74:A5:B1:F0:8D:B8:AA:A5:9C:92:B7:68:D3:71:03:F4:31:25:FF:10 Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 0431 Signing time: Sat 19 Jul 2025 00:54:07 +0000 Manifest this update: Sat 19 Jul 2025 00:54:07 +0000 Manifest next update: Sat 26 Jul 2025 00:54:07 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: JEAdaCD3NSaKi4k2sJr1Evlq4v2IWM9SvUepxbznf50=) 2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: tHlnHTM42fIgrOKj6B5mEiDlxGJ8PU+aATIjcWUbfzQ=) 3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: G91/+5P90Gbi5PgxXduUuTfOqPoMJhhodtxKYVTEQhU=) 4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: dDUwPb8yT4c7h8uvXZN4RSXgwF3JJh0qprW0Nf2AMic=) 5: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: 6FWLxJ0tuemCPYBLnFeCXc6fNxB9xk/e0IXfBTmtzAk=) 6: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: OW2gDSL6apVk21WPZdNUp4voxwL3co7ZVV/LZN2sPnI=) 7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: rr7JwL3aP2xt22xpI8m2scwwvBMRgYndiZXBSENrUYA=) 8: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: P6m9Y8fkMm3GUB3vWCGhg/CMVh26A+E6bYvQlekbBbQ=) 9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: onTCqXS9qZGzhIeTCRHgBXLlG0kEyR1ncJjeY60B73A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Jul 19 00:54:07 2025 GMT Not After : Jul 26 00:54:07 2025 GMT Subject: CN=687aecaf-a18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2d:b1:7d:d3:85:ff:23:06:d4:09:97:5b:93: 31:2a:d2:8d:de:70:3e:a5:94:d5:72:c9:79:41:c9: 6b:4b:ab:71:c6:30:2b:65:0e:95:e9:25:c0:3b:f7: 3a:2b:37:bc:ce:ea:24:f8:58:48:26:32:90:06:30: 8c:43:8b:a9:31:08:0d:af:50:d7:84:1a:b4:fc:85: a2:5d:96:0b:2d:55:eb:a0:71:77:88:82:06:5a:7b: 84:8d:f4:46:55:88:2b:da:dd:37:33:a1:4a:25:cd: 6e:ce:b4:77:77:97:de:09:17:b3:bd:1d:a6:7e:32: 23:aa:1a:c3:2d:93:c6:ed:47:63:da:5f:ea:92:20: 7b:a6:8f:6a:9f:76:da:50:dd:f3:e8:17:5a:1d:8e: cd:86:90:ed:b0:87:bf:c0:f2:60:54:b9:19:93:05: 01:42:c9:4d:0e:e6:3e:7e:af:a9:58:d3:50:5c:da: c9:5e:bd:e4:76:6c:d0:eb:82:02:ba:24:01:e2:78: 31:ef:eb:4e:6b:8f:1f:ee:99:ae:37:29:15:7d:ec: cc:3e:da:c4:50:16:be:27:a5:3c:e4:20:23:63:4b: f1:cd:50:00:9c:38:a8:ae:21:c0:03:e1:39:b8:79: ed:c1:2e:e8:25:1f:74:8a:2a:9c:ec:c7:c2:19:4f: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A5:B1:F0:8D:B8:AA:A5:9C:92:B7:68:D3:71:03:F4:31:25:FF:10 X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:89:58:82:aa:79:1a:ea:3e:70:fb:cc:20:eb:70:6e:06:bb: 42:aa:c3:80:1a:1b:84:08:07:b9:46:b4:05:3e:63:be:35:f6: 27:d2:c8:25:11:9f:1b:cf:23:7d:44:0f:ff:bf:60:f5:09:56: 1e:30:26:da:5a:db:74:76:4a:d0:33:49:66:92:1c:e9:7a:69: 70:a7:4e:cd:d8:35:57:34:ce:2f:34:e1:c9:c0:43:9b:e9:4f: 4b:3b:fe:e2:c9:d3:a6:0b:98:dc:22:4c:a2:11:3a:76:44:42: a2:76:1a:9c:12:5e:77:83:c2:e8:2c:0a:3c:3c:7c:98:29:22: b3:b3:3a:9d:45:ea:d4:ea:cb:9f:3b:0d:85:d2:21:a8:28:f7: 68:0f:72:37:c4:8a:f1:92:c5:9c:a7:10:e8:fa:02:97:19:84: 67:09:60:f6:25:59:2c:75:30:91:0c:de:4a:03:eb:a3:ab:3c: f2:4a:71:80:ef:50:4c:0b:89:0e:1d:d0:64:5e:71:93:10:16: 46:03:c2:39:05:96:45:ca:38:83:33:a0:c7:e9:e5:ea:50:28: d6:67:15:97:24:09:7b:06:58:d9:a2:b7:f8:9c:4d:2e:aa:c7: 87:9c:e2:e7:7f:15:ce:a9:bc:6e:30:38:c3:01:f0:5c:d6:d9: e5:59:af:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUwNzE5MDA1NDA3WhcNMjUwNzI2MDA1NDA3WjAYMRYwFAYD VQQDEw02ODdhZWNhZi1hMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6y2xfdOF/yMG1AmXW5MxKtKN3nA+pZTVcsl5QclrS6txxjArZQ6V6SXAO/c6 Kze8zuok+FhIJjKQBjCMQ4upMQgNr1DXhBq0/IWiXZYLLVXroHF3iIIGWnuEjfRG VYgr2t03M6FKJc1uzrR3d5feCRezvR2mfjIjqhrDLZPG7Udj2l/qkiB7po9qn3ba UN3z6BdaHY7NhpDtsIe/wPJgVLkZkwUBQslNDuY+fq+pWNNQXNrJXr3kdmzQ64IC uiQB4ngx7+tOa48f7pmuNykVfezMPtrEUBa+J6U85CAjY0vxzVAAnDioriHAA+E5 uHntwS7oJR90iiqc7MfCGU9JtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSlsfCN uKqlnJK3aNNxA/QxJf8QMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOiViCqnka6j5w+8wg63BuBrtCqsOAGhuECAe5RrQFPmO+NfYn0sgl EZ8bzyN9RA//v2D1CVYeMCbaWtt0dkrQM0lmkhzpemlwp07N2DVXNM4vNOHJwEOb 6U9LO/7iydOmC5jcIkyiETp2REKidhqcEl53g8LoLAo8PHyYKSKzszqdRerU6suf Ow2F0iGoKPdoD3I3xIrxksWcpxDo+gKXGYRnCWD2JVksdTCRDN5KA+ujqzzySnGA 71BMC4kOHdBkXnGTEBZGA8I5BZZFyjiDM6DH6eXqUCjWZxWXJAl7BljZorf4nE0u qseHnOLnfxXOqbxuMDjDAfBc1tnlWa9k -----END CERTIFICATE-----Generated at Sun Jul 20 22:30:32 2025 by rpki-client