$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: m2lLSao1G1lqSXdEflvdPl3aj53CoNjZDPg44rP89lg= Subject key identifier: 84:AA:75:23:88:6A:36:61:7D:C6:68:DE:6F:96:45:60:11:E6:CE:78 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 07A9 Signing time: Fri 18 Jul 2025 21:35:23 +0000 Manifest this update: Fri 18 Jul 2025 21:35:22 +0000 Manifest next update: Fri 25 Jul 2025 21:35:22 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: E8+vS/K1yGmcBADbu95pY5vWoOkYkKt590BB9oOdZ2o=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Jul 18 21:35:22 2025 GMT Not After : Jul 25 21:35:22 2025 GMT Subject: CN=687abe1a-0192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:82:a3:ab:1c:fd:74:f2:82:52:90:7f:c3: 38:a4:fd:0d:1f:8f:94:f5:47:41:61:56:99:85:d0: 9b:27:98:30:f8:6d:0e:fd:6f:95:01:2c:ab:ab:48: 8b:55:96:d3:91:52:50:42:e5:48:6e:73:1d:52:a4: 8d:09:3f:35:ca:7c:54:b6:d2:79:dd:b9:d0:8c:79: cd:5e:6f:11:c8:08:9c:33:3a:0f:67:ff:0f:8b:70: d0:e6:e6:a5:8e:51:c1:96:28:5d:9a:73:95:6a:1b: b2:2b:6d:5d:24:f3:64:0a:2e:52:03:ae:9c:26:78: e5:20:c8:70:ef:f6:c1:01:4f:f4:8e:f7:5e:74:3c: ee:29:53:8d:f7:00:ab:35:3e:95:a1:96:1a:7e:9b: 16:ae:95:98:8a:f7:2b:d9:df:42:50:54:e1:78:76: 50:41:93:96:78:63:a7:be:ff:5b:57:5b:c1:f9:cd: df:47:1b:91:c5:23:20:4c:5a:94:00:ba:82:37:cf: f6:d0:77:eb:e8:73:f9:a2:50:7b:a3:12:f1:29:c9: 22:2e:05:db:d0:a4:09:1d:9c:0c:7d:86:ea:0b:b7: 9d:b6:db:1a:c0:92:c0:32:92:ab:86:d3:35:71:2a: 6f:f6:f4:d0:7f:a2:c6:35:17:99:f5:8b:c9:3d:50: d7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AA:75:23:88:6A:36:61:7D:C6:68:DE:6F:96:45:60:11:E6:CE:78 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f3:4f:c0:1a:48:b4:c1:10:ff:fe:29:d6:59:94:fe:4e:91: 43:46:b2:d5:a6:94:16:fd:57:2f:68:aa:fd:0c:0a:3f:82:66: d4:ea:6a:0d:97:b8:d2:b4:c2:7f:7e:e3:26:83:e1:46:13:79: 3b:11:4a:c6:d7:51:57:3f:b3:f0:3e:67:69:18:d6:9c:21:5e: d4:14:eb:f5:b1:ea:6e:44:6c:30:e9:82:72:2f:98:c8:25:b4: 04:4f:23:09:f9:f7:81:d8:ba:56:ac:d9:10:29:7b:e6:04:45: df:8b:a4:57:7d:b6:51:30:df:ec:26:8d:94:a4:e0:0f:93:66: 5b:85:2b:0b:64:a4:21:b8:6b:bd:12:63:2f:97:db:95:ae:aa: 85:bb:f8:95:3f:bf:da:8b:b1:9a:43:27:45:9f:27:08:c4:e3: 37:68:34:09:de:f3:20:a2:43:51:35:c9:ad:f8:90:20:ed:6c: 5c:b8:41:83:33:31:cd:78:a9:01:03:79:2d:c8:9c:26:45:a3: 60:4e:ae:15:e9:b1:90:4e:37:bb:15:c5:38:16:d1:e0:82:ad: fc:a4:1c:b2:f5:85:b3:b0:df:7f:a5:76:b3:e7:30:ac:c0:49: 54:02:db:26:4a:1e:a8:90:ef:38:8e:09:e0:b6:a4:bd:04:41: 98:39:a2:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjUwNzE4MjEzNTIyWhcNMjUwNzI1MjEzNTIyWjAYMRYwFAYD VQQDEw02ODdhYmUxYS0wMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscCCo6sc/XTyglKQf8M4pP0NH4+U9UdBYVaZhdCbJ5gw+G0O/W+VASyrq0iL VZbTkVJQQuVIbnMdUqSNCT81ynxUttJ53bnQjHnNXm8RyAicMzoPZ/8Pi3DQ5ual jlHBlihdmnOVahuyK21dJPNkCi5SA66cJnjlIMhw7/bBAU/0jvdedDzuKVON9wCr NT6VoZYafpsWrpWYivcr2d9CUFTheHZQQZOWeGOnvv9bV1vB+c3fRxuRxSMgTFqU ALqCN8/20Hfr6HP5olB7oxLxKckiLgXb0KQJHZwMfYbqC7edttsawJLAMpKrhtM1 cSpv9vTQf6LGNReZ9YvJPVDXYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISqdSOI ajZhfcZo3m+WRWAR5s54MB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt80/AGki0wRD//inWWZT+TpFDRrLVppQW/VcvaKr9DAo/gmbU6moN l7jStMJ/fuMmg+FGE3k7EUrG11FXP7PwPmdpGNacIV7UFOv1sepuRGww6YJyL5jI JbQETyMJ+feB2LpWrNkQKXvmBEXfi6RXfbZRMN/sJo2UpOAPk2ZbhSsLZKQhuGu9 EmMvl9uVrqqFu/iVP7/ai7GaQydFnycIxOM3aDQJ3vMgokNRNcmt+JAg7WxcuEGD MzHNeKkBA3ktyJwmRaNgTq4V6bGQTje7FcU4FtHggq38pByy9YWzsN9/pXaz5zCs wElUAtsmSh6okO84jgngtqS9BEGYOaI5 -----END CERTIFICATE-----Generated at Sun Jul 20 15:10:49 2025 by rpki-client