$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json) Hash identifier: kwSwNi5ECodEWiVe3AhNNhsiIgfJG+1uGMloPj77G5c= Subject key identifier: 90:45:2B:C8:31:B0:6E:22:DD:70:96:0B:64:1D:21:B1:6C:03:87:F5 Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft Manifest number: 0407 Signing time: Sat 19 Jul 2025 00:52:29 +0000 Manifest this update: Sat 19 Jul 2025 00:52:28 +0000 Manifest next update: Sat 26 Jul 2025 00:52:28 +0000 Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: 2bEpBRbvdpEvhsTYObpJ/Y96rPl3vyMlJ4L3R1DCD3I=) 2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: n7VFHzeUDeBuyUWNvkox2wNIAXMws0upgX8rIok/ab4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Validity Not Before: Jul 19 00:52:28 2025 GMT Not After : Jul 26 00:52:28 2025 GMT Subject: CN=687aec4d-e50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:cf:d7:41:ea:fe:51:18:07:08:76:0f:7e: c0:d7:ef:32:56:12:41:1b:1d:f7:54:13:01:b2:8d: f0:cb:6f:60:c5:92:1f:ef:c2:b2:85:cc:08:56:c8: f5:21:4d:56:1b:65:af:f1:a6:74:1a:3a:05:b7:35: 7e:96:93:94:58:6c:75:31:5f:3a:7a:1e:29:57:3c: a8:1f:8e:0b:f5:4c:6b:d6:e2:4a:a2:e2:df:77:f0: 2e:ef:20:ba:f3:f4:55:fe:65:8d:1d:a8:64:1c:cd: 9c:9c:f5:c5:0e:f3:bd:47:d4:ab:19:35:0f:40:df: 8a:fa:82:3b:1f:01:5c:d3:da:16:cd:28:62:9e:f3: 6f:b0:b2:92:f8:33:e6:1c:79:cb:f9:48:d7:07:18: 36:8e:7b:f7:68:b5:d3:bf:c6:da:29:74:3d:36:da: eb:08:6f:7c:31:f0:d7:cb:cf:c9:1e:28:ef:3c:dd: 2c:e6:8e:8e:c9:6c:bb:2b:58:36:e5:f6:72:87:85: 1c:e9:ca:ec:3e:2b:15:95:a8:e7:88:5a:cc:0d:4d: ee:07:8f:94:21:75:fd:df:ef:22:10:10:0e:a4:be: 44:a1:aa:2f:b9:5f:13:28:55:66:19:37:80:f5:c2: 58:ed:a9:a2:b5:67:02:68:6a:81:0c:88:57:1e:2c: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:45:2B:C8:31:B0:6E:22:DD:70:96:0B:64:1D:21:B1:6C:03:87:F5 X509v3 Authority Key Identifier: keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9a:1f:40:a7:5e:14:ea:de:94:e5:46:1a:60:74:a2:79:05: 40:3d:3e:fe:52:41:8e:84:3e:c1:1b:7d:91:df:ab:be:51:8b: 9a:b4:b6:5d:0b:19:07:c6:64:cf:a6:97:aa:ea:56:38:a6:50: 01:1d:1d:4b:0c:86:43:4b:b9:38:3f:16:2d:a9:9e:eb:58:ec: 27:9d:0b:ef:5f:3f:b1:0b:91:ca:e7:ff:2c:58:22:10:ad:e9: d0:dc:fb:1a:1a:76:9f:96:f6:4f:c4:09:98:f5:fd:48:e1:77: 72:22:87:bf:16:23:bd:bf:89:78:ea:0a:bf:a2:0c:61:24:fe: fd:ef:70:eb:63:72:ca:e5:d5:e0:58:8f:33:9c:f2:59:a7:2a: f7:13:8b:e5:4c:09:d5:15:be:4b:85:0c:a4:4c:32:66:ae:d5: ae:e0:3c:a2:f1:15:d4:46:93:2c:3e:e9:ef:aa:4f:bd:99:73: cb:c5:11:64:1c:b3:8a:27:64:1a:7d:dd:91:16:ef:66:73:f3: a2:df:b7:16:b2:56:48:73:9b:bc:e4:07:82:0a:20:72:a9:de: f6:12:dc:7d:9a:b6:3a:f1:8c:c2:62:2e:16:6f:24:c3:51:56: 05:06:3e:3e:28:c1:52:64:c7:67:d2:7a:01:58:33:ec:ba:a6: 6a:49:ca:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBNjIxMTAvBgNVBAUTKDg5RjU5NjExMDAzMEJEQzlCM0JBRDc2Q0ZEMDVDMzEy NDYxN0M5NTIwHhcNMjUwNzE5MDA1MjI4WhcNMjUwNzI2MDA1MjI4WjAYMRYwFAYD VQQDEw02ODdhZWM0ZC1lNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13bP10Hq/lEYBwh2D37A1+8yVhJBGx33VBMBso3wy29gxZIf78KyhcwIVsj1 IU1WG2Wv8aZ0GjoFtzV+lpOUWGx1MV86eh4pVzyoH44L9Uxr1uJKouLfd/Au7yC6 8/RV/mWNHahkHM2cnPXFDvO9R9SrGTUPQN+K+oI7HwFc09oWzShinvNvsLKS+DPm HHnL+UjXBxg2jnv3aLXTv8baKXQ9NtrrCG98MfDXy8/JHijvPN0s5o6OyWy7K1g2 5fZyh4Uc6crsPisVlajniFrMDU3uB4+UIXX93+8iEBAOpL5EoaovuV8TKFVmGTeA 9cJY7amitWcCaGqBDIhXHiz95QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBFK8gx sG4i3XCWC2QdIbFsA4f1MB8GA1UdIwQYMBaAFIn1lhEAML3Js7rXbP0FwxJGF8lS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE2Mi8xMTY4MjExQzgw NkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3ZjbXp1dGRzX1FYREVrWVh5 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmV1dFUUF3dmNtenV0ZHNfUVhERWtZWHlWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUE2Mi8xMTY4MjExQzgwNkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3Zj bXp1dGRzX1FYREVrWVh5VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBmh9Ap14U6t6U5UYaYHSieQVAPT7+UkGOhD7BG32R36u+UYuatLZd CxkHxmTPppeq6lY4plABHR1LDIZDS7k4PxYtqZ7rWOwnnQvvXz+xC5HK5/8sWCIQ renQ3PsaGnaflvZPxAmY9f1I4XdyIoe/FiO9v4l46gq/ogxhJP7973DrY3LK5dXg WI8znPJZpyr3E4vlTAnVFb5LhQykTDJmrtWu4Dyi8RXURpMsPunvqk+9mXPLxRFk HLOKJ2Qafd2RFu9mc/Oi37cWslZIc5u85AeCCiByqd72Etx9mrY68YzCYi4WbyTD UVYFBj4+KMFSZMdn0noBWDPsuqZqScrw -----END CERTIFICATE-----Generated at Sun Jul 20 07:29:11 2025 by rpki-client