$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: +PHxOdA7Hp/4WkStzBrWdSE4jbKmiRUZcgiKWAZtqOM= Subject key identifier: 88:47:D1:4D:AA:FF:0A:83:7E:2E:34:3A:D1:B9:46:15:81:57:50:7F Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 07A5 Signing time: Fri 18 Jul 2025 21:33:28 +0000 Manifest this update: Fri 18 Jul 2025 21:33:27 +0000 Manifest next update: Fri 25 Jul 2025 21:33:27 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: t6M6Owjraro0KJNwlqboIMVwCat4JoTW3WK/vRpBJBo=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: ZpzsQA87GX/2tqviCQB0PEkhLyPLFjNjzd1SWJ2fekk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: Jul 18 21:33:27 2025 GMT Not After : Jul 25 21:33:27 2025 GMT Subject: CN=687abda8-e17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:30:5f:10:e0:b3:68:d0:a1:d8:37:f5:20: 57:23:75:8c:80:5a:32:f4:49:33:b8:77:b3:bd:33: 62:a9:03:32:0b:f9:43:83:19:7f:f4:38:9c:b4:57: 64:c0:87:69:53:6d:57:d7:62:fa:73:d2:ed:aa:9f: 66:b3:7b:5c:74:92:9d:b5:62:3e:aa:c1:9d:b2:90: 9c:84:a3:3f:90:49:07:b2:8a:fc:e1:bb:71:dc:4f: 84:ba:c9:86:fe:8b:75:d1:03:59:a1:17:3b:ba:8f: 9e:53:7a:87:ce:56:17:08:7b:ca:77:0b:7e:73:7a: a3:04:09:24:19:87:0a:8b:a0:49:1e:47:87:a8:e9: ab:d1:ca:ad:85:51:59:8c:d9:32:59:4b:3f:df:d6: 18:cc:83:23:2a:22:24:6d:10:59:a9:87:70:50:b0: 96:2b:b6:f1:fe:dd:9e:38:99:c2:d5:d3:c9:d4:40: b3:0a:ec:a5:8a:0b:b6:10:f4:3e:ef:09:d3:86:60: 21:f8:90:00:12:28:49:dc:78:7b:95:5b:b7:e7:80: b1:73:bb:94:8c:71:c8:3d:32:a8:a2:1c:3b:a9:dc: 21:11:59:da:0d:bd:23:6e:f7:be:90:58:c3:cb:f9: 7f:dc:21:27:3a:c3:e9:8e:47:72:52:f9:4d:f1:2a: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:47:D1:4D:AA:FF:0A:83:7E:2E:34:3A:D1:B9:46:15:81:57:50:7F X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:57:dc:65:d0:01:76:21:c3:85:a1:62:36:d0:dc:1d:c9:f3: bb:9a:ff:61:72:4f:c9:d4:8c:8a:83:87:83:fb:3b:e0:3e:3e: ba:3c:1b:af:fa:73:23:a1:cc:78:e5:35:9e:3c:45:4d:18:04: 51:32:b5:01:f8:c5:59:f2:f4:2d:04:1f:41:87:66:3d:ac:b7: b5:11:aa:b4:eb:f7:52:57:ee:17:1c:da:a6:5b:64:66:59:26: e0:91:0a:d6:65:39:c3:6c:b6:9c:d7:4f:00:9a:18:6c:24:3a: 6f:1b:bf:bf:2a:64:8b:10:dc:1c:8d:c9:55:e1:27:cd:ed:54: 45:16:a0:56:54:4c:d8:e3:56:6c:44:b9:9d:e7:c2:49:68:d2: fe:cc:4e:86:34:5e:b2:52:3b:8c:e4:08:68:d7:81:9b:25:67: 85:6d:ad:01:cd:8d:8e:b8:38:7e:c1:49:5e:56:60:58:9f:64: da:ef:92:79:49:df:fa:92:bb:d5:cc:90:78:f0:34:df:96:45: 65:2a:46:48:fe:0f:83:74:8a:24:c8:87:8f:37:e7:d6:57:5d: 7f:c0:ae:9a:23:c2:83:06:0c:79:89:e4:d7:54:52:2a:a3:be: 5b:5a:4d:26:8a:9c:a0:da:c4:7c:2a:b7:07:d7:6d:79:b0:31: cb:c4:1d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjUwNzE4MjEzMzI3WhcNMjUwNzI1MjEzMzI3WjAYMRYwFAYD VQQDEw02ODdhYmRhOC1lMTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hIwXxDgs2jQodg39SBXI3WMgFoy9EkzuHezvTNiqQMyC/lDgxl/9DictFdk wIdpU21X12L6c9Ltqp9ms3tcdJKdtWI+qsGdspCchKM/kEkHsor84btx3E+EusmG /ot10QNZoRc7uo+eU3qHzlYXCHvKdwt+c3qjBAkkGYcKi6BJHkeHqOmr0cqthVFZ jNkyWUs/39YYzIMjKiIkbRBZqYdwULCWK7bx/t2eOJnC1dPJ1ECzCuyligu2EPQ+ 7wnThmAh+JAAEihJ3Hh7lVu354Cxc7uUjHHIPTKoohw7qdwhEVnaDb0jbve+kFjD y/l/3CEnOsPpjkdyUvlN8SpauQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhH0U2q /wqDfi40OtG5RhWBV1B/MB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoV9xl0AF2IcOFoWI20NwdyfO7mv9hck/J1IyKg4eD+zvgPj66PBuv +nMjocx45TWePEVNGARRMrUB+MVZ8vQtBB9Bh2Y9rLe1Eaq06/dSV+4XHNqmW2Rm WSbgkQrWZTnDbLac108AmhhsJDpvG7+/KmSLENwcjclV4SfN7VRFFqBWVEzY41Zs RLmd58JJaNL+zE6GNF6yUjuM5Aho14GbJWeFba0BzY2OuDh+wUleVmBYn2Ta75J5 Sd/6krvVzJB48DTflkVlKkZI/g+DdIokyIePN+fWV11/wK6aI8KDBgx5ieTXVFIq o75bWk0mipyg2sR8KrcH1215sDHLxB0p -----END CERTIFICATE-----Generated at Sun Jul 20 06:57:55 2025 by rpki-client