$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft File: InkscMmJR76K9PSj51Wu3nlZ0ng.mft (raw, json) Hash identifier: MhahtLFN7WQsHyUlW7S6g4Pw+n5N6ZJjdamw91RZF2M= Subject key identifier: 0A:64:C2:56:6F:1B:EF:C1:E4:2D:A5:E4:B9:92:25:67:77:D7:5F:45 Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 Certificate issuer: /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278 Certificate serial: 0FCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft Manifest number: 0FC5 Signing time: Sun 20 Jul 2025 17:31:40 +0000 Manifest this update: Sun 20 Jul 2025 17:31:40 +0000 Manifest next update: Sun 27 Jul 2025 17:31:40 +0000 Files and hashes: 1: InkscMmJR76K9PSj51Wu3nlZ0ng.crl (hash: E5edCIAeIe76HIrDixJ/Bjrtf+Sy18x7hZb8PkfmT1g=) 2: C3417AA6593611E98E4C8C44C4F9AE02.roa (hash: CPG724JKOro03lp9kH78JPks3F1iBFJ6IMMveDvmHaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166708, serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278 Validity Not Before: Jul 20 17:31:40 2025 GMT Not After : Jul 27 17:31:40 2025 GMT Subject: CN=687d27fc-70e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:89:c3:b0:f6:7b:a5:ae:03:42:cb:75:07: 96:20:19:3a:92:41:d5:87:9b:11:4c:d6:8f:f3:80: 16:6e:a7:1d:0e:48:8f:45:8b:9f:cf:20:12:6d:6d: 2d:7f:bf:7d:57:2f:19:5c:a0:0a:47:bf:d1:5a:2f: 2f:40:31:3f:ee:10:3f:ac:41:c0:51:cc:a1:6f:ed: dd:fe:c3:fc:c3:ac:33:cb:06:91:c2:cc:da:df:60: b2:4d:eb:24:10:e0:69:a0:1c:1c:88:7d:f2:2e:75: f9:b6:8d:0c:8c:be:e0:20:05:33:ad:d0:7f:22:73: 39:25:33:08:ce:c2:e3:bb:78:df:df:0b:26:28:eb: e7:48:48:73:0a:45:2e:64:77:11:48:18:5a:3d:c2: 57:22:fb:bb:cb:b2:a2:03:62:a2:3b:15:07:40:e8: 50:13:44:61:47:37:c2:c7:95:c7:ad:52:38:5d:c2: f2:f0:6d:80:7e:10:53:75:3c:6c:32:1b:fb:d1:32: cb:6f:62:a4:da:e8:4b:fd:d2:a2:68:cf:60:f2:2b: eb:66:62:c4:3c:ca:30:76:03:6e:64:2f:50:5f:72: 4e:1c:fd:21:27:d0:8b:e9:6b:cf:6d:61:1d:27:b0: 12:ad:32:80:c0:93:62:9c:9f:8d:a1:b7:33:36:65: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:64:C2:56:6F:1B:EF:C1:E4:2D:A5:E4:B9:92:25:67:77:D7:5F:45 X509v3 Authority Key Identifier: keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:03:a2:e5:cd:e8:51:ca:c0:42:38:d9:46:47:73:85:11:03: ad:d2:e4:c6:62:e6:28:17:bd:ac:52:50:4d:4e:0f:1a:ad:59: 34:55:18:0f:d0:69:cd:7d:8f:72:b7:58:b8:d2:2e:9b:31:20: a1:11:f8:40:be:12:b4:7b:c0:59:a7:16:3c:27:44:78:29:5c: 39:a5:b8:a9:24:68:5c:4d:5a:26:0f:3c:9e:0a:7d:af:21:e9: c8:36:e1:53:af:ac:08:a6:12:e5:af:09:a2:29:fe:c7:d7:39: 78:05:b8:6c:ba:6d:4e:36:77:ae:f6:ba:89:92:93:43:4b:c3: 90:71:0b:af:55:2a:87:83:a7:75:ad:67:8f:4c:c6:c8:15:65: d5:e7:87:d1:b6:f6:cf:cc:5f:e2:9b:a3:37:d1:97:6e:e0:f4: 4e:9c:b4:da:69:28:10:bb:00:68:a5:e2:07:59:fb:ba:0a:13: a0:57:ec:c2:a8:3f:92:53:a6:72:9a:23:c6:aa:1a:c7:85:ec: d7:6b:03:9e:c2:97:02:5a:cf:59:1e:eb:bf:96:37:e9:8e:c1: 71:21:06:ab:4a:87:5e:34:f1:ec:45:5c:09:dc:ad:1a:b2:b3: 57:56:57:e6:5f:d8:19:4b:de:32:f5:c0:3a:ff:41:54:1e:ce: 69:23:0d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY3MDgxMTAvBgNVBAUTKDIyNzkyQzcwQzk4OTQ3QkU4QUY0RjRBM0U3NTVBRURF Nzk1OUQyNzgwHhcNMjUwNzIwMTczMTQwWhcNMjUwNzI3MTczMTQwWjAYMRYwFAYD VQQDEw02ODdkMjdmYy03MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z+Jw7D2e6WuA0LLdQeWIBk6kkHVh5sRTNaP84AWbqcdDkiPRYufzyASbW0t f799Vy8ZXKAKR7/RWi8vQDE/7hA/rEHAUcyhb+3d/sP8w6wzywaRwsza32CyTesk EOBpoBwciH3yLnX5to0MjL7gIAUzrdB/InM5JTMIzsLju3jf3wsmKOvnSEhzCkUu ZHcRSBhaPcJXIvu7y7KiA2KiOxUHQOhQE0RhRzfCx5XHrVI4XcLy8G2AfhBTdTxs Mhv70TLLb2Kk2uhL/dKiaM9g8ivrZmLEPMowdgNuZC9QX3JOHP0hJ9CL6WvPbWEd J7ASrTKAwJNinJ+NobczNmVY6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApkwlZv G+/B5C2l5LmSJWd3119FMB8GA1UdIwQYMBaAFCJ5LHDJiUe+ivT0o+dVrt55WdJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjcwOC9GQTUyNkI1MDU5 MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3Nks5UFNqNTFXdTNubFow bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lua3NjTW1KUjc2SzlQU2o1MVd1M25sWjBuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjcwOC9GQTUyNkI1MDU5MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3 Nks5UFNqNTFXdTNubFowbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtA6LlzehRysBCONlGR3OFEQOt0uTGYuYoF72sUlBNTg8arVk0VRgP 0GnNfY9yt1i40i6bMSChEfhAvhK0e8BZpxY8J0R4KVw5pbipJGhcTVomDzyeCn2v IenINuFTr6wIphLlrwmiKf7H1zl4Bbhsum1ONneu9rqJkpNDS8OQcQuvVSqHg6d1 rWePTMbIFWXV54fRtvbPzF/im6M30Zdu4PROnLTaaSgQuwBopeIHWfu6ChOgV+zC qD+SU6ZymiPGqhrHhezXawOewpcCWs9ZHuu/ljfpjsFxIQarSodeNPHsRVwJ3K0a srNXVlfmX9gZS94y9cA6/0FUHs5pIw3z -----END CERTIFICATE-----Generated at Mon Jul 21 12:50:46 2025 by rpki-client