$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json) Hash identifier: dcYkZwvCFw9b7qri7OgjESXuOss/s1B5uRqG3GLmwYc= Subject key identifier: A3:7F:FA:EA:F5:05:C4:7E:EC:F6:07:CC:22:0E:89:A9:27:87:27:25 Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft Manifest number: C7 Signing time: Sat 19 Jul 2025 05:58:09 +0000 Manifest this update: Sat 19 Jul 2025 05:58:09 +0000 Manifest next update: Sat 26 Jul 2025 05:58:09 +0000 Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: LWHzB8OPb698vM15pGw0lufQBwaQJuU3eOv8HpGBi3U=) 2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: J7/kiN3L5QvG4wInB+6wlLOPrN0QJOnlQzSphywWm/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Validity Not Before: Jul 19 05:58:09 2025 GMT Not After : Jul 26 05:58:09 2025 GMT Subject: CN=687b33f1-3d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:c6:89:76:3c:1e:9d:8c:fb:81:4f:ff:5a: 45:53:8e:60:94:65:2e:44:56:9e:e4:30:6c:14:d4: e6:41:57:55:83:3e:f6:dc:fd:dc:84:cd:e2:32:4a: e7:9e:14:58:fc:12:2a:e7:08:ed:6c:00:63:4c:23: ce:48:10:6f:ac:ac:d3:13:74:63:0c:24:6c:4e:51: 34:83:77:a3:9b:03:ac:cf:b7:47:ba:34:ce:d9:45: 2d:2a:ed:13:95:24:d0:20:f6:27:8a:63:4a:c6:08: 98:2f:ce:5d:db:10:39:f3:4b:98:cd:17:38:42:59: d7:f9:f7:de:1c:65:0b:fb:f0:8f:c0:15:37:06:d9: a9:87:5d:08:4c:5c:5f:b4:7b:cc:f6:43:9e:04:1d: d4:42:04:81:e2:e8:d2:db:da:41:e0:55:ee:f7:9d: 91:63:5f:59:68:c7:e9:93:b0:63:c9:41:9c:7d:7c: 0d:92:34:31:1b:d2:9e:b9:93:4b:c4:af:19:57:25: 4a:15:31:f9:e6:62:3d:dd:a7:9f:23:35:27:d4:e4: a4:c5:0e:dc:ff:ce:1c:54:9e:cc:80:74:17:1a:fd: 88:cd:cc:e3:e9:d7:c4:a4:e2:2f:29:33:33:67:a0: 9b:42:4e:3e:1c:fc:e8:c5:5a:45:55:f4:db:bd:2e: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7F:FA:EA:F5:05:C4:7E:EC:F6:07:CC:22:0E:89:A9:27:87:27:25 X509v3 Authority Key Identifier: keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:06:fd:d5:35:e1:f5:c8:d1:66:f5:44:24:56:19:91:dd:8b: a5:23:f3:6c:e6:f9:f3:70:85:0d:ad:8a:c8:0d:06:80:b7:20: 18:9c:2a:63:b9:c1:d1:06:2d:9b:8f:da:e7:35:01:6c:fa:dd: 8f:4f:61:a0:d7:df:ec:42:ca:da:80:5e:5b:52:92:1f:d8:bf: 88:06:8d:ca:53:8e:43:46:63:90:81:8a:a9:90:28:3e:98:3b: 68:3c:6d:fd:fc:2a:77:3a:f8:80:71:d1:48:44:6b:2e:c2:fd: df:f3:2f:1b:e5:08:05:57:c2:e6:ab:85:32:fa:6d:79:b8:f8: 85:c7:1b:ed:f1:be:89:18:fc:37:26:61:6f:1e:43:de:c5:9b: b2:b4:91:0a:35:7f:e9:3d:99:ef:e4:79:98:d3:c3:2d:b8:cd: fb:a2:e5:60:75:ca:71:d0:a1:9f:5f:50:30:f5:4b:27:aa:8f: 14:93:a6:a5:4e:7f:6c:4a:6f:2c:55:45:0d:e6:65:e7:c5:37: 50:df:1d:e5:33:ae:c9:77:b6:90:57:de:87:86:1e:ad:01:35: d3:96:ff:9e:42:ab:13:ba:eb:20:3f:42:b0:ca:3c:d0:8d:14: cc:b5:84:72:9b:9c:33:e3:44:54:14:59:da:48:33:45:75:19: 5e:95:53:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw NDdEQUE1QTQwHhcNMjUwNzE5MDU1ODA5WhcNMjUwNzI2MDU1ODA5WjAYMRYwFAYD VQQDEw02ODdiMzNmMS0zZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18nGiXY8Hp2M+4FP/1pFU45glGUuRFae5DBsFNTmQVdVgz723P3chM3iMkrn nhRY/BIq5wjtbABjTCPOSBBvrKzTE3RjDCRsTlE0g3ejmwOsz7dHujTO2UUtKu0T lSTQIPYnimNKxgiYL85d2xA580uYzRc4QlnX+ffeHGUL+/CPwBU3Btmph10ITFxf tHvM9kOeBB3UQgSB4ujS29pB4FXu952RY19ZaMfpk7BjyUGcfXwNkjQxG9KeuZNL xK8ZVyVKFTH55mI93aefIzUn1OSkxQ7c/84cVJ7MgHQXGv2Izczj6dfEpOIvKTMz Z6CbQk4+HPzoxVpFVfTbvS6NSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKN/+ur1 BcR+7PYHzCIOiaknhyclMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3 NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1 eVh0X0VoWVg3WkVFZmFwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEBv3VNeH1yNFm9UQkVhmR3YulI/Ns5vnzcIUNrYrIDQaAtyAYnCpj ucHRBi2bj9rnNQFs+t2PT2Gg19/sQsragF5bUpIf2L+IBo3KU45DRmOQgYqpkCg+ mDtoPG39/Cp3OviAcdFIRGsuwv3f8y8b5QgFV8Lmq4Uy+m15uPiFxxvt8b6JGPw3 JmFvHkPexZuytJEKNX/pPZnv5HmY08MtuM37ouVgdcpx0KGfX1Aw9Usnqo8Uk6al Tn9sSm8sVUUN5mXnxTdQ3x3lM67Jd7aQV96Hhh6tATXTlv+eQqsTuusgP0KwyjzQ jRTMtYRym5wz40RUFFnaSDNFdRlelVOR -----END CERTIFICATE-----Generated at Sun Jul 20 11:31:42 2025 by rpki-client