$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: KafA+3IiZE/Yf96gGbTRWIENn+PRVcECR5ejSAY/J68= Subject key identifier: B3:A1:BA:DE:5A:79:E7:AC:13:85:E0:8E:1A:76:71:A9:96:23:E4:14 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 168A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 1676 Signing time: Fri 18 Jul 2025 16:49:27 +0000 Manifest this update: Fri 18 Jul 2025 16:49:26 +0000 Manifest next update: Fri 25 Jul 2025 16:49:26 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: Gfmk61xPLzMDq/JK9k8le2rCiNjpu62QekD2f8Fh5mQ=) 2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: irCyzZt8lLVT2O/nBYFOPs0nEEY6FDn9ohpC+rSN6lg=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: UF4UGi4YvKSRTlKCNcjEh8f4bqwvLQuk9xLcKAJKTWQ=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: slzLXwHdalwSZSG2cdS37Tf6mGAWnLHG4M+IywxJpUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5770 (0x168a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Jul 18 16:49:26 2025 GMT Not After : Jul 25 16:49:26 2025 GMT Subject: CN=687a7b17-8209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6e:a7:2c:4d:0f:a5:78:fe:9e:97:c7:94:9c: 02:8c:c5:44:98:a7:a9:f1:6d:27:fa:06:4e:4a:70: ad:b6:68:92:af:3e:94:bf:ab:fa:04:3b:0f:ae:07: cf:52:60:50:18:e6:24:46:ef:0b:03:62:bf:76:b5: 9b:8d:d6:f3:ef:6f:40:39:2f:5d:ed:ea:28:e3:f0: 92:8f:03:ff:92:e0:14:8c:cb:57:9e:2d:1f:be:60: 6a:a2:b3:e5:29:f3:6a:24:db:ca:b9:eb:2f:36:7d: e8:bc:ed:1f:a7:8b:7b:19:49:70:c1:30:d9:0e:98: 3a:7f:23:68:fb:0a:29:8e:92:28:16:c6:f7:b7:9e: 08:a2:49:3b:f7:61:ff:c6:31:e2:98:07:a4:76:77: 5e:51:e9:0b:b2:ad:4d:3e:2f:68:72:06:f8:1e:d6: 61:52:cc:67:3b:52:16:b9:04:b9:06:87:19:99:1f: 35:5a:19:63:a3:e6:54:ba:7d:a1:fd:3a:41:f8:f7: 46:3f:2e:39:b5:02:2b:0e:ba:1b:d7:eb:45:ce:f7: 6e:40:27:7a:5f:61:a0:8a:13:6f:0c:d8:33:8c:ea: f8:da:f7:97:5f:04:f1:fa:d7:dd:30:d2:e6:85:9b: e0:28:b5:83:09:c5:a6:bc:9e:27:7c:5b:6b:39:be: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A1:BA:DE:5A:79:E7:AC:13:85:E0:8E:1A:76:71:A9:96:23:E4:14 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:77:b7:37:cb:e1:d1:35:e8:77:6a:a0:b2:b9:0a:59:47:b1: 1e:ce:63:dc:ae:55:89:53:e4:db:57:9f:63:98:fe:7c:9a:4d: 02:f9:d5:d3:ae:ef:fb:97:c3:d0:3a:0c:cd:8b:f3:27:01:cf: 04:a0:6c:20:33:46:72:00:c8:1f:cc:1d:ed:d6:e7:cd:64:e1: 1a:c6:2b:5c:fb:a5:c3:8a:0d:66:fe:6d:cd:49:c2:6b:df:cd: b0:b6:9d:75:30:67:ba:7e:92:25:a6:45:0f:9d:9e:75:55:f8: 6e:d7:df:a8:5c:35:d9:40:fc:4e:1e:a5:bd:13:c2:b6:4c:bd: d0:70:30:82:a0:36:c6:c6:5a:3c:42:d9:26:45:e9:90:1b:c8: 0d:16:81:2f:16:3c:de:15:12:af:78:3a:ae:93:61:1e:43:f7: 81:6a:fe:a4:6e:d1:fc:94:34:dd:fd:91:7a:99:b9:4c:d3:68: 4c:70:88:5c:99:7c:45:df:45:e9:68:8f:21:f5:f2:8c:98:12: 1b:09:9b:8b:3f:78:37:e5:1b:34:5e:d5:b1:11:63:93:b0:72: 5e:a9:70:e8:2b:d9:cc:cd:d0:67:f1:6b:80:2f:a8:5a:2a:ca: ce:39:1c:22:d9:fa:35:c9:27:60:bb:80:87:00:ba:97:c9:96: 26:db:56:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjUwNzE4MTY0OTI2WhcNMjUwNzI1MTY0OTI2WjAYMRYwFAYD VQQDEw02ODdhN2IxNy04MjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7m6nLE0PpXj+npfHlJwCjMVEmKep8W0n+gZOSnCttmiSrz6Uv6v6BDsPrgfP UmBQGOYkRu8LA2K/drWbjdbz729AOS9d7eoo4/CSjwP/kuAUjMtXni0fvmBqorPl KfNqJNvKuesvNn3ovO0fp4t7GUlwwTDZDpg6fyNo+wopjpIoFsb3t54Iokk792H/ xjHimAekdndeUekLsq1NPi9ocgb4HtZhUsxnO1IWuQS5BocZmR81Whljo+ZUun2h /TpB+PdGPy45tQIrDrob1+tFzvduQCd6X2GgihNvDNgzjOr42veXXwTx+tfdMNLm hZvgKLWDCcWmvJ4nfFtrOb78LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOhut5a eeesE4Xgjhp2camWI+QUMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxd7c3y+HRNeh3aqCyuQpZR7EezmPcrlWJU+TbV59jmP58mk0C+dXT ru/7l8PQOgzNi/MnAc8EoGwgM0ZyAMgfzB3t1ufNZOEaxitc+6XDig1m/m3NScJr 382wtp11MGe6fpIlpkUPnZ51Vfhu19+oXDXZQPxOHqW9E8K2TL3QcDCCoDbGxlo8 QtkmRemQG8gNFoEvFjzeFRKveDquk2EeQ/eBav6kbtH8lDTd/ZF6mblM02hMcIhc mXxF30XpaI8h9fKMmBIbCZuLP3g35Rs0XtWxEWOTsHJeqXDoK9nMzdBn8WuAL6ha KsrOORwi2fo1ySdgu4CHALqXyZYm21Zg -----END CERTIFICATE-----Generated at Sun Jul 20 14:32:28 2025 by rpki-client