$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: w9KCzRz7Re4h62MU5n+CB80ZI0cuqbaKSpMYuYmQyEc= Subject key identifier: 3B:83:82:09:CA:F2:05:61:5A:11:64:23:23:8B:65:4D:47:0A:C2:8F Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0ADB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0ACB Signing time: Fri 18 Jul 2025 19:41:35 +0000 Manifest this update: Fri 18 Jul 2025 19:41:34 +0000 Manifest next update: Fri 25 Jul 2025 19:41:34 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: /5p1dALh+oDA2rpxCaitTfuRtxKSjyOdbtxgDXRr9iA=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: jqqBqCZOKu2qIALXNmkWZIy2E6GEnPXSik4fgBrMrDA=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: lxeOojn+XYimi3V1BZ9O9tBljDRntCvGVjoxX3VG+x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2779 (0xadb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: Jul 18 19:41:34 2025 GMT Not After : Jul 25 19:41:34 2025 GMT Subject: CN=687aa36f-761f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:70:80:87:12:4b:8e:cc:7e:84:e2:45:4b: 48:25:88:30:1d:f6:6a:21:60:c5:d4:08:9e:5b:bf: b8:0d:65:1b:e4:b2:77:6e:bb:55:44:77:45:1d:1d: c8:08:d1:4f:cf:1b:d9:38:0e:cf:0a:ba:98:58:98: 23:15:c8:da:a0:b8:74:5e:df:39:e5:20:1f:33:bb: 60:2e:9c:4f:e3:58:d4:54:da:0d:92:db:2e:cb:85: 5d:60:b6:67:8a:4d:b0:d6:68:fb:0c:3e:a7:4d:3e: ff:9e:4f:61:4e:70:a2:cb:eb:b9:ac:06:0a:ee:62: c0:b1:88:1c:ba:32:73:bb:2b:22:ad:83:4a:a6:61: 56:15:d4:c1:b8:27:12:2c:9a:28:3b:4e:bb:0e:4e: 71:3f:55:5d:19:26:2d:95:c1:59:8c:76:e2:f3:8d: 60:ba:88:c3:f2:ea:f6:14:b5:e0:74:a8:44:c1:2a: 74:e5:f3:c0:88:58:77:cb:21:d6:1d:c2:a8:ad:32: cd:57:1d:a4:a4:1d:6e:e5:bd:37:89:cd:4c:4a:cc: fa:37:74:9f:1e:4f:44:cd:49:c8:39:31:0d:d5:f4: 65:5a:98:78:34:31:f4:b6:48:73:04:8c:55:28:7f: fb:23:36:36:e5:d0:9c:3d:eb:7f:94:48:1c:be:1d: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:83:82:09:CA:F2:05:61:5A:11:64:23:23:8B:65:4D:47:0A:C2:8F X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f4:c1:29:f9:1d:f3:2b:4c:71:d0:f8:43:c4:c9:3b:33:ed: 96:64:56:53:2e:a9:52:b3:7a:e6:61:bd:eb:2f:76:41:b5:58: 6d:0c:7e:c3:42:b3:f2:98:d0:3e:f2:3a:30:41:18:34:4b:94: 4b:fa:4f:65:3f:b1:54:bb:35:65:57:40:9a:eb:12:ef:4a:8b: 6c:d7:02:6e:8d:5d:40:e9:30:28:22:7a:13:d1:97:50:7b:b2: c1:5d:70:28:12:77:29:42:60:50:3f:45:a2:46:76:6a:56:7a: be:1a:47:91:e2:f0:43:de:a3:3c:00:b3:00:8a:8b:6a:f5:46: 75:6d:a0:25:79:e9:70:be:be:80:be:26:a6:3a:cd:2c:34:f4: 1f:3e:a5:23:b7:1f:e7:a4:11:0c:d7:11:c3:c1:8e:41:8d:d2: aa:bd:08:aa:35:38:f5:e0:04:7f:bc:f9:cf:d6:a3:7b:44:ab: a5:c4:3f:65:b7:5d:df:da:34:81:ca:c8:a1:ea:8f:71:2d:96: 6a:2f:6d:17:ce:99:e0:7f:b4:e9:5c:27:3e:7b:20:63:09:cf: ff:35:a4:30:4b:66:eb:f4:93:31:59:0f:0b:21:7d:59:03:45: 28:e0:54:e1:12:a4:cf:b6:74:4c:89:96:c3:03:37:29:ee:cc: f7:1f:5e:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjUwNzE4MTk0MTM0WhcNMjUwNzI1MTk0MTM0WjAYMRYwFAYD VQQDEw02ODdhYTM2Zi03NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNVwgIcSS47MfoTiRUtIJYgwHfZqIWDF1AieW7+4DWUb5LJ3brtVRHdFHR3I CNFPzxvZOA7PCrqYWJgjFcjaoLh0Xt855SAfM7tgLpxP41jUVNoNktsuy4VdYLZn ik2w1mj7DD6nTT7/nk9hTnCiy+u5rAYK7mLAsYgcujJzuysirYNKpmFWFdTBuCcS LJooO067Dk5xP1VdGSYtlcFZjHbi841guojD8ur2FLXgdKhEwSp05fPAiFh3yyHW HcKorTLNVx2kpB1u5b03ic1MSsz6N3SfHk9EzUnIOTEN1fRlWph4NDH0tkhzBIxV KH/7IzY25dCcPet/lEgcvh2QjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuDggnK 8gVhWhFkIyOLZU1HCsKPMB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB79MEp+R3zK0xx0PhDxMk7M+2WZFZTLqlSs3rmYb3rL3ZBtVhtDH7D QrPymNA+8jowQRg0S5RL+k9lP7FUuzVlV0Ca6xLvSots1wJujV1A6TAoInoT0ZdQ e7LBXXAoEncpQmBQP0WiRnZqVnq+GkeR4vBD3qM8ALMAiotq9UZ1baAleelwvr6A viamOs0sNPQfPqUjtx/npBEM1xHDwY5BjdKqvQiqNTj14AR/vPnP1qN7RKulxD9l t13f2jSBysih6o9xLZZqL20Xzpngf7TpXCc+eyBjCc//NaQwS2br9JMxWQ8LIX1Z A0Uo4FThEqTPtnRMiZbDAzcp7sz3H15q -----END CERTIFICATE-----Generated at Sun Jul 20 11:24:01 2025 by rpki-client