$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: 52AdHN54r3FqF/vqt7cW3DONQHTs5Ei1+LNg+1Xr0yw= Subject key identifier: AF:56:79:45:A0:5C:A7:7F:D0:9F:38:BC:D1:72:7D:A0:1F:85:AF:87 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 0483 Signing time: Sat 19 Jul 2025 00:25:58 +0000 Manifest this update: Sat 19 Jul 2025 00:25:58 +0000 Manifest next update: Sat 26 Jul 2025 00:25:58 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: VkjUpjr5/MCpr9SkNQBt8a1twp7vRolasDKUm4SLQU4=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qTXBNw7mfhaErKZnovnNFuD402t8u0aLC3Cx70bCvCg=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: 6iwr6VYb5feSdMcufjsCe6jPARf4GSvhQnloLGq2csk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Jul 19 00:25:58 2025 GMT Not After : Jul 26 00:25:58 2025 GMT Subject: CN=687ae616-cb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:2e:11:6b:25:64:7e:09:f0:04:63:b2:d5: 84:d8:92:69:e4:23:30:37:03:e9:59:a0:63:21:5b: db:76:46:51:fb:34:12:08:7d:c3:d4:20:16:9c:a2: 81:31:ec:2f:04:32:7b:29:88:df:e1:f4:dd:c8:f0: 19:1a:99:aa:80:75:09:88:0c:da:85:8e:d4:ad:6c: 9b:e1:e7:3d:fa:8d:09:2c:2d:e7:96:33:0f:ac:38: 6b:4a:be:c4:91:0e:47:e9:d0:ac:95:3f:88:d0:08: 50:9d:6f:51:0a:3c:8b:c8:70:b0:6e:01:5d:b1:6f: 3f:f3:63:eb:e2:12:76:6f:1e:80:56:32:0b:84:ce: 63:79:55:33:cd:dc:96:c0:17:8b:26:f8:7f:5f:a2: b0:7a:82:22:45:53:e6:5c:e3:02:a4:f3:22:09:54: 61:bc:cc:52:12:b5:97:e1:75:7b:1e:0b:44:1d:0a: e6:93:21:24:4d:ed:eb:d7:46:51:46:aa:cb:36:eb: ff:d4:b5:f9:3c:71:c6:73:57:1a:f5:49:94:f6:c5: 36:c6:55:17:1d:cc:ed:ea:14:71:45:d2:2a:42:00: 88:4d:a3:26:8b:66:f8:66:cc:97:66:db:f6:59:6b: de:0e:1e:98:f6:ce:65:13:47:ac:4f:d0:e1:c8:70: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:56:79:45:A0:5C:A7:7F:D0:9F:38:BC:D1:72:7D:A0:1F:85:AF:87 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:54:27:85:b1:87:b4:ca:16:6f:62:f0:57:fa:be:04:95:8c: 29:cd:53:87:42:d8:0b:1b:55:68:e1:d1:98:08:b8:f9:99:2b: b3:38:10:ba:73:70:8d:dc:e4:53:d2:50:76:82:2d:5c:4e:ed: 76:cb:68:55:64:5c:26:f4:ed:46:68:ba:60:b4:e9:b3:e6:6a: 9e:75:2b:05:ca:a6:fd:0a:62:74:8b:ca:cd:ad:06:dd:b2:76: 20:39:a0:64:e6:e0:8f:e3:e0:69:e5:f3:78:93:22:cc:1f:18: 3b:53:ce:14:66:05:91:f8:ee:56:56:05:1c:f2:df:c7:e0:8e: 18:1b:ea:1e:5f:d1:72:11:c5:5b:2a:60:5c:9b:d5:7c:3c:f9: 27:67:d8:9a:4c:64:aa:90:02:df:5d:50:d8:9a:f9:5b:70:ea: b6:e6:f0:03:05:9e:70:d7:e7:88:69:5b:f8:0d:9e:0a:dc:78: c7:22:fd:00:ac:d2:71:25:85:9c:9f:f0:6c:58:81:6a:9d:58: b6:5a:60:02:66:52:1c:c3:37:92:a1:c2:da:26:03:2c:9e:11: fd:82:8b:65:5c:1d:5c:73:c3:9f:e2:93:10:22:fa:fc:98:52: db:4e:ea:a1:6e:4a:d0:c2:36:f5:b8:0f:4e:6b:c9:82:f6:71: 4e:17:7c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUwNzE5MDAyNTU4WhcNMjUwNzI2MDAyNTU4WjAYMRYwFAYD VQQDEw02ODdhZTYxNi1jYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnkuEWslZH4J8ARjstWE2JJp5CMwNwPpWaBjIVvbdkZR+zQSCH3D1CAWnKKB MewvBDJ7KYjf4fTdyPAZGpmqgHUJiAzahY7UrWyb4ec9+o0JLC3nljMPrDhrSr7E kQ5H6dCslT+I0AhQnW9RCjyLyHCwbgFdsW8/82Pr4hJ2bx6AVjILhM5jeVUzzdyW wBeLJvh/X6KweoIiRVPmXOMCpPMiCVRhvMxSErWX4XV7HgtEHQrmkyEkTe3r10ZR RqrLNuv/1LX5PHHGc1ca9UmU9sU2xlUXHczt6hRxRdIqQgCITaMmi2b4ZsyXZtv2 WWveDh6Y9s5lE0esT9DhyHCSMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9WeUWg XKd/0J84vNFyfaAfha+HMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlVCeFsYe0yhZvYvBX+r4ElYwpzVOHQtgLG1Vo4dGYCLj5mSuzOBC6 c3CN3ORT0lB2gi1cTu12y2hVZFwm9O1GaLpgtOmz5mqedSsFyqb9CmJ0i8rNrQbd snYgOaBk5uCP4+Bp5fN4kyLMHxg7U84UZgWR+O5WVgUc8t/H4I4YG+oeX9FyEcVb KmBcm9V8PPknZ9iaTGSqkALfXVDYmvlbcOq25vADBZ5w1+eIaVv4DZ4K3HjHIv0A rNJxJYWcn/BsWIFqnVi2WmACZlIcwzeSocLaJgMsnhH9gotlXB1cc8Of4pMQIvr8 mFLbTuqhbkrQwjb1uA9Oa8mC9nFOF3y9 -----END CERTIFICATE-----Generated at Sun Jul 20 03:23:23 2025 by rpki-client