$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json) Hash identifier: iT3xieY8eMOxEv/E94keber3jauH4ZDdh3xhwtqthHU= Subject key identifier: A1:49:9E:07:EC:64:13:BF:22:F4:84:ED:0C:6F:68:7D:11:51:98:13 Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Certificate serial: 09A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft Manifest number: 099D Signing time: Sun 20 Jul 2025 20:11:51 +0000 Manifest this update: Sun 20 Jul 2025 20:11:50 +0000 Manifest next update: Sun 27 Jul 2025 20:11:50 +0000 Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: ELiTQucCxIVe7R/EguGdWBeKP2Tk71XutFJi412oyB0=) 2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: pd0z6Py0ljyQXcBSw2555Qfaeo+rQ0qMyZ2LLvuE2Pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2470 (0x9a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Validity Not Before: Jul 20 20:11:50 2025 GMT Not After : Jul 27 20:11:50 2025 GMT Subject: CN=687d4d86-4697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:2b:d8:b3:02:05:e7:a3:d6:06:1c:15:58: fc:09:4a:a1:a1:4e:8c:5d:3b:b8:b8:a2:50:f8:35: 8a:ed:c8:af:89:89:08:96:2a:91:4c:1b:55:29:e7: be:87:4a:33:5b:43:f0:73:e3:94:3f:81:f2:a7:36: c1:d1:2c:42:4b:8e:b8:c5:b0:c1:e2:9e:a9:83:f8: c1:24:26:09:94:04:24:a5:0a:84:05:c4:75:95:ad: 7e:49:8e:3e:f3:f8:ed:6a:75:80:de:1d:5f:d9:79: 1e:29:f7:8d:73:5c:f1:56:94:f9:e7:81:48:f6:6b: 95:30:5f:ab:85:df:3d:c4:7f:3a:d2:9c:92:73:5f: f2:d0:96:5a:8e:9c:a3:9d:70:a0:30:88:27:c5:e4: 95:9f:10:bd:56:e6:ae:21:2e:e8:74:16:ec:da:b7: 6d:17:a0:93:e0:c0:a8:75:b5:9f:d2:8b:29:0d:89: c6:e3:45:87:f8:a5:d2:a5:2b:5f:4e:81:a1:54:18: 4b:d5:5d:5a:de:e4:51:de:73:53:68:47:80:8c:aa: ac:a4:3f:cf:83:4b:46:84:8d:58:f9:88:96:88:66: 90:e3:a5:98:bf:1c:cd:2e:17:45:69:1a:5f:47:4f: 2a:8c:ac:39:73:38:1b:59:5a:8d:dd:02:c3:64:f9: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:49:9E:07:EC:64:13:BF:22:F4:84:ED:0C:6F:68:7D:11:51:98:13 X509v3 Authority Key Identifier: keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:47:d4:d6:ff:e8:62:61:89:9a:c3:9c:82:bb:82:15:68:32: b3:e2:99:d5:91:6d:0b:31:7d:c9:bc:43:6f:6f:84:44:b5:53: 21:91:bd:d6:12:d2:eb:19:ed:58:42:b8:0d:15:19:ac:31:b4: 31:4d:1b:a6:93:17:98:25:2c:93:12:3c:14:dc:e7:cd:3d:85: 7a:bb:db:34:92:c6:ff:45:0a:00:a4:c2:c0:57:f5:a2:0b:34: b6:92:63:88:f6:2c:81:62:1b:81:15:9b:1f:5c:f4:4c:54:f3: f1:07:98:6a:6b:8c:14:1a:23:e8:be:8a:2a:0a:3f:af:8e:2b: ed:bb:28:c2:a5:fb:8a:23:af:62:f4:52:58:19:3b:ff:5f:88: ac:61:d9:54:f9:ed:54:4a:cb:8c:46:87:b4:64:cf:34:9c:f6: 10:13:40:43:5e:0d:a7:3c:5f:70:35:72:fe:1b:2f:82:e3:d3: e4:93:30:0f:52:65:04:0d:a0:ed:d0:ba:06:e0:31:30:b6:47: 1d:58:36:80:97:43:d5:30:1a:33:61:35:ed:07:4c:29:ab:36: a1:05:4b:6f:8f:67:5d:d6:4a:93:56:42:ac:6a:e1:b2:4c:fd: 16:51:82:89:ed:6d:cc:92:5a:c9:61:30:64:f2:0b:34:2f:0b: 6f:68:93:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw Qzk0RTExN0QwHhcNMjUwNzIwMjAxMTUwWhcNMjUwNzI3MjAxMTUwWjAYMRYwFAYD VQQDEw02ODdkNGQ4Ni00Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVor2LMCBeej1gYcFVj8CUqhoU6MXTu4uKJQ+DWK7civiYkIliqRTBtVKee+ h0ozW0Pwc+OUP4HypzbB0SxCS464xbDB4p6pg/jBJCYJlAQkpQqEBcR1la1+SY4+ 8/jtanWA3h1f2XkeKfeNc1zxVpT554FI9muVMF+rhd89xH860pySc1/y0JZajpyj nXCgMIgnxeSVnxC9VuauIS7odBbs2rdtF6CT4MCodbWf0ospDYnG40WH+KXSpStf ToGhVBhL1V1a3uRR3nNTaEeAjKqspD/Pg0tGhI1Y+YiWiGaQ46WYvxzNLhdFaRpf R08qjKw5czgbWVqN3QLDZPlFFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFJngfs ZBO/IvSE7QxvaH0RUZgTMB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNDQS81N0QyMzgwMjhGQTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1 ajhhNFl3bnRWek1NbE9FWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPR9TW/+hiYYmaw5yCu4IVaDKz4pnVkW0LMX3JvENvb4REtVMhkb3W EtLrGe1YQrgNFRmsMbQxTRumkxeYJSyTEjwU3OfNPYV6u9s0ksb/RQoApMLAV/Wi CzS2kmOI9iyBYhuBFZsfXPRMVPPxB5hqa4wUGiPovooqCj+vjivtuyjCpfuKI69i 9FJYGTv/X4isYdlU+e1USsuMRoe0ZM80nPYQE0BDXg2nPF9wNXL+Gy+C49PkkzAP UmUEDaDt0LoG4DEwtkcdWDaAl0PVMBozYTXtB0wpqzahBUtvj2dd1kqTVkKsauGy TP0WUYKJ7W3MklrJYTBk8gs0LwtvaJOd -----END CERTIFICATE-----Generated at Tue Jul 22 00:09:47 2025 by rpki-client