$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: /b0gBA5GmtE25BfCSRSlJ+ox9kU+UFxOe6O/ruAfHao= Subject key identifier: 19:F1:F9:2B:71:1A:37:E2:E8:0E:56:74:36:54:B1:A7:C2:28:81:06 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 018C Signing time: Mon 21 Jul 2025 03:34:29 +0000 Manifest this update: Mon 21 Jul 2025 03:34:29 +0000 Manifest next update: Mon 28 Jul 2025 03:34:29 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: TyIqS9LeuTHkk6c+egPMbRqe414/wMXliCT/PGeDNcI=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 2Dnxh30mhffjOkqJSVSDIOGgOimqWD/AADTc7ZuBX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Jul 21 03:34:29 2025 GMT Not After : Jul 28 03:34:29 2025 GMT Subject: CN=687db545-af05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:56:1d:40:34:cb:06:9c:b4:f7:a7:b8:8c:94: 4c:af:02:e6:76:57:aa:e3:59:77:58:32:87:b0:8c: 1b:bd:09:f4:36:c7:12:a3:65:fc:0c:e6:32:2e:52: 77:28:85:ed:ac:59:1d:5a:3a:ba:2c:ae:4c:b9:40: 89:78:92:92:f3:8e:9a:91:6f:2a:38:13:15:1f:eb: cf:03:c3:3f:c7:9d:50:d7:c7:46:a7:ee:43:45:20: 61:2b:ef:c6:e0:48:c8:bb:a3:93:4a:fa:48:51:bf: 2a:2a:29:df:fd:a8:49:7e:67:1f:19:19:54:60:4f: 34:0c:5e:17:45:ce:76:e8:8b:b2:8d:d9:e8:75:3d: c7:86:51:2e:91:a9:1e:e5:b7:d5:3d:b8:d5:fa:77: 2a:f0:3c:2d:4e:38:d3:db:3e:a4:86:d5:0c:b3:38: 24:bd:b3:31:ea:95:5b:50:24:28:41:ad:ce:b4:77: 68:e5:06:8a:22:69:c4:ae:48:2a:a6:d9:be:06:fa: b0:5c:ea:b3:15:de:c6:9e:8a:b9:cc:a1:0b:b7:31: 26:9d:77:f5:71:63:ed:c3:4e:e7:27:7e:65:90:be: cf:d7:79:ea:3b:f5:62:0c:d8:03:19:17:bc:62:ad: 1d:b4:46:07:5e:2f:a5:2f:49:56:36:14:27:62:68: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F1:F9:2B:71:1A:37:E2:E8:0E:56:74:36:54:B1:A7:C2:28:81:06 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:95:c7:ee:c9:12:b9:a2:3b:fa:10:fa:f4:d8:22:e7:d7:6b: e6:ba:3d:7a:43:fb:2e:7c:b5:8c:6b:77:04:61:2c:6d:09:e7: 1d:05:cf:0f:05:9f:d1:7a:a9:5e:0c:95:78:1a:18:e5:38:4f: f9:96:b0:d0:b4:77:82:b8:d9:ef:fd:69:05:a1:97:ec:13:2a: 70:fa:58:7f:2a:bc:57:40:5d:64:63:70:55:76:4d:64:6a:7f: 1d:f8:61:34:7d:ea:6d:13:e3:27:14:09:4b:57:39:31:71:43: fb:f9:be:b1:62:e4:f6:6c:d8:d6:2c:c7:04:13:6f:27:ce:a6: 6f:6f:fb:ab:69:ef:ac:28:ca:b8:37:3b:00:61:c7:23:c3:59: 0c:5b:1d:e4:94:94:7e:1b:66:37:9a:34:17:d2:9f:bd:13:73: 1b:44:34:34:fb:52:a5:79:3b:fd:f1:01:8f:7c:f1:a8:5c:77: 60:57:0b:9a:aa:44:2e:72:42:c8:33:9d:48:a1:27:19:85:fe: c8:f9:81:3e:d3:71:9b:66:f1:1d:ec:ed:c9:62:47:a4:00:e7: 5a:de:7e:e0:a0:f4:49:29:b8:7a:ba:4c:0f:97:f1:6a:1e:39: 04:65:e6:02:6f:7f:4a:cf:04:5d:af:5d:eb:5a:c5:87:e7:30: 00:91:e1:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjUwNzIxMDMzNDI5WhcNMjUwNzI4MDMzNDI5WjAYMRYwFAYD VQQDEw02ODdkYjU0NS1hZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lYdQDTLBpy096e4jJRMrwLmdleq41l3WDKHsIwbvQn0NscSo2X8DOYyLlJ3 KIXtrFkdWjq6LK5MuUCJeJKS846akW8qOBMVH+vPA8M/x51Q18dGp+5DRSBhK+/G 4EjIu6OTSvpIUb8qKinf/ahJfmcfGRlUYE80DF4XRc526IuyjdnodT3HhlEukake 5bfVPbjV+ncq8DwtTjjT2z6khtUMszgkvbMx6pVbUCQoQa3OtHdo5QaKImnErkgq ptm+BvqwXOqzFd7Gnoq5zKELtzEmnXf1cWPtw07nJ35lkL7P13nqO/ViDNgDGRe8 Yq0dtEYHXi+lL0lWNhQnYmhFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnx+Stx Gjfi6A5WdDZUsafCKIEGMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRlcfuyRK5ojv6EPr02CLn12vmuj16Q/sufLWMa3cEYSxtCecdBc8P BZ/ReqleDJV4GhjlOE/5lrDQtHeCuNnv/WkFoZfsEypw+lh/KrxXQF1kY3BVdk1k an8d+GE0feptE+MnFAlLVzkxcUP7+b6xYuT2bNjWLMcEE28nzqZvb/urae+sKMq4 NzsAYccjw1kMWx3klJR+G2Y3mjQX0p+9E3MbRDQ0+1KleTv98QGPfPGoXHdgVwua qkQuckLIM51IoScZhf7I+YE+03GbZvEd7O3JYkekAOda3n7goPRJKbh6ukwPl/Fq HjkEZeYCb39KzwRdr13rWsWH5zAAkeEu -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:10 2025 by rpki-client