$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json) Hash identifier: DPu92RvOGR+Vc8a1FemvqPQW4Ikhx7WtQ38cByNDJ3w= Subject key identifier: BF:18:3B:52:47:A8:BA:31:2C:C7:71:6B:47:E1:C5:01:25:CB:F9:AE Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Certificate serial: 076C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft Manifest number: 0761 Signing time: Fri 18 Jul 2025 21:52:22 +0000 Manifest this update: Fri 18 Jul 2025 21:52:22 +0000 Manifest next update: Fri 25 Jul 2025 21:52:22 +0000 Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: 2dfIzHalM7/rYdLp3Ij3VjEADzgWWP0qtAmZDtrxoSY=) 2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: CNZBv4FK9ZWvTtzm+cWIR1zfUXJg63OkryMkTZVFNpg=) 3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: BlNMvykSVEqNeWKjQSI6MISWgcMVQUYKsr+oWp8+db0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED Validity Not Before: Jul 18 21:52:22 2025 GMT Not After : Jul 25 21:52:22 2025 GMT Subject: CN=687ac216-e67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:6e:9e:d4:c4:bd:dd:5b:19:7b:71:af:9b: 8d:3a:9c:cf:52:b2:cb:68:82:69:6c:4b:cc:56:c7: 77:4a:b1:72:56:13:b6:a8:eb:e0:35:f4:c3:a0:bd: 0d:03:ca:46:9e:20:8a:c9:2b:5f:ff:25:2b:ef:c2: 01:69:ac:65:67:0f:c7:e3:d9:bc:de:17:65:cb:04: 8e:7a:f3:74:fc:9f:2b:9c:11:84:0c:78:fe:17:06: fc:60:2d:af:bb:04:1c:37:1b:54:3b:06:87:c9:1c: 2f:67:1d:1a:9f:1e:2e:b4:33:6e:ae:12:8c:c9:b9: 24:2f:02:5b:af:60:9f:ae:90:48:a6:a3:f9:c6:6d: 06:82:be:09:b3:bb:95:e2:00:cf:31:c0:f8:e1:97: 23:17:09:25:e9:d9:da:23:35:1a:9a:bb:8f:0b:b5: d2:d6:55:f7:07:1e:cd:bc:16:80:ad:98:96:91:c0: 6e:9f:3b:5d:26:54:7b:ad:f1:46:7f:91:55:1a:ab: cc:32:8d:ec:12:84:be:9b:5e:4e:33:b0:87:c9:d8: 6b:da:14:47:e2:3b:5d:44:3c:02:c8:20:b9:0d:f6: 87:b3:7a:6e:d5:e0:52:4b:98:67:58:cd:43:df:9b: 52:10:4a:e4:43:10:71:7c:4e:db:dc:e4:73:27:45: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:18:3B:52:47:A8:BA:31:2C:C7:71:6B:47:E1:C5:01:25:CB:F9:AE X509v3 Authority Key Identifier: keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:55:a5:d2:4d:2c:d0:e7:69:64:77:22:db:e3:5d:56:16:52: 57:a3:4b:ab:20:15:a2:2c:90:d5:90:e8:d6:17:98:e4:58:f0: bc:80:c6:79:73:6f:7c:78:46:67:54:91:f6:7b:9b:eb:77:22: ab:7f:a0:4e:7e:89:2d:4e:cc:54:68:e2:60:6e:2e:02:95:16: 76:f5:96:00:64:a5:c1:dd:b5:1a:96:e4:15:a3:cd:8e:a4:2f: 97:56:d0:07:b3:13:2c:c7:b0:cf:bc:b7:27:0c:2e:de:ec:79: 45:df:9e:ce:31:15:5f:71:0d:0f:56:2a:53:0f:51:46:f4:f5: 54:7d:af:72:ca:65:df:45:62:4b:19:ed:b5:4f:a9:86:fe:37: 23:ce:02:3f:65:fd:8f:63:9a:1c:13:b9:19:05:32:4a:a8:03: 8a:12:40:69:25:ac:6d:82:19:20:64:f0:87:6a:61:b3:46:6b: 42:59:09:33:95:4f:d3:3e:21:5c:f5:b9:03:92:bc:6b:cb:29: 22:6b:b6:f0:fe:8f:bc:18:50:c0:f4:04:c4:1b:ba:cf:11:c4: ad:9a:b8:ed:44:5e:21:1c:bb:53:06:32:f7:90:27:b7:64:f5: 7f:2c:f4:19:e1:f0:b9:2e:2f:87:bc:1f:c9:f3:f7:e4:e7:e0: 8a:da:91:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy QjgzOUZCRUQwHhcNMjUwNzE4MjE1MjIyWhcNMjUwNzI1MjE1MjIyWjAYMRYwFAYD VQQDEw02ODdhYzIxNi1lNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0X5untTEvd1bGXtxr5uNOpzPUrLLaIJpbEvMVsd3SrFyVhO2qOvgNfTDoL0N A8pGniCKyStf/yUr78IBaaxlZw/H49m83hdlywSOevN0/J8rnBGEDHj+Fwb8YC2v uwQcNxtUOwaHyRwvZx0anx4utDNurhKMybkkLwJbr2CfrpBIpqP5xm0Ggr4Js7uV 4gDPMcD44ZcjFwkl6dnaIzUamruPC7XS1lX3Bx7NvBaArZiWkcBunztdJlR7rfFG f5FVGqvMMo3sEoS+m15OM7CHydhr2hRH4jtdRDwCyCC5DfaHs3pu1eBSS5hnWM1D 35tSEErkQxBxfE7b3ORzJ0XNkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8YO1JH qLoxLMdxa0fhxQEly/muMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5 MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmVaXSTSzQ52lkdyLb411WFlJXo0urIBWiLJDVkOjWF5jkWPC8gMZ5 c298eEZnVJH2e5vrdyKrf6BOfoktTsxUaOJgbi4ClRZ29ZYAZKXB3bUaluQVo82O pC+XVtAHsxMsx7DPvLcnDC7e7HlF357OMRVfcQ0PVipTD1FG9PVUfa9yymXfRWJL Ge21T6mG/jcjzgI/Zf2PY5ocE7kZBTJKqAOKEkBpJaxtghkgZPCHamGzRmtCWQkz lU/TPiFc9bkDkrxryykia7bw/o+8GFDA9ATEG7rPEcStmrjtRF4hHLtTBjL3kCe3 ZPV/LPQZ4fC5Li+HvB/J8/fk5+CK2pGd -----END CERTIFICATE-----Generated at Sun Jul 20 06:40:38 2025 by rpki-client