$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: d9QQ0TvVbT3SJi7F3VjtP5M29g0jGJD7d9KfWggzMIs= Subject key identifier: 9B:7A:68:DA:12:F2:C1:67:8D:47:89:5A:05:80:D4:DA:F5:3C:F1:00 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 01ED Signing time: Sat 19 Jul 2025 02:45:23 +0000 Manifest this update: Sat 19 Jul 2025 02:45:23 +0000 Manifest next update: Sat 26 Jul 2025 02:45:23 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: e5ud4wGxhtvAYB5GDXV5ie84PKv2BOhABb02OY4W7ZE=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: mzTY+yHaxiOoTmhIGnRxe8TteP35OSc9TDFULhxG7es=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: TCA2TacY4ZsDEXX4IqBFag6vpZrZlhAMEJDWvtGJDWs=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Tjdi12mwJxE8vytdEEm6LYs9NXU4cX9jhBUfI2VO1fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Jul 19 02:45:23 2025 GMT Not After : Jul 26 02:45:23 2025 GMT Subject: CN=687b06c3-6aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:17:90:4f:b1:48:63:4c:0c:cf:15:eb:67: 3b:a7:22:72:fa:27:43:58:c8:fb:f5:da:a3:cd:e6: 19:a8:be:7b:ce:36:89:8e:58:31:bf:fd:72:de:09: bc:3f:bc:a7:19:94:4f:98:e7:00:64:b8:d4:1a:7b: f7:2b:47:65:0b:ea:8a:d9:36:d6:71:99:49:db:8b: 89:1c:75:ae:e4:d8:93:fd:74:75:f1:4d:81:0a:f0: 1a:f4:f0:e3:6c:18:ee:90:67:32:32:3c:30:84:e3: df:6c:13:1a:88:d3:3d:43:ca:90:51:b3:7b:3b:51: d7:da:89:3b:99:c3:e7:f3:2d:77:45:3a:75:34:ae: 1e:a2:e2:41:c6:e7:83:4e:3d:68:6c:c2:b1:83:c8: 67:04:8d:1a:86:9b:07:c3:00:ad:0b:fd:df:09:4b: 14:7b:d7:a7:63:92:22:e9:66:7c:72:e2:ca:e9:d7: a6:cd:5f:01:a8:bf:d9:c6:c0:02:4d:40:13:53:cd: 27:5e:0d:69:fe:78:4f:94:00:97:9e:8d:c3:6b:11: 4e:aa:1a:67:a5:c5:f8:97:2a:67:40:d3:03:9c:a4: 30:fa:4f:56:de:e0:63:25:39:1e:cf:db:52:c2:1f: cd:40:7b:b5:24:61:21:61:e8:ba:bc:9a:3c:0e:84: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7A:68:DA:12:F2:C1:67:8D:47:89:5A:05:80:D4:DA:F5:3C:F1:00 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:30:cf:ca:a5:01:1a:65:3e:c7:f4:9c:23:d3:a3:b1:7a:1b: 43:c3:a1:bc:2a:de:94:32:60:a4:c4:6e:02:a8:bf:3b:91:dd: 65:52:8c:9e:cd:f8:28:4a:ef:a3:6b:3f:95:ad:ac:a5:3c:27: 5c:35:31:c1:1d:ad:4e:d1:66:ee:2b:f9:24:fe:70:96:ab:6b: 88:fb:e4:b0:f8:22:31:0d:77:29:ba:7a:8a:57:e4:3c:3e:8a: ed:80:fb:1f:72:b5:87:de:89:44:b4:91:a9:e4:24:a1:a3:1a: 64:fc:80:b2:af:93:30:87:e5:10:27:6f:d2:ad:06:c1:49:3e: fd:7d:d1:10:8a:34:2c:86:2f:40:3b:4d:dc:b6:65:e2:7e:84: 3e:be:7e:f8:12:08:5a:d8:23:00:8c:da:d4:cb:4c:cf:70:6d: d0:42:7a:08:73:56:8c:23:f8:98:f6:8a:6a:dd:94:0f:42:7d: d4:31:c3:59:6c:b4:e9:93:5e:bf:fa:a8:b9:f1:bb:f9:f0:8c: 0e:fc:3d:f5:ac:38:c2:c4:9c:bb:d5:1a:ba:eb:1e:6d:61:7d: 82:d6:32:93:13:04:0c:4d:66:eb:bf:54:ce:92:f6:73:e0:60: f2:c4:a7:47:34:16:ec:23:2b:74:02:06:d0:5e:bf:93:9b:27: 6f:c1:48:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUwNzE5MDI0NTIzWhcNMjUwNzI2MDI0NTIzWjAYMRYwFAYD VQQDEw02ODdiMDZjMy02YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/kXkE+xSGNMDM8V62c7pyJy+idDWMj79dqjzeYZqL57zjaJjlgxv/1y3gm8 P7ynGZRPmOcAZLjUGnv3K0dlC+qK2TbWcZlJ24uJHHWu5NiT/XR18U2BCvAa9PDj bBjukGcyMjwwhOPfbBMaiNM9Q8qQUbN7O1HX2ok7mcPn8y13RTp1NK4eouJBxueD Tj1obMKxg8hnBI0ahpsHwwCtC/3fCUsUe9enY5Ii6WZ8cuLK6demzV8BqL/ZxsAC TUATU80nXg1p/nhPlACXno3DaxFOqhpnpcX4lypnQNMDnKQw+k9W3uBjJTkez9tS wh/NQHu1JGEhYei6vJo8DoROJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt6aNoS 8sFnjUeJWgWA1Nr1PPEAMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBMM/KpQEaZT7H9Jwj06OxehtDw6G8Kt6UMmCkxG4CqL87kd1lUoye zfgoSu+jaz+VraylPCdcNTHBHa1O0WbuK/kk/nCWq2uI++Sw+CIxDXcpunqKV+Q8 PortgPsfcrWH3olEtJGp5CShoxpk/ICyr5Mwh+UQJ2/SrQbBST79fdEQijQshi9A O03ctmXifoQ+vn74Egha2CMAjNrUy0zPcG3QQnoIc1aMI/iY9opq3ZQPQn3UMcNZ bLTpk16/+qi58bv58IwO/D31rDjCxJy71Rq66x5tYX2C1jKTEwQMTWbrv1TOkvZz 4GDyxKdHNBbsIyt0AgbQXr+TmydvwUi7 -----END CERTIFICATE-----Generated at Mon Jul 21 02:19:07 2025 by rpki-client