$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft File: iUKJrUDufmJvXNgvzsVAbbkeHnE.mft (raw, json) Hash identifier: uw4We3daY+KcBjI5HZZ6UomGNaI/drCm3i3M0+pJ/1I= Subject key identifier: C1:0A:6D:A6:07:92:49:6E:A1:C3:12:B9:05:B1:2C:60:90:4A:BA:CC Authority key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71 Certificate issuer: /CN=A91B9790/serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft Manifest number: B2 Signing time: Sat 19 Jul 2025 06:15:00 +0000 Manifest this update: Sat 19 Jul 2025 06:15:00 +0000 Manifest next update: Sat 26 Jul 2025 06:15:00 +0000 Files and hashes: 1: iUKJrUDufmJvXNgvzsVAbbkeHnE.crl (hash: liE9sLGkFGBwXVbb6TuLlsDXMpuMcAnB5mwmHBZe1w0=) 2: B1CB71925DDF11EF8DBEED1FC4F9AE02.roa (hash: 7PzqCay1JqLU8XnJXQhTQ8qxdPkeE0fg0K7DtdeCRDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71 Validity Not Before: Jul 19 06:15:00 2025 GMT Not After : Jul 26 06:15:00 2025 GMT Subject: CN=687b37e4-6b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:66:a0:9e:5b:21:76:3c:66:94:1d:87:89: 95:f2:3d:b3:e9:d3:c5:bf:90:fa:d8:59:42:37:80: ec:22:c2:db:01:f5:45:b7:f7:15:53:bf:33:17:a4: 7c:51:b2:35:35:85:62:de:03:a8:9e:a3:4e:44:25: dc:73:5b:d6:02:e5:41:37:17:c1:31:1f:70:7b:4a: 7e:98:89:1f:13:cf:bc:e4:8d:cb:e5:7c:93:8b:8a: be:aa:4b:d9:40:49:38:45:36:f2:51:82:08:2b:23: 94:fc:5c:0b:06:4c:98:ee:01:1b:7c:cd:be:4e:1e: 8a:5c:c7:8e:b2:4e:5f:10:f0:22:0c:4d:ca:ba:22: 9b:58:00:37:ac:db:f4:bc:c5:a0:45:88:8a:a2:95: 1e:61:13:e3:43:89:55:2b:8d:63:4b:95:b1:67:dc: cf:b5:e1:a3:10:24:ac:cb:08:61:9b:a0:38:a5:05: a5:09:9b:79:2c:9d:6d:47:48:9b:75:f3:bc:74:af: bb:e2:8f:a6:39:45:76:db:0c:f3:f0:83:51:5c:31: 60:93:cb:d2:87:32:97:47:8e:c2:28:f5:db:a2:46: ca:db:5a:48:16:8e:bb:f8:20:4d:c8:60:19:5b:a5: ee:e1:43:bb:2f:51:1d:93:76:8a:49:a2:45:cb:20: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0A:6D:A6:07:92:49:6E:A1:C3:12:B9:05:B1:2C:60:90:4A:BA:CC X509v3 Authority Key Identifier: keyid:89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:1e:24:7d:66:87:be:6b:21:f0:44:2a:e7:2f:af:59:ed:58: 67:13:50:ad:51:e5:c8:93:1b:21:8c:e5:a3:a9:f8:de:6f:66: 8d:65:4e:f9:a3:d4:e5:42:c6:30:25:88:64:61:00:d9:c3:9c: 3d:de:57:75:dd:36:68:2e:5b:24:23:8c:a0:19:92:f1:8b:45: 11:f0:22:e2:98:5b:77:8c:5b:f9:7b:d7:cb:cb:27:69:12:7a: 4a:dc:6b:65:39:35:67:c8:55:6c:c9:cb:95:05:01:e7:8d:0c: 8b:55:4a:bc:85:ab:d7:64:51:cf:d1:7d:0e:80:64:ad:7b:f7: 0e:24:a6:e1:28:55:c5:86:a8:d9:93:bd:4a:52:c3:25:fd:a3: af:37:70:b0:c2:eb:0c:02:c2:20:6f:57:7e:ee:a7:b1:38:b4: f7:a7:53:65:54:ad:0f:9a:85:b2:1c:d3:af:0c:d1:b9:8f:cb: 50:85:96:c3:ce:31:4d:67:ee:10:d9:75:13:c4:d6:3d:47:63: 6e:60:63:b9:30:e9:43:84:0f:7e:40:73:9d:f9:7c:30:e6:03: 34:1b:b9:71:28:0c:db:d8:39:6e:54:ec:87:67:a8:67:43:f5: 92:7f:61:f6:62:72:87:32:3f:41:28:8a:09:4e:f9:e2:71:03: 0b:2b:8d:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3OTAxMTAvBgNVBAUTKDg5NDI4OUFENDBFRTdFNjI2RjVDRDgyRkNFQzU0MDZE QjkxRTFFNzEwHhcNMjUwNzE5MDYxNTAwWhcNMjUwNzI2MDYxNTAwWjAYMRYwFAYD VQQDEw02ODdiMzdlNC02Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OJmoJ5bIXY8ZpQdh4mV8j2z6dPFv5D62FlCN4DsIsLbAfVFt/cVU78zF6R8 UbI1NYVi3gOonqNORCXcc1vWAuVBNxfBMR9we0p+mIkfE8+85I3L5XyTi4q+qkvZ QEk4RTbyUYIIKyOU/FwLBkyY7gEbfM2+Th6KXMeOsk5fEPAiDE3KuiKbWAA3rNv0 vMWgRYiKopUeYRPjQ4lVK41jS5WxZ9zPteGjECSsywhhm6A4pQWlCZt5LJ1tR0ib dfO8dK+74o+mOUV22wzz8INRXDFgk8vShzKXR47CKPXbokbK21pIFo67+CBNyGAZ W6Xu4UO7L1Edk3aKSaJFyyDA3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEKbaYH kkluocMSuQWxLGCQSrrMMB8GA1UdIwQYMBaAFIlCia1A7n5ib1zYL87FQG25Hh5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTc5MC83MTgwNUJBQzVB RTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVEdWZtSnZYTmd2enNWQWJia2VI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVS0pyVUR1Zm1KdlhOZ3Z6c1ZBYmJrZUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTc5MC83MTgwNUJBQzVBRTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVEdWZt SnZYTmd2enNWQWJia2VIbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAHiR9Zoe+ayHwRCrnL69Z7VhnE1CtUeXIkxshjOWjqfjeb2aNZU75 o9TlQsYwJYhkYQDZw5w93ld13TZoLlskI4ygGZLxi0UR8CLimFt3jFv5e9fLyydp EnpK3GtlOTVnyFVsycuVBQHnjQyLVUq8havXZFHP0X0OgGSte/cOJKbhKFXFhqjZ k71KUsMl/aOvN3CwwusMAsIgb1d+7qexOLT3p1NlVK0PmoWyHNOvDNG5j8tQhZbD zjFNZ+4Q2XUTxNY9R2NuYGO5MOlDhA9+QHOd+Xww5gM0G7lxKAzb2DluVOyHZ6hn Q/WSf2H2YnKHMj9BKIoJTvnicQMLK40N -----END CERTIFICATE-----Generated at Sun Jul 20 15:14:07 2025 by rpki-client