$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft File: imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json) Hash identifier: HyPyjVZm0gam9+6mACNRpcJsOeVRaYpX4ZMI0L+8naM= Subject key identifier: 2C:83:9B:4B:61:BA:FE:2E:5F:69:F6:1C:16:80:63:BE:FB:15:CC:7F Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 Certificate issuer: /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft Manifest number: 013B Signing time: Mon 21 Jul 2025 04:30:00 +0000 Manifest this update: Mon 21 Jul 2025 04:29:59 +0000 Manifest next update: Mon 28 Jul 2025 04:29:59 +0000 Files and hashes: 1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: tjbjvkQP1jaHkHp01svhNwQsJFPLLwxSDEIJp3PJd4s=) 2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: MIl/OMgyucN0EutmGHMH29cPoxdMejUcwQsKGNX20nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Validity Not Before: Jul 21 04:29:59 2025 GMT Not After : Jul 28 04:29:59 2025 GMT Subject: CN=687dc247-5370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:1e:11:48:37:44:b2:8b:13:9b:7d:a9:83: 4f:d6:60:af:08:18:fa:e2:d0:63:9a:ec:80:ce:8c: 1a:f5:4f:91:f3:7a:28:85:c0:d1:96:c9:03:0e:42: 0a:dc:4f:73:e4:09:4b:09:99:70:88:c4:07:bc:50: 16:59:09:c6:fa:5e:15:34:7d:40:32:47:58:30:ec: b3:b9:42:e0:16:02:06:1d:39:9f:69:95:f1:92:9f: e6:f1:aa:79:35:7b:77:63:c5:30:e1:9b:13:dd:2e: 12:12:55:4e:32:29:90:5c:7d:c2:24:25:e0:06:49: 78:21:6b:e6:c0:6d:8a:a0:81:23:00:21:9f:0c:e9: 2c:1d:ff:71:d2:94:d2:89:52:89:e6:c5:e9:dd:c4: ba:d4:30:a3:36:d3:bb:b9:e7:38:dd:c6:82:18:a8: c7:cc:ec:39:c1:49:bb:03:9e:43:9d:06:2f:bd:25: 7e:3e:cc:23:65:f0:0c:e0:41:92:4e:f1:58:50:55: 6b:f7:0c:08:85:52:f9:97:bf:d2:1c:90:d4:e8:d7: 71:49:50:81:f7:ce:11:d3:7a:78:95:2f:0f:71:bf: a9:bd:8d:51:d7:27:ca:7c:3b:4e:09:aa:fd:d8:23: 95:eb:ef:90:74:eb:1a:59:b3:27:39:8b:f5:5b:97: 8b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:83:9B:4B:61:BA:FE:2E:5F:69:F6:1C:16:80:63:BE:FB:15:CC:7F X509v3 Authority Key Identifier: keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c6:47:1c:a2:15:b4:4e:a0:e8:d2:76:4f:92:f9:b5:99:49: ee:93:6c:35:98:6b:51:78:d6:52:15:af:ea:b0:fd:f3:04:4a: 8e:16:5a:32:f0:48:20:cf:1e:35:c0:49:4e:03:57:d6:7e:e1: 3e:84:ca:1c:dc:45:92:d6:29:09:2e:de:a9:52:47:bf:f1:3d: 38:17:dd:a4:a9:fa:3c:50:88:d0:22:ed:e6:0c:01:83:10:ec: 4d:51:ff:7a:3a:17:38:6d:45:21:14:a7:2f:d7:f8:c6:64:76: e8:b4:95:64:e1:5e:b0:7d:42:9f:47:89:31:c0:a8:ef:12:88: 0c:e1:3b:07:89:37:3b:55:84:6c:e0:aa:27:ec:3a:24:a4:7a: 26:6f:da:05:6a:d7:fa:1d:53:f2:4e:a8:4f:16:8d:14:a8:b7: 1f:2a:76:1c:5d:e2:f6:13:84:ad:11:5c:be:45:cb:92:61:c5: e2:01:9c:8e:44:5d:52:af:5e:74:6c:ff:c4:9e:ca:13:29:b1: 3e:3d:f2:ee:dc:4c:67:fe:83:87:23:d6:49:a6:9b:30:50:58: 20:52:10:9d:e6:e8:03:83:ed:79:45:6b:e8:ed:bc:8b:97:0f: 1b:85:24:70:a7:ec:3e:6d:1f:85:a3:23:0f:0f:10:98:64:68: 75:30:5a:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI0QzUxMTAvBgNVBAUTKDhBNjIxQkM3N0EzREQ0MTcwQ0I5MTAzRkY4Nzg4QkM5 MDkwMDgyRDEwHhcNMjUwNzIxMDQyOTU5WhcNMjUwNzI4MDQyOTU5WjAYMRYwFAYD VQQDEw02ODdkYzI0Ny01MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z8eEUg3RLKLE5t9qYNP1mCvCBj64tBjmuyAzowa9U+R83oohcDRlskDDkIK 3E9z5AlLCZlwiMQHvFAWWQnG+l4VNH1AMkdYMOyzuULgFgIGHTmfaZXxkp/m8ap5 NXt3Y8Uw4ZsT3S4SElVOMimQXH3CJCXgBkl4IWvmwG2KoIEjACGfDOksHf9x0pTS iVKJ5sXp3cS61DCjNtO7uec43caCGKjHzOw5wUm7A55DnQYvvSV+PswjZfAM4EGS TvFYUFVr9wwIhVL5l7/SHJDU6NdxSVCB984R03p4lS8Pcb+pvY1R1yfKfDtOCar9 2COV6++QdOsaWbMnOYv1W5eLVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyDm0th uv4uX2n2HBaAY777Fcx/MB8GA1UdIwQYMBaAFIpiG8d6PdQXDLkQP/h4i8kJAILR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjRDNS9EMUUyRDk2ODgz NTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFCY011UkFfLUhpTHlRa0Fn dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltSWJ4M285MUJjTXVSQV8tSGlMeVFrQWd0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjRDNS9EMUUyRDk2ODgzNTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFC Y011UkFfLUhpTHlRa0FndEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApxkccohW0TqDo0nZPkvm1mUnuk2w1mGtReNZSFa/qsP3zBEqOFloy 8Eggzx41wElOA1fWfuE+hMoc3EWS1ikJLt6pUke/8T04F92kqfo8UIjQIu3mDAGD EOxNUf96Ohc4bUUhFKcv1/jGZHbotJVk4V6wfUKfR4kxwKjvEogM4TsHiTc7VYRs 4Kon7DokpHomb9oFatf6HVPyTqhPFo0UqLcfKnYcXeL2E4StEVy+RcuSYcXiAZyO RF1Sr150bP/EnsoTKbE+PfLu3Exn/oOHI9ZJppswUFggUhCd5ugDg+15RWvo7byL lw8bhSRwp+w+bR+FoyMPDxCYZGh1MFrn -----END CERTIFICATE-----Generated at Mon Jul 21 05:52:58 2025 by rpki-client