$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json) Hash identifier: uLnSW7EB9VB8y0y4+Xk71n+wBRBVnEK+947jUusF2hU= Subject key identifier: 2F:E7:86:6E:C7:0A:BD:25:AF:6A:39:2B:7E:4C:F4:31:10:DB:53:2E Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft Manifest number: 0111 Signing time: Sat 19 Jul 2025 05:07:36 +0000 Manifest this update: Sat 19 Jul 2025 05:07:35 +0000 Manifest next update: Sat 26 Jul 2025 05:07:35 +0000 Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: ouXT7Sxo+DM75qF84Se8sbmkpNVqlHH0EA8S8P4Qus8=) 2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: NOsPGGlDSlCfn8hbBHu4EWI+usdJzaN80KZom3HQWsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Validity Not Before: Jul 19 05:07:35 2025 GMT Not After : Jul 26 05:07:35 2025 GMT Subject: CN=687b2817-a4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6a:33:91:c7:95:95:62:24:f9:9c:ea:07:58: 79:e2:06:2d:4a:29:ef:a9:0b:c4:a2:50:80:00:ec: 95:11:22:9b:eb:d1:8c:71:fe:1b:1e:0a:3a:77:bd: b2:23:7d:a5:55:fe:ec:60:c9:91:4d:95:f4:1c:31: 12:df:21:35:e4:46:f9:ae:3d:20:fc:4f:a9:83:5b: b9:1d:38:6e:b5:cb:2f:88:d1:7a:93:1b:29:f5:ba: 26:9e:ed:c8:b5:ad:90:1b:1b:08:54:4e:81:6f:d8: e7:71:4d:02:13:57:f2:24:2d:8c:fd:1f:91:59:1d: ce:dd:17:85:c2:25:10:45:28:f1:d2:17:0e:81:90: 99:19:f6:46:e4:fd:c7:49:df:42:57:5e:f4:f9:e6: 47:49:ff:4e:3b:34:f8:97:28:b0:d9:dd:45:61:72: 66:78:8b:33:5c:27:a3:2a:f9:86:fe:1e:99:6f:fc: e6:6d:c8:b2:55:b3:80:8e:68:d0:8a:84:64:96:80: a2:80:5f:23:02:9d:3b:1c:6e:29:ad:46:6c:c5:0b: aa:eb:1d:8f:38:a0:05:3d:88:e2:f7:90:6f:93:ef: 32:35:5e:5b:98:0c:51:d0:46:f4:0e:8f:ac:d9:ff: d2:92:b0:24:72:9c:b4:3e:a5:9a:91:fb:97:a6:aa: 94:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E7:86:6E:C7:0A:BD:25:AF:6A:39:2B:7E:4C:F4:31:10:DB:53:2E X509v3 Authority Key Identifier: keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d2:12:74:c6:b3:b9:b6:0e:eb:01:5b:47:af:5e:70:c4:ba: 0e:7f:6a:5c:b9:96:56:b5:35:26:fc:c0:41:3d:3f:61:f0:8f: bc:19:42:79:55:32:64:fc:49:f9:fb:e7:7f:31:3b:16:ff:d4: cd:74:b3:45:55:c4:62:41:ef:f9:61:6b:f9:db:a8:e6:d7:b5: 01:a9:a0:de:2d:ce:16:fe:d2:cd:89:a9:35:c0:0b:ca:ca:cf: db:44:e3:d0:07:98:45:e2:ac:a8:55:47:f5:22:ff:0b:7c:4f: 30:e9:7f:78:18:d5:f6:ed:52:3e:b5:16:43:c4:1b:32:2d:cf: fb:4a:5f:a2:91:0a:f5:2e:df:ea:ae:d1:2a:bd:3a:57:24:f7: 78:17:5c:bf:86:31:b9:76:64:ad:f5:59:0a:e9:06:c5:0b:8e: e0:1f:ce:cf:43:d2:b9:72:12:ef:ea:62:63:b0:51:2a:dc:77: 5a:27:55:ad:c0:ff:f7:2c:56:0e:62:30:0b:09:07:14:e6:46: ab:65:d9:c1:a8:85:a4:be:9a:90:ea:6e:02:b0:b8:fc:b4:f5: 4e:2b:20:3c:d3:d6:8b:b2:53:48:00:99:7b:06:ac:37:e5:4a: 6c:a4:31:18:a1:e1:2e:76:03:eb:1a:ee:e0:37:36:dc:b9:6d: f3:7b:bf:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCRjAxMTAvBgNVBAUTKEZDODg2ODk0RTJENzBFMzUyRTRGMTY4MDUyQzUxQjA1 QUIwNUFDQzUwHhcNMjUwNzE5MDUwNzM1WhcNMjUwNzI2MDUwNzM1WjAYMRYwFAYD VQQDEw02ODdiMjgxNy1hNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WozkceVlWIk+ZzqB1h54gYtSinvqQvEolCAAOyVESKb69GMcf4bHgo6d72y I32lVf7sYMmRTZX0HDES3yE15Eb5rj0g/E+pg1u5HThutcsviNF6kxsp9bomnu3I ta2QGxsIVE6Bb9jncU0CE1fyJC2M/R+RWR3O3ReFwiUQRSjx0hcOgZCZGfZG5P3H Sd9CV170+eZHSf9OOzT4lyiw2d1FYXJmeIszXCejKvmG/h6Zb/zmbciyVbOAjmjQ ioRkloCigF8jAp07HG4prUZsxQuq6x2POKAFPYji95Bvk+8yNV5bmAxR0Eb0Do+s 2f/SkrAkcpy0PqWakfuXpqqUpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/nhm7H Cr0lr2o5K35M9DEQ21MuMB8GA1UdIwQYMBaAFPyIaJTi1w41Lk8WgFLFGwWrBazF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUJGMC9EOTZCQTY2MEMw OTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERqVXVUeGFBVXNVYkJhc0Zy TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUJGMC9EOTZCQTY2MEMwOTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERq VXVUeGFBVXNVYkJhc0ZyTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP0hJ0xrO5tg7rAVtHr15wxLoOf2pcuZZWtTUm/MBBPT9h8I+8GUJ5 VTJk/En5++d/MTsW/9TNdLNFVcRiQe/5YWv526jm17UBqaDeLc4W/tLNiak1wAvK ys/bROPQB5hF4qyoVUf1Iv8LfE8w6X94GNX27VI+tRZDxBsyLc/7Sl+ikQr1Lt/q rtEqvTpXJPd4F1y/hjG5dmSt9VkK6QbFC47gH87PQ9K5chLv6mJjsFEq3HdaJ1Wt wP/3LFYOYjALCQcU5karZdnBqIWkvpqQ6m4CsLj8tPVOKyA809aLslNIAJl7Bqw3 5UpspDEYoeEudgPrGu7gNzbcuW3ze7+i -----END CERTIFICATE-----Generated at Mon Jul 21 05:42:00 2025 by rpki-client