$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: KQN//rL62oxeoUJmbBSLMJBg3aQ/n7tyLOoAPu3MxII= Subject key identifier: 19:C7:C0:CB:B6:0D:6C:12:F4:7F:95:21:14:FF:8F:F2:FB:55:92:FF Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 036E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 035C Signing time: Mon 21 Jul 2025 01:13:49 +0000 Manifest this update: Mon 21 Jul 2025 01:13:49 +0000 Manifest next update: Mon 28 Jul 2025 01:13:49 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: QJyHGbouRndFD1Sk7lJEfdPtAJoboIIujY2e1iz4apM=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 878 (0x36e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Jul 21 01:13:49 2025 GMT Not After : Jul 28 01:13:49 2025 GMT Subject: CN=687d944d-fea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:33:69:be:8c:15:af:fa:6d:4c:7d:a2:89: ef:70:d5:1c:19:5e:96:38:bd:8a:77:30:58:74:01: f1:e6:4c:54:e5:4f:41:bb:d2:6a:d3:06:ca:1e:3f: 36:e2:e6:17:b3:68:75:c9:95:9a:d3:fc:b1:9b:f9: 8b:71:b4:2f:31:22:71:6f:46:af:67:6c:63:3c:29: c3:4f:05:aa:cd:ce:35:7d:e8:32:88:ca:1e:7d:c7: fc:3d:84:9d:61:64:08:ad:39:4f:85:bd:4b:53:77: ba:03:5b:83:28:e2:d9:c9:c8:7c:b4:dd:01:ae:7d: 2b:0d:59:33:c7:b2:a2:ce:a8:0d:4c:69:5e:31:ac: d6:15:06:05:0f:32:7b:3e:d8:fc:26:10:b5:73:b9: 40:1f:00:76:6f:d0:34:ac:e0:26:0d:dc:8e:74:bf: 0c:ca:66:e8:e9:6e:da:50:dd:67:0f:14:95:17:f7: 33:20:3b:f1:bf:0c:ad:13:ec:c5:bc:e4:10:cd:ce: 69:42:b6:d3:b5:7a:dd:c7:d7:11:d7:ff:ba:61:5f: fb:d6:c6:73:a3:80:6d:f8:a3:67:28:a9:9d:e2:cb: 29:54:01:43:bb:13:5e:d1:cf:09:36:94:64:4e:be: c7:c2:a8:54:a7:f7:db:71:00:f9:36:03:e3:0a:52: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C7:C0:CB:B6:0D:6C:12:F4:7F:95:21:14:FF:8F:F2:FB:55:92:FF X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:b9:0a:78:0b:99:fb:d7:2d:57:98:9f:01:bd:4c:81:5e:c2: 86:c3:bf:14:82:98:b8:3b:84:54:3a:a6:42:50:18:12:0c:db: e0:ba:c8:26:59:81:59:79:db:96:5a:d7:4c:1e:fd:1d:dc:17: d6:47:8e:c0:91:72:aa:cf:4e:45:c9:5c:5f:9f:29:16:1b:6c: d7:3f:70:e3:82:14:03:09:67:ca:34:db:7e:5e:d7:92:70:a4: 68:29:c1:8b:89:21:1f:13:1f:64:62:90:d7:ad:12:39:2b:72: 81:bb:f8:78:bd:92:0d:9c:58:11:09:29:7b:d2:8c:39:75:f3: 22:4e:f0:1d:5e:d9:59:fc:ba:9c:e6:fd:76:82:b7:26:f0:91: c7:4c:cf:79:08:e1:51:da:00:87:09:9f:94:6b:28:48:eb:99: 36:75:b7:00:1f:73:73:40:fd:f7:43:8e:92:80:6a:8a:8d:9b: 88:8d:6f:a6:74:99:fa:f7:04:eb:f0:36:c4:1f:d2:c4:ec:36: 57:9e:c9:68:40:54:6b:1f:7a:b4:f5:32:ee:c2:47:ce:27:c8: dd:34:10:3a:c9:1d:d6:72:c7:05:44:9b:46:84:4e:ba:74:23: c0:68:de:da:9d:6f:58:a1:e0:ed:60:c4:40:48:70:b8:18:17: bf:ef:a9:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwNzIxMDExMzQ5WhcNMjUwNzI4MDExMzQ5WjAYMRYwFAYD VQQDEw02ODdkOTQ0ZC1mZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpQzab6MFa/6bUx9oonvcNUcGV6WOL2KdzBYdAHx5kxU5U9Bu9Jq0wbKHj82 4uYXs2h1yZWa0/yxm/mLcbQvMSJxb0avZ2xjPCnDTwWqzc41fegyiMoefcf8PYSd YWQIrTlPhb1LU3e6A1uDKOLZych8tN0Brn0rDVkzx7KizqgNTGleMazWFQYFDzJ7 Ptj8JhC1c7lAHwB2b9A0rOAmDdyOdL8Mymbo6W7aUN1nDxSVF/czIDvxvwytE+zF vOQQzc5pQrbTtXrdx9cR1/+6YV/71sZzo4Bt+KNnKKmd4sspVAFDuxNe0c8JNpRk Tr7HwqhUp/fbcQD5NgPjClJTKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnHwMu2 DWwS9H+VIRT/j/L7VZL/MB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsuQp4C5n71y1XmJ8BvUyBXsKGw78Ugpi4O4RUOqZCUBgSDNvgusgm WYFZeduWWtdMHv0d3BfWR47AkXKqz05FyVxfnykWG2zXP3DjghQDCWfKNNt+XteS cKRoKcGLiSEfEx9kYpDXrRI5K3KBu/h4vZINnFgRCSl70ow5dfMiTvAdXtlZ/Lqc 5v12grcm8JHHTM95COFR2gCHCZ+UayhI65k2dbcAH3NzQP33Q46SgGqKjZuIjW+m dJn69wTr8DbEH9LE7DZXnsloQFRrH3q09TLuwkfOJ8jdNBA6yR3WcscFRJtGhE66 dCPAaN7anW9YoeDtYMRASHC4GBe/76l1 -----END CERTIFICATE-----Generated at Tue Jul 22 12:13:34 2025 by rpki-client