$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft File: RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json) Hash identifier: 8wCZiOGZnlCr+clVKH1JAda5BwS/Z2IMh48oia3Hbcg= Subject key identifier: 07:70:EE:C9:27:32:39:70:05:E6:78:89:06:87:28:53:44:3F:2C:0F Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E Certificate issuer: /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft Manifest number: 06DC Signing time: Sun 20 Jul 2025 22:10:30 +0000 Manifest this update: Sun 20 Jul 2025 22:10:29 +0000 Manifest next update: Sun 27 Jul 2025 22:10:29 +0000 Files and hashes: 1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: yMOdVQ+nkNlDMrshFau1occ5oYGFGNnbPXIAq/b6zbg=) 2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: CkC6ANX758VxZawlsLHGSAa3XJCkHalxckMndJyeulg=) 3: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: HVXaOsNZoPltolHevFPiB1XXc2ZtYhS+FxC+Zs4U1G4=) 4: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: u0IXLJwtvydpHb+eS/CGN5IGunShgi4NMqu7a7fC+84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D18DA, serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E Validity Not Before: Jul 20 22:10:29 2025 GMT Not After : Jul 27 22:10:29 2025 GMT Subject: CN=687d6956-436c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:9e:49:57:05:2a:4d:3d:07:3a:26:ba:53: 8a:00:7c:5a:af:d6:2e:83:ba:fb:dc:bb:a7:19:d3: ef:bf:aa:f2:34:50:bf:3b:a0:55:0d:b9:8e:77:1b: fa:d4:ab:94:b1:92:64:79:b9:3f:98:76:c4:84:95: 6e:1c:11:74:44:02:1b:27:1a:34:32:89:a3:bc:f4: a6:63:9d:b1:df:72:08:21:1b:c0:bc:55:51:68:4f: 20:3f:17:96:06:b0:73:b7:0c:4e:6e:3e:f1:92:c5: 48:1d:5d:76:a4:75:9b:23:77:1a:cc:df:22:4c:93: 27:21:8f:3e:21:30:dc:08:f7:61:c8:3e:0a:c5:17: e4:dd:15:16:19:ec:f2:76:ad:08:53:e0:80:f9:21: 23:19:a2:2c:f2:ca:8b:11:51:a5:13:1a:01:f0:d6: d1:ab:e4:ad:ab:c8:9d:c5:22:05:9d:d0:36:a0:d1: 99:fe:44:f0:ac:c8:85:62:ca:97:f4:f5:1b:05:81: b8:7b:6e:27:59:b6:9d:8e:05:fc:75:0c:1e:b9:ce: 52:8f:b7:8c:aa:77:a7:a4:ca:ec:3e:d4:4d:8a:ae: bc:4f:eb:58:1b:e6:4b:10:d8:0b:e8:01:97:b7:c0: 6b:81:1e:c3:3a:73:36:51:f8:4e:9e:86:49:66:16: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:70:EE:C9:27:32:39:70:05:E6:78:89:06:87:28:53:44:3F:2C:0F X509v3 Authority Key Identifier: keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d0:b4:0e:9d:1d:f5:98:a3:dd:89:cf:f3:ea:21:f8:96:47: c7:74:46:d0:cd:9b:8d:c6:77:70:fb:71:7d:58:e1:a7:a6:fa: 8d:95:c5:21:01:d4:ad:9a:67:df:20:e3:9f:01:ae:3c:f3:59: 19:b9:e1:d8:c9:28:e4:99:14:0c:9e:ab:4b:f1:a7:e9:e6:bb: a4:66:1c:a5:1c:1a:36:20:5e:bf:f1:90:52:1f:83:e8:33:f5: d5:4b:df:12:b8:6a:93:01:3f:3e:6d:e7:2b:14:23:84:d6:cf: 4b:a2:28:bb:58:56:c4:e6:2c:b6:84:cc:aa:39:6d:6a:e0:fe: e9:3e:06:7a:64:d3:69:10:ff:87:0e:ca:b8:03:06:bb:9a:c1: 6a:c4:33:b3:d1:25:82:28:f5:84:b4:3f:7f:e6:89:aa:66:ee: b4:0a:bd:f8:c9:f3:e2:dc:fc:3d:d5:9e:36:53:cd:51:44:e0: ad:ce:78:fa:ee:a1:f7:44:6e:e9:e0:ff:e3:81:97:5a:75:63: 10:0a:12:94:92:7a:21:b6:6b:a8:7a:5c:14:f8:a0:15:06:13: 7a:10:0f:11:c2:ca:64:e9:dd:3a:e0:1a:dc:63:60:b1:5c:66: 65:92:85:99:bc:60:37:bb:b6:67:3c:a3:93:b2:cb:6c:15:bb: 3c:88:f9:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE4REExMTAvBgNVBAUTKDQ1MTIyNkIzRTk3N0NGMTE5NjE3NTVCMDY5MzdDMUY3 RTczNURDNUUwHhcNMjUwNzIwMjIxMDI5WhcNMjUwNzI3MjIxMDI5WjAYMRYwFAYD VQQDEw02ODdkNjk1Ni00MzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnr6eSVcFKk09BzomulOKAHxar9Yug7r73LunGdPvv6ryNFC/O6BVDbmOdxv6 1KuUsZJkebk/mHbEhJVuHBF0RAIbJxo0MomjvPSmY52x33IIIRvAvFVRaE8gPxeW BrBztwxObj7xksVIHV12pHWbI3cazN8iTJMnIY8+ITDcCPdhyD4KxRfk3RUWGezy dq0IU+CA+SEjGaIs8sqLEVGlExoB8NbRq+Stq8idxSIFndA2oNGZ/kTwrMiFYsqX 9PUbBYG4e24nWbadjgX8dQweuc5Sj7eMqnenpMrsPtRNiq68T+tYG+ZLENgL6AGX t8BrgR7DOnM2UfhOnoZJZha55wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdw7skn MjlwBeZ4iQaHKFNEPywPMB8GA1UdIwQYMBaAFEUSJrPpd88RlhdVsGk3wffnNdxe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMThEQS9ERTM4OTRFQzVF RTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4R1dGMVd3YVRmQjktYzEz RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JSSW1zLWwzenhHV0YxV3dhVGZCOS1jMTNGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MThEQS9ERTM4OTRFQzVFRTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4 R1dGMVd3YVRmQjktYzEzRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg0LQOnR31mKPdic/z6iH4lkfHdEbQzZuNxndw+3F9WOGnpvqNlcUh AdStmmffIOOfAa4881kZueHYySjkmRQMnqtL8afp5rukZhylHBo2IF6/8ZBSH4Po M/XVS98SuGqTAT8+becrFCOE1s9Loii7WFbE5iy2hMyqOW1q4P7pPgZ6ZNNpEP+H Dsq4Awa7msFqxDOz0SWCKPWEtD9/5omqZu60Cr34yfPi3Pw91Z42U81RROCtznj6 7qH3RG7p4P/jgZdadWMQChKUknohtmuoelwU+KAVBhN6EA8Rwspk6d064BrcY2Cx XGZlkoWZvGA3u7ZnPKOTsstsFbs8iPnQ -----END CERTIFICATE-----Generated at Mon Jul 21 09:27:54 2025 by rpki-client