$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft File: ihuLzV7XzXIsUwBJjkqTZdBGo04.mft (raw, json) Hash identifier: 6dyeF51GPWNeCcsptXgc3uGh5JXG1fxfuHJAceABVLU= Subject key identifier: 48:69:A4:8F:91:1C:92:FB:4C:93:81:D8:39:EB:81:02:07:FD:68:9B Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Certificate serial: 0866 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft Manifest number: 085E Signing time: Fri 18 Jul 2025 20:56:15 +0000 Manifest this update: Fri 18 Jul 2025 20:56:14 +0000 Manifest next update: Fri 25 Jul 2025 20:56:14 +0000 Files and hashes: 1: ihuLzV7XzXIsUwBJjkqTZdBGo04.crl (hash: iZoWF9Zv+on9Bdfc+TjVveV1+opML2asnmMkSS38quQ=) 2: B6EB6C5ED46611ECA1A27035C4F9AE02.roa (hash: PkkKGsSttNAnAE7wwrjI2GVszUmv3X4tNLiBBoRT9nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2150 (0x866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Validity Not Before: Jul 18 20:56:14 2025 GMT Not After : Jul 25 20:56:14 2025 GMT Subject: CN=687ab4ee-b333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5a:69:6f:56:13:40:17:ce:50:d8:a5:45:60: 44:e9:01:79:a5:cf:10:61:8a:00:8d:6e:66:56:76: e2:23:5c:91:da:76:d2:73:52:b3:b5:85:09:19:13: d6:ab:2f:dc:85:7a:b4:2b:fa:bf:3d:67:af:dc:8e: 28:26:15:6e:a0:38:01:d1:bb:e6:95:27:d8:56:09: 40:16:52:4a:8c:ba:66:48:21:aa:e6:22:4c:86:e2: 49:a4:87:47:9b:83:24:5e:82:01:21:11:e1:bf:21: 2f:bc:8e:7b:23:ef:ba:41:2a:a4:03:4b:bc:69:72: ba:fe:4a:f6:3d:94:9e:b7:c4:cb:4b:8b:26:7a:8a: 34:8e:90:c4:54:6c:08:21:21:07:8a:6c:9c:8a:06: 5e:51:35:f7:5e:e3:b9:f5:75:5a:11:de:38:d1:b5: ae:79:5f:e9:82:d5:6f:ab:69:5c:7d:f7:d4:87:e8: 6f:0b:ff:f8:f2:45:28:4e:2c:85:b9:98:9e:13:f1: 61:11:78:49:43:aa:f3:86:0e:fa:41:24:71:93:7e: aa:8b:56:80:83:ba:ec:c6:f8:1c:f5:c8:d1:0b:fa: 71:f2:80:81:a5:6a:83:9d:84:08:a6:8d:a3:8d:6d: 93:68:1d:58:27:e8:44:ec:f4:c1:bf:09:a6:ea:83: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:69:A4:8F:91:1C:92:FB:4C:93:81:D8:39:EB:81:02:07:FD:68:9B X509v3 Authority Key Identifier: keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f2:37:9c:d6:4f:af:cd:5d:9c:7d:a1:50:2c:f2:16:b6:f7: 8e:f5:4e:53:46:ce:c5:f5:f1:08:88:b6:0a:61:b6:2a:54:a2: 06:b8:a7:61:f8:16:0b:84:05:41:82:c2:6b:b4:42:4c:e6:07: 04:62:1a:c2:57:ed:6e:ed:ae:08:ba:84:82:ea:18:72:89:21: 02:8b:de:08:69:65:63:63:e1:83:8c:39:43:1c:68:96:dc:67: 97:c9:04:dc:b9:fb:27:5c:5c:b0:13:d1:45:1b:63:62:6f:08: ef:99:af:19:1b:f9:65:8a:8a:dc:a1:2f:ee:7f:3a:fe:f9:81: 94:60:57:b2:69:71:2b:fa:ee:4f:5b:c7:f1:4a:4b:78:1e:e0: fe:5e:5f:9e:50:95:9c:ed:11:49:b1:6e:71:22:c8:bf:16:32: cf:9d:be:ad:c7:06:9d:da:12:6c:c2:7e:69:24:86:59:97:20: d1:aa:9d:c7:2c:36:b3:72:7c:c5:9c:a6:43:2e:ba:00:e8:2b: 68:98:fd:a4:e1:75:a7:80:4a:12:63:a9:e5:e7:31:c9:c0:c9: 82:c9:0b:17:4c:b8:e1:15:1e:ea:82:52:34:2c:f7:c8:aa:6a: 9f:8b:1c:0e:c9:95:27:d2:88:b9:27:14:3d:d6:3d:9f:58:a0: 21:24:37:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQzYxMTAvBgNVBAUTKDhBMUI4QkNENUVEN0NENzIyQzUzMDA0OThFNEE5MzY1 RDA0NkEzNEUwHhcNMjUwNzE4MjA1NjE0WhcNMjUwNzI1MjA1NjE0WjAYMRYwFAYD VQQDEw02ODdhYjRlZS1iMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+lppb1YTQBfOUNilRWBE6QF5pc8QYYoAjW5mVnbiI1yR2nbSc1KztYUJGRPW qy/chXq0K/q/PWev3I4oJhVuoDgB0bvmlSfYVglAFlJKjLpmSCGq5iJMhuJJpIdH m4MkXoIBIRHhvyEvvI57I++6QSqkA0u8aXK6/kr2PZSet8TLS4smeoo0jpDEVGwI ISEHimycigZeUTX3XuO59XVaEd440bWueV/pgtVvq2lcfffUh+hvC//48kUoTiyF uZieE/FhEXhJQ6rzhg76QSRxk36qi1aAg7rsxvgc9cjRC/px8oCBpWqDnYQIpo2j jW2TaB1YJ+hE7PTBvwmm6oORKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhppI+R HJL7TJOB2DnrgQIH/WibMB8GA1UdIwQYMBaAFIobi81e181yLFMASY5Kk2XQRqNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFDNi80OTFDOENFNkND OTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpYSXNVd0JKamtxVFpkQkdv MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lodUx6VjdYelhJc1V3Qkpqa3FUWmRCR28wNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFDNi80OTFDOENFNkNDOTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpY SXNVd0JKamtxVFpkQkdvMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq8jec1k+vzV2cfaFQLPIWtveO9U5TRs7F9fEIiLYKYbYqVKIGuKdh +BYLhAVBgsJrtEJM5gcEYhrCV+1u7a4IuoSC6hhyiSECi94IaWVjY+GDjDlDHGiW 3GeXyQTcufsnXFywE9FFG2Nibwjvma8ZG/lliorcoS/ufzr++YGUYFeyaXEr+u5P W8fxSkt4HuD+Xl+eUJWc7RFJsW5xIsi/FjLPnb6txwad2hJswn5pJIZZlyDRqp3H LDazcnzFnKZDLroA6CtomP2k4XWngEoSY6nl5zHJwMmCyQsXTLjhFR7qglI0LPfI qmqfixwOyZUn0oi5JxQ91j2fWKAhJDe1 -----END CERTIFICATE-----Generated at Sun Jul 20 11:26:41 2025 by rpki-client