$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: r2IsSbkezbEzrHmSASdvval+TUUwimNjRF+ZlvPYNIc= Subject key identifier: 36:61:85:36:3A:34:8E:3E:E2:C0:98:72:6D:0A:21:17:2B:C1:EA:56 Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 0502 Signing time: Sat 19 Jul 2025 00:01:25 +0000 Manifest this update: Sat 19 Jul 2025 00:01:24 +0000 Manifest next update: Sat 26 Jul 2025 00:01:24 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: 7wWiyE9ZcUZ3NKOoSVuHhCSX3/NREMdQIbPPj33ra3g=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: Jul 19 00:01:24 2025 GMT Not After : Jul 26 00:01:24 2025 GMT Subject: CN=687ae054-0e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:04:80:e0:b0:75:83:9c:ba:df:01:cd:18: c2:b3:f2:64:a5:12:90:7b:69:bb:21:80:b6:64:56: 30:2e:13:72:f7:90:8c:11:67:61:ee:e7:49:66:cd: 32:78:dd:67:f0:4f:6c:4f:eb:74:13:82:5f:38:24: dd:ac:1b:c2:b7:31:61:96:d3:31:dd:52:ae:27:1a: 76:0f:df:14:76:dd:ee:50:37:ed:05:5f:85:aa:e6: a8:d6:7a:ad:0a:81:cb:ed:22:18:b2:89:f9:d6:f2: 5c:6b:df:86:d1:c2:25:10:65:2d:0b:e4:98:41:f7: fd:8c:90:72:f8:ef:db:05:2d:c0:bc:04:e7:93:8f: 80:9e:0b:7c:3e:61:11:b2:a0:10:33:c6:1c:e5:ae: 20:8d:7e:09:78:94:df:0c:a5:48:23:39:b6:a3:1c: 08:8f:83:ac:a6:d6:1f:dd:08:3b:a2:96:98:a5:90: 3d:77:53:45:51:1e:e0:9f:a4:13:24:7f:6f:eb:37: 6a:e9:58:af:a8:a8:5b:e1:48:35:c3:af:03:b2:37: 16:88:4b:1a:2f:60:69:a2:74:3c:26:52:a7:ce:5e: 0b:2e:03:50:6a:23:bb:b2:7a:6b:3c:30:48:6f:0d: df:40:80:3e:44:4e:eb:1b:71:9c:b6:7b:f9:7e:93: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:61:85:36:3A:34:8E:3E:E2:C0:98:72:6D:0A:21:17:2B:C1:EA:56 X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:99:72:5f:71:97:f8:91:f2:63:49:b7:0d:70:a6:9d:0d:20: ba:9f:88:92:e7:0c:0e:e9:96:37:45:f5:c0:b3:30:8b:20:b3: 87:67:44:8e:12:fb:55:87:d0:4e:8e:5f:06:71:a5:13:ab:37: 03:37:b1:48:d2:6b:4a:88:91:c0:4f:38:b0:60:05:83:49:43: a8:9a:7a:07:5d:0c:28:b5:a2:54:1a:b4:0f:c5:23:6c:dc:a4: 51:1f:3c:25:b2:bd:4b:82:89:db:bb:e6:0a:9f:2f:b8:e9:c1: ae:ad:80:f3:4f:52:ec:7b:f3:09:92:6c:2b:85:52:48:1c:e0: b2:e5:63:61:83:7d:7b:f2:f6:e1:62:8a:ba:65:a1:15:c3:9d: 62:d3:8d:ee:3e:d4:74:1b:6d:78:2a:22:af:1a:0f:86:56:90: c3:cd:6e:5f:14:0a:25:af:9e:7d:5f:55:38:31:d5:46:82:87: d3:c6:d7:f5:fe:d6:14:46:b0:36:1f:0f:19:91:2a:6b:8b:db: d1:4c:e2:fd:32:bb:80:35:e7:50:19:b0:51:40:d2:44:6f:bf: da:e4:e2:ca:99:86:6a:7b:04:30:b6:a6:37:30:72:9d:97:e2: 5f:2f:07:24:9d:9f:d4:ed:43:0b:1a:1e:19:78:e3:1e:70:39: 22:b5:cf:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUwNzE5MDAwMTI0WhcNMjUwNzI2MDAwMTI0WjAYMRYwFAYD VQQDEw02ODdhZTA1NC0wZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycEEgOCwdYOcut8BzRjCs/JkpRKQe2m7IYC2ZFYwLhNy95CMEWdh7udJZs0y eN1n8E9sT+t0E4JfOCTdrBvCtzFhltMx3VKuJxp2D98Udt3uUDftBV+Fquao1nqt CoHL7SIYson51vJca9+G0cIlEGUtC+SYQff9jJBy+O/bBS3AvATnk4+Angt8PmER sqAQM8Yc5a4gjX4JeJTfDKVIIzm2oxwIj4OsptYf3Qg7opaYpZA9d1NFUR7gn6QT JH9v6zdq6VivqKhb4Ug1w68DsjcWiEsaL2BponQ8JlKnzl4LLgNQaiO7snprPDBI bw3fQIA+RE7rG3Gctnv5fpO7kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZhhTY6 NI4+4sCYcm0KIRcrwepWMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7mXJfcZf4kfJjSbcNcKadDSC6n4iS5wwO6ZY3RfXAszCLILOHZ0SO EvtVh9BOjl8GcaUTqzcDN7FI0mtKiJHATziwYAWDSUOomnoHXQwotaJUGrQPxSNs 3KRRHzwlsr1Lgonbu+YKny+46cGurYDzT1Lse/MJkmwrhVJIHOCy5WNhg3178vbh Yoq6ZaEVw51i043uPtR0G214KiKvGg+GVpDDzW5fFAolr559X1U4MdVGgofTxtf1 /tYURrA2Hw8ZkSpri9vRTOL9MruANedQGbBRQNJEb7/a5OLKmYZqewQwtqY3MHKd l+JfLwcknZ/U7UMLGh4ZeOMecDkitc9y -----END CERTIFICATE-----Generated at Sun Jul 20 16:31:50 2025 by rpki-client