$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft File: IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json) Hash identifier: wTv4TRWCEqoas+ksYdKPcbZmpdTK1qGtDJyCAQAjanc= Subject key identifier: 70:8A:FC:C6:61:C5:5A:4C:D0:F3:79:C3:6A:A9:A4:25:38:83:2F:7E Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Certificate serial: 032B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft Manifest number: 0324 Signing time: Sat 19 Jul 2025 01:34:43 +0000 Manifest this update: Sat 19 Jul 2025 01:34:43 +0000 Manifest next update: Sat 26 Jul 2025 01:34:43 +0000 Files and hashes: 1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: jgxOkXklJoVDvSWPYw8gOGeMWU9RZCqGvEA3faRw/fY=) 2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: du3inK9qkjwR/A2n6vO6SMQjDynHJ0y0PAziJifzAng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 811 (0x32b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Validity Not Before: Jul 19 01:34:43 2025 GMT Not After : Jul 26 01:34:43 2025 GMT Subject: CN=687af633-fab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:ed:bf:1e:d4:1c:3f:ea:02:d6:77:ec:91: bb:56:1c:33:0b:1d:67:e7:33:54:d3:73:6b:52:94: 24:32:9b:80:34:3b:ae:60:a1:db:bf:df:a2:86:e3: 1d:61:47:be:c2:8a:e4:24:8e:78:d0:02:30:9b:45: 28:ff:7c:f5:1f:3d:f3:55:a8:e1:fa:ae:dc:35:1b: 35:89:91:c3:06:b0:26:7c:56:4f:90:ca:e6:de:be: 36:ad:84:6a:7a:f1:02:e8:1f:bf:bc:a7:cf:f9:88: ab:84:04:bc:33:1e:bf:5f:61:fc:f5:5b:62:1a:ba: 65:71:fb:60:91:4f:d2:5d:f0:1d:0a:cc:73:57:e7: fd:15:67:a4:f1:94:a9:8a:43:25:9e:57:7d:b9:43: 05:b3:af:9b:60:47:49:f0:51:69:5b:9a:c6:ec:92: a1:de:97:12:10:2d:1a:8a:7f:73:89:a2:52:68:ee: 1a:f4:0c:47:c7:29:86:ad:38:98:b7:ac:bb:e1:b3: fe:2d:89:a8:17:3d:5c:4b:9a:93:80:0f:dd:2e:bf: 53:1f:27:09:dd:05:ad:99:82:71:8c:ab:06:4e:d5: 09:7e:09:d8:36:03:c4:89:cb:03:2d:71:5e:2e:f1: 65:c5:5a:18:44:a7:c9:06:e4:8c:91:0c:b8:3b:71: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8A:FC:C6:61:C5:5A:4C:D0:F3:79:C3:6A:A9:A4:25:38:83:2F:7E X509v3 Authority Key Identifier: keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:df:b8:d9:b1:56:bf:7f:d1:a1:0e:b4:cc:a5:c0:da:82:03: 51:25:b9:5a:6f:6a:a5:4e:98:4f:1b:3c:e9:98:62:8b:96:66: 51:7c:2b:44:64:0f:ee:cc:98:77:32:76:a5:92:47:d7:67:29: 13:6c:60:21:af:95:62:95:c9:4b:4f:5a:fb:05:72:6f:ac:ab: dc:e5:cd:e6:b3:6e:f3:b4:cc:16:b6:8a:b8:4d:6a:6b:5a:c0: cf:9b:a1:cf:a1:d8:ac:66:3f:8b:23:30:e6:82:24:72:08:64: 21:d3:96:43:cb:72:49:bf:8c:5e:0e:a2:29:99:34:e9:b3:ee: d3:da:f6:4b:51:5e:4b:5f:45:5a:68:fc:e3:87:69:c9:d1:3a: 1c:fa:53:de:2c:19:0b:12:aa:16:06:d6:37:04:c6:47:93:3c: 6e:d1:4a:cd:6e:03:5b:8f:29:7a:9a:a5:41:2c:d3:11:c0:86: db:6f:c0:18:f1:9b:4c:e7:bb:46:4a:36:83:dd:3f:fd:c8:24: ba:db:cd:66:f9:78:2c:b4:9a:47:62:76:89:ae:2f:00:96:8c: 1e:e1:54:1c:6e:02:2b:95:d2:75:6e:3f:68:56:dd:eb:60:2b: c4:4c:d4:d0:55:41:56:38:88:42:ce:9f:13:1c:ce:86:0e:c8: ba:4f:0f:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG RjFEQjY2NzUwHhcNMjUwNzE5MDEzNDQzWhcNMjUwNzI2MDEzNDQzWjAYMRYwFAYD VQQDEw02ODdhZjYzMy1mYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Pjtvx7UHD/qAtZ37JG7VhwzCx1n5zNU03NrUpQkMpuANDuuYKHbv9+ihuMd YUe+workJI540AIwm0Uo/3z1Hz3zVajh+q7cNRs1iZHDBrAmfFZPkMrm3r42rYRq evEC6B+/vKfP+YirhAS8Mx6/X2H89VtiGrplcftgkU/SXfAdCsxzV+f9FWek8ZSp ikMlnld9uUMFs6+bYEdJ8FFpW5rG7JKh3pcSEC0ain9ziaJSaO4a9AxHxymGrTiY t6y74bP+LYmoFz1cS5qTgA/dLr9THycJ3QWtmYJxjKsGTtUJfgnYNgPEicsDLXFe LvFlxVoYRKfJBuSMkQy4O3GBgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCK/MZh xVpM0PN5w2qppCU4gy9+MB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0 RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI1NC83MjczNzVCNEQ0RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBL VVJLODJNdnhlcGpfSGJablUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP37jZsVa/f9GhDrTMpcDaggNRJblab2qlTphPGzzpmGKLlmZRfCtE ZA/uzJh3MnalkkfXZykTbGAhr5VilclLT1r7BXJvrKvc5c3ms27ztMwWtoq4TWpr WsDPm6HPodisZj+LIzDmgiRyCGQh05ZDy3JJv4xeDqIpmTTps+7T2vZLUV5LX0Va aPzjh2nJ0Toc+lPeLBkLEqoWBtY3BMZHkzxu0UrNbgNbjyl6mqVBLNMRwIbbb8AY 8ZtM57tGSjaD3T/9yCS6281m+XgstJpHYnaJri8Alowe4VQcbgIrldJ1bj9oVt3r YCvETNTQVUFWOIhCzp8THM6GDsi6Tw8S -----END CERTIFICATE-----Generated at Sun Jul 20 11:29:10 2025 by rpki-client