$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: IxAXYujN/IpnQpoTu1l4Y1BBYh0U2maxGqTyXomKaz8= Subject key identifier: 56:73:C8:A7:65:91:D3:96:95:09:70:F2:3A:9E:E3:9E:6A:5C:DF:60 Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: 77 Signing time: Sat 19 Jul 2025 07:04:09 +0000 Manifest this update: Sat 19 Jul 2025 07:04:08 +0000 Manifest next update: Sat 26 Jul 2025 07:04:08 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: J6Ml4csStp28rkJX+VZnlGcOqqi6GgUVnOm1wBolVN0=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Jul 19 07:04:08 2025 GMT Not After : Jul 26 07:04:08 2025 GMT Subject: CN=687b4369-f1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:04:13:a5:e7:a2:0d:cc:33:09:47:4b:fc: 66:1f:49:5b:b2:05:30:de:63:f7:6c:f4:c3:3e:85: 69:01:f9:1a:62:e7:51:73:e8:3e:c1:6e:20:b6:39: 83:bc:bc:2e:43:71:28:dd:f1:81:0f:b5:cb:b5:b8: c4:81:2b:42:4b:3a:d3:0a:c0:62:ef:8f:cc:9b:5e: de:b0:7d:e7:db:f1:bb:f1:bb:7c:78:14:8b:f6:b5: 3f:e8:43:8c:c3:e2:6b:a0:b6:09:ca:b3:c0:61:18: 7a:77:53:a6:00:66:73:75:c9:8b:bd:17:42:02:87: 81:53:f5:00:43:06:9c:03:6c:2f:da:70:c9:af:84: bc:e7:27:34:a7:a3:d3:e3:19:c3:6d:de:3e:f3:a9: 43:6b:93:5a:2c:88:00:e5:2e:aa:47:82:e7:78:31: 58:b3:48:3a:50:4a:2e:0c:9c:ae:8e:93:24:09:e4: 23:14:dd:a6:5b:6b:fc:ee:95:7f:8c:83:b1:a1:2a: 24:af:10:7a:22:44:9b:f9:da:0b:5f:e0:06:cb:97: 99:8f:aa:d6:95:b1:e7:5c:cd:77:ae:d9:12:bb:78: 60:ec:98:fc:92:fe:f6:69:3c:2f:a9:79:85:3d:eb: 16:22:da:e0:47:f7:ec:bd:8f:4e:89:81:0e:85:70: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:73:C8:A7:65:91:D3:96:95:09:70:F2:3A:9E:E3:9E:6A:5C:DF:60 X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d3:9e:86:1f:67:a9:6b:2f:6a:5c:70:9c:17:b4:64:22:40: 26:c6:de:fe:bc:f8:26:c3:7c:37:65:58:a2:ac:ee:fd:af:f2: 8c:f6:f7:b7:21:cd:ce:db:8b:a7:02:fe:85:62:36:ea:3d:4b: 2d:a1:78:86:8a:46:30:ce:91:15:fb:67:ff:b2:80:80:c0:67: bd:fa:d5:20:c3:1a:ea:18:ba:0e:fd:3a:6c:d1:83:d0:61:bc: 3e:59:da:13:7c:dc:99:19:84:cb:b2:0c:10:70:3a:0b:09:a4: a4:a4:72:b4:08:77:60:a2:03:d5:94:af:48:7c:aa:ef:c9:6b: 12:d3:ed:ef:94:04:72:1d:f6:38:78:13:a6:8f:94:26:6f:02: d5:06:cd:ab:3d:ad:2b:fa:ec:c7:d9:ce:e1:46:32:3f:dc:6e: d5:fe:0c:4d:d9:f9:e9:0e:61:70:84:0c:d4:fa:da:80:1f:e2: 89:91:ef:f5:b1:ae:a9:bb:58:2b:89:dc:75:b0:23:48:94:59: 86:00:a5:13:05:c9:78:21:b4:ee:12:02:d2:85:af:3f:46:48: 9a:ac:e8:47:6c:ba:d8:da:f6:a0:49:06:3b:9c:ce:a1:71:54: 3d:b2:4f:67:e9:7a:03:7e:2d:8e:8d:d9:03:a3:5b:24:ec:5c: 30:5c:48:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNDNzExMC8GA1UEBRMoODkzQUM1NzkwMTQxNTYxODZBRUFGNTAzNEJBMEI0OTI2 RjkyRTM3NDAeFw0yNTA3MTkwNzA0MDhaFw0yNTA3MjYwNzA0MDhaMBgxFjAUBgNV BAMTDTY4N2I0MzY5LWYxYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzIgQTpeeiDcwzCUdL/GYfSVuyBTDeY/ds9MM+hWkB+Rpi51Fz6D7BbiC2OYO8 vC5DcSjd8YEPtcu1uMSBK0JLOtMKwGLvj8ybXt6wfefb8bvxu3x4FIv2tT/oQ4zD 4mugtgnKs8BhGHp3U6YAZnN1yYu9F0ICh4FT9QBDBpwDbC/acMmvhLznJzSno9Pj GcNt3j7zqUNrk1osiADlLqpHgud4MVizSDpQSi4MnK6OkyQJ5CMU3aZba/zulX+M g7GhKiSvEHoiRJv52gtf4AbLl5mPqtaVsedczXeu2RK7eGDsmPyS/vZpPC+peYU9 6xYi2uBH9+y9j06JgQ6FcPJ1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVnPIp2WR 05aVCXDyOp7jnmpc32AwHwYDVR0jBBgwFoAUiTrFeQFBVhhq6vUDS6C0km+S43Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0M3Lzg2NTg4N0I2QjI2 NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVRyRmVRRkJWaGhxNnZVRFM2QzBrbS1TNDNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0M3Lzg2NTg4N0I2QjI2NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmho cTZ2VURTNkMwa20tUzQzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFPTnoYfZ6lrL2pccJwXtGQiQCbG3v68+CbDfDdlWKKs7v2v8oz297ch zc7bi6cC/oViNuo9Sy2heIaKRjDOkRX7Z/+ygIDAZ7361SDDGuoYug79OmzRg9Bh vD5Z2hN83JkZhMuyDBBwOgsJpKSkcrQId2CiA9WUr0h8qu/JaxLT7e+UBHId9jh4 E6aPlCZvAtUGzas9rSv67MfZzuFGMj/cbtX+DE3Z+ekOYXCEDNT62oAf4omR7/Wx rqm7WCuJ3HWwI0iUWYYApRMFyXghtO4SAtKFrz9GSJqs6Edsutja9qBJBjuczqFx VD2yT2fpegN+LY6N2QOjWyTsXDBcSDw= -----END CERTIFICATE-----Generated at Sun Jul 20 19:20:51 2025 by rpki-client