$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft File: ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json) Hash identifier: 7JOLmIBrEvvLeVoigLLIDFgBK7hh/hmQZJr2wRCOpyg= Subject key identifier: 7A:77:05:30:30:7E:66:42:E4:E1:F5:0A:7E:14:DB:BC:57:63:23:BF Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft Manifest number: 87 Signing time: Mon 21 Jul 2025 06:46:53 +0000 Manifest this update: Mon 21 Jul 2025 06:46:53 +0000 Manifest next update: Mon 28 Jul 2025 06:46:53 +0000 Files and hashes: 1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: u4gFtk3k/J4cMh1FzdKZDLEmbEdtyPDZazqdi7bAjrQ=) 2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Validity Not Before: Jul 21 06:46:53 2025 GMT Not After : Jul 28 06:46:53 2025 GMT Subject: CN=687de25d-d98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:32:c7:de:8a:f0:76:eb:df:0b:65:a1:5a: b9:0b:ed:1c:82:51:36:37:94:6b:c4:33:bb:6e:83: 1f:ae:8b:26:38:c4:61:47:42:fa:1c:50:34:6f:c1: f1:03:3f:d8:c0:7e:cb:35:0f:20:b0:3f:a3:94:61: 29:68:97:dc:cb:80:83:c0:3b:84:0d:1f:fc:f0:35: 92:dc:d3:c6:73:23:15:62:4d:41:c2:b5:03:50:aa: 5d:03:75:6c:1c:12:bb:95:53:61:2e:b9:39:e1:a7: 74:6c:56:7f:81:81:60:f5:87:5b:f2:4c:69:64:26: 64:b0:0b:54:d1:ac:c8:82:84:91:e4:92:06:4e:1b: ed:e8:09:e9:11:59:0c:bc:4e:33:62:d5:8e:ef:d9: f9:ae:7a:0d:9b:fa:ad:4d:b1:c2:2f:3c:81:bf:ff: 94:7a:30:fd:89:e5:65:da:86:cc:83:dc:f4:3c:8f: f2:49:99:07:7d:3d:67:eb:c8:f6:f7:c7:ee:a4:6d: bc:fd:59:b1:d4:00:be:68:b6:90:fc:e8:bb:04:af: ab:21:97:f4:4d:42:ee:0b:b5:70:a9:8d:70:ce:30: 93:d9:a6:ca:d9:6e:b4:84:32:fd:eb:1c:ca:1b:3a: 89:1d:87:47:94:47:67:9a:66:e2:f5:f6:9a:4b:6a: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:77:05:30:30:7E:66:42:E4:E1:F5:0A:7E:14:DB:BC:57:63:23:BF X509v3 Authority Key Identifier: keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ad:e1:05:42:43:f9:6c:a5:80:9a:10:7e:a8:2b:bf:33:a8: 9d:2c:01:6f:89:43:96:57:df:2c:3b:c8:16:78:6e:d4:0b:62: 37:af:f7:d6:d5:8d:18:0b:34:92:e2:07:af:b9:fe:f7:08:e5: ee:b9:19:1d:98:8b:71:70:d4:7d:b6:18:f8:e3:4c:3d:69:23: 73:d4:77:d6:15:20:3e:65:fe:f4:cd:a8:8d:a6:58:26:c1:6e: 48:72:e0:f1:ab:ba:b6:0f:d1:29:a1:31:4f:69:9d:1c:53:a7: 72:bf:eb:e1:a4:af:35:f3:69:06:44:2b:47:45:66:a1:45:fb: cf:c6:8f:0d:ff:42:8c:12:3a:07:0e:bd:31:30:b4:46:75:7c: 2d:87:ca:a8:c4:07:39:eb:6a:86:ab:d8:a4:e1:4c:83:76:d4: 36:1f:de:88:d9:21:8c:21:54:87:7f:e4:8a:de:58:2c:00:46: fc:69:8f:8d:1b:8e:3b:fd:83:7e:26:45:94:d0:86:49:3f:74: 38:d4:fc:56:2c:46:13:f9:9c:c4:0c:57:af:fc:19:ae:8e:a6: de:6b:d6:c1:bc:49:6b:ad:26:f8:2f:4f:74:f8:d9:5f:39:c8: 0f:d1:ec:f8:a9:92:58:09:06:f8:05:5d:3f:4d:fb:c7:f1:6d: db:55:d9:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKDhCMTU0NDBBRTIyNkM5OTBGQzlFNTU5MTVGRThDOTUw OUJDQjY2NzYwHhcNMjUwNzIxMDY0NjUzWhcNMjUwNzI4MDY0NjUzWjAYMRYwFAYD VQQDEw02ODdkZTI1ZC1kOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt88yx96K8Hbr3wtloVq5C+0cglE2N5RrxDO7boMfrosmOMRhR0L6HFA0b8Hx Az/YwH7LNQ8gsD+jlGEpaJfcy4CDwDuEDR/88DWS3NPGcyMVYk1BwrUDUKpdA3Vs HBK7lVNhLrk54ad0bFZ/gYFg9Ydb8kxpZCZksAtU0azIgoSR5JIGThvt6AnpEVkM vE4zYtWO79n5rnoNm/qtTbHCLzyBv/+UejD9ieVl2obMg9z0PI/ySZkHfT1n68j2 98fupG28/Vmx1AC+aLaQ/Oi7BK+rIZf0TULuC7VwqY1wzjCT2abK2W60hDL96xzK GzqJHYdHlEdnmmbi9faaS2q4UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp3BTAw fmZC5OH1Cn4U27xXYyO/MB8GA1UdIwQYMBaAFIsVRAriJsmQ/J5VkV/oyVCby2Z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9ENDM3MTExMjlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXlaRDhubFdSWC1qSlVKdkxa blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9ENDM3MTExMjlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXla RDhubFdSWC1qSlVKdkxablkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCreEFQkP5bKWAmhB+qCu/M6idLAFviUOWV98sO8gWeG7UC2I3r/fW 1Y0YCzSS4gevuf73COXuuRkdmItxcNR9thj440w9aSNz1HfWFSA+Zf70zaiNplgm wW5IcuDxq7q2D9EpoTFPaZ0cU6dyv+vhpK8182kGRCtHRWahRfvPxo8N/0KMEjoH Dr0xMLRGdXwth8qoxAc562qGq9ik4UyDdtQ2H96I2SGMIVSHf+SK3lgsAEb8aY+N G447/YN+JkWU0IZJP3Q41PxWLEYT+ZzEDFev/Bmujqbea9bBvElrrSb4L090+Nlf OcgP0ez4qZJYCQb4BV0/TfvH8W3bVdl5 -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:12 2025 by rpki-client