$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft File: iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json) Hash identifier: t3Dbb4EAxNlBLK597Rd5njCDYhz6DCta9lGJWgZDiVE= Subject key identifier: 1A:1E:20:10:50:EE:35:4D:EF:0C:E9:7E:91:32:83:2D:77:71:67:A4 Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 Certificate issuer: /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft Manifest number: 33 Signing time: Sat 19 Jul 2025 07:53:32 +0000 Manifest this update: Sat 19 Jul 2025 07:53:31 +0000 Manifest next update: Sat 26 Jul 2025 07:53:31 +0000 Files and hashes: 1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: 6ZGgzW2K59PiuUzC2TCRAdpMywMn8JoaTogeL5uxlQs=) 2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: v93VVwAanSucSOqj9EwS1pD5Lqih1cuGiSwwM282Dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Validity Not Before: Jul 19 07:53:31 2025 GMT Not After : Jul 26 07:53:31 2025 GMT Subject: CN=687b4efb-c19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:ec:8c:a8:29:c5:7d:8b:b3:6f:fa:6c:d2: df:3c:19:d5:90:8a:77:94:d6:8f:6f:ec:f0:af:bb: 43:fa:0b:7c:51:df:7a:62:8c:25:b7:d1:89:50:d4: 35:94:fb:b2:54:18:67:14:72:73:80:14:66:cd:97: 7e:83:6d:36:84:6d:94:f3:ed:4e:7d:b2:51:d6:1d: cd:ab:65:0f:00:e2:75:31:90:50:04:e1:15:3a:08: 1d:4b:f5:f9:3f:d0:30:34:8d:8e:1b:bc:7f:f3:b9: 7d:b5:91:94:dc:c9:c2:26:54:62:89:09:19:6e:66: c2:73:9b:ff:8d:9f:66:25:0a:e6:7b:b1:10:8d:7b: 51:c7:9d:d7:46:86:f3:56:24:90:57:ac:18:56:cc: e8:1f:cb:e1:3c:80:db:bf:81:4e:b6:f2:a1:7a:5a: 9d:76:35:fc:a6:a2:1f:41:e7:d0:ab:35:f4:ca:21: 88:2b:3c:e9:49:e7:12:34:65:f5:40:99:a8:ac:ef: 6c:4c:3e:ea:2b:b7:00:f1:ce:8e:ad:6d:fb:b6:a8: 1f:1e:6c:30:57:6b:e4:cb:a8:a4:aa:30:3c:ce:46: e7:5b:79:3c:f8:97:21:a3:6e:8c:4f:5b:5f:e2:9e: 0b:cd:43:8e:39:32:4f:b9:1f:7e:8a:27:bf:98:5f: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1E:20:10:50:EE:35:4D:EF:0C:E9:7E:91:32:83:2D:77:71:67:A4 X509v3 Authority Key Identifier: keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:2d:33:fa:20:15:28:bd:8f:e8:33:a5:99:74:a4:c5:36:18: 17:d4:22:35:3e:37:3a:24:71:b8:d7:66:86:ca:80:8e:a0:e9: cf:dc:91:ef:c9:f8:54:70:4b:79:6d:4e:ed:a4:47:16:42:d3: 89:3f:72:f2:9d:ee:ed:92:e0:e0:67:55:2f:77:04:a2:8e:2c: 2d:df:85:83:f7:ce:b6:56:d2:0e:b7:de:d9:f4:f1:4b:d7:ed: 33:b3:91:9f:13:01:d9:6f:81:40:48:5a:65:04:52:ec:7b:b5: 54:47:2c:c8:86:57:df:3f:05:8e:ec:40:28:3f:76:d7:76:13: 15:3a:70:f9:29:15:22:fe:d0:f2:0b:73:b8:0f:81:1f:bb:84: ca:6e:d9:80:ac:fa:02:2b:88:d7:28:bf:09:f5:20:e7:79:b0: a2:4e:8f:6b:62:04:9d:3d:70:2b:ad:3c:79:a9:66:61:a4:5c: 87:16:c4:a6:7a:b3:08:a3:3a:c2:0c:de:52:52:1e:4a:49:c7: 58:84:1f:c6:57:61:bc:88:2a:6a:e6:ce:22:b5:7c:a5:ac:94: 2a:84:dd:60:ef:e5:3b:39:71:a3:28:f6:30:42:e4:ab:63:0f: a5:2b:0f:6f:f6:f0:1a:06:50:94:cb:bb:4b:d8:54:54:31:ec: 5c:87:77:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoODg5MTk1MzhFRURFQzgzMjBENUVBRjZCMUYzMkIyOTgy M0FCNzgxMDAeFw0yNTA3MTkwNzUzMzFaFw0yNTA3MjYwNzUzMzFaMBgxFjAUBgNV BAMTDTY4N2I0ZWZiLWMxOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGVuyMqCnFfYuzb/ps0t88GdWQineU1o9v7PCvu0P6C3xR33pijCW30YlQ1DWU +7JUGGcUcnOAFGbNl36DbTaEbZTz7U59slHWHc2rZQ8A4nUxkFAE4RU6CB1L9fk/ 0DA0jY4bvH/zuX21kZTcycImVGKJCRluZsJzm/+Nn2YlCuZ7sRCNe1HHnddGhvNW JJBXrBhWzOgfy+E8gNu/gU628qF6Wp12Nfymoh9B59CrNfTKIYgrPOlJ5xI0ZfVA mais72xMPuortwDxzo6tbfu2qB8ebDBXa+TLqKSqMDzORudbeTz4lyGjboxPW1/i ngvNQ445Mk+5H36KJ7+YX8WxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGh4gEFDu NU3vDOl+kTKDLXdxZ6QwHwYDVR0jBBgwFoAUiJGVOO7eyDINXq9rHzKymCOreBAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzA0OTg2NDc2MTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVC QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaUpHVk9PN2V5RElOWHE5ckh6S3ltQ09yZUJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzA0OTg2NDc2MTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJ TlhxOXJIekt5bUNPcmVCQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQtM/ogFSi9j+gzpZl0pMU2GBfUIjU+NzokcbjXZobKgI6g6c/cke/J +FRwS3ltTu2kRxZC04k/cvKd7u2S4OBnVS93BKKOLC3fhYP3zrZW0g633tn08UvX 7TOzkZ8TAdlvgUBIWmUEUux7tVRHLMiGV98/BY7sQCg/dtd2ExU6cPkpFSL+0PIL c7gPgR+7hMpu2YCs+gIriNcovwn1IOd5sKJOj2tiBJ09cCutPHmpZmGkXIcWxKZ6 swijOsIM3lJSHkpJx1iEH8ZXYbyIKmrmziK1fKWslCqE3WDv5Ts5caMo9jBC5Ktj D6UrD2/28BoGUJTLu0vYVFQx7FyHd18= -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:27 2025 by rpki-client