$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json) Hash identifier: I7qVwhV6Y77IiRkWOQq4U5H8NlIrwbpLv1cZBZLmEZg= Subject key identifier: 21:42:BE:0A:CC:1B:F3:C3:90:BE:0D:62:D1:D9:15:69:50:0A:E3:9A Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft Manifest number: 0351 Signing time: Thu 07 Aug 2025 01:34:33 +0000 Manifest this update: Thu 07 Aug 2025 01:34:32 +0000 Manifest next update: Thu 14 Aug 2025 01:34:32 +0000 Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: sPG4+IvIGYoENQCkFh/Jhceyawb1/XQG9beWgOfPyCw=) 2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: BWjw8ZzgxeIsXktsSggwFqoGIGBV9RKmqBd6UmUawiw=) 3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: w5wAGuBp2YZuw7r2gpx/dOhrAuPlBh9HGiqoIoNxrIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Aug 7 01:34:32 2025 GMT Not After : Aug 14 01:34:32 2025 GMT Subject: CN=689402a9-4c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:8f:d7:6a:f9:52:8b:2a:88:6b:b3:12:49: fc:d4:68:c3:b2:ce:11:bb:a2:3d:b2:9a:0d:0a:cd: 2b:71:8c:8a:e3:45:be:23:dc:ae:75:64:72:98:bc: 66:9b:af:67:fb:30:72:41:84:a3:b2:af:f4:84:24: ea:ea:5e:ba:ef:f6:e3:d4:7f:aa:71:cd:fd:1a:0b: 3a:dc:57:96:64:d8:2c:34:ac:6c:47:f7:24:99:96: 03:c6:71:ed:76:a4:6b:2c:12:d3:59:5b:a2:78:aa: 36:80:6f:31:1a:7a:b2:5b:87:e4:f7:bf:4e:4b:a4: 62:91:be:8f:85:0d:a5:a6:6d:92:bd:8f:26:b2:17: 06:65:85:b0:49:ee:86:b4:d9:56:11:c5:10:d8:8a: c1:09:f0:25:cd:3d:b8:25:02:7a:5b:3c:77:d6:a1: 69:e1:25:0f:bd:4d:fc:41:77:d5:91:68:e8:8b:6e: 08:df:79:30:81:35:a2:5c:76:24:dd:00:0c:71:42: f6:15:13:8e:d7:1e:a0:57:57:81:be:d7:6c:14:7d: 6b:3c:7c:f1:ad:a4:30:a4:27:a1:e3:50:c8:f4:ee: 49:b9:48:d1:c3:99:d0:d1:05:48:44:61:07:33:af: 33:c7:d8:71:e1:de:30:bc:dc:5f:77:f1:6d:d5:ed: 4c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:42:BE:0A:CC:1B:F3:C3:90:BE:0D:62:D1:D9:15:69:50:0A:E3:9A X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:1f:19:52:d9:8b:3b:10:e0:b2:bc:2e:44:51:11:56:9c:7f: 12:52:be:27:fb:7b:ff:90:ea:e2:56:19:ad:ed:41:95:95:9f: c8:5e:51:0b:28:8b:59:db:86:42:e8:ca:25:96:4a:5d:ae:a8: a8:de:b9:a9:52:1a:b8:c5:5f:4b:80:c0:88:7f:6c:6e:8f:e2: 0c:0f:b8:b9:ea:f4:e6:54:f2:95:93:db:ba:d3:c3:e2:c2:5b: 8d:71:0b:e4:f9:06:ba:fa:e9:cb:e3:09:92:de:e9:28:0b:af: 56:b3:99:f7:8b:8f:8e:f6:68:f5:c6:8b:61:8f:b0:2b:35:e9: 57:70:6f:19:7e:e3:15:fa:24:b1:bf:32:3a:18:67:dc:3d:6a: fb:be:96:1f:b6:b7:ea:72:7c:56:65:e8:14:49:0f:9f:90:15: d1:de:29:0c:eb:02:ce:10:3d:f9:21:ff:d3:34:40:3d:60:67: 88:1f:e6:a2:ea:5e:88:33:59:09:ae:bf:63:5e:f7:6c:3f:99: 28:ff:a7:ee:9d:2a:7b:f2:43:80:bf:f6:62:77:b2:b3:ad:d5: b4:02:71:fb:55:50:4e:89:79:30:0f:3d:eb:28:74:21:01:a5: c1:b3:6b:9d:07:00:01:44:a9:2c:7e:1d:b5:68:58:01:81:01: 5e:a5:01:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjUwODA3MDEzNDMyWhcNMjUwODE0MDEzNDMyWjAYMRYwFAYD VQQDEw02ODk0MDJhOS00YzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn+P12r5UosqiGuzEkn81GjDss4Ru6I9spoNCs0rcYyK40W+I9yudWRymLxm m69n+zByQYSjsq/0hCTq6l667/bj1H+qcc39Ggs63FeWZNgsNKxsR/ckmZYDxnHt dqRrLBLTWVuieKo2gG8xGnqyW4fk979OS6Rikb6PhQ2lpm2SvY8mshcGZYWwSe6G tNlWEcUQ2IrBCfAlzT24JQJ6Wzx31qFp4SUPvU38QXfVkWjoi24I33kwgTWiXHYk 3QAMcUL2FROO1x6gV1eBvtdsFH1rPHzxraQwpCeh41DI9O5JuUjRw5nQ0QVIRGEH M68zx9hx4d4wvNxfd/Ft1e1MKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFCvgrM G/PDkL4NYtHZFWlQCuOaMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVHxlS2Ys7EOCyvC5EURFWnH8SUr4n+3v/kOriVhmt7UGVlZ/IXlEL KItZ24ZC6Mollkpdrqio3rmpUhq4xV9LgMCIf2xuj+IMD7i56vTmVPKVk9u608Pi wluNcQvk+Qa6+unL4wmS3ukoC69Ws5n3i4+O9mj1xothj7ArNelXcG8ZfuMV+iSx vzI6GGfcPWr7vpYftrfqcnxWZegUSQ+fkBXR3ikM6wLOED35If/TNEA9YGeIH+ai 6l6IM1kJrr9jXvdsP5ko/6funSp78kOAv/Zid7KzrdW0AnH7VVBOiXkwDz3rKHQh AaXBs2udBwABRKksfh21aFgBgQFepQEe -----END CERTIFICATE-----Generated at Thu Aug 7 04:05:15 2025 by rpki-client