$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft File: ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json) Hash identifier: aSg4mZCVBu4UW2tctfRaHYt2ZVNtnTIbtU+xIdwQfQg= Subject key identifier: DD:AA:5F:AE:3E:48:3D:85:02:8D:9B:2D:6C:6E:38:02:A3:98:21:83 Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft Manifest number: 77 Signing time: Thu 19 Jun 2025 06:10:32 +0000 Manifest this update: Thu 19 Jun 2025 06:10:32 +0000 Manifest next update: Thu 26 Jun 2025 06:10:32 +0000 Files and hashes: 1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: ji8KWYAfwLobB0HnVFpuJ99OcngUWdFIeeP5RKrB3qo=) 2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Validity Not Before: Jun 19 06:10:32 2025 GMT Not After : Jun 26 06:10:32 2025 GMT Subject: CN=6853a9d8-fb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:5a:61:14:99:74:e8:ab:40:93:52:dd:d5: d8:02:d8:a7:b3:57:fb:28:db:8e:63:26:ed:93:62: 1d:ea:62:e2:6c:6e:d2:e4:c7:c4:10:19:7b:db:c3: 79:3b:a5:4c:db:33:a9:fa:97:1c:c3:07:7d:cf:73: ca:48:6b:4f:98:ea:f9:57:1a:f3:67:4c:c1:d6:14: ee:e9:db:6d:1b:18:d2:6d:df:52:7c:9e:00:90:6e: 6b:70:70:9c:1b:8c:b2:6f:19:da:dd:55:d7:42:ee: 6a:76:d0:93:44:7d:37:7b:d4:70:16:cb:2d:03:0c: 64:fd:04:7c:68:7e:02:94:9c:f7:19:ef:79:67:85: 40:cc:35:ce:c3:b5:45:e4:81:28:53:dc:87:5d:67: 13:e3:36:32:6c:87:15:3b:65:e3:93:09:ff:e5:63: 0c:1c:20:0c:b9:35:a2:a4:85:e4:52:7d:c3:12:e5: 74:29:08:ce:eb:3e:29:96:64:76:04:d4:41:3c:6e: f5:8e:e8:29:9c:eb:9e:b3:c5:0f:54:f9:5c:42:79: a4:50:bc:47:10:29:02:9a:38:29:7a:5b:88:7e:fe: 88:54:77:60:11:f3:82:2b:c9:23:2e:02:0a:39:58: 76:80:1f:58:12:e7:e2:a1:b8:7b:dc:71:ed:c5:bc: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AA:5F:AE:3E:48:3D:85:02:8D:9B:2D:6C:6E:38:02:A3:98:21:83 X509v3 Authority Key Identifier: keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4a:2f:c5:ab:22:4a:25:dd:bd:9e:22:62:c3:ca:78:a0:70: bd:6e:6f:46:87:52:a7:6e:0e:ef:18:63:60:5c:b3:72:bb:4c: 15:68:a5:53:51:19:cc:f9:b3:06:25:0d:2d:ec:49:de:1e:02: f4:11:39:fa:18:ec:b6:29:a0:e7:a3:e4:83:22:43:c6:f2:a6: d0:79:5c:b7:90:6c:0a:8d:22:38:7c:74:4e:8c:6a:dd:1f:84: a2:35:23:b9:9d:58:b1:77:6f:07:02:7f:8f:f4:58:00:c0:5b: f8:5e:e3:a1:21:6b:5c:19:10:bd:41:8e:11:77:fa:aa:04:bf: 86:33:dc:f2:8d:0b:4d:59:c6:0e:72:51:26:71:a6:79:28:70: a2:33:2b:c7:89:07:b7:f9:1c:48:9b:de:61:19:b8:db:21:4f: a1:09:4c:fb:4c:38:ea:c5:10:c1:7c:2a:eb:25:db:f0:80:e1: a4:6f:60:a7:89:8a:b8:63:cf:3a:9a:f5:c6:e2:95:19:af:70: 0c:8a:dc:cc:9f:c6:1d:de:44:c5:a7:ee:47:44:ad:5a:0c:0f: f1:9f:73:d3:b4:49:6f:76:50:be:ae:01:cd:9b:9f:41:09:0f: 6d:75:8e:c2:04:d2:e0:1c:ec:13:f0:64:26:99:54:18:29:2e: 59:99:8e:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RUE0NjExMC8GA1UEBRMoOEIxNTQ0MEFFMjI2Qzk5MEZDOUU1NTkxNUZFOEM5NTA5 QkNCNjY3NjAeFw0yNTA2MTkwNjEwMzJaFw0yNTA2MjYwNjEwMzJaMBgxFjAUBgNV BAMTDTY4NTNhOWQ4LWZiNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC11phFJl06KtAk1Ld1dgC2KezV/so245jJu2TYh3qYuJsbtLkx8QQGXvbw3k7 pUzbM6n6lxzDB33Pc8pIa0+Y6vlXGvNnTMHWFO7p220bGNJt31J8ngCQbmtwcJwb jLJvGdrdVddC7mp20JNEfTd71HAWyy0DDGT9BHxofgKUnPcZ73lnhUDMNc7DtUXk gShT3IddZxPjNjJshxU7ZeOTCf/lYwwcIAy5NaKkheRSfcMS5XQpCM7rPimWZHYE 1EE8bvWO6Cmc656zxQ9U+VxCeaRQvEcQKQKaOCl6W4h+/ohUd2AR84IrySMuAgo5 WHaAH1gS5+KhuHvcce3FvP6nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3apfrj5I PYUCjZstbG44AqOYIYMwHwYDVR0jBBgwFoAUixVECuImyZD8nlWRX+jJUJvLZnYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTQ2L0Q0MzcxMTEyOUMx MTExRUY5MkZCQTk3Q0M0RjlBRTAyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXhWRUN1SW15WkQ4bmxXUlgtakpVSnZMWm5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF QTQ2L0Q0MzcxMTEyOUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL2l4VkVDdUlteVpE OG5sV1JYLWpKVUp2TFpuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAdKL8WrIkol3b2eImLDynigcL1ub0aHUqduDu8YY2Bcs3K7TBVopVNR Gcz5swYlDS3sSd4eAvQROfoY7LYpoOej5IMiQ8byptB5XLeQbAqNIjh8dE6Mat0f hKI1I7mdWLF3bwcCf4/0WADAW/he46Eha1wZEL1BjhF3+qoEv4Yz3PKNC01Zxg5y USZxpnkocKIzK8eJB7f5HEib3mEZuNshT6EJTPtMOOrFEMF8Kusl2/CA4aRvYKeJ irhjzzqa9cbilRmvcAyK3Myfxh3eRMWn7kdErVoMD/Gfc9O0SW92UL6uAc2bn0EJ D211jsIE0uAc7BPwZCaZVBgpLlmZjiQ= -----END CERTIFICATE-----Generated at Thu Jun 19 21:29:48 2025 by rpki-client