$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json) Hash identifier: JevgrHA12N7Vz7wEYj02lWk5b1lCekFLvns+7uJ2yoM= Subject key identifier: 0A:4B:DA:89:94:E4:E7:AD:83:D1:8D:D5:C8:AA:EF:10:F5:59:A2:5A Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Certificate serial: 1022 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft Manifest number: 1016 Signing time: Sat 14 Jun 2025 17:22:08 +0000 Manifest this update: Sat 14 Jun 2025 17:22:08 +0000 Manifest next update: Sat 21 Jun 2025 17:22:08 +0000 Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: a+cjbkyygz/gTGlIJ3ekovq73P31+ezfgM5TfmQhkGQ=) 2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: SSjTjiJw3UBo/Mme4Kl37l1zxjxnCDkxVmhI1OR3EOw=) 3: 608836D046B111E98B793856C4F9AE02.roa (hash: Ls4h/fmzmMgVY9fuRoj+7ux+D5fYwsPV37oBSFEiAic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4130 (0x1022) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Validity Not Before: Jun 14 17:22:08 2025 GMT Not After : Jun 21 17:22:08 2025 GMT Subject: CN=684dafc0-1548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:91:01:a2:13:a1:e1:2c:a8:7a:f5:09:17: 95:41:2d:bd:d0:42:05:8e:9d:0d:a9:49:94:6a:2a: 4d:53:d2:74:ad:fc:30:f3:d3:06:85:58:6b:da:8c: af:4b:68:62:84:ef:d5:09:f2:64:7a:0f:68:43:24: 4a:2d:41:08:71:ae:96:31:5d:e5:ff:77:69:9e:55: 8e:98:9a:80:37:71:fe:b3:3b:29:2c:ee:6f:89:1f: c4:00:53:f3:40:ba:7a:02:fc:7f:5f:6a:f5:52:78: 39:d4:65:ef:71:8a:59:70:85:47:c0:d5:4d:8f:b6: 25:56:42:40:41:f9:31:4f:83:e3:e5:29:31:62:19: 1f:59:bd:b4:b3:22:c6:f2:93:28:a0:e6:2d:4f:64: 66:65:71:00:48:9f:26:72:d9:a0:c8:8d:c6:80:d9: 22:76:c1:15:56:42:bf:c8:27:a5:cd:b4:dd:66:b4: 50:1d:6e:bb:4a:0d:05:de:f5:e7:26:82:33:93:07: a0:97:9a:34:9f:b7:a5:a1:c9:ff:2d:95:f2:6a:a0: e2:8e:27:95:a7:94:d7:92:f5:ce:99:66:61:b1:2c: a8:4f:15:33:9a:ca:05:70:92:2c:f2:03:8a:b2:38: 54:57:ab:e5:eb:c2:20:2a:8e:ca:09:dd:be:c3:a1: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4B:DA:89:94:E4:E7:AD:83:D1:8D:D5:C8:AA:EF:10:F5:59:A2:5A X509v3 Authority Key Identifier: keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0f:b6:9e:a8:c8:b8:21:87:92:eb:51:01:bc:c7:91:72:72: 95:95:7e:9f:88:9b:36:ba:0d:95:28:f5:74:69:b4:f2:d9:70: c8:0e:bc:71:7c:fa:e6:d7:06:55:6c:46:95:b7:c5:30:b9:92: c3:ff:70:58:2d:0b:1f:2e:d7:b5:80:c7:fb:0a:83:ea:b8:1b: 19:c2:44:5c:57:1b:e3:76:61:5f:68:05:d0:40:d8:ca:f0:69: 80:3b:92:be:76:2c:5f:96:e8:c5:d8:0a:a6:f4:83:af:7b:73: f2:b2:9e:ae:0c:06:96:24:ea:57:0c:5b:21:9c:90:63:6a:d7: b2:42:51:a0:28:c8:3d:fe:57:f9:f4:5d:cc:fb:15:ff:ef:84: 1b:67:5f:e8:f2:bb:c0:75:04:11:bd:ea:a2:3b:28:d2:3b:0b: ac:a9:fb:e5:f5:3c:9c:66:ec:7c:9c:b7:56:ed:f6:07:a2:9a: 0e:89:7a:86:d9:45:24:94:1b:87:0b:17:5d:20:5f:16:29:9d: 09:6c:c5:98:42:6c:a5:4f:02:f5:56:3f:c8:a2:b2:d2:41:ce: 61:d2:6b:8e:29:46:d4:c8:e5:cf:6c:39:d6:1f:8b:27:c2:c9: ce:54:50:f3:df:c8:a6:29:df:fc:3c:74:7f:89:cf:70:3e:c3: 17:b1:97:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKDIyM0JFMTk4OTJFNkU2Q0I0MDZFNUZBOTk1NkREQkNF QTk1Q0JCNDYwHhcNMjUwNjE0MTcyMjA4WhcNMjUwNjIxMTcyMjA4WjAYMRYwFAYD VQQDEw02ODRkYWZjMC0xNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYmRAaIToeEsqHr1CReVQS290EIFjp0NqUmUaipNU9J0rfww89MGhVhr2oyv S2hihO/VCfJkeg9oQyRKLUEIca6WMV3l/3dpnlWOmJqAN3H+szspLO5viR/EAFPz QLp6Avx/X2r1Ung51GXvcYpZcIVHwNVNj7YlVkJAQfkxT4Pj5SkxYhkfWb20syLG 8pMooOYtT2RmZXEASJ8mctmgyI3GgNkidsEVVkK/yCelzbTdZrRQHW67Sg0F3vXn JoIzkwegl5o0n7elocn/LZXyaqDijieVp5TXkvXOmWZhsSyoTxUzmsoFcJIs8gOK sjhUV6vl68IgKo7KCd2+w6HBNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApL2omU 5Oetg9GN1ciq7xD1WaJaMB8GA1UdIwQYMBaAFCI74ZiS5ubLQG5fqZVt286pXLtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9CNkE5RjI2MDQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVzdEFibC1wbFczYnpxbGN1 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lqdmhtSkxtNXN0QWJsLXBsVzNienFsY3UwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9CNkE5RjI2MDQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVz dEFibC1wbFczYnpxbGN1MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAD7aeqMi4IYeS61EBvMeRcnKVlX6fiJs2ug2VKPV0abTy2XDIDrxx fPrm1wZVbEaVt8UwuZLD/3BYLQsfLte1gMf7CoPquBsZwkRcVxvjdmFfaAXQQNjK 8GmAO5K+dixflujF2Aqm9IOve3Pysp6uDAaWJOpXDFshnJBjateyQlGgKMg9/lf5 9F3M+xX/74QbZ1/o8rvAdQQRveqiOyjSOwusqfvl9TycZux8nLdW7fYHopoOiXqG 2UUklBuHCxddIF8WKZ0JbMWYQmylTwL1Vj/IorLSQc5h0muOKUbUyOXPbDnWH4sn wsnOVFDz38imKd/8PHR/ic9wPsMXsZfL -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:40 2025 by rpki-client