$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: zyHb2Cl4PpRdR1RFZcE9KByYMPgYAEjZsHG+cp84KzI= Subject key identifier: 71:82:04:7C:5C:CF:AF:AC:D2:D5:1C:2E:C1:6E:FE:C4:EF:C2:63:B3 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 0138 Signing time: Fri 13 Jun 2025 03:25:12 +0000 Manifest this update: Fri 13 Jun 2025 03:25:11 +0000 Manifest next update: Fri 20 Jun 2025 03:25:11 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: xkbtOgwq/x64y4NmAO9JMWwgOQiL5bPizfGii8ITLUc=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: YEagGQfd4UV4nz53l/WybeYAt4w6+zm6QyFgV48pGBc=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: zzpFcIYATvvz+ehYyoXcGsAYVOBFYBXyZDv/oX18Mx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Jun 13 03:25:11 2025 GMT Not After : Jun 20 03:25:11 2025 GMT Subject: CN=684b9a18-19b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:31:4d:7d:e5:ad:11:df:74:cc:60:41:bb: fa:ac:15:b2:ad:8e:3b:37:d8:15:37:61:3a:5a:5e: 9e:86:15:f7:d4:8d:77:36:57:a7:d3:b8:83:36:2e: 34:c6:6e:69:57:dc:ef:f9:4e:1a:de:e7:31:b5:73: 06:56:06:70:74:ed:4e:24:17:5b:9a:97:47:3a:fe: f7:94:1a:15:82:1c:62:be:33:4e:7b:b8:06:cf:35: ff:4f:59:e5:4f:24:8e:84:c3:0b:63:27:4f:0e:be: f6:86:60:0b:60:73:72:cc:bf:be:25:f8:ab:64:55: 95:76:75:7e:34:6d:ea:b0:39:d8:65:d4:f3:ad:58: 4c:0c:a9:f3:05:27:c0:a0:a9:c6:90:56:d9:d8:d6: bd:e7:53:ac:06:eb:6a:8d:9d:4a:bf:b7:f4:aa:56: c4:cb:f9:56:c9:06:f0:81:bf:a9:61:fa:11:78:8c: 79:e7:74:1d:db:be:da:46:dd:f7:48:01:7c:2b:b3: 61:57:ab:ba:6d:29:c9:eb:ea:24:e0:1c:d0:46:02: a8:67:d1:a8:33:45:7d:b5:15:e8:52:16:a8:9b:a5: 6f:b0:39:8c:69:0d:30:a6:8e:11:09:3a:8a:cb:db: 60:b5:a6:05:8e:d4:6b:15:e8:dd:01:6e:82:79:e6: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:82:04:7C:5C:CF:AF:AC:D2:D5:1C:2E:C1:6E:FE:C4:EF:C2:63:B3 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8c:39:48:64:b3:e2:7b:e3:5e:bb:0a:4a:8f:e9:a1:b2:13: 90:5e:0a:8c:1f:17:68:5e:83:61:9e:c8:d3:2b:7f:83:65:3b: 89:f8:fd:98:32:d1:ab:a6:2d:98:a8:97:09:80:4d:0f:76:55: 5d:f5:83:28:cd:a5:63:ba:14:54:20:54:12:db:88:8b:5e:7a: b5:73:86:b3:f8:ca:be:0b:21:8a:d4:ad:ed:91:f2:9f:0b:1a: 62:ac:0c:5b:4d:30:a3:49:2e:09:03:7c:e2:13:64:8b:d8:a6: 56:7b:a1:6a:25:6f:8c:22:38:cb:1b:39:0f:21:d4:44:c6:00: 55:b7:cd:64:82:ef:bf:bb:5c:9a:2f:cf:43:cb:59:64:10:9c: ea:09:c4:69:0c:88:7d:de:2b:e8:56:09:18:89:e9:45:6b:d2: 5c:66:03:9b:fe:75:ff:2e:ea:d0:5d:3b:80:77:78:f5:93:43: 50:a7:fb:79:52:31:63:03:ba:c2:e9:5b:ce:af:6b:e2:0c:ce: 7a:7a:92:a9:ce:41:b2:08:2f:79:f7:92:93:6d:10:95:12:e1: 9e:94:b7:5b:d2:0d:00:fc:cc:1b:4a:ac:8d:80:16:d4:8d:8c: 5a:31:e9:bc:9c:2e:54:43:1b:29:94:eb:c6:64:12:a4:6b:55: 61:55:5b:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUwNjEzMDMyNTExWhcNMjUwNjIwMDMyNTExWjAYMRYwFAYD VQQDEw02ODRiOWExOC0xOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHQxTX3lrRHfdMxgQbv6rBWyrY47N9gVN2E6Wl6ehhX31I13Nlen07iDNi40 xm5pV9zv+U4a3ucxtXMGVgZwdO1OJBdbmpdHOv73lBoVghxivjNOe7gGzzX/T1nl TySOhMMLYydPDr72hmALYHNyzL++JfirZFWVdnV+NG3qsDnYZdTzrVhMDKnzBSfA oKnGkFbZ2Na951OsButqjZ1Kv7f0qlbEy/lWyQbwgb+pYfoReIx553Qd277aRt33 SAF8K7NhV6u6bSnJ6+ok4BzQRgKoZ9GoM0V9tRXoUhaom6VvsDmMaQ0wpo4RCTqK y9tgtaYFjtRrFejdAW6CeeaK8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGCBHxc z6+s0tUcLsFu/sTvwmOzMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrjDlIZLPie+NeuwpKj+mhshOQXgqMHxdoXoNhnsjTK3+DZTuJ+P2Y MtGrpi2YqJcJgE0PdlVd9YMozaVjuhRUIFQS24iLXnq1c4az+Mq+CyGK1K3tkfKf CxpirAxbTTCjSS4JA3ziE2SL2KZWe6FqJW+MIjjLGzkPIdRExgBVt81kgu+/u1ya L89Dy1lkEJzqCcRpDIh93ivoVgkYielFa9JcZgOb/nX/LurQXTuAd3j1k0NQp/t5 UjFjA7rC6VvOr2viDM56epKpzkGyCC9595KTbRCVEuGelLdb0g0A/MwbSqyNgBbU jYxaMem8nC5UQxsplOvGZBKka1VhVVum -----END CERTIFICATE-----Generated at Sat Jun 14 18:58:47 2025 by rpki-client