$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json) Hash identifier: a3LnpFQHkhpC+KadoaMVn64lwrwzqbCaFyV/ffK4Z3s= Subject key identifier: 9A:13:BA:2B:AF:E9:31:0E:32:D5:0A:64:AC:E6:B7:95:B7:94:42:BC Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft Manifest number: FF Signing time: Fri 13 Jun 2025 04:04:57 +0000 Manifest this update: Fri 13 Jun 2025 04:04:56 +0000 Manifest next update: Fri 20 Jun 2025 04:04:56 +0000 Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: wT0hGvxh0xV6/4IBZNAjypUZ+bnZOnYeuOvMY8m43Fc=) 2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: NOsPGGlDSlCfn8hbBHu4EWI+usdJzaN80KZom3HQWsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Validity Not Before: Jun 13 04:04:56 2025 GMT Not After : Jun 20 04:04:56 2025 GMT Subject: CN=684ba368-3f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8f:7a:a1:33:3e:09:21:78:32:55:ad:41:3b: e7:ef:ef:a7:fc:84:ef:97:07:af:ba:3b:c9:aa:be: f0:26:1b:38:fd:59:fb:78:7b:e9:d8:4c:ad:64:3f: f0:96:61:cb:b3:d8:03:fd:ed:8f:23:6d:a1:66:30: d5:14:c3:70:de:7b:12:02:7f:28:fb:06:3d:34:80: 8a:3d:41:a4:0a:5e:73:16:65:38:18:86:09:91:df: 9a:ac:93:83:87:b7:22:bd:61:13:7d:73:18:44:d6: 2f:d7:30:86:b5:57:98:fd:07:59:8b:2b:34:12:1e: 84:65:ab:30:77:90:a6:c1:57:e7:13:e8:94:64:77: 13:14:8f:49:d1:5a:54:d0:f4:f1:0b:23:a7:9b:b6: 44:71:c9:ed:89:72:ea:c9:91:27:b4:e0:85:cc:d4: 8b:4e:fe:6d:cd:a8:f7:71:56:ea:5c:f0:54:3a:24: cb:6e:36:ef:f0:53:99:f3:60:6d:c6:4f:d9:0f:29: 68:62:17:3b:61:aa:1f:ea:ae:d8:e7:51:38:37:52: 1d:a0:1b:81:f3:fb:f1:3e:e8:36:19:41:81:26:a4: fc:2f:8c:c1:63:47:34:ea:9c:65:9d:19:87:35:28: b0:87:3c:ff:41:21:01:90:df:b5:f2:55:86:ad:27: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:13:BA:2B:AF:E9:31:0E:32:D5:0A:64:AC:E6:B7:95:B7:94:42:BC X509v3 Authority Key Identifier: keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:b7:35:75:fc:88:12:53:65:ed:dd:68:28:bb:72:47:55:dc: 81:60:1f:b7:b3:0f:74:19:e6:b3:3c:74:f8:6d:07:8c:bb:d2: 85:5f:2d:59:47:ea:5e:96:bd:5e:34:a3:64:10:60:f4:cb:62: 8e:58:10:3f:90:0d:c6:39:b0:23:cd:4b:af:93:89:e9:e6:1a: 3a:35:3d:62:8b:da:2b:4c:4a:21:06:75:39:eb:a0:01:d2:db: 97:53:2b:59:a9:22:a7:32:fb:94:46:3e:dd:db:bf:83:05:1e: 03:3c:64:40:e2:07:76:5c:a4:91:3c:ed:47:21:71:0c:58:f3: 8c:49:f8:d5:49:2e:70:a8:16:fa:9d:ab:2e:84:2c:e7:99:38: 70:91:d0:dc:3c:bf:8d:86:d1:1e:be:40:77:ca:2f:0b:9a:80: c9:49:5a:08:3f:2d:f1:09:43:d9:15:04:ba:e4:ee:46:e7:ff: 9e:bb:0d:43:bb:ab:0c:ae:4f:a3:63:36:e2:49:c8:fe:b7:69: b5:5c:48:b0:a8:ce:d4:1b:fc:7f:6f:37:b9:d2:3f:e0:a4:6a: 96:b8:ab:89:aa:b0:33:e1:01:3e:93:aa:2b:fe:56:68:82:11: 8f:e7:37:23:38:60:81:0a:48:93:dc:3f:f2:78:11:52:14:bd: f8:80:00:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCRjAxMTAvBgNVBAUTKEZDODg2ODk0RTJENzBFMzUyRTRGMTY4MDUyQzUxQjA1 QUIwNUFDQzUwHhcNMjUwNjEzMDQwNDU2WhcNMjUwNjIwMDQwNDU2WjAYMRYwFAYD VQQDEw02ODRiYTM2OC0zZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2496oTM+CSF4MlWtQTvn7++n/ITvlwevujvJqr7wJhs4/Vn7eHvp2EytZD/w lmHLs9gD/e2PI22hZjDVFMNw3nsSAn8o+wY9NICKPUGkCl5zFmU4GIYJkd+arJOD h7civWETfXMYRNYv1zCGtVeY/QdZiys0Eh6EZaswd5CmwVfnE+iUZHcTFI9J0VpU 0PTxCyOnm7ZEccntiXLqyZEntOCFzNSLTv5tzaj3cVbqXPBUOiTLbjbv8FOZ82Bt xk/ZDyloYhc7Yaof6q7Y51E4N1IdoBuB8/vxPug2GUGBJqT8L4zBY0c06pxlnRmH NSiwhzz/QSEBkN+18lWGrScH7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoTuiuv 6TEOMtUKZKzmt5W3lEK8MB8GA1UdIwQYMBaAFPyIaJTi1w41Lk8WgFLFGwWrBazF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUJGMC9EOTZCQTY2MEMw OTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERqVXVUeGFBVXNVYkJhc0Zy TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUJGMC9EOTZCQTY2MEMwOTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERq VXVUeGFBVXNVYkJhc0ZyTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCtzV1/IgSU2Xt3Wgou3JHVdyBYB+3sw90GeazPHT4bQeMu9KFXy1Z R+pelr1eNKNkEGD0y2KOWBA/kA3GObAjzUuvk4np5ho6NT1ii9orTEohBnU566AB 0tuXUytZqSKnMvuURj7d27+DBR4DPGRA4gd2XKSRPO1HIXEMWPOMSfjVSS5wqBb6 nasuhCznmThwkdDcPL+NhtEevkB3yi8LmoDJSVoIPy3xCUPZFQS65O5G5/+euw1D u6sMrk+jYzbiScj+t2m1XEiwqM7UG/x/bze50j/gpGqWuKuJqrAz4QE+k6or/lZo ghGP5zcjOGCBCkiT3D/yeBFSFL34gADX -----END CERTIFICATE-----Generated at Sat Jun 14 17:10:41 2025 by rpki-client