$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json) Hash identifier: fA1Sag/UbaALjmUJGvIC1FpYSF9OS1sMDAo9ZNa5zhE= Subject key identifier: EE:44:C1:2D:55:3D:50:0A:45:34:FE:DE:4E:39:0D:37:A9:8B:E7:EE Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft Manifest number: 0119 Signing time: Sun 03 Aug 2025 05:09:56 +0000 Manifest this update: Sun 03 Aug 2025 05:09:55 +0000 Manifest next update: Sun 10 Aug 2025 05:09:55 +0000 Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: zbVShCqZC7eSxerWyuBvWm9A0KWIqezCAf2lKzcFROw=) 2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: NOsPGGlDSlCfn8hbBHu4EWI+usdJzaN80KZom3HQWsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Validity Not Before: Aug 3 05:09:55 2025 GMT Not After : Aug 10 05:09:55 2025 GMT Subject: CN=688eef23-27b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:fd:28:ca:03:8d:a2:c6:8f:23:4c:a3:62: f9:4e:63:42:b8:17:17:57:42:9e:f5:e6:5d:b9:e4: 59:66:dc:d5:f8:b9:18:0b:34:eb:57:07:13:6c:0a: 2e:a7:1c:ac:7c:ed:9c:17:4a:00:05:62:14:36:71: c2:93:8e:d0:03:0e:c3:9b:da:29:cf:d0:bc:7c:23: d8:eb:67:e1:8e:8c:27:92:73:20:4a:35:f4:79:56: 0e:86:df:cb:04:f2:0e:76:a4:0a:ba:1e:ed:81:1d: c7:3d:ad:f9:90:d4:5b:f3:2d:d6:61:12:d2:7d:5e: 2e:00:75:40:3c:75:50:ca:c5:84:53:65:08:02:99: 71:57:37:80:19:46:9d:dd:33:a2:85:c6:68:d2:f0: 91:b6:59:77:c3:a6:62:22:02:1b:63:79:e1:6e:92: 7c:f5:83:9e:b6:71:a8:f4:b1:77:b4:78:a4:b0:b7: b6:d3:29:91:99:7b:1c:f5:f3:14:14:fb:12:c0:2c: 09:91:05:bf:f1:ed:2e:26:fb:d8:05:48:b0:69:d3: 16:7a:26:70:09:54:65:c2:5e:71:47:03:a1:a9:83: 0b:1d:fb:68:e6:14:60:f1:77:04:63:90:eb:a7:ad: 31:21:75:da:6c:0a:9b:38:66:6d:d8:84:dc:5c:f1: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:44:C1:2D:55:3D:50:0A:45:34:FE:DE:4E:39:0D:37:A9:8B:E7:EE X509v3 Authority Key Identifier: keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9e:75:9a:97:5c:99:ec:ab:12:be:e4:c2:2b:92:46:d3:db: 06:4a:a4:0f:fd:16:42:59:60:d9:c7:e3:f2:94:17:eb:ba:c0: 82:be:1b:87:2d:c4:e8:99:30:f1:24:14:99:ce:e1:49:bc:10: af:64:d2:e9:d8:95:fd:42:cb:16:71:6d:d5:7e:84:a1:22:49: c0:e9:d1:d9:ae:7d:40:fd:b6:d4:9b:80:1a:15:b5:22:1a:b3: 2d:0d:7e:1a:43:6e:b5:29:d9:1c:99:e3:9b:ac:30:26:4a:c5: 67:39:f9:bb:9d:c1:da:3c:95:24:6e:ab:ef:48:b4:41:c5:e1: ba:39:29:16:ad:ec:95:7f:f5:36:b3:a5:ae:ff:36:fd:ee:c2: b4:96:83:4d:be:68:9d:91:73:f1:bf:48:d8:17:40:15:d0:14: ba:3e:5f:f1:e9:96:42:39:07:f0:0a:6a:e3:67:29:ba:26:88: da:16:09:6a:6a:95:79:4e:97:d8:b0:0a:88:27:ac:f7:4b:23: ae:4f:b2:e0:3e:f9:5c:96:6c:99:9d:ad:86:9a:fb:35:09:a0: fa:57:20:36:f0:63:34:8f:41:28:c1:a2:5c:57:2a:58:b9:73: 01:69:1c:6c:77:15:38:c6:33:26:25:6e:1c:ca:1f:12:19:d9: 7a:10:a1:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCRjAxMTAvBgNVBAUTKEZDODg2ODk0RTJENzBFMzUyRTRGMTY4MDUyQzUxQjA1 QUIwNUFDQzUwHhcNMjUwODAzMDUwOTU1WhcNMjUwODEwMDUwOTU1WjAYMRYwFAYD VQQDEw02ODhlZWYyMy0yN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYH9KMoDjaLGjyNMo2L5TmNCuBcXV0Ke9eZdueRZZtzV+LkYCzTrVwcTbAou pxysfO2cF0oABWIUNnHCk47QAw7Dm9opz9C8fCPY62fhjownknMgSjX0eVYOht/L BPIOdqQKuh7tgR3HPa35kNRb8y3WYRLSfV4uAHVAPHVQysWEU2UIAplxVzeAGUad 3TOihcZo0vCRtll3w6ZiIgIbY3nhbpJ89YOetnGo9LF3tHiksLe20ymRmXsc9fMU FPsSwCwJkQW/8e0uJvvYBUiwadMWeiZwCVRlwl5xRwOhqYMLHfto5hRg8XcEY5Dr p60xIXXabAqbOGZt2ITcXPFPNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5EwS1V PVAKRTT+3k45DTepi+fuMB8GA1UdIwQYMBaAFPyIaJTi1w41Lk8WgFLFGwWrBazF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUJGMC9EOTZCQTY2MEMw OTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERqVXVUeGFBVXNVYkJhc0Zy TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUJGMC9EOTZCQTY2MEMwOTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERq VXVUeGFBVXNVYkJhc0ZyTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1nnWal1yZ7KsSvuTCK5JG09sGSqQP/RZCWWDZx+PylBfrusCCvhuH LcTomTDxJBSZzuFJvBCvZNLp2JX9QssWcW3VfoShIknA6dHZrn1A/bbUm4AaFbUi GrMtDX4aQ261KdkcmeObrDAmSsVnOfm7ncHaPJUkbqvvSLRBxeG6OSkWreyVf/U2 s6Wu/zb97sK0loNNvmidkXPxv0jYF0AV0BS6Pl/x6ZZCOQfwCmrjZym6JojaFglq apV5TpfYsAqIJ6z3SyOuT7LgPvlclmyZna2Gmvs1CaD6VyA28GM0j0EowaJcVypY uXMBaRxsdxU4xjMmJW4cyh8SGdl6EKHk -----END CERTIFICATE-----Generated at Mon Aug 4 11:09:04 2025 by rpki-client