$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: HiOLZl7/RyndFxtlF1ZT4Axvk/2y5Xor8YhNVXNRo7k= Subject key identifier: 8E:02:B7:47:3B:15:5C:45:28:D2:63:2B:5F:3E:43:80:F9:35:B7:5A Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 0109 Signing time: Sun 15 Jun 2025 04:14:37 +0000 Manifest this update: Sun 15 Jun 2025 04:14:37 +0000 Manifest next update: Sun 22 Jun 2025 04:14:36 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: IjCKW/rnu148dnLxm3U81IDZpcwp/TDMmimiA5UfB8Q=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Jun 15 04:14:37 2025 GMT Not After : Jun 22 04:14:36 2025 GMT Subject: CN=684e48ad-5eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:40:7c:b9:fc:e6:5c:cc:f2:d0:44:1f:58:88: 44:93:1e:10:a3:5d:e7:da:ff:f7:af:11:e6:2d:8b: ee:c6:89:df:b5:b6:09:a6:76:64:47:6a:9b:0f:ac: df:3d:b9:f6:67:0f:bb:75:51:0b:12:69:00:af:cc: a2:26:41:58:ed:04:26:5f:0e:39:cb:b5:9f:c9:d6: 40:2b:8f:48:ef:b4:56:16:90:c2:b2:eb:b5:eb:00: dc:ba:b1:26:f4:57:a9:bb:48:e7:71:5b:ad:91:b4: 0c:55:0a:a7:7a:f5:9b:58:86:af:77:28:f5:79:bf: 4e:70:e1:0d:4d:14:dd:14:52:23:21:af:7b:fe:5c: db:40:91:d2:f2:85:ad:22:f7:b8:06:7d:fb:c6:bb: 5f:ba:e6:46:ac:06:15:6c:51:fd:d7:fc:ad:d6:7f: 6b:1a:c9:18:ee:3d:2d:9e:57:84:39:bf:8b:c0:b6: 0c:79:bf:60:4d:10:c5:49:c1:d3:ea:20:f1:3d:db: 6e:32:d9:d4:cc:bd:27:45:e0:6a:7c:41:76:a7:81: 69:c1:88:08:9b:9d:36:6d:cf:c6:fd:bf:4c:f3:6f: 46:d8:23:a0:9c:5d:a7:d5:14:9c:2b:72:a2:00:d9: 1e:3f:d5:dc:ff:a3:8f:07:80:cb:4d:6f:cf:ff:7d: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:02:B7:47:3B:15:5C:45:28:D2:63:2B:5F:3E:43:80:F9:35:B7:5A X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:04:35:61:77:aa:d9:57:4b:28:d6:e6:c8:55:e5:dc:e6:89: bc:78:04:e0:c6:67:f5:11:6d:82:6f:6e:71:59:7e:db:f2:f7: 25:d8:a2:6e:7e:bd:a5:31:39:97:98:07:5e:3d:18:95:ab:48: 08:4a:47:bb:01:d3:76:7c:ce:c0:eb:47:5f:96:b9:86:b3:53: 9f:71:9b:e3:25:53:7f:ce:77:c7:9f:38:cb:98:f7:1d:16:dc: 26:3b:ac:e5:ed:a8:c9:09:a6:67:46:19:2d:38:00:a7:11:cf: ad:dc:c4:e7:52:01:8c:8c:56:c1:c7:4d:ac:89:fd:57:b5:d0: e6:a5:2f:08:69:b2:99:2d:c4:fc:b4:96:93:1a:62:16:d5:1e: 10:30:c4:83:44:43:be:cc:f0:b3:87:91:f1:38:72:3c:97:27: 17:43:dd:c3:87:1f:6c:c2:e1:3f:7c:a7:1d:01:77:e4:bc:5c: c0:e0:e3:b2:3b:2e:fc:ed:8e:66:8b:96:a1:3a:cf:24:c4:ea: bf:27:d3:c3:32:85:7d:68:49:89:f1:24:c8:83:5d:57:ed:71: ae:a8:ef:46:17:7d:b6:c5:b8:32:e9:7b:c8:be:01:10:fb:9b: bb:c9:6c:d3:52:90:38:4a:f4:be:94:e3:f9:1b:cd:1a:5f:df: 88:8a:7f:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjUwNjE1MDQxNDM3WhcNMjUwNjIyMDQxNDM2WjAYMRYwFAYD VQQDEw02ODRlNDhhZC01ZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA90B8ufzmXMzy0EQfWIhEkx4Qo13n2v/3rxHmLYvuxonftbYJpnZkR2qbD6zf Pbn2Zw+7dVELEmkAr8yiJkFY7QQmXw45y7WfydZAK49I77RWFpDCsuu16wDcurEm 9Fepu0jncVutkbQMVQqnevWbWIavdyj1eb9OcOENTRTdFFIjIa97/lzbQJHS8oWt Ive4Bn37xrtfuuZGrAYVbFH91/yt1n9rGskY7j0tnleEOb+LwLYMeb9gTRDFScHT 6iDxPdtuMtnUzL0nReBqfEF2p4FpwYgIm502bc/G/b9M829G2COgnF2n1RScK3Ki ANkeP9Xc/6OPB4DLTW/P/32ZLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4Ct0c7 FVxFKNJjK18+Q4D5NbdaMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOBDVhd6rZV0so1ubIVeXc5om8eATgxmf1EW2Cb25xWX7b8vcl2KJu fr2lMTmXmAdePRiVq0gISke7AdN2fM7A60dflrmGs1OfcZvjJVN/znfHnzjLmPcd FtwmO6zl7ajJCaZnRhktOACnEc+t3MTnUgGMjFbBx02sif1XtdDmpS8IabKZLcT8 tJaTGmIW1R4QMMSDREO+zPCzh5HxOHI8lycXQ93Dhx9swuE/fKcdAXfkvFzA4OOy Oy787Y5mi5ahOs8kxOq/J9PDMoV9aEmJ8STIg11X7XGuqO9GF322xbgy6XvIvgEQ +5u7yWzTUpA4SvS+lOP5G80aX9+Iin/n -----END CERTIFICATE-----Generated at Sun Jun 15 10:04:05 2025 by rpki-client