$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: lJBU8M5iwR5AG6B7BXmzbjJQVWNGWmJDlwkIH8QKspU= Subject key identifier: 31:19:4C:58:7B:BD:08:27:F4:76:A3:26:13:30:B0:E1:75:7F:72:36 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 0829 Signing time: Mon 16 Jun 2025 20:42:09 +0000 Manifest this update: Mon 16 Jun 2025 20:42:09 +0000 Manifest next update: Mon 23 Jun 2025 20:42:09 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: wadUUdUnKyR8xb7PJZbYxw0pw+4DB5K1uiiw709qcns=) 2: EF40C4AC404611EFA2014651C4F9AE02.roa (hash: czaYuAZrmltxjeFq6mD06OZKMChDyKz2TsFDBFMIxYw=) 3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: IR0gL9HuGQPasCSDeDXOONGQSnX5FqddD0h9jerJFTk=) 4: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: RgPF5melWGZf5AFZ9hv+NJPKC/EOsjcNRxGMLnUAhvk=) 5: 35D16082404911EFBC4C610EC4F9AE02.roa (hash: CZyYnpg8fZRv7/01XkAyfUiNYVCaEIGt11t+Ww7CLyk=) 6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: 5tsj3TAsFxb8qTqVXGn9He+Eq077vpR4YIaSiSHaTqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Jun 16 20:42:09 2025 GMT Not After : Jun 23 20:42:09 2025 GMT Subject: CN=685081a1-5db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:d3:69:71:35:88:ed:49:ef:3b:30:e8:3e: 89:1d:9f:41:d7:d3:6b:0b:8d:20:8b:97:39:6d:38: 43:61:07:f4:23:13:56:23:7f:79:f0:53:9e:79:50: 4f:83:bf:dc:98:b9:53:23:53:71:52:fa:c4:75:a9: ff:de:27:e2:26:9a:6d:d4:2f:ec:ae:d4:ee:8f:ef: 06:2a:fe:21:67:37:cd:35:bd:5c:68:aa:b9:de:7d: d7:06:61:89:c6:37:85:97:78:eb:37:83:7c:38:2b: a7:6c:5b:f1:95:de:fa:7a:ce:6d:54:ab:b6:4d:e1: 1e:b6:6c:be:f3:41:8d:56:46:15:43:38:0e:ab:6c: 4e:0b:cb:7b:68:cf:2b:d9:c9:59:3d:df:14:e9:ca: d5:5d:c3:b0:ba:7b:a1:12:6d:24:d6:e1:84:34:c7: b5:fc:7c:e9:ec:fe:f4:30:19:a1:d0:6b:66:0e:17: 5a:90:c0:86:25:c7:a5:31:15:7d:88:30:db:5e:94: 29:0d:8c:0d:8b:31:c3:4c:64:01:f3:ca:3c:c8:7e: 06:55:c8:79:85:b5:c7:e9:af:0d:0b:6d:76:4c:03: ca:28:68:42:8f:ec:1d:c6:f5:d9:50:c6:52:ec:9a: 12:1b:a2:20:5f:a5:50:3e:a3:8f:f3:a3:2a:fe:2b: c4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:19:4C:58:7B:BD:08:27:F4:76:A3:26:13:30:B0:E1:75:7F:72:36 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f8:64:92:b8:9d:94:2c:28:2e:c9:6b:f1:2c:29:13:1f:3c: 9b:b4:fc:54:33:e8:ec:77:dc:82:4c:3e:05:b5:86:10:d1:88: a6:9f:88:e7:09:7e:7c:e7:29:90:b2:83:07:91:16:71:2e:a5: da:b6:ca:40:8f:d8:e1:8c:63:2e:69:90:21:4c:6b:09:c7:37: df:04:23:b3:34:15:b3:a6:f1:6e:bb:93:e6:c4:22:34:e7:25: c0:ac:fc:2f:db:93:9a:df:e0:17:da:b2:f6:7e:b3:f5:bf:3e: ee:2e:7d:bf:07:02:84:e2:9d:56:9a:d1:a8:86:7a:1c:74:61: 3f:d9:34:0b:02:ab:7c:f1:32:c0:d2:72:a2:e4:8d:6b:a8:da: 12:48:32:22:7e:65:b9:c6:ec:f8:fd:9e:35:df:5b:d4:87:dc: 12:36:92:e8:5c:0e:6a:a1:4a:e4:25:75:db:d5:61:d7:ec:62: d6:95:04:24:a4:15:0c:dd:b7:62:28:ac:cd:ae:6c:0a:f3:09: 43:28:44:c6:13:db:fa:b7:47:f3:11:fc:55:30:a8:03:48:4a: b6:39:56:2b:ff:71:14:a7:f4:f9:21:24:98:39:57:51:71:49: e9:09:93:be:93:a9:da:d0:45:b0:ca:67:ad:f7:e0:20:17:84: 40:a2:5a:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUwNjE2MjA0MjA5WhcNMjUwNjIzMjA0MjA5WjAYMRYwFAYD VQQDEw02ODUwODFhMS01ZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHLTaXE1iO1J7zsw6D6JHZ9B19NrC40gi5c5bThDYQf0IxNWI3958FOeeVBP g7/cmLlTI1NxUvrEdan/3ifiJppt1C/srtTuj+8GKv4hZzfNNb1caKq53n3XBmGJ xjeFl3jrN4N8OCunbFvxld76es5tVKu2TeEetmy+80GNVkYVQzgOq2xOC8t7aM8r 2clZPd8U6crVXcOwunuhEm0k1uGENMe1/Hzp7P70MBmh0GtmDhdakMCGJcelMRV9 iDDbXpQpDYwNizHDTGQB88o8yH4GVch5hbXH6a8NC212TAPKKGhCj+wdxvXZUMZS 7JoSG6IgX6VQPqOP86Mq/ivESQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEZTFh7 vQgn9HajJhMwsOF1f3I2MB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW+GSSuJ2ULCguyWvxLCkTHzybtPxUM+jsd9yCTD4FtYYQ0Yimn4jn CX585ymQsoMHkRZxLqXatspAj9jhjGMuaZAhTGsJxzffBCOzNBWzpvFuu5PmxCI0 5yXArPwv25Oa3+AX2rL2frP1vz7uLn2/BwKE4p1WmtGohnocdGE/2TQLAqt88TLA 0nKi5I1rqNoSSDIifmW5xuz4/Z4131vUh9wSNpLoXA5qoUrkJXXb1WHX7GLWlQQk pBUM3bdiKKzNrmwK8wlDKETGE9v6t0fzEfxVMKgDSEq2OVYr/3EUp/T5ISSYOVdR cUnpCZO+k6na0EWwymet9+AgF4RAolqX -----END CERTIFICATE-----Generated at Tue Jun 17 10:23:23 2025 by rpki-client