$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: FPqZvXvOlzVGwRJhl9mOgKItYh2idUtIIpRK1laVhec= Subject key identifier: 9D:D4:6C:9C:44:37:33:CB:9D:EC:AA:9E:B9:A0:0C:3E:6C:73:4D:58 Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: 95 Signing time: Thu 19 Jun 2025 05:45:59 +0000 Manifest this update: Thu 19 Jun 2025 05:45:58 +0000 Manifest next update: Thu 26 Jun 2025 05:45:58 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: 3TJaSTrw+xgxkZGx/KQmEtLQAEQBhIA5bmuc9Re7ok0=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Jun 19 05:45:58 2025 GMT Not After : Jun 26 05:45:58 2025 GMT Subject: CN=6853a416-656b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:26:39:ff:f3:b0:2d:c6:cc:30:94:38:b0: 03:83:79:21:51:ed:ac:4f:40:e3:61:c8:ee:a7:65: a1:b3:cd:99:10:93:aa:72:41:64:0f:98:78:57:84: e6:8c:29:6d:fd:f4:93:00:e2:c3:25:b2:d5:6f:23: 07:ed:53:16:e6:f6:78:10:50:5e:ca:fe:86:ed:08: 21:e5:8b:18:24:32:c3:fe:db:8b:57:da:86:6d:64: 21:50:80:c2:04:67:19:57:a1:72:e2:bb:c9:f1:fd: 35:f2:f7:60:a7:ee:7a:71:37:ec:a1:b7:bd:57:a8: 69:52:00:3a:01:bd:25:f5:0b:41:0f:57:4f:f1:1b: a5:99:3d:15:f9:e3:0c:a5:98:6b:3a:4b:24:16:6a: 49:3d:51:ed:a6:4d:81:83:d0:97:f6:af:6d:da:36: 31:27:c5:5d:d9:eb:ad:09:92:54:9a:64:ca:01:61: 0d:04:d4:06:31:ac:4b:c9:ee:0f:23:18:84:ec:f0: 63:78:f3:8a:dd:fb:bc:58:c7:ba:a1:0d:0e:35:c9: e8:d1:41:7c:46:dc:31:51:b8:b3:85:b8:13:de:9e: ea:8c:9d:13:61:77:d1:ed:fc:50:93:49:03:65:80: c9:66:e5:68:30:f8:07:fa:95:81:6a:5e:e6:17:49: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D4:6C:9C:44:37:33:CB:9D:EC:AA:9E:B9:A0:0C:3E:6C:73:4D:58 X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:12:f1:28:d2:3c:d7:c8:92:54:00:d5:2a:a9:96:3a:af:3c: 29:1c:16:2c:01:a8:5f:e8:22:11:f5:b6:9d:2b:b7:56:a0:8b: aa:8c:61:98:b3:c1:76:cb:8c:cc:f5:b9:fe:5e:cf:2b:a3:35: 5d:17:83:4f:00:fa:1c:e8:37:e8:9f:07:fd:72:20:20:1c:fe: 9b:cc:a9:1f:66:08:2d:ca:d4:a9:2f:c9:ab:bc:a7:70:01:66: 88:8e:9f:66:d1:d2:5b:70:30:1f:d6:01:e4:02:dd:41:85:21: b9:ee:1f:9d:8e:8b:da:0f:d6:73:65:aa:c0:fb:ae:56:fa:68: d3:c6:a1:87:b4:2c:18:52:fb:8e:96:d9:ed:a8:75:07:b2:d1: f6:e0:7a:36:e8:ea:26:86:3b:04:dd:d3:c5:b5:60:32:ed:80: 0a:42:04:94:62:9b:5a:f4:83:74:e4:8b:4f:a9:5c:7b:f8:a6: bd:a3:22:64:17:38:be:b6:39:ac:79:5d:ba:0b:c9:d8:bb:26: 40:37:f2:3b:3f:a6:eb:a4:74:f7:20:15:ad:85:b1:1d:32:a7: f3:69:7b:72:55:21:8e:13:90:64:20:8d:a3:58:48:50:62:71: 7d:cb:69:56:86:87:9c:8a:d9:0c:a9:99:b4:5d:c3:45:ac:93: be:87:eb:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDIyNTlGODcwOTZFNDBBREIzQzg0MTgwRTI4QjU2QzNF ODgyMkY2NTEwHhcNMjUwNjE5MDU0NTU4WhcNMjUwNjI2MDU0NTU4WjAYMRYwFAYD VQQDEw02ODUzYTQxNi02NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNgmOf/zsC3GzDCUOLADg3khUe2sT0DjYcjup2Whs82ZEJOqckFkD5h4V4Tm jClt/fSTAOLDJbLVbyMH7VMW5vZ4EFBeyv6G7Qgh5YsYJDLD/tuLV9qGbWQhUIDC BGcZV6Fy4rvJ8f018vdgp+56cTfsobe9V6hpUgA6Ab0l9QtBD1dP8RulmT0V+eMM pZhrOkskFmpJPVHtpk2Bg9CX9q9t2jYxJ8Vd2eutCZJUmmTKAWENBNQGMaxLye4P IxiE7PBjePOK3fu8WMe6oQ0ONcno0UF8RtwxUbizhbgT3p7qjJ0TYXfR7fxQk0kD ZYDJZuVoMPgH+pWBal7mF0n3ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3UbJxE NzPLneyqnrmgDD5sc01YMB8GA1UdIwQYMBaAFCJZ+HCW5ArbPIQYDii1bD6IIvZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS8zQTlDOEE1NjZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0czhoQmdPS0xWc1BvZ2k5 bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTlsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS8zQTlDOEE1NjZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0 czhoQmdPS0xWc1BvZ2k5bEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMEvEo0jzXyJJUANUqqZY6rzwpHBYsAahf6CIR9badK7dWoIuqjGGY s8F2y4zM9bn+Xs8rozVdF4NPAPoc6Dfonwf9ciAgHP6bzKkfZggtytSpL8mrvKdw AWaIjp9m0dJbcDAf1gHkAt1BhSG57h+djovaD9ZzZarA+65W+mjTxqGHtCwYUvuO ltntqHUHstH24Ho26OomhjsE3dPFtWAy7YAKQgSUYpta9IN05ItPqVx7+Ka9oyJk Fzi+tjmseV26C8nYuyZAN/I7P6brpHT3IBWthbEdMqfzaXtyVSGOE5BkII2jWEhQ YnF9y2lWhoecitkMqZm0XcNFrJO+h+t+ -----END CERTIFICATE-----Generated at Thu Jun 19 15:26:11 2025 by rpki-client