$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: XH+s3T5KyX5CkAEQysqFDYR3OU9vYXMsVq5Irga0e1Q= Subject key identifier: BA:62:0A:9C:1E:71:0B:1E:D3:59:F8:BC:06:F7:1D:D3:71:6E:CC:75 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 2786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2737 Signing time: Sat 14 Jun 2025 15:38:22 +0000 Manifest this update: Sat 14 Jun 2025 15:38:21 +0000 Manifest next update: Sat 21 Jun 2025 15:38:21 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: qcn07CWxXSLQ7UwWsUvNO1o7lZlh4BOrscqZGPisiOM=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: UoNQyiMbzRM8LTAnCH5+6vt93Lw53vJESQHvBWYcjss=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: cpPBl2HZl2WMGx0/E7w0QxRgBvloFKsPNiFCwchG+b8=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: gUaglzjVEo/jAQam5U3T7T5H9G5lSnkvKcItCzMbsY0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: lXtCcZI3WY8OIlNn2pthb5U4nO4x25l4CIfkoHRn3ik=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: g3qXc5xzXRuZuGvrf+0l5unc13/FwmeQdJGJ36GeWJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10118 (0x2786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Jun 14 15:38:21 2025 GMT Not After : Jun 21 15:38:21 2025 GMT Subject: CN=684d976e-1092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:98:11:e1:14:a2:b4:18:4f:ee:39:37:b7: 87:66:d5:42:f4:a5:a1:5c:6d:54:4b:88:1b:4a:de: f4:a5:34:dd:dc:38:03:d4:e1:7d:a7:47:f4:61:62: 86:dd:35:75:0e:b8:6e:52:df:90:4b:80:79:30:31: f8:aa:ad:d8:60:5a:16:81:8f:3f:7f:fd:f5:eb:6b: 0c:7e:5f:1b:6f:99:a0:b3:b5:01:9d:1c:67:3e:55: 55:da:86:a1:1b:f6:2e:46:f1:7f:42:0a:7d:f1:e0: 47:f8:dd:bd:ee:81:9a:b2:ba:cd:56:1b:d3:7f:1e: a7:0d:ee:72:6a:d0:90:e4:cb:b9:66:94:52:7d:65: e8:e5:81:17:06:8e:24:29:c2:46:8e:3d:8e:a2:e1: d4:3b:f4:20:4f:c5:3e:26:68:86:d4:cc:bf:e4:0f: e7:d3:8c:f0:65:ec:a2:43:ec:50:ee:6c:5e:e1:ed: ac:bf:b8:cf:af:e4:07:d4:77:a5:57:a7:2c:0f:b9: b8:7a:0d:8f:ea:17:a1:27:bf:95:8b:43:6a:1e:f6: 21:4f:e6:e2:6d:32:23:e9:9f:86:3b:77:12:1b:7d: 4b:1e:bc:06:d2:01:a1:8b:cd:73:9b:50:ac:5a:7f: bb:13:df:fd:40:38:44:3f:07:dd:57:d7:ce:44:23: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:62:0A:9C:1E:71:0B:1E:D3:59:F8:BC:06:F7:1D:D3:71:6E:CC:75 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a7:96:37:bb:aa:d4:14:5e:ac:b8:e3:5c:ef:6c:12:b8:04: 18:5f:ee:c3:d3:6c:6d:fc:8b:69:2b:f6:22:61:6d:0b:a7:f5: 16:68:5e:a3:45:5d:ce:22:a8:1c:b4:3d:6a:8a:a2:d4:d6:71: c0:5c:39:79:0d:4d:fd:8f:96:f3:63:a5:0f:35:84:3b:99:75: 87:22:71:8b:82:bb:b5:91:69:09:43:50:81:60:e9:7b:e8:54: 65:6b:c2:ee:c2:f7:da:84:d0:6a:c4:8d:6d:86:40:6b:90:58: c9:b8:73:39:89:36:cf:44:ce:56:cb:e7:8c:d3:f7:93:38:38: dd:b6:61:a0:73:0e:4a:55:0d:47:93:7d:1b:16:4d:7b:82:b9: 9f:b1:96:df:f8:53:cf:37:aa:be:ef:48:12:97:53:a1:f0:45: a9:ef:1d:66:89:ad:68:f0:c7:ea:b1:7b:8c:d8:04:1d:7d:54: 5e:f7:f0:95:d1:59:ad:05:39:89:05:ba:21:79:da:58:1a:c5: 74:26:0e:b2:7d:01:b0:9a:14:1f:63:60:0d:90:58:ae:68:3b: 47:64:c9:5d:c3:92:de:49:50:8f:f5:2d:17:f9:21:c2:8d:c7: ef:29:2b:6c:b2:13:31:05:32:aa:ba:33:13:3d:5b:cc:ce:61: 43:0c:92:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwNjE0MTUzODIxWhcNMjUwNjIxMTUzODIxWjAYMRYwFAYD VQQDEw02ODRkOTc2ZS0xMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAqYEeEUorQYT+45N7eHZtVC9KWhXG1US4gbSt70pTTd3DgD1OF9p0f0YWKG 3TV1DrhuUt+QS4B5MDH4qq3YYFoWgY8/f/3162sMfl8bb5mgs7UBnRxnPlVV2oah G/YuRvF/Qgp98eBH+N297oGasrrNVhvTfx6nDe5yatCQ5Mu5ZpRSfWXo5YEXBo4k KcJGjj2OouHUO/QgT8U+JmiG1My/5A/n04zwZeyiQ+xQ7mxe4e2sv7jPr+QH1Hel V6csD7m4eg2P6hehJ7+Vi0NqHvYhT+bibTIj6Z+GO3cSG31LHrwG0gGhi81zm1Cs Wn+7E9/9QDhEPwfdV9fORCNodQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpiCpwe cQse01n4vAb3HdNxbsx1MB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnp5Y3u6rUFF6suONc72wSuAQYX+7D02xt/ItpK/YiYW0Lp/UWaF6j RV3OIqgctD1qiqLU1nHAXDl5DU39j5bzY6UPNYQ7mXWHInGLgru1kWkJQ1CBYOl7 6FRla8LuwvfahNBqxI1thkBrkFjJuHM5iTbPRM5Wy+eM0/eTODjdtmGgcw5KVQ1H k30bFk17grmfsZbf+FPPN6q+70gSl1Oh8EWp7x1mia1o8MfqsXuM2AQdfVRe9/CV 0VmtBTmJBbohedpYGsV0Jg6yfQGwmhQfY2ANkFiuaDtHZMldw5LeSVCP9S0X+SHC jcfvKStsshMxBTKqujMTPVvMzmFDDJI2 -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:27 2025 by rpki-client