$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft File: Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json) Hash identifier: Pv8nd9MyKzsX1SGRIqu4AFgaFHcSDtTUr8VhdntxxO4= Subject key identifier: CF:4B:08:C9:D2:B0:CE:0A:BA:D1:CF:C0:95:69:D9:DF:79:BB:DA:18 Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E Certificate issuer: /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft Manifest number: B4 Signing time: Sun 01 Jun 2025 05:43:47 +0000 Manifest this update: Sun 01 Jun 2025 05:43:47 +0000 Manifest next update: Sun 08 Jun 2025 05:43:47 +0000 Files and hashes: 1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: lsoEY5OGQNBK4GyvUpNopsouLr8TDudOQqTwT81PJMw=) 2: 261B11D8C81611EFB17FCD19C4F9AE02.roa (hash: 9NOvs/XF0IftOxWT5ydMMS4UTlwcr+u3mz+KsLLysWo=) 3: E02064A0C9E911EFABA90568C4F9AE02.roa (hash: Lj7oe1PG2x11wd3w8JgQmVhkgZC0GIoGb3aNynIb3Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E Validity Not Before: Jun 1 05:43:47 2025 GMT Not After : Jun 8 05:43:47 2025 GMT Subject: CN=683be893-d258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:64:41:71:0c:e0:a0:7f:37:f1:2e:ed:f7: 4a:36:53:4a:3d:fe:0d:93:4c:5f:64:b4:94:d5:76: 6b:6a:50:4f:c3:eb:58:8f:d7:c7:2b:f8:93:ee:d4: 8d:4b:fb:87:64:c4:a4:99:d4:7a:fc:19:2c:9a:73: d9:d6:82:f2:9c:e8:6b:ab:6c:4b:aa:a0:74:f8:51: 05:37:86:90:d0:72:04:4d:c5:42:94:2a:6d:f0:39: 05:91:70:c3:05:61:32:cc:f1:e7:07:19:38:49:25: df:a5:93:14:b9:0e:0c:6f:0a:b3:2f:d0:f2:7e:3f: fb:66:36:a6:1d:4e:d1:04:3c:19:ce:15:92:63:f0: fd:b6:da:8f:5c:a3:f6:0d:5d:ff:e5:cb:12:8e:0b: 02:d3:56:46:80:11:85:5e:cc:17:fa:cf:02:7b:84: 4c:ca:11:4f:c8:a6:c5:86:1a:18:e6:8d:5a:16:92: a3:57:1e:db:ee:90:f2:b9:31:5c:29:bd:cd:7d:e5: 94:68:be:c5:81:bc:b5:ca:57:a4:74:e3:80:0e:d2: e0:2c:cb:00:5c:d7:5b:1b:cb:1d:cd:e7:7a:cf:93: ff:5d:56:d5:b0:92:02:27:ea:9e:02:03:3c:83:41: c6:ba:b2:bb:70:ab:85:08:7f:30:21:58:5e:01:76: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:08:C9:D2:B0:CE:0A:BA:D1:CF:C0:95:69:D9:DF:79:BB:DA:18 X509v3 Authority Key Identifier: keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:03:f9:20:06:8a:34:18:37:06:c6:cf:2b:66:e7:8c:61:92: b1:4c:8e:42:97:d3:a6:d8:e8:9a:86:ff:cc:8e:ae:50:e9:da: 0e:49:75:06:c7:57:23:91:20:e6:f0:ac:b5:b1:30:d6:eb:81: 6c:68:95:9b:78:95:44:23:1b:ac:89:5d:4b:ec:08:a7:cd:a9: 2b:87:2c:0f:52:3e:7d:19:84:e6:2e:e2:c9:af:1c:5f:e1:3f: a9:70:b0:43:78:aa:e0:f4:54:96:a4:19:91:ed:e3:a8:02:3d: 55:a0:73:53:57:fd:dd:8f:55:1b:22:5c:62:6a:ca:8f:e7:d1: 2d:3f:89:49:5d:c2:6e:d6:be:fb:f0:82:54:a2:ca:d1:6c:c6: c9:66:fe:1d:cf:f8:19:b7:92:fc:b4:2b:e5:83:5a:f9:03:ac: 67:66:6e:35:0f:c5:55:c8:42:24:c8:ac:c5:7b:00:f3:31:71: 4b:c5:6b:3b:b9:2d:87:fe:26:1a:4a:4b:6d:eb:54:4c:bb:88: 14:c4:05:fe:81:67:ad:6b:80:88:cf:c5:59:ca:0f:b7:af:66: 21:d5:16:5b:62:ad:23:56:5f:d5:66:16:bb:0a:99:ec:9e:08: a2:e6:62:f5:e2:3a:e1:8a:80:79:00:1c:a3:ca:70:41:bc:0b: 96:28:0a:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA2QzcxMTAvBgNVBAUTKDIyOUVFNkNGQjc5NTg0QkEyMzEwQUNDRTQ1MjgzOEY3 QTQ4QTUwMUUwHhcNMjUwNjAxMDU0MzQ3WhcNMjUwNjA4MDU0MzQ3WjAYMRYwFAYD VQQDEw02ODNiZTg5My1kMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMlkQXEM4KB/N/Eu7fdKNlNKPf4Nk0xfZLSU1XZralBPw+tYj9fHK/iT7tSN S/uHZMSkmdR6/BksmnPZ1oLynOhrq2xLqqB0+FEFN4aQ0HIETcVClCpt8DkFkXDD BWEyzPHnBxk4SSXfpZMUuQ4MbwqzL9Dyfj/7ZjamHU7RBDwZzhWSY/D9ttqPXKP2 DV3/5csSjgsC01ZGgBGFXswX+s8Ce4RMyhFPyKbFhhoY5o1aFpKjVx7b7pDyuTFc Kb3NfeWUaL7Fgby1ylekdOOADtLgLMsAXNdbG8sdzed6z5P/XVbVsJICJ+qeAgM8 g0HGurK7cKuFCH8wIVheAXazUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9LCMnS sM4KutHPwJVp2d95u9oYMB8GA1UdIwQYMBaAFCKe5s+3lYS6IxCszkUoOPekilAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDZDNy82RjAzRDYzMDMy MEUxMUVGQjZFMERBNzZDNEY5QUUwMi9JcDdtejdlVmhMb2pFS3pPUlNnNDk2U0tV QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lwN216N2VWaExvakVLek9SU2c0OTZTS1VCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDZDNy82RjAzRDYzMDMyMEUxMUVGQjZFMERBNzZDNEY5QUUwMi9JcDdtejdlVmhM b2pFS3pPUlNnNDk2U0tVQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0A/kgBoo0GDcGxs8rZueMYZKxTI5Cl9Om2Oiahv/Mjq5Q6doOSXUG x1cjkSDm8Ky1sTDW64FsaJWbeJVEIxusiV1L7AinzakrhywPUj59GYTmLuLJrxxf 4T+pcLBDeKrg9FSWpBmR7eOoAj1VoHNTV/3dj1UbIlxiasqP59EtP4lJXcJu1r77 8IJUosrRbMbJZv4dz/gZt5L8tCvlg1r5A6xnZm41D8VVyEIkyKzFewDzMXFLxWs7 uS2H/iYaSktt61RMu4gUxAX+gWeta4CIz8VZyg+3r2Yh1RZbYq0jVl/VZha7Cpns ngii5mL14jrhioB5AByjynBBvAuWKApu -----END CERTIFICATE-----Generated at Mon Jun 2 22:09:00 2025 by rpki-client