$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: QKt95IBEFTZpS/QPtcCEO0bQEzbK3XeLaOTVFCqZjP0= Subject key identifier: D6:CA:D9:32:B1:33:82:6C:D4:B7:82:BE:DA:82:3D:5B:DB:51:AF:0F Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 0418 Signing time: Sat 31 May 2025 00:46:13 +0000 Manifest this update: Sat 31 May 2025 00:46:13 +0000 Manifest next update: Sat 07 Jun 2025 00:46:13 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: F6XGW3WkwBeKkTdFTgQxKybEbdBEkrhkP0vqcQ0DVg0=) 2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: tHlnHTM42fIgrOKj6B5mEiDlxGJ8PU+aATIjcWUbfzQ=) 3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: G91/+5P90Gbi5PgxXduUuTfOqPoMJhhodtxKYVTEQhU=) 4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: dDUwPb8yT4c7h8uvXZN4RSXgwF3JJh0qprW0Nf2AMic=) 5: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: 6FWLxJ0tuemCPYBLnFeCXc6fNxB9xk/e0IXfBTmtzAk=) 6: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: OW2gDSL6apVk21WPZdNUp4voxwL3co7ZVV/LZN2sPnI=) 7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: rr7JwL3aP2xt22xpI8m2scwwvBMRgYndiZXBSENrUYA=) 8: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: P6m9Y8fkMm3GUB3vWCGhg/CMVh26A+E6bYvQlekbBbQ=) 9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: onTCqXS9qZGzhIeTCRHgBXLlG0kEyR1ncJjeY60B73A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: May 31 00:46:13 2025 GMT Not After : Jun 7 00:46:13 2025 GMT Subject: CN=683a5155-e808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:e3:81:0d:2b:db:a9:69:44:3e:d8:d6:5c: 4e:12:99:f6:26:30:33:b9:43:bb:97:2a:fe:0b:71: 4e:b8:2c:c8:63:2d:f1:c1:05:6d:d0:88:ad:b0:0f: 1f:a9:70:39:8a:6f:e5:4a:f3:ef:38:4e:c1:70:58: a7:89:48:fe:7a:9f:ec:72:32:2d:63:14:b1:3c:1e: 6e:e2:e2:dc:96:27:17:15:e9:69:b9:65:a5:25:8d: 8a:60:0b:20:a5:60:04:0c:9d:ec:fd:0d:18:85:a6: f5:fc:31:35:5d:fb:ab:f9:fd:bc:7d:60:8d:a4:d8: d4:cf:e6:09:89:91:20:cf:7f:fd:66:19:45:3a:f9: 4b:87:be:64:a8:5f:8d:17:ea:11:7f:e7:83:c7:3e: 99:1d:c3:04:c2:f9:64:be:98:61:ac:d4:17:82:9a: 4f:55:46:da:5e:a7:28:c0:51:72:f8:95:29:5b:84: db:f7:f8:9a:df:e3:0f:74:fc:79:4b:70:6d:ca:93: c5:d1:67:5b:46:40:e4:5a:22:98:07:be:89:85:12: f7:67:00:7d:b2:35:dc:72:56:2f:1a:8c:d2:27:6d: e1:64:5f:da:f7:e9:25:1f:54:2c:9e:52:e0:d4:d2: 89:8c:04:08:d8:5e:48:dd:ed:69:b3:47:55:90:20: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CA:D9:32:B1:33:82:6C:D4:B7:82:BE:DA:82:3D:5B:DB:51:AF:0F X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a6:b8:c9:d8:91:f4:c0:60:82:4e:37:fe:36:0b:40:0f:b2: 2b:ad:62:76:a9:5b:20:44:8d:06:14:43:b6:b0:18:f5:a2:b6: d5:d0:6a:63:60:32:6b:4a:23:e6:1a:b7:cf:79:5c:70:29:f2: ea:f9:94:8d:47:8f:c0:ff:ef:b4:42:43:3a:92:a5:8f:eb:7d: b7:e5:97:b0:be:fc:84:f5:1d:58:94:f1:99:80:0f:1b:01:fc: d5:1f:25:43:76:a3:f6:ef:b1:58:90:d7:f7:6e:23:2f:8a:cb: 40:6f:ba:46:79:f1:f5:95:bb:85:1f:45:cb:6b:5a:c1:0c:1c: 46:8d:05:85:fc:b5:f7:24:cb:44:d8:9d:55:72:41:5e:54:52: f0:b5:76:21:83:ae:4c:a1:17:85:ed:05:cb:44:91:8f:7b:f9: 25:60:5f:d3:87:ef:55:c1:0a:de:44:07:2a:90:77:1c:52:6b: a6:4f:bf:48:bc:d8:d5:31:5d:d7:4b:42:8e:38:3a:86:7e:6e: b0:f6:1b:df:6c:a0:20:2f:be:a6:03:5a:37:ec:f8:35:70:68: 72:fa:3c:90:f5:16:57:25:9e:89:38:fd:19:ef:1d:40:41:4c: 0a:e7:78:02:7f:0e:1c:2d:1b:11:33:3a:28:de:59:4d:9b:b7: f4:e8:d8:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUwNTMxMDA0NjEzWhcNMjUwNjA3MDA0NjEzWjAYMRYwFAYD VQQDEw02ODNhNTE1NS1lODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/zjgQ0r26lpRD7Y1lxOEpn2JjAzuUO7lyr+C3FOuCzIYy3xwQVt0IitsA8f qXA5im/lSvPvOE7BcFiniUj+ep/scjItYxSxPB5u4uLclicXFelpuWWlJY2KYAsg pWAEDJ3s/Q0Yhab1/DE1Xfur+f28fWCNpNjUz+YJiZEgz3/9ZhlFOvlLh75kqF+N F+oRf+eDxz6ZHcMEwvlkvphhrNQXgppPVUbaXqcowFFy+JUpW4Tb9/ia3+MPdPx5 S3BtypPF0WdbRkDkWiKYB76JhRL3ZwB9sjXcclYvGozSJ23hZF/a9+klH1QsnlLg 1NKJjAQI2F5I3e1ps0dVkCAH0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbK2TKx M4Js1LeCvtqCPVvbUa8PMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvprjJ2JH0wGCCTjf+NgtAD7IrrWJ2qVsgRI0GFEO2sBj1orbV0Gpj YDJrSiPmGrfPeVxwKfLq+ZSNR4/A/++0QkM6kqWP63235ZewvvyE9R1YlPGZgA8b AfzVHyVDdqP277FYkNf3biMvistAb7pGefH1lbuFH0XLa1rBDBxGjQWF/LX3JMtE 2J1VckFeVFLwtXYhg65MoReF7QXLRJGPe/klYF/Th+9VwQreRAcqkHccUmumT79I vNjVMV3XS0KOODqGfm6w9hvfbKAgL76mA1o37Pg1cGhy+jyQ9RZXJZ6JOP0Z7x1A QUwK53gCfw4cLRsRMzoo3llNm7f06NhQ -----END CERTIFICATE-----Generated at Sat May 31 16:36:50 2025 by rpki-client