$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: 12FqrQXjUrS/DOwNFBqMlNdm9qZRDWs3fSh3EuMjQJU= Subject key identifier: FB:7D:81:B0:BE:99:E3:83:41:D0:F1:4F:2F:AC:83:4D:EE:42:A3:6D Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0C6E Signing time: Sun 08 Jun 2025 18:07:54 +0000 Manifest this update: Sun 08 Jun 2025 18:07:53 +0000 Manifest next update: Sun 15 Jun 2025 18:07:53 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: SiKY3eGZx22niRaPrDJ2Dbh+bMf5BY8FZxS6TGaAk9g=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: O6ZOPVwxFkNjeJWmRWdaGnVAImdC2WliszZw8u4xZjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Jun 8 18:07:53 2025 GMT Not After : Jun 15 18:07:53 2025 GMT Subject: CN=6845d17a-64b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:fb:4c:5d:b1:0e:89:ff:54:cd:27:52:b3: d5:d3:9f:cc:6e:46:31:98:67:e5:80:2d:5c:04:13: e9:63:70:c9:4c:6a:87:94:3c:15:f1:ce:79:24:c9: 17:81:d6:eb:c8:74:74:9c:a6:4f:07:47:d6:b1:2b: 69:6c:dc:5c:94:2f:1d:2f:5c:b2:4e:a5:2c:24:6b: 25:f5:a7:0d:16:54:17:53:e5:b3:17:2b:bb:ac:7c: da:22:b0:95:a6:7d:86:b9:ae:46:ae:e4:7c:0b:85: da:37:28:ab:2a:8d:32:79:c8:da:9f:de:fc:1a:9d: 19:87:53:cd:bc:94:2a:22:3c:9a:11:f3:7b:fa:fc: a4:fb:53:48:52:81:09:17:0e:cc:84:0e:6b:46:1f: 10:20:1f:bf:90:69:50:ed:a9:39:25:1e:42:4f:2b: 9d:e4:9c:6a:67:45:4e:4e:e9:7d:95:5e:38:09:e4: 87:1e:66:e1:bf:89:53:8d:a9:f0:fb:04:6a:52:b2: 99:3a:aa:20:fd:12:a6:7b:1b:c9:07:ad:c0:0c:ae: 49:21:d3:a9:8e:18:89:3f:80:a5:ec:60:b9:01:1f: 73:20:ab:c2:7a:14:65:d1:34:27:d5:46:98:c4:d3: 43:d0:ee:33:a1:e2:9d:cd:6f:7f:84:93:4c:0e:95: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7D:81:B0:BE:99:E3:83:41:D0:F1:4F:2F:AC:83:4D:EE:42:A3:6D X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b5:5f:f5:47:2d:b7:02:39:eb:45:88:29:88:bb:9a:c1:66: 7a:74:8f:7e:67:92:6a:fd:e0:f4:29:8d:e3:b4:79:96:fd:63: d6:09:7c:76:2a:d7:68:e6:93:88:25:99:7e:da:54:4d:7a:5f: de:78:35:40:3c:1d:e1:16:5c:78:45:88:c7:37:8c:9a:e4:92: df:c6:7c:79:69:b0:fb:6c:dc:87:26:6f:94:bb:75:b9:e2:03: 2a:7e:fb:55:f2:55:e2:f5:f8:3f:40:94:5d:ce:bc:02:2a:1b: 9c:5c:ea:b7:66:35:dd:c8:89:83:fc:4e:24:a1:ad:eb:10:33: 99:3e:64:8f:69:7f:f6:30:0e:3e:bf:cd:10:01:19:c9:e3:bc: 23:f1:1d:80:11:6f:8b:6d:14:4a:db:81:ab:8c:f2:db:f0:a2: b1:c9:cb:47:6a:e0:5a:85:c2:ca:c4:5c:b3:09:03:88:ca:58: a9:04:89:c0:d3:55:1d:6a:68:2a:c4:76:54:9f:89:6a:80:b3: 8e:8d:63:bb:1d:f4:e0:30:be:9e:84:3e:db:a0:63:53:bb:4d: 3a:55:65:bc:a0:e5:23:bb:1a:17:6b:90:35:8f:de:bb:f1:ac: a0:8e:06:95:47:4d:28:fb:4c:8d:62:cc:2e:7a:42:60:a3:17: c8:2d:b8:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjUwNjA4MTgwNzUzWhcNMjUwNjE1MTgwNzUzWjAYMRYwFAYD VQQDEw02ODQ1ZDE3YS02NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx77TF2xDon/VM0nUrPV05/MbkYxmGflgC1cBBPpY3DJTGqHlDwV8c55JMkX gdbryHR0nKZPB0fWsStpbNxclC8dL1yyTqUsJGsl9acNFlQXU+WzFyu7rHzaIrCV pn2Gua5GruR8C4XaNyirKo0yecjan978Gp0Zh1PNvJQqIjyaEfN7+vyk+1NIUoEJ Fw7MhA5rRh8QIB+/kGlQ7ak5JR5CTyud5JxqZ0VOTul9lV44CeSHHmbhv4lTjanw +wRqUrKZOqog/RKmexvJB63ADK5JIdOpjhiJP4Cl7GC5AR9zIKvCehRl0TQn1UaY xNND0O4zoeKdzW9/hJNMDpX4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPt9gbC+ meODQdDxTy+sg03uQqNtMB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUtV/1Ry23AjnrRYgpiLuawWZ6dI9+Z5Jq/eD0KY3jtHmW/WPWCXx2 Ktdo5pOIJZl+2lRNel/eeDVAPB3hFlx4RYjHN4ya5JLfxnx5abD7bNyHJm+Uu3W5 4gMqfvtV8lXi9fg/QJRdzrwCKhucXOq3ZjXdyImD/E4koa3rEDOZPmSPaX/2MA4+ v80QARnJ47wj8R2AEW+LbRRK24GrjPLb8KKxyctHauBahcLKxFyzCQOIylipBInA 01UdamgqxHZUn4lqgLOOjWO7HfTgML6ehD7boGNTu006VWW8oOUjuxoXa5A1j967 8aygjgaVR00o+0yNYswuekJgoxfILbjF -----END CERTIFICATE-----Generated at Mon Jun 9 17:27:31 2025 by rpki-client