$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: X3f/JUflx5vrUhbdksnDf1S09k37r9jjwYvnWdueNDE= Subject key identifier: E5:5D:FC:F4:DF:65:A9:FD:19:5E:CE:D8:65:7B:5A:C1:35:FE:F2:89 Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: 5D Signing time: Sat 31 May 2025 06:40:55 +0000 Manifest this update: Sat 31 May 2025 06:40:55 +0000 Manifest next update: Sat 07 Jun 2025 06:40:55 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: WBDz7/ybuw5Hw5Kwguct6qEu/GspKpBMq3mn/0mOK44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: May 31 06:40:55 2025 GMT Not After : Jun 7 06:40:55 2025 GMT Subject: CN=683aa477-65ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:15:5e:ea:cf:82:51:90:35:33:2c:0b:c4:a1: bc:72:ed:cd:06:19:e1:26:91:d9:9d:b0:f6:65:da: b2:d3:c9:d7:1b:a6:89:ea:f3:74:2e:12:11:10:44: ad:63:57:ea:84:80:8e:8d:b0:6a:c3:cd:02:b8:29: ee:40:e2:ee:f5:97:be:4a:98:89:18:6f:bc:e9:d1: 1e:af:2e:3a:8a:53:8d:64:31:f8:da:10:3d:5d:6c: dc:0a:96:35:26:65:21:51:7e:ae:77:61:d2:90:3c: 7a:f2:8b:36:ef:60:db:fc:3e:1c:da:bd:16:2d:36: 16:94:b9:d5:18:9a:0d:d9:ec:1b:3f:1b:88:75:28: f5:9c:69:82:da:fa:c2:ce:a2:91:bc:3e:d2:d3:a4: 2e:1c:02:f5:cb:55:e7:d0:87:f6:5e:c1:aa:68:35: a1:67:2e:3b:80:8d:fc:f5:b8:4b:f7:4e:fa:f8:0d: 7c:4b:bb:f4:52:61:45:b1:bc:be:1e:98:00:f2:9f: 4c:a6:fa:88:84:7e:52:31:c8:49:ae:5e:7d:00:93: 76:7a:2d:a4:6f:f0:7a:aa:8e:8a:ea:44:e4:87:7c: 35:81:31:27:81:fd:cc:16:29:fe:1d:37:f7:2b:d6: cc:e8:1b:85:3f:e5:bf:f9:2b:a0:c2:f2:0c:a7:f4: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5D:FC:F4:DF:65:A9:FD:19:5E:CE:D8:65:7B:5A:C1:35:FE:F2:89 X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:08:af:86:b3:98:03:06:77:4d:1a:4a:58:84:78:e0:9b:15: 3f:bc:dc:7e:b5:91:f6:e2:35:aa:be:8d:8f:e9:23:b5:01:be: 64:0e:cd:07:0b:ab:e8:0e:8f:f1:df:7a:9e:39:8d:03:3a:b2: 88:4d:40:b7:a6:23:78:82:73:85:94:3c:33:7e:41:83:f1:05: fe:9a:3e:70:e7:07:d3:27:77:fb:35:ff:60:2e:c2:26:e8:5a: b7:e4:23:b2:e9:ee:7a:5b:58:e8:19:25:03:ed:6e:70:a0:89: 3b:52:e3:e5:70:79:a1:7d:80:2a:37:15:3e:21:dc:c2:7f:8f: 76:f9:5d:e8:02:cb:89:51:82:88:88:c5:20:b5:1e:57:cb:2d: 9a:95:08:e2:88:40:3a:c0:f0:a2:20:cb:c7:89:8f:89:66:d4: 6b:bc:dd:e7:93:4c:74:90:e2:3e:2e:db:ad:77:4e:41:d1:c7: 1d:3b:2e:5e:dc:5a:e6:02:d6:81:bf:90:ba:52:3c:d4:8d:d5: 75:e4:0f:c5:32:55:01:ee:1a:c8:8d:40:db:4f:6e:73:84:64: c6:2d:b1:ce:68:a8:6e:cb:fc:ac:7e:e2:21:02:ff:44:fc:e4: e2:6d:52:ec:04:88:65:1b:72:a7:b3:8d:3a:86:de:5f:94:d5: 99:3d:3a:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTBCNDExMC8GA1UEBRMoMjMwMzc4MTY3NzA3OUMyRkJCNDc0OTY0MEYwNjU3QTFD ODhFREI0NDAeFw0yNTA1MzEwNjQwNTVaFw0yNTA2MDcwNjQwNTVaMBgxFjAUBgNV BAMTDTY4M2FhNDc3LTY1ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyFV7qz4JRkDUzLAvEobxy7c0GGeEmkdmdsPZl2rLTydcbponq83QuEhEQRK1j V+qEgI6NsGrDzQK4Ke5A4u71l75KmIkYb7zp0R6vLjqKU41kMfjaED1dbNwKljUm ZSFRfq53YdKQPHryizbvYNv8PhzavRYtNhaUudUYmg3Z7Bs/G4h1KPWcaYLa+sLO opG8PtLTpC4cAvXLVefQh/ZewapoNaFnLjuAjfz1uEv3Tvr4DXxLu/RSYUWxvL4e mADyn0ym+oiEflIxyEmuXn0Ak3Z6LaRv8HqqjorqROSHfDWBMSeB/cwWKf4dN/cr 1szoG4U/5b/5K6DC8gyn9D/BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5V389N9l qf0ZXs7YZXtawTX+8okwHwYDVR0jBBgwFoAUIwN4FncHnC+7R0lkDwZXociO20Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMEI0L0YyMjMxREU0QUYz ODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXdONEZuY0huQy03UjBsa0R3WlhvY2lPMjBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF MEI0L0YyMjMxREU0QUYzODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMt N1IwbGtEd1pYb2NpTzIwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIEIr4azmAMGd00aSliEeOCbFT+83H61kfbiNaq+jY/pI7UBvmQOzQcL q+gOj/Hfep45jQM6sohNQLemI3iCc4WUPDN+QYPxBf6aPnDnB9Mnd/s1/2Auwibo WrfkI7Lp7npbWOgZJQPtbnCgiTtS4+VweaF9gCo3FT4h3MJ/j3b5XegCy4lRgoiI xSC1HlfLLZqVCOKIQDrA8KIgy8eJj4lm1Gu83eeTTHSQ4j4u2613TkHRxx07Ll7c WuYC1oG/kLpSPNSN1XXkD8UyVQHuGsiNQNtPbnOEZMYtsc5oqG7L/Kx+4iEC/0T8 5OJtUuwEiGUbcqezjTqG3l+U1Zk9OmM= -----END CERTIFICATE-----Generated at Sat May 31 17:53:09 2025 by rpki-client