$ rpki-client -vvf rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft File: ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft (raw, json) Hash identifier: tuw+RKY66ErIxMxU9fHU8ZCqrGJhfmc9BZSYHlHx3X0= Subject key identifier: E1:1B:52:21:A2:0E:AC:D6:EB:1F:42:1D:C6:7A:2D:35:A0:B7:F4:62 Authority key identifier: 21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC Certificate issuer: /CN=A912382E/serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Certificate serial: 18A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft Manifest number: 189A Signing time: Fri 30 May 2025 16:40:22 +0000 Manifest this update: Fri 30 May 2025 16:40:22 +0000 Manifest next update: Fri 06 Jun 2025 16:40:22 +0000 Files and hashes: 1: ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl (hash: LG9/FZqABDJ2rVu6yffcyvcXhM42TaeJq9WBI0TLMMI=) 2: BD843CCE984011E79A256C82C4F9AE02.roa (hash: 7d3vUmf2cWau9IPd6HfmaD3peDm+FJkYl4xBhieCAd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6306 (0x18a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912382E, serialNumber=213436BA23A9AF250BF25DDEA50C762219F906BC Validity Not Before: May 30 16:40:22 2025 GMT Not After : Jun 6 16:40:22 2025 GMT Subject: CN=6839df76-5aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:e9:82:9f:db:3a:ed:03:cc:a0:a3:7a:38: 93:07:7b:a5:37:96:92:a4:10:d4:b4:7c:47:76:8d: 20:0a:59:ce:87:d1:a0:28:d8:d2:3c:0a:cd:74:3f: 74:34:04:39:7b:2d:d1:62:d2:73:23:89:55:ec:35: e0:19:ee:67:3a:c3:4e:9a:32:11:6f:fc:8b:67:b7: 60:33:74:da:9c:4e:6d:74:de:fb:6f:45:64:01:e4: aa:74:da:29:47:13:bb:d1:a8:aa:63:83:7f:0f:f6: 7d:52:46:6d:44:f4:bd:0f:6d:e4:55:9a:b2:9a:8e: d6:63:f4:35:21:2b:7b:ff:e1:a9:4d:58:4a:c4:cb: 38:5f:f0:1f:65:da:4b:b5:58:48:7a:98:4f:2a:6a: 60:45:57:a9:5e:9a:39:e4:fe:91:ee:d3:0e:bf:a8: b3:b9:79:74:44:57:84:f7:83:78:1a:4f:26:e3:03: 20:80:49:0b:32:e7:d6:e4:65:ff:ce:2e:00:57:ab: 1f:44:18:ee:d5:a0:17:ac:86:29:b2:bf:26:f6:2b: 73:0a:99:1a:b2:93:17:cc:8b:5e:a4:ff:62:07:7c: d7:f5:6b:50:f2:4d:98:ec:6b:2b:4e:e2:1e:58:8a: 52:69:95:ca:95:91:92:61:27:27:b7:bf:61:54:38: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1B:52:21:A2:0E:AC:D6:EB:1F:42:1D:C6:7A:2D:35:A0:B7:F4:62 X509v3 Authority Key Identifier: keyid:21:34:36:BA:23:A9:AF:25:0B:F2:5D:DE:A5:0C:76:22:19:F9:06:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ITQ2uiOpryUL8l3epQx2Ihn5Brw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912382E/311EAC56984011E7B768EB81C4F9AE02/ITQ2uiOpryUL8l3epQx2Ihn5Brw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d0:87:d0:87:84:cc:d6:e0:a3:72:1b:1c:d5:58:03:04:c6: 37:ee:9f:ef:21:a1:3b:c9:1d:54:a8:0c:be:25:ad:1f:b5:a1: 6a:0e:3f:3c:99:c7:51:39:f7:88:b4:09:0b:5a:ff:f2:0d:bc: 41:6b:20:8f:f3:3e:8b:15:bc:4f:82:62:97:b8:42:9f:ab:95: f9:39:1a:3c:d1:6e:3f:0c:54:bd:dd:c4:0b:9c:d1:bf:6f:6d: b5:5b:06:e6:29:5f:c2:63:fc:9c:3c:7e:4b:8e:1a:83:9f:98: 8b:26:fe:21:f4:38:54:04:ce:2f:8b:3d:bc:f4:6e:99:b5:49: 78:c4:10:c8:03:f5:6b:7c:7c:33:23:c1:48:16:f4:42:86:06: 43:cf:da:77:fa:d6:3e:05:f7:7c:8e:df:a0:8f:e5:d2:1d:82: c9:cf:86:23:c5:af:c7:39:7e:66:2e:55:7e:ea:3a:3f:4f:c5: 1e:32:7e:ed:c9:ac:78:03:10:51:7a:0b:4d:b7:ea:ae:69:bb: 9b:72:1f:f3:60:12:30:d6:d1:68:67:51:10:eb:e0:14:2b:b5: 26:03:4d:71:60:ce:69:76:5d:fe:53:2a:bb:af:9d:2c:38:d2: 98:65:47:cb:a2:02:b7:46:6c:35:39:38:41:b5:47:7c:f7:66: da:b8:c6:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM4MkUxMTAvBgNVBAUTKDIxMzQzNkJBMjNBOUFGMjUwQkYyNURERUE1MEM3NjIy MTlGOTA2QkMwHhcNMjUwNTMwMTY0MDIyWhcNMjUwNjA2MTY0MDIyWjAYMRYwFAYD VQQDEw02ODM5ZGY3Ni01YWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvafpgp/bOu0DzKCjejiTB3ulN5aSpBDUtHxHdo0gClnOh9GgKNjSPArNdD90 NAQ5ey3RYtJzI4lV7DXgGe5nOsNOmjIRb/yLZ7dgM3TanE5tdN77b0VkAeSqdNop RxO70aiqY4N/D/Z9UkZtRPS9D23kVZqymo7WY/Q1ISt7/+GpTVhKxMs4X/AfZdpL tVhIephPKmpgRVepXpo55P6R7tMOv6izuXl0RFeE94N4Gk8m4wMggEkLMufW5GX/ zi4AV6sfRBju1aAXrIYpsr8m9itzCpkaspMXzItepP9iB3zX9WtQ8k2Y7GsrTuIe WIpSaZXKlZGSYScnt79hVDj0hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEbUiGi DqzW6x9CHcZ6LTWgt/RiMB8GA1UdIwQYMBaAFCE0Nrojqa8lC/Jd3qUMdiIZ+Qa8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgyRS8zMTFFQUM1Njk4 NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5VUw4bDNlcFF4MklobjVC cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lUUTJ1aU9wcnlVTDhsM2VwUXgySWhuNUJydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzgyRS8zMTFFQUM1Njk4NDAxMUU3Qjc2OEVCODFDNEY5QUUwMi9JVFEydWlPcHJ5 VUw4bDNlcFF4MklobjVCcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA60IfQh4TM1uCjchsc1VgDBMY37p/vIaE7yR1UqAy+Ja0ftaFqDj88 mcdROfeItAkLWv/yDbxBayCP8z6LFbxPgmKXuEKfq5X5ORo80W4/DFS93cQLnNG/ b221WwbmKV/CY/ycPH5LjhqDn5iLJv4h9DhUBM4viz289G6ZtUl4xBDIA/VrfHwz I8FIFvRChgZDz9p3+tY+Bfd8jt+gj+XSHYLJz4Yjxa/HOX5mLlV+6jo/T8UeMn7t yax4AxBRegtNt+quabubch/zYBIw1tFoZ1EQ6+AUK7UmA01xYM5pdl3+Uyq7r50s ONKYZUfLogK3Rmw1OThBtUd892bauMag -----END CERTIFICATE-----Generated at Sat May 31 17:36:02 2025 by rpki-client