$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: MO3Telg8vt+4PLX0KBy2dfvoC+pg8hNb+k3ZLe0IjTg= Subject key identifier: 55:46:8B:AB:23:BE:A8:4F:3E:57:49:7A:DB:21:05:78:21:C6:A3:BB Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: 5F Signing time: Sun 01 Jun 2025 06:51:30 +0000 Manifest this update: Sun 01 Jun 2025 06:51:29 +0000 Manifest next update: Sun 08 Jun 2025 06:51:29 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: MFgkHVtheWDFfiP3ld1jFzpxV+xZk03ubAvLSFZwz+o=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Jun 1 06:51:29 2025 GMT Not After : Jun 8 06:51:29 2025 GMT Subject: CN=683bf871-1e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a1:8c:4d:0c:6f:4c:11:28:e0:0f:4a:99:93: 4a:70:85:2d:0e:82:3f:95:6b:fd:38:92:ca:14:3c: 3f:63:81:bd:3b:83:bf:9d:f3:70:6d:e4:aa:0f:09: b0:93:6d:c3:db:a3:ab:38:b4:10:c5:0c:52:9e:5f: ad:32:6f:b8:72:cd:2b:57:40:69:75:21:6b:94:c2: c4:ed:07:76:b4:e3:04:b1:30:bf:66:7b:2a:9f:9f: 17:61:4c:0a:7f:c8:96:99:28:1a:d7:41:61:0b:c4: 73:d2:07:7c:b5:13:15:45:89:e4:99:64:e2:2a:b1: 52:9c:ca:83:a2:2e:de:36:e3:f4:1e:9c:23:71:53: d8:5e:1f:3d:1e:e1:88:0f:16:df:95:c6:b3:4f:aa: 85:9e:c3:b7:c5:6d:6b:09:8c:a5:61:03:56:79:a2: 26:cb:6a:0e:46:52:5f:3e:45:eb:bf:ec:7a:8a:97: f5:d1:7b:f0:34:75:b4:a9:6d:82:cc:d4:46:bb:cc: d8:ba:87:88:3e:c5:83:98:66:25:c4:85:5e:1b:26: 57:32:7c:34:e8:f1:f6:4d:cd:de:3f:57:96:f5:8c: 2d:c8:20:41:ad:f7:10:c6:d0:29:13:8e:d1:0f:04: 9a:2e:5b:b1:28:68:e5:99:cf:4f:d9:fa:a2:aa:34: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:46:8B:AB:23:BE:A8:4F:3E:57:49:7A:DB:21:05:78:21:C6:A3:BB X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:4f:7f:b3:01:3d:ec:a9:5c:41:56:15:69:8c:c8:fa:03:cb: 26:26:49:b7:24:92:f9:f5:d8:f8:99:27:9d:f1:02:07:86:1b: ca:ad:a6:6e:6a:73:62:81:3e:b0:19:e2:be:38:b1:ce:1c:fd: b7:84:a9:41:97:57:42:95:ef:67:62:60:57:d4:b8:67:ab:c2: 12:f4:1a:53:36:61:12:c0:4e:c6:77:f6:a1:d7:19:e7:60:eb: d0:9d:c2:7f:89:73:8f:ae:c5:b1:6d:d2:1d:52:20:96:cf:ca: 15:bf:5c:04:7e:ca:e7:98:14:e2:b3:97:1f:a1:e9:e9:97:7f: 65:67:96:4b:80:67:51:be:69:0f:36:a1:26:bc:28:c5:4c:ba: ac:74:55:1a:71:68:da:72:5a:b1:91:bf:0c:0f:b0:b7:79:20: 18:8a:61:fe:5e:68:5b:1d:88:4a:ac:c5:25:2a:1b:ba:bb:a1: cc:5f:9c:98:f0:6d:88:02:16:62:2d:a5:69:84:4a:d7:f2:91: c6:d9:55:4e:e2:0a:15:8a:b4:08:d6:ba:d8:7a:5f:e9:51:a7: 22:14:92:b7:64:5d:f7:d4:ed:49:5f:c0:df:3c:6b:a1:2d:4e: 9d:ee:f8:f4:46:ca:19:f3:a3:dd:46:21:18:b5:a7:87:6e:7f: 78:01:e0:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNDNzExMC8GA1UEBRMoODkzQUM1NzkwMTQxNTYxODZBRUFGNTAzNEJBMEI0OTI2 RjkyRTM3NDAeFw0yNTA2MDEwNjUxMjlaFw0yNTA2MDgwNjUxMjlaMBgxFjAUBgNV BAMTDTY4M2JmODcxLTFlNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqoYxNDG9MESjgD0qZk0pwhS0Ogj+Va/04ksoUPD9jgb07g7+d83Bt5KoPCbCT bcPbo6s4tBDFDFKeX60yb7hyzStXQGl1IWuUwsTtB3a04wSxML9meyqfnxdhTAp/ yJaZKBrXQWELxHPSB3y1ExVFieSZZOIqsVKcyoOiLt424/QenCNxU9heHz0e4YgP Ft+VxrNPqoWew7fFbWsJjKVhA1Z5oibLag5GUl8+Reu/7HqKl/XRe/A0dbSpbYLM 1Ea7zNi6h4g+xYOYZiXEhV4bJlcyfDTo8fZNzd4/V5b1jC3IIEGt9xDG0CkTjtEP BJouW7EoaOWZz0/Z+qKqNGU1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVUaLqyO+ qE8+V0l62yEFeCHGo7swHwYDVR0jBBgwFoAUiTrFeQFBVhhq6vUDS6C0km+S43Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0M3Lzg2NTg4N0I2QjI2 NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVRyRmVRRkJWaGhxNnZVRFM2QzBrbS1TNDNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0M3Lzg2NTg4N0I2QjI2NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmho cTZ2VURTNkMwa20tUzQzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABFPf7MBPeypXEFWFWmMyPoDyyYmSbckkvn12PiZJ53xAgeGG8qtpm5q c2KBPrAZ4r44sc4c/beEqUGXV0KV72diYFfUuGerwhL0GlM2YRLATsZ39qHXGedg 69Cdwn+Jc4+uxbFt0h1SIJbPyhW/XAR+yueYFOKzlx+h6emXf2VnlkuAZ1G+aQ82 oSa8KMVMuqx0VRpxaNpyWrGRvwwPsLd5IBiKYf5eaFsdiEqsxSUqG7q7ocxfnJjw bYgCFmItpWmEStfykcbZVU7iChWKtAjWuth6X+lRpyIUkrdkXffU7UlfwN88a6Et Tp3u+PRGyhnzo91GIRi1p4duf3gB4GE= -----END CERTIFICATE-----Generated at Mon Jun 2 21:45:48 2025 by rpki-client