$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json) Hash identifier: sP/MuiC6B49GsLKN7as54F6HpfI97uAAgOZHV51TvHg= Subject key identifier: 72:91:1D:8B:7D:63:11:F8:78:06:5C:A5:A9:04:5D:4B:52:25:A0:CB Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft Manifest number: 0493 Signing time: Tue 03 Jun 2025 00:13:37 +0000 Manifest this update: Tue 03 Jun 2025 00:13:37 +0000 Manifest next update: Tue 10 Jun 2025 00:13:37 +0000 Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: fxTfRfmoqYsBtcOq9O/96VKwRTL2ipwNMcMnmArzqYI=) 2: F9343F063B0911EC82AE0828C4F9AE02.roa (hash: pIsS/aAz3NlTfiRznLCHJWwJfZnRVJbtBleuPSnoEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Validity Not Before: Jun 3 00:13:37 2025 GMT Not After : Jun 10 00:13:37 2025 GMT Subject: CN=683e3e31-4004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:25:55:09:55:2e:32:8b:40:25:be:dd:9a:d3: b4:14:2d:5d:e3:3f:9e:b0:cb:5f:1e:0e:ff:40:6a: 77:5d:e3:9c:ce:43:2f:19:3c:da:14:a1:8e:10:6d: 9f:3d:ad:4a:ce:f3:44:80:96:b0:55:60:01:d1:e8: b9:e9:46:ca:96:45:82:e6:9e:02:08:44:32:28:d8: d3:fc:05:87:2c:88:16:6e:4e:36:37:c3:45:8d:fe: ef:81:78:4e:aa:2c:e3:d2:57:9c:a1:8a:ef:9a:ce: 03:ee:a9:c2:e4:0f:eb:62:c9:3c:1c:89:de:95:cd: 52:18:2a:83:1e:5f:2c:00:b2:77:bd:b8:4a:cf:9d: b2:bc:65:c3:6f:c0:15:d9:01:db:40:1a:37:c4:13: 1e:c7:14:d1:b7:cd:f8:ac:fb:da:51:b2:f5:6b:f8: 36:18:52:30:85:c4:ae:d6:f2:92:2c:8d:bf:f3:c5: a7:38:db:25:23:0b:04:b1:21:d3:7c:f6:24:0b:50: bb:57:a9:f1:e5:93:29:e6:3c:0e:5f:62:38:b5:e8: c4:cd:1f:25:5e:a4:31:dd:8b:ed:44:1f:d4:ed:e1: 92:94:5f:c7:e9:c7:68:18:1c:77:88:c3:21:4f:dd: f5:4c:45:7b:b9:78:4c:97:2f:44:91:d7:72:73:f1: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:91:1D:8B:7D:63:11:F8:78:06:5C:A5:A9:04:5D:4B:52:25:A0:CB X509v3 Authority Key Identifier: keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c2:4e:ba:9e:8c:74:45:40:b6:b8:4e:e9:42:7b:b0:9e:72: 7c:c2:a8:c1:23:39:90:7b:bc:da:b4:9a:13:b2:e1:de:28:1e: e5:16:49:5e:f7:c6:3a:d8:59:6a:9f:15:76:a8:9f:48:03:1c: 7e:41:e7:6e:1e:c5:7b:a2:08:66:99:5b:46:66:da:75:3c:3a: d1:10:fc:98:9a:91:1b:47:61:00:23:50:64:cf:d8:45:5f:b7: 3b:d6:3d:6e:bc:4e:23:f8:21:b3:21:40:b8:46:78:a5:2e:6a: 55:36:2c:25:4f:dd:f0:33:4b:06:20:ef:87:c4:c1:a4:7a:1f: a9:03:34:4e:b7:f2:bb:c6:53:b9:c6:c6:d6:15:bb:44:35:62: a6:eb:58:7c:24:e0:d2:9a:cd:fb:45:09:20:6d:e9:1e:81:7f: d4:75:d9:12:bd:8d:52:ac:f3:b9:d7:e2:a2:81:63:79:d0:cb: 24:81:fc:fc:8f:22:50:a0:d8:92:cc:b1:20:88:c7:5f:df:b9: 39:9f:18:99:0f:ae:c8:44:a6:ef:bf:ec:53:7b:6b:5b:0b:80: b7:ba:c7:ea:6c:aa:50:7c:c2:c9:3f:6b:5c:76:23:9c:37:ee: 40:46:c6:c6:91:f3:ec:f7:13:53:3f:25:f4:42:4e:32:f1:74: f2:30:ce:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5N0ExMTAvBgNVBAUTKDg5NDM2NjNEQ0Y4MzA5RkEyNzRBNDY1MkZBODNBQkQy NkQ4NDI2NEYwHhcNMjUwNjAzMDAxMzM3WhcNMjUwNjEwMDAxMzM3WjAYMRYwFAYD VQQDEw02ODNlM2UzMS00MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/CVVCVUuMotAJb7dmtO0FC1d4z+esMtfHg7/QGp3XeOczkMvGTzaFKGOEG2f Pa1KzvNEgJawVWAB0ei56UbKlkWC5p4CCEQyKNjT/AWHLIgWbk42N8NFjf7vgXhO qizj0lecoYrvms4D7qnC5A/rYsk8HInelc1SGCqDHl8sALJ3vbhKz52yvGXDb8AV 2QHbQBo3xBMexxTRt834rPvaUbL1a/g2GFIwhcSu1vKSLI2/88WnONslIwsEsSHT fPYkC1C7V6nx5ZMp5jwOX2I4tejEzR8lXqQx3YvtRB/U7eGSlF/H6cdoGBx3iMMh T931TEV7uXhMly9Ekddyc/FLUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKRHYt9 YxH4eAZcpakEXUtSJaDLMB8GA1UdIwQYMBaAFIlDZj3Pgwn6J0pGUvqDq9JthCZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDk3QS82MTY3QTZEMjNC MDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENmb25Ta1pTLW9PcjBtMkVK azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVTm1QYy1EQ2ZvblNrWlMtb09yMG0yRUprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDk3QS82MTY3QTZEMjNCMDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENm b25Ta1pTLW9PcjBtMkVKazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBswk66nox0RUC2uE7pQnuwnnJ8wqjBIzmQe7zatJoTsuHeKB7lFkle 98Y62FlqnxV2qJ9IAxx+QeduHsV7oghmmVtGZtp1PDrREPyYmpEbR2EAI1Bkz9hF X7c71j1uvE4j+CGzIUC4RnilLmpVNiwlT93wM0sGIO+HxMGkeh+pAzROt/K7xlO5 xsbWFbtENWKm61h8JODSms37RQkgbekegX/UddkSvY1SrPO51+KigWN50Mskgfz8 jyJQoNiSzLEgiMdf37k5nxiZD67IRKbvv+xTe2tbC4C3usfqbKpQfMLJP2tcdiOc N+5ARsbGkfPs9xNTPyX0Qk4y8XTyMM6P -----END CERTIFICATE-----Generated at Tue Jun 3 23:56:11 2025 by rpki-client