$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft File: iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft (raw, json) Hash identifier: VmMpxdEJFrpPPvn1JmB0aw0dvsh7X3/wEApbwMEtqjQ= Subject key identifier: DD:B9:EB:2F:FB:E7:14:9B:CD:F7:DD:76:23:26:CE:65:19:F4:37:04 Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF Certificate issuer: /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft Manifest number: D4 Signing time: Mon 09 Jun 2025 04:42:35 +0000 Manifest this update: Mon 09 Jun 2025 04:42:35 +0000 Manifest next update: Mon 16 Jun 2025 04:42:35 +0000 Files and hashes: 1: iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl (hash: fJlTyvOP+0VGE/SQN7UYXBJCCx+zama2N2TI1pND1Yo=) 2: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (hash: IjBd7XUR2i0dTIqKZWCJ7zm+gZSogWBX4IMREVDmhgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 04:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AD90, serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF Validity Not Before: Jun 9 04:42:35 2025 GMT Not After : Jun 16 04:42:35 2025 GMT Subject: CN=6846663b-038d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:74:70:54:92:69:b1:94:7e:99:78:19:c5: 2e:7b:4f:13:92:ca:53:23:ba:00:ce:3d:7b:96:3d: 4b:3c:df:8e:a0:4b:bb:ec:e6:98:a6:d3:ee:73:bd: a1:b3:c2:5a:ee:18:aa:d3:80:80:b2:89:92:00:09: 17:56:8c:4b:ed:b6:f8:c1:47:de:7e:40:e1:4c:15: 35:f5:12:a9:be:c0:ef:58:ad:28:2d:1c:a1:b6:1e: 63:d5:25:db:b5:84:0f:9e:aa:5d:7d:f1:6b:af:ce: c3:11:e2:07:f0:92:7f:e5:67:41:bf:1b:79:9f:54: f8:9e:4c:14:c5:f6:3e:28:3d:00:01:a3:4e:7f:80: 55:41:3d:75:74:4e:12:39:25:14:bc:99:af:4e:83: 63:a1:00:5a:ae:98:1c:d5:64:2e:49:af:ae:69:ed: 25:41:04:ca:6b:0e:8a:03:85:00:db:6e:fb:48:31: 55:45:44:25:71:f7:1d:19:c3:ce:f1:a2:57:57:d6: e4:bd:bb:25:2e:cf:64:ee:d2:2c:37:d0:95:80:53: c9:eb:b0:68:f4:d0:f6:c6:4f:c5:15:4f:53:d1:bd: fa:87:97:e7:e4:ed:c7:d6:2b:6a:a8:85:36:d6:b5: d3:45:d5:11:bf:e2:5f:40:de:fb:d0:74:9f:6e:aa: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B9:EB:2F:FB:E7:14:9B:CD:F7:DD:76:23:26:CE:65:19:F4:37:04 X509v3 Authority Key Identifier: keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f9:cf:a9:b1:c0:26:2f:36:14:3d:85:18:f2:94:67:6c:93: d3:cb:5b:d5:56:a2:d3:84:14:ab:f7:0b:6a:bc:18:c4:5b:dc: 74:63:9f:ba:0a:34:15:22:4b:c2:e4:18:65:19:d5:55:cf:47: 55:6a:06:84:09:c0:62:79:2c:0e:ed:b5:a3:23:d2:20:72:b3: 8f:2c:79:ba:81:b5:e1:fc:df:89:81:9d:5f:76:0c:86:3a:c1: cf:e3:5a:27:01:ca:c4:91:ca:3b:94:d4:e7:86:5a:62:14:59: 92:e5:1d:b8:ee:32:04:a1:06:8c:69:15:61:f7:02:64:ed:e3: 10:2f:73:c1:78:31:d7:92:12:82:6d:76:8d:6a:fa:13:93:e0: 9d:0f:fd:3d:99:e4:f3:0b:4a:b1:f3:dc:1e:7c:8f:25:32:d7: 4b:db:40:5e:22:a6:4d:7e:87:60:43:9c:8a:23:bc:84:e7:80: 05:f9:32:35:fe:8c:81:f6:89:a7:2f:63:57:76:82:83:b0:63: 87:e5:ab:2e:ac:39:ce:61:b5:c1:de:d4:0f:f4:f2:15:2a:d1: 43:bf:ce:8e:7a:e2:97:ce:3c:89:b4:f9:92:63:12:80:49:ec: 58:c7:8f:cb:49:95:f3:d1:d8:94:ae:a5:9a:ad:df:54:66:9a: 9a:07:9c:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FEOTAxMTAvBgNVBAUTKDg4MDkxOEE4NzU2RjA0OTMxQTMyRjRDRUEzNDFDNEYy M0ZBRDUwRUYwHhcNMjUwNjA5MDQ0MjM1WhcNMjUwNjE2MDQ0MjM1WjAYMRYwFAYD VQQDEw02ODQ2NjYzYi0wMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ld0cFSSabGUfpl4GcUue08TkspTI7oAzj17lj1LPN+OoEu77OaYptPuc72h s8Ja7hiq04CAsomSAAkXVoxL7bb4wUfefkDhTBU19RKpvsDvWK0oLRyhth5j1SXb tYQPnqpdffFrr87DEeIH8JJ/5WdBvxt5n1T4nkwUxfY+KD0AAaNOf4BVQT11dE4S OSUUvJmvToNjoQBarpgc1WQuSa+uae0lQQTKaw6KA4UA2277SDFVRUQlcfcdGcPO 8aJXV9bkvbslLs9k7tIsN9CVgFPJ67Bo9ND2xk/FFU9T0b36h5fn5O3H1itqqIU2 1rXTRdURv+JfQN770HSfbqrvZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN256y/7 5xSbzffddiMmzmUZ9DcEMB8GA1UdIwQYMBaAFIgJGKh1bwSTGjL0zqNBxPI/rVDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUQ5MC8wMzAwQzUxNDBG MEExMUVGOTBDOEExMzJDNEY5QUUwMi9pQWtZcUhWdkJKTWFNdlRPbzBIRThqLXRV TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBa1lxSFZ2QkpNYU12VE9vMEhFOGotdFVPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUQ5MC8wMzAwQzUxNDBGMEExMUVGOTBDOEExMzJDNEY5QUUwMi9pQWtZcUhWdkJK TWFNdlRPbzBIRThqLXRVTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf+c+pscAmLzYUPYUY8pRnbJPTy1vVVqLThBSr9wtqvBjEW9x0Y5+6 CjQVIkvC5BhlGdVVz0dVagaECcBieSwO7bWjI9IgcrOPLHm6gbXh/N+JgZ1fdgyG OsHP41onAcrEkco7lNTnhlpiFFmS5R247jIEoQaMaRVh9wJk7eMQL3PBeDHXkhKC bXaNavoTk+CdD/09meTzC0qx89wefI8lMtdL20BeIqZNfodgQ5yKI7yE54AF+TI1 /oyB9omnL2NXdoKDsGOH5asurDnOYbXB3tQP9PIVKtFDv86OeuKXzjyJtPmSYxKA SexYx4/LSZXz0diUrqWard9UZpqaB5x+ -----END CERTIFICATE-----Generated at Wed Jun 11 01:41:20 2025 by rpki-client