$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: dYZqSTGCjdc4F8UhZPPeXua+Ly8SrUf0zIT8kQcXxW8= Subject key identifier: AA:FE:F2:E1:3F:CD:71:BE:34:4E:31:A8:0E:10:29:01:A7:0D:02:FE Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0C48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0C3F Signing time: Fri 30 May 2025 18:40:10 +0000 Manifest this update: Fri 30 May 2025 18:40:10 +0000 Manifest next update: Fri 06 Jun 2025 18:40:10 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: XpV+HSS7uJPI1u9JojyO2qCGVwmiJAnyeEodvBAfOqg=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: ZF76+TdQMAvJkkO6rvtsiHzBwUDEVkLOtw/tW67c6tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: May 30 18:40:10 2025 GMT Not After : Jun 6 18:40:10 2025 GMT Subject: CN=6839fb8a-36f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:13:c4:9e:e0:76:14:1e:21:06:23:d3:41: ca:8e:b6:2b:82:d4:30:01:94:95:2b:ef:5f:67:94: b5:b2:1e:9a:c0:b9:eb:d8:48:c4:17:9e:95:c6:0e: c2:48:02:65:ec:3f:c8:b8:13:56:84:d2:1c:14:f4: a5:19:10:8d:8b:7e:e5:c0:5c:8c:a1:7a:53:46:59: f2:72:54:47:77:75:9d:c0:56:7a:fd:62:f1:ef:ad: 5f:d5:fe:2b:c2:ad:3e:d3:bc:6d:33:2b:b9:c9:1a: 5b:73:33:fe:c8:c6:b0:60:66:63:9d:b5:45:69:c7: e2:b2:41:7a:53:ef:f3:18:8e:30:93:82:fa:bd:c3: a9:88:21:f2:14:61:65:1a:16:73:23:62:4c:77:fe: 43:d7:b0:56:eb:dc:2c:a2:70:4a:7b:8b:98:da:2d: ea:11:e5:9a:59:4e:5b:57:60:36:6f:46:00:2b:15: c6:7d:52:49:39:ae:d0:e4:4a:6d:06:ee:98:b9:a4: 1a:a1:a6:89:1d:81:55:1b:6a:0c:31:55:c9:51:14: 28:64:b2:7a:20:2f:bc:b5:03:ae:c6:e6:15:02:b2: 6f:e0:1c:0d:cf:e3:74:7f:d8:de:bb:06:cc:75:02: 97:80:b4:f4:59:9b:44:36:9b:9a:b6:3c:58:33:8e: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FE:F2:E1:3F:CD:71:BE:34:4E:31:A8:0E:10:29:01:A7:0D:02:FE X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:52:f4:60:8a:40:88:72:b5:6c:4d:32:18:d7:c7:0f:06:fc: 69:de:62:32:71:d1:b0:9b:51:64:fb:18:e3:60:38:cb:c6:06: 22:24:c4:1f:5c:f2:6c:e5:06:c6:1f:cb:d2:5a:5c:df:5c:09: 08:68:c8:87:d3:28:5a:ac:39:a2:5f:06:a5:b8:af:d7:31:04: 41:b3:19:d1:85:fa:24:ec:31:9d:59:f9:67:9a:53:15:b4:8e: f6:02:62:00:91:b2:e3:2c:76:f8:ef:87:84:ff:b1:25:c1:5f: 1b:11:df:e3:e7:32:aa:18:1c:12:be:a0:01:3e:99:0b:94:82: 3f:15:f1:71:16:3c:e4:41:d9:60:61:b4:4b:61:1f:b7:e3:0b: 0f:11:df:7a:59:1b:1d:00:be:ca:66:70:f5:9f:77:b5:c3:e1: a4:e1:c5:67:b6:ac:da:62:b5:b5:b4:f2:f8:f9:9c:55:a1:1b: 66:77:4d:64:40:63:f8:69:50:e4:20:cf:b8:c2:76:45:50:98: 2a:2e:f8:08:a2:bb:45:21:65:41:d6:d2:eb:ff:fe:46:a6:62: 75:5c:25:5f:6e:22:63:1c:c9:a9:f8:8f:59:f3:5a:ee:85:47: 3b:3b:88:03:b8:bf:82:eb:ec:07:53:5d:74:77:4a:fd:96:83: 26:62:91:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjUwNTMwMTg0MDEwWhcNMjUwNjA2MTg0MDEwWjAYMRYwFAYD VQQDEw02ODM5ZmI4YS0zNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtgTxJ7gdhQeIQYj00HKjrYrgtQwAZSVK+9fZ5S1sh6awLnr2EjEF56Vxg7C SAJl7D/IuBNWhNIcFPSlGRCNi37lwFyMoXpTRlnyclRHd3WdwFZ6/WLx761f1f4r wq0+07xtMyu5yRpbczP+yMawYGZjnbVFacfiskF6U+/zGI4wk4L6vcOpiCHyFGFl GhZzI2JMd/5D17BW69wsonBKe4uY2i3qEeWaWU5bV2A2b0YAKxXGfVJJOa7Q5Ept Bu6YuaQaoaaJHYFVG2oMMVXJURQoZLJ6IC+8tQOuxuYVArJv4BwNz+N0f9jeuwbM dQKXgLT0WZtENpuatjxYM47A3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKr+8uE/ zXG+NE4xqA4QKQGnDQL+MB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5UvRgikCIcrVsTTIY18cPBvxp3mIycdGwm1Fk+xjjYDjLxgYiJMQf XPJs5QbGH8vSWlzfXAkIaMiH0yharDmiXwaluK/XMQRBsxnRhfok7DGdWflnmlMV tI72AmIAkbLjLHb474eE/7ElwV8bEd/j5zKqGBwSvqABPpkLlII/FfFxFjzkQdlg YbRLYR+34wsPEd96WRsdAL7KZnD1n3e1w+Gk4cVntqzaYrW1tPL4+ZxVoRtmd01k QGP4aVDkIM+4wnZFUJgqLvgIortFIWVB1tLr//5GpmJ1XCVfbiJjHMmp+I9Z81ru hUc7O4gDuL+C6+wHU110d0r9loMmYpFx -----END CERTIFICATE-----Generated at Sat May 31 17:09:00 2025 by rpki-client