$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft File: IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json) Hash identifier: zOODo+bPN5BKtk4NGTXx/C8I8G1OgPLbus5nlgVdEM8= Subject key identifier: B5:92:CE:3A:49:39:B2:78:29:06:05:47:3F:95:EA:6B:5A:81:70:88 Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF Certificate serial: 2FE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft Manifest number: 2FC5 Signing time: Sat 31 May 2025 15:27:06 +0000 Manifest this update: Sat 31 May 2025 15:27:05 +0000 Manifest next update: Sat 07 Jun 2025 15:27:05 +0000 Files and hashes: 1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: RJKvmX+jHDTE8CStc+qAx+lTrr5IYLq+2O/2zphlTkM=) 2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: E2NZXpYraOPVv0cpnUWbQpkzMNGT1LYi52LyYrBbmwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12265 (0x2fe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF Validity Not Before: May 31 15:27:05 2025 GMT Not After : Jun 7 15:27:05 2025 GMT Subject: CN=683b1fc9-424f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:d1:b5:3a:2b:25:a9:db:c3:83:0e:50:44: 63:b0:ba:6b:b7:7e:8a:68:85:1b:11:cc:c4:ac:dd: e7:48:49:ca:d3:81:1b:fa:3d:9d:4b:e6:0b:6a:97: c7:c7:c4:8f:ab:4c:e5:da:8d:d7:c2:45:d4:e2:55: c4:70:76:23:54:d1:dd:40:98:f3:84:eb:6c:24:e7: 46:f0:8d:03:b4:f7:26:b9:44:00:a3:43:a4:0d:b5: 92:51:ec:e1:e5:45:17:b8:61:aa:e4:81:13:18:71: 32:3e:ee:e2:6c:c5:1a:26:5a:37:f2:ce:fc:b4:10: b6:17:34:81:17:a6:f2:b1:e2:a2:47:30:eb:ae:42: d8:38:e3:25:fd:15:c5:0a:83:45:29:8b:16:f6:0b: ef:a2:79:95:c0:fb:74:15:d7:92:93:e7:60:bb:85: a6:84:8e:b4:0f:15:f4:5a:e7:10:7e:f1:2e:d9:ab: 8b:49:bb:89:2a:7f:bb:c3:71:dc:86:11:d0:f9:15: 60:be:55:a1:4a:f0:6c:43:e3:a8:1b:92:7c:ae:ce: c1:e5:ff:63:7e:36:98:82:56:e9:db:fc:32:e4:f4: f1:fb:40:f4:65:9b:20:fa:e1:71:b8:d6:42:ee:31: 3d:43:a5:14:85:44:c8:90:3d:d0:e1:57:21:fb:f3: 72:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:92:CE:3A:49:39:B2:78:29:06:05:47:3F:95:EA:6B:5A:81:70:88 X509v3 Authority Key Identifier: keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:79:a9:d5:a5:94:f8:47:8f:24:aa:5c:40:d9:37:22:12:dc: d1:d7:2f:22:e6:1f:cc:92:f2:65:ea:73:d4:b3:d8:e9:76:38: 07:e8:76:a1:a7:1f:9d:bc:91:d0:a1:14:a1:b8:73:c9:ba:d4: a3:34:3e:da:53:05:b3:52:fb:38:f9:cf:7f:06:d8:30:56:09: 2c:9b:fe:97:6b:2b:87:1a:55:70:95:9d:73:90:ab:74:88:16: 01:3c:24:c5:88:ab:d3:31:ba:21:6f:43:7c:98:05:78:99:d8: a3:69:f3:3b:29:2a:35:a4:a7:8a:a7:f6:b5:4a:a9:ff:f5:4c: 9a:ab:0d:52:92:0c:05:dd:dd:d1:94:5f:82:c5:24:a2:c0:9d: af:ba:be:0d:3a:2e:49:72:61:4e:d0:49:75:35:8c:c5:7f:0d: e3:f2:a3:eb:6f:01:9e:9f:48:b1:aa:3f:3f:ec:74:2f:d9:04: 4a:d1:1a:0d:44:a7:30:a2:a8:3a:3e:60:b0:b3:44:8c:d3:8d: 98:78:fb:9e:53:e1:58:a2:0f:cd:92:92:78:08:4b:7c:fa:50: e6:dd:ab:96:ae:4f:0a:23:0a:54:28:5c:9c:eb:ec:08:a3:41: 6b:e5:48:84:5f:f0:d5:27:ac:d5:66:bc:03:7e:87:bc:cb:27: d0:4c:2a:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3N0MxMTAvBgNVBAUTKDIyOTNCRDRDNUU0RjlBMjk2NTM1OENCMDE4REYzRTRF RUU0REYxQ0YwHhcNMjUwNTMxMTUyNzA1WhcNMjUwNjA3MTUyNzA1WjAYMRYwFAYD VQQDEw02ODNiMWZjOS00MjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzrRtTorJanbw4MOUERjsLprt36KaIUbEczErN3nSEnK04Eb+j2dS+YLapfH x8SPq0zl2o3XwkXU4lXEcHYjVNHdQJjzhOtsJOdG8I0DtPcmuUQAo0OkDbWSUezh 5UUXuGGq5IETGHEyPu7ibMUaJlo38s78tBC2FzSBF6byseKiRzDrrkLYOOMl/RXF CoNFKYsW9gvvonmVwPt0FdeSk+dgu4WmhI60DxX0WucQfvEu2auLSbuJKn+7w3Hc hhHQ+RVgvlWhSvBsQ+OoG5J8rs7B5f9jfjaYglbp2/wy5PTx+0D0ZZsg+uFxuNZC 7jE9Q6UUhUTIkD3Q4Vch+/NyOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWSzjpJ ObJ4KQYFRz+V6mtagXCIMB8GA1UdIwQYMBaAFCKTvUxeT5opZTWMsBjfPk7uTfHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc3Qy85MjRDRENDMDE0 MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1pbGxOWXl3R044LVR1NU44 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwTzlURjVQbWlsbE5ZeXdHTjgtVHU1TjhjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTc3Qy85MjRDRENDMDE0MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1p bGxOWXl3R044LVR1NU44YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBneanVpZT4R48kqlxA2TciEtzR1y8i5h/MkvJl6nPUs9jpdjgH6Hah px+dvJHQoRShuHPJutSjND7aUwWzUvs4+c9/BtgwVgksm/6XayuHGlVwlZ1zkKt0 iBYBPCTFiKvTMbohb0N8mAV4mdijafM7KSo1pKeKp/a1Sqn/9Uyaqw1SkgwF3d3R lF+CxSSiwJ2vur4NOi5JcmFO0El1NYzFfw3j8qPrbwGen0ixqj8/7HQv2QRK0RoN RKcwoqg6PmCws0SM042YePueU+FYog/NkpJ4CEt8+lDm3auWrk8KIwpUKFyc6+wI o0Fr5UiEX/DVJ6zVZrwDfoe8yyfQTCpn -----END CERTIFICATE-----Generated at Sat May 31 17:37:43 2025 by rpki-client