$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: 9S4NaSv5N0aI6NUAliaXzPJ6o/39ZemUzGWmg315jDM= Subject key identifier: 7B:80:03:3D:95:62:5A:81:C9:5C:8B:2E:BD:6A:CA:53:99:45:6E:16 Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 34A1 Signing time: Sat 31 May 2025 14:19:47 +0000 Manifest this update: Sat 31 May 2025 14:19:46 +0000 Manifest next update: Sat 07 Jun 2025 14:19:46 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: HODbr4t6HK1ghIXkqe/V5DjHgHEFdW6NYZA6iJlfNQM=) 2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: T96snG6T3ksqfKF7mowlYs05xmmtsddFbccqyfqSTxQ=) 3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: aiAqLVoZ6cEM6hY/DjBukcfxFi5I+NxU4FFn5k2CPUQ=) 4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: XONO8AScATR8p+dgN33QWapfnhUPZs7VGzeHh0uX4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: May 31 14:19:46 2025 GMT Not After : Jun 7 14:19:46 2025 GMT Subject: CN=683b1003-0f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:1c:29:89:16:65:fd:01:9f:cc:da:f1:ff: 38:cd:3f:b8:a6:c1:99:79:d1:90:4d:20:9e:40:e4: e0:03:2e:27:32:2f:58:c9:93:c0:db:30:9f:4f:f2: f4:94:7f:e5:e5:46:2b:f1:0d:a5:fd:c8:e1:60:08: 8c:5f:0c:2e:a0:89:d6:9d:23:7a:84:c9:6f:d2:e9: 50:ac:da:a9:6a:65:d3:41:c2:8c:95:06:c6:3d:9a: 05:a2:57:e3:3d:08:49:bd:e3:e0:ec:99:50:47:6b: 26:37:5b:ae:95:e3:d0:a0:8a:7e:ef:89:86:59:7c: f9:fb:0a:da:5d:44:0f:50:e4:72:c1:aa:70:44:0f: 48:2a:28:29:23:8b:bc:8d:97:fb:3a:e1:36:a2:a6: 43:e5:a8:5f:5d:a3:62:77:3f:cd:b9:b0:72:ac:b0: 9b:f0:d6:4f:d3:bb:c7:0c:3f:3a:81:61:81:41:23: b9:67:aa:54:f9:8f:c1:c2:48:3d:91:f2:65:f7:58: 36:20:84:9b:aa:73:97:ec:7f:19:0f:a6:91:a5:e7: 4d:69:23:18:e2:9b:e5:b1:67:fd:9d:cc:7d:03:ff: 91:88:b2:23:6a:a6:51:eb:9a:09:54:ca:86:8f:b2: 88:2c:91:ef:b6:62:88:14:91:42:8d:38:9e:07:1b: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:80:03:3D:95:62:5A:81:C9:5C:8B:2E:BD:6A:CA:53:99:45:6E:16 X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:71:d8:6f:f5:51:aa:2f:4d:23:7e:6a:0c:11:99:1c:e1:c2: 79:43:d9:17:63:45:71:bd:9e:a7:2b:37:01:e5:93:cf:31:88: 01:10:7d:2a:0e:a8:77:35:d2:f4:93:a6:f8:f5:3b:84:f4:f9: 69:cd:09:c4:af:a9:e3:e0:e9:d6:ac:48:46:0d:e4:6f:04:02: 85:49:e4:b8:97:19:e1:a9:3f:af:0f:40:bc:db:2a:75:b5:e5: 1c:f2:f3:84:35:ef:27:09:10:74:9b:ff:d9:95:a4:91:a1:76: 79:7d:de:0d:7e:70:c5:8d:9c:19:9a:5a:f3:92:b3:0f:ff:e7: f0:5d:1b:77:7c:3d:c6:c8:4f:54:6b:8d:73:c3:fa:0c:13:bf: 7b:23:dc:04:56:74:0e:d6:a5:0d:bd:5a:54:42:25:c8:4c:4a: de:62:03:b2:7a:ca:09:6c:83:ae:0f:b6:31:f9:b2:02:a8:53: 5d:d7:23:3d:36:52:d3:09:53:5e:98:9a:45:ca:52:cd:0a:5f: 89:67:f7:be:6b:3a:14:77:c9:de:a9:85:02:58:cd:ca:29:f0: 30:94:39:5d:fc:01:61:46:0c:39:00:68:49:f2:18:8e:80:37: c3:bf:f1:00:c1:fb:08:16:b4:57:3e:9d:ab:92:f6:91:59:b6: 98:af:5a:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjUwNTMxMTQxOTQ2WhcNMjUwNjA3MTQxOTQ2WjAYMRYwFAYD VQQDEw02ODNiMTAwMy0wZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy28cKYkWZf0Bn8za8f84zT+4psGZedGQTSCeQOTgAy4nMi9YyZPA2zCfT/L0 lH/l5UYr8Q2l/cjhYAiMXwwuoInWnSN6hMlv0ulQrNqpamXTQcKMlQbGPZoFolfj PQhJvePg7JlQR2smN1uulePQoIp+74mGWXz5+wraXUQPUORywapwRA9IKigpI4u8 jZf7OuE2oqZD5ahfXaNidz/NubByrLCb8NZP07vHDD86gWGBQSO5Z6pU+Y/Bwkg9 kfJl91g2IISbqnOX7H8ZD6aRpedNaSMY4pvlsWf9ncx9A/+RiLIjaqZR65oJVMqG j7KILJHvtmKIFJFCjTieBxvLwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuAAz2V YlqByVyLLr1qylOZRW4WMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAcdhv9VGqL00jfmoMEZkc4cJ5Q9kXY0VxvZ6nKzcB5ZPPMYgBEH0q Dqh3NdL0k6b49TuE9PlpzQnEr6nj4OnWrEhGDeRvBAKFSeS4lxnhqT+vD0C82yp1 teUc8vOENe8nCRB0m//ZlaSRoXZ5fd4NfnDFjZwZmlrzkrMP/+fwXRt3fD3GyE9U a41zw/oME797I9wEVnQO1qUNvVpUQiXITEreYgOyesoJbIOuD7Yx+bICqFNd1yM9 NlLTCVNemJpFylLNCl+JZ/e+azoUd8neqYUCWM3KKfAwlDld/AFhRgw5AGhJ8hiO gDfDv/EAwfsIFrRXPp2rkvaRWbaYr1p5 -----END CERTIFICATE-----Generated at Sat May 31 17:46:32 2025 by rpki-client