$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: 40B/n6E+AHOf+aziCx8+pQLHxDVPCgDbtqdPMfN98Pk= Subject key identifier: D2:D7:DD:4A:60:47:EB:2A:02:17:44:27:8C:63:CA:5D:C3:A6:6E:6B Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 4E Signing time: Sun 01 Jun 2025 07:00:40 +0000 Manifest this update: Sun 01 Jun 2025 07:00:39 +0000 Manifest next update: Sun 08 Jun 2025 07:00:39 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: SpzCaoJyFIVfMjOWgIquBXQ4puWkdbViKKbIhhlkiPg=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Jun 1 07:00:39 2025 GMT Not After : Jun 8 07:00:39 2025 GMT Subject: CN=683bfa98-393c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3d:6c:df:0b:0d:61:52:2c:f4:bf:90:6f:47: 02:f8:36:ea:02:21:c7:64:dd:a5:f1:c1:36:03:ba: 75:c4:21:9b:2c:1b:63:11:9e:a7:3f:b6:c4:6d:40: ff:8a:f7:c0:02:f4:36:d7:06:cd:9b:95:6a:eb:c8: 4a:d4:f2:da:7e:67:58:cc:9d:01:d4:48:68:40:56: 32:32:3a:11:6a:43:1a:a8:c7:77:a3:ac:50:f2:47: 8d:a6:c8:bf:ab:b5:d5:e0:ab:64:9b:71:06:21:08: 6d:93:30:bd:eb:a8:8f:9f:4f:a7:10:c0:b8:e2:94: 7a:00:4a:c7:11:62:44:98:cd:32:a7:7b:00:bb:34: 56:52:6d:eb:68:31:05:f9:20:6f:f3:36:3c:6f:74: 29:72:11:39:c8:f6:e2:f0:fb:2e:8d:24:5c:85:46: d8:6b:4e:cd:3c:61:3b:80:55:57:d1:32:59:a8:93: 56:ba:25:51:7d:58:22:c5:24:b4:87:35:d2:14:bc: 68:62:74:83:b7:cf:81:19:58:ac:09:8a:80:13:95: d2:c0:03:92:d2:96:39:0d:50:04:ea:93:cc:80:43: 7f:de:2d:7b:0c:f2:d7:88:05:94:fe:ee:21:e6:26: dc:44:04:10:12:7a:84:40:de:6a:d8:8c:1a:fc:a6: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:DD:4A:60:47:EB:2A:02:17:44:27:8C:63:CA:5D:C3:A6:6E:6B X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:63:90:5f:77:a9:2e:3e:39:56:39:d1:18:cb:50:13:e2:5f: 30:b9:ba:20:b3:cb:19:b4:a2:dc:20:91:68:db:e2:a9:52:49: 0f:cc:64:0a:cd:79:17:af:b2:5b:ad:1c:a1:c9:1a:fb:5d:84: c0:f3:9c:ff:d1:10:51:48:eb:57:ff:a8:37:16:60:9a:af:71: f3:3f:66:ad:6c:0d:01:51:af:92:66:58:70:99:8c:90:75:11: dc:9b:62:73:b0:dd:4d:33:4b:3b:e5:00:6d:8f:48:19:61:05: eb:cd:24:55:da:83:c2:ef:54:2e:68:96:d7:17:02:4e:9d:57: 2f:3b:fd:95:79:44:10:0d:0b:b7:ae:1b:dd:88:57:4b:4d:55: 04:45:3e:b1:ed:f5:ea:f3:1d:8b:c6:66:fa:92:b5:cb:e6:84: 82:2c:89:7a:f8:f6:f0:93:a2:68:d5:41:ad:d7:7e:62:48:78: ed:ae:c2:03:93:7a:4e:95:75:7b:2e:05:50:75:07:7a:e9:51: 36:ab:cb:f9:1d:97:6a:a5:45:dd:bb:f3:af:c0:06:2d:b5:8c: e5:78:77:3b:29:a9:48:e1:1b:8c:56:ad:b3:71:a4:c7:20:ad: 4c:d2:dc:bf:a5:35:23:a6:90:c2:36:a6:dd:39:17:47:f8:85: 31:55:2e:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoOEIzNDcxQjkwQjdBNUJDNzZDRTNGQzA5QUNBQzg5MjhF QjREODE3OTAeFw0yNTA2MDEwNzAwMzlaFw0yNTA2MDgwNzAwMzlaMBgxFjAUBgNV BAMTDTY4M2JmYTk4LTM5M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoPWzfCw1hUiz0v5BvRwL4NuoCIcdk3aXxwTYDunXEIZssG2MRnqc/tsRtQP+K 98AC9DbXBs2blWrryErU8tp+Z1jMnQHUSGhAVjIyOhFqQxqox3ejrFDyR42myL+r tdXgq2SbcQYhCG2TML3rqI+fT6cQwLjilHoASscRYkSYzTKnewC7NFZSbetoMQX5 IG/zNjxvdClyETnI9uLw+y6NJFyFRthrTs08YTuAVVfRMlmok1a6JVF9WCLFJLSH NdIUvGhidIO3z4EZWKwJioATldLAA5LSljkNUATqk8yAQ3/eLXsM8teIBZT+7iHm JtxEBBASeoRA3mrYjBr8pv1dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0tfdSmBH 6yoCF0QnjGPKXcOmbmswHwYDVR0jBBgwFoAUizRxuQt6W8ds4/wJrKyJKOtNgXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0Q1M0UxQjZFQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXpSeHVRdDZXOGRzNF93SnJLeUpLT3ROZ1hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 ODU0L0Q1M0UxQjZFQ0IyMzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2Vzhk czRfd0pyS3lKS090TmdYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBjkF93qS4+OVY50RjLUBPiXzC5uiCzyxm0otwgkWjb4qlSSQ/MZArN eRevslutHKHJGvtdhMDznP/REFFI61f/qDcWYJqvcfM/Zq1sDQFRr5JmWHCZjJB1 EdybYnOw3U0zSzvlAG2PSBlhBevNJFXag8LvVC5oltcXAk6dVy87/ZV5RBANC7eu G92IV0tNVQRFPrHt9erzHYvGZvqStcvmhIIsiXr49vCTomjVQa3XfmJIeO2uwgOT ek6VdXsuBVB1B3rpUTary/kdl2qlRd2786/ABi21jOV4dzspqUjhG4xWrbNxpMcg rUzS3L+lNSOmkMI2pt05F0f4hTFVLks= -----END CERTIFICATE-----Generated at Mon Jun 2 18:49:09 2025 by rpki-client