$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: mSYqPoHzloytZfMegmEPJv+/vsnW1Z2qOpXe6yXkNcc= Subject key identifier: EC:6E:D0:7D:46:24:57:D2:06:A8:20:0E:7B:85:24:22:48:B5:77:17 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 0792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 078C Signing time: Fri 30 May 2025 21:35:36 +0000 Manifest this update: Fri 30 May 2025 21:35:36 +0000 Manifest next update: Fri 06 Jun 2025 21:35:36 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: ZLtVzUvEfOizFpaOjHpRqIFOTxNwDBpcqsi3OeNXsXI=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: ZpzsQA87GX/2tqviCQB0PEkhLyPLFjNjzd1SWJ2fekk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1938 (0x792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: May 30 21:35:36 2025 GMT Not After : Jun 6 21:35:36 2025 GMT Subject: CN=683a24a8-612e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:0c:ad:29:e2:94:39:48:45:77:fe:0b:ac: f7:32:ec:54:da:aa:40:77:e8:49:e8:25:35:92:46: b9:b3:34:07:69:f9:49:7f:9c:08:a1:dd:b1:29:c6: 88:9b:37:2d:21:2b:f9:82:e7:e5:b0:3a:a1:f5:28: 94:71:7b:6a:97:33:79:77:f2:6d:82:47:bb:8c:d6: ac:d4:a7:22:57:b5:75:ff:bf:cb:66:8f:2e:f1:72: e8:8f:35:a6:13:e1:2c:5b:6f:d8:18:dc:77:f4:db: 81:12:aa:83:9a:2d:dc:3d:a0:5d:85:09:b6:a3:29: 57:b2:e0:f1:fa:85:17:c8:71:94:b1:d8:f2:57:fa: b3:ba:13:22:1a:b9:b7:63:3e:46:ae:ed:25:77:55: 1f:61:72:85:30:0e:fd:61:c2:57:71:d2:2b:75:bd: 26:3f:0b:71:11:75:77:ef:db:d8:9c:47:73:ca:78: c0:75:bd:8a:05:5a:a8:d5:e9:d4:92:44:72:ff:9b: 11:78:36:ac:e7:e4:4e:12:12:92:b9:28:f6:c4:7d: 72:65:71:d9:fa:10:30:55:16:d3:81:16:9e:1f:c2: 77:22:60:5b:e6:e0:6e:4d:bc:b5:ca:f0:df:51:b1: 7f:ef:73:ba:1b:73:b1:1c:19:77:10:78:3d:d6:84: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:D0:7D:46:24:57:D2:06:A8:20:0E:7B:85:24:22:48:B5:77:17 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:de:60:9b:bd:46:f0:69:da:4d:b4:30:15:d5:73:0d:80:f5: f3:f6:25:70:c6:59:32:49:52:6c:87:96:7d:99:17:ab:6a:94: 7d:55:08:22:43:c3:66:88:e4:6d:7d:cc:46:6a:d5:21:b6:e6: 52:0d:45:f3:62:84:f0:dd:6c:a2:0c:8e:d5:d2:a5:78:43:6a: 21:8b:41:cf:dc:07:db:7f:2f:41:a4:40:fb:98:31:22:0c:62: f5:89:9b:73:15:c8:58:d1:e9:7c:49:56:01:b4:29:94:76:17: 28:a4:ff:90:03:30:b9:7f:ad:c8:d7:53:73:7e:ee:fc:83:62: 15:00:af:2f:2b:f7:6b:6f:bc:55:6a:01:49:39:16:14:56:9e: e3:68:ad:67:58:79:a3:ad:3f:d1:57:b5:d1:ba:02:8d:c5:38: c1:3d:17:ce:82:e9:60:1a:27:ed:77:bc:84:9c:25:15:66:8f: 91:3b:c1:0d:9c:d2:5c:98:79:5a:f4:01:39:58:b3:d8:c6:77: 94:20:f9:48:bd:91:11:9c:40:bf:8b:93:b4:2a:16:b8:12:2d: 79:93:d1:ed:07:9a:62:3b:ec:69:66:77:d5:7d:41:72:bd:f8: 73:1f:a4:a6:81:9c:99:11:41:78:a1:c5:36:77:99:e7:55:4b: 02:a3:ae:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjUwNTMwMjEzNTM2WhcNMjUwNjA2MjEzNTM2WjAYMRYwFAYD VQQDEw02ODNhMjRhOC02MTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz8MrSnilDlIRXf+C6z3MuxU2qpAd+hJ6CU1kka5szQHaflJf5wIod2xKcaI mzctISv5guflsDqh9SiUcXtqlzN5d/Jtgke7jNas1KciV7V1/7/LZo8u8XLojzWm E+EsW2/YGNx39NuBEqqDmi3cPaBdhQm2oylXsuDx+oUXyHGUsdjyV/qzuhMiGrm3 Yz5Gru0ld1UfYXKFMA79YcJXcdIrdb0mPwtxEXV379vYnEdzynjAdb2KBVqo1enU kkRy/5sReDas5+ROEhKSuSj2xH1yZXHZ+hAwVRbTgRaeH8J3ImBb5uBuTby1yvDf UbF/73O6G3OxHBl3EHg91oRBCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxu0H1G JFfSBqggDnuFJCJItXcXMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk3mCbvUbwadpNtDAV1XMNgPXz9iVwxlkySVJsh5Z9mRerapR9VQgi Q8NmiORtfcxGatUhtuZSDUXzYoTw3WyiDI7V0qV4Q2ohi0HP3Afbfy9BpED7mDEi DGL1iZtzFchY0el8SVYBtCmUdhcopP+QAzC5f63I11Nzfu78g2IVAK8vK/drb7xV agFJORYUVp7jaK1nWHmjrT/RV7XRugKNxTjBPRfOgulgGiftd7yEnCUVZo+RO8EN nNJcmHla9AE5WLPYxneUIPlIvZERnEC/i5O0Kha4Ei15k9HtB5piO+xpZnfVfUFy vfhzH6SmgZyZEUF4ocU2d5nnVUsCo65i -----END CERTIFICATE-----Generated at Sat May 31 17:00:22 2025 by rpki-client