$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft File: iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json) Hash identifier: b3scNDOqqHiSvdaxX4LDOA0XF2+agY3Xv+FqwxysSm0= Subject key identifier: 53:E4:A3:9E:76:54:A7:DA:0C:4F:62:57:B0:81:42:61:71:7F:96:8E Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73 Certificate issuer: /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73 Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft Manifest number: 0F74 Signing time: Wed 04 Jun 2025 17:33:22 +0000 Manifest this update: Wed 04 Jun 2025 17:33:21 +0000 Manifest next update: Wed 11 Jun 2025 17:33:21 +0000 Files and hashes: 1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: kQSw8QyqZs+NYYye2KqDJ3yyPtq1mDzt2EWEaX3HIzA=) 2: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: E66SV6WNRD5ULWCmhiJGOhN+NZfmVirzyRoB4Hy/u4Q=) 3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: i8fQntshSNYD8zDT2wDiHtaQKzGJtDGb0egHvcZuXHs=) 4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: UGdOvww/zqYEiJCbgpSOvpp5LjsG3mU+jjIktHieTx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 17:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73 Validity Not Before: Jun 4 17:33:21 2025 GMT Not After : Jun 11 17:33:21 2025 GMT Subject: CN=68408361-25a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:bf:5e:4c:04:85:76:f6:ca:3d:f6:b1:b3: 74:ba:04:71:e4:3e:b7:25:48:39:f8:3c:cf:35:9f: 6d:27:4c:af:03:9b:33:b8:15:ba:f2:83:b7:db:22: 1a:08:f3:dc:34:b7:9d:f8:a7:a5:c2:14:c5:6c:68: fa:7a:60:a6:d0:8b:35:42:25:c1:69:72:26:af:5f: 86:5d:0c:21:ed:f1:ae:25:83:44:1b:8c:26:9e:cd: 40:e0:a2:41:c7:ac:59:82:9c:38:8e:ae:f8:ad:34: 6f:ba:3f:26:76:3b:66:f3:d2:ea:49:7d:31:6a:5d: c6:b9:88:14:64:de:30:5a:53:df:ec:5c:3b:91:96: 54:e6:0e:3a:e7:23:a7:c2:85:f1:06:d1:c9:c4:7f: 6a:72:d3:11:2c:40:c7:36:36:68:c8:4d:90:98:bb: 5f:0f:18:16:66:a4:d8:99:46:9c:ba:6b:e8:47:7f: e6:0f:0c:ee:a7:73:9c:22:42:13:3d:7c:eb:03:c3: ad:d6:20:6d:1e:fc:3e:16:e3:20:9d:db:47:17:36: 41:96:9b:9d:dc:42:8a:ee:14:96:08:26:c1:13:41: 17:56:32:5c:fc:b1:f4:d8:d4:ff:25:eb:b3:e7:5e: ec:7b:93:be:9b:e5:5f:2a:6b:e4:3d:5c:e0:5c:54: d7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E4:A3:9E:76:54:A7:DA:0C:4F:62:57:B0:81:42:61:71:7F:96:8E X509v3 Authority Key Identifier: keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:fa:26:a5:21:9c:a0:17:f6:1a:bc:e4:28:4d:05:c3:43:c7: b2:e2:13:37:d3:dc:e8:88:ea:f0:91:e1:40:27:fa:91:20:10: e3:f2:20:6e:4b:e2:a4:a3:e7:18:5c:c4:fd:e3:16:28:f4:34: 84:12:9c:d0:70:d4:85:e7:7f:15:dd:07:8b:18:ca:33:2e:a9: e4:38:1e:11:e1:42:c3:b2:3a:4b:a2:21:2e:c8:08:a1:ef:c5: 24:8e:f3:69:45:9a:0d:a0:d2:d6:42:80:de:c9:50:c2:6a:65: 2d:71:66:5b:6a:8d:77:16:4d:27:0f:f7:8d:db:5f:7d:bd:dd: 09:56:dc:5d:b8:6d:de:6c:db:52:f9:b6:d4:c4:44:07:79:d7: b2:b4:7a:85:9f:84:6b:ca:f5:ef:05:e2:b6:94:6a:0d:51:60: a9:50:f4:0c:d7:ba:e6:14:19:5d:20:8c:5b:94:6d:a0:66:cd: 71:68:a4:7d:5a:7c:c6:01:b4:17:94:8d:bf:40:5d:fa:63:a9: 9f:7b:d8:ca:3e:25:c3:09:94:07:4a:80:ef:9a:18:01:98:eb: 3d:80:70:91:77:04:88:f6:61:22:4e:cf:fe:41:24:77:33:82: b6:d9:59:6c:81:0d:c8:0f:03:ac:9d:26:b2:e2:9c:fb:f7:53: 1b:bf:54:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx Njg4QjJCNzMwHhcNMjUwNjA0MTczMzIxWhcNMjUwNjExMTczMzIxWjAYMRYwFAYD VQQDEw02ODQwODM2MS0yNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsm/XkwEhXb2yj32sbN0ugRx5D63JUg5+DzPNZ9tJ0yvA5szuBW68oO32yIa CPPcNLed+KelwhTFbGj6emCm0Is1QiXBaXImr1+GXQwh7fGuJYNEG4wmns1A4KJB x6xZgpw4jq74rTRvuj8mdjtm89LqSX0xal3GuYgUZN4wWlPf7Fw7kZZU5g465yOn woXxBtHJxH9qctMRLEDHNjZoyE2QmLtfDxgWZqTYmUacumvoR3/mDwzup3OcIkIT PXzrA8Ot1iBtHvw+FuMgndtHFzZBlpud3EKK7hSWCCbBE0EXVjJc/LH02NT/Jeuz 517se5O+m+VfKmvkPVzgXFTXhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPko552 VKfaDE9iV7CBQmFxf5aOMB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1 NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNFQi83REE1ODNFNDY1NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1 MHhlSVZzZTJMcHdXaUxLM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA+ialIZygF/YavOQoTQXDQ8ey4hM309zoiOrwkeFAJ/qRIBDj8iBu S+Kko+cYXMT94xYo9DSEEpzQcNSF538V3QeLGMozLqnkOB4R4ULDsjpLoiEuyAih 78UkjvNpRZoNoNLWQoDeyVDCamUtcWZbao13Fk0nD/eN2199vd0JVtxduG3ebNtS +bbUxEQHedeytHqFn4RryvXvBeK2lGoNUWCpUPQM17rmFBldIIxblG2gZs1xaKR9 WnzGAbQXlI2/QF36Y6mfe9jKPiXDCZQHSoDvmhgBmOs9gHCRdwSI9mEiTs/+QSR3 M4K22VlsgQ3IDwOsnSay4pz791Mbv1Qq -----END CERTIFICATE-----Generated at Fri Jun 6 12:44:47 2025 by rpki-client