$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: LtljqxBjxJSWbmxu2oxJKS7icr3L+mLjdNIqgMQ/pRM= Subject key identifier: 5F:5C:EA:B5:1C:8F:65:E3:E4:1D:D0:4C:8B:6E:BC:39:84:6A:40:B9 Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0B2C Signing time: Fri 30 May 2025 19:22:55 +0000 Manifest this update: Fri 30 May 2025 19:22:54 +0000 Manifest next update: Fri 06 Jun 2025 19:22:54 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: O5QUpIYzJAm3tySMaWkM+izZM4/mT8Up7ka5cGwCaMY=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: 6Ds3NGu2wYLJMMD3M602IBKNI5PFzIBlSYGM/Hpizc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: May 30 19:22:54 2025 GMT Not After : Jun 6 19:22:54 2025 GMT Subject: CN=683a058e-cc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:20:38:70:b2:b3:7c:11:b9:62:ce:04:9e:f8: 0e:5f:d2:8b:24:b3:32:be:3d:b1:c6:04:81:89:79: 07:0e:e2:d8:1f:38:0d:fd:d8:37:ee:6b:7a:0d:68: e6:80:44:d7:df:d3:ae:67:bb:51:4e:8b:64:a2:a3: 12:a6:ec:cf:2b:89:cb:81:43:8d:96:19:ed:e6:ad: 54:0f:67:0f:d5:05:71:bb:89:f7:42:22:31:72:d9: 43:ec:29:fa:bb:02:49:c9:84:0e:00:4d:38:be:d6: 8a:44:94:94:f4:93:2b:11:c7:48:91:2c:6d:e5:85: 00:c6:a7:6a:b0:28:c7:68:9c:32:8a:8a:c8:2c:23: 99:87:77:f6:9d:30:20:c5:a8:f4:91:49:96:aa:7f: fc:56:81:e8:4e:72:9c:cc:9c:de:c2:47:7f:2b:66: d8:27:60:8d:ef:5b:aa:51:9d:28:1d:91:e5:e5:86: e0:a3:48:d4:57:0f:07:ec:14:56:1e:59:34:68:31: 24:bb:ce:4f:51:4a:63:8e:a8:72:05:97:5a:3c:b0: 12:60:d1:e6:43:c0:8a:cf:bc:2e:87:6f:75:f6:9d: 17:1f:6a:21:71:92:56:64:f5:44:32:bd:8a:73:ff: 25:56:3a:1f:2d:d1:cc:5a:5e:b7:e1:f1:ae:27:92: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5C:EA:B5:1C:8F:65:E3:E4:1D:D0:4C:8B:6E:BC:39:84:6A:40:B9 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3e:e4:63:0e:9f:ec:04:bb:ab:4e:b6:96:54:c0:98:b1:8e: 46:33:87:b7:77:28:2e:3a:17:92:25:80:cf:b9:dc:7f:fd:f0: 24:6d:46:69:c9:3b:58:a7:5e:e0:f5:19:ab:c7:63:2f:48:53: 97:92:56:87:a7:61:09:ff:11:e1:22:70:46:48:5d:08:a3:f1: 58:4b:8e:84:fb:f4:e2:a2:54:a6:d2:fd:87:fd:5a:be:9c:7c: 56:fe:cc:35:8b:5c:62:ea:80:56:68:3a:af:77:e1:12:76:95: 5d:c4:84:6b:78:1a:03:18:55:fb:fd:07:9d:b4:d4:c5:9e:88: 18:e9:14:c0:d5:78:c9:ed:0c:5d:de:bf:90:5e:70:8c:de:61: 7e:fd:ef:a3:c3:7f:05:d6:5c:81:87:5a:74:87:1a:35:a2:89: 9d:6a:f7:f9:4d:26:70:0b:65:84:32:1e:7e:04:ec:5e:8d:45: fa:91:16:2b:98:d9:83:0a:d4:a6:0f:ca:fb:0a:aa:4e:6b:a9: cf:81:92:e7:50:14:46:07:c3:33:83:b2:3d:1a:1c:c9:b0:96: 26:3c:c2:0e:c3:91:02:bd:3a:1e:ee:04:b3:05:5f:04:0e:24: cf:68:28:e1:c7:9b:5b:38:8b:e9:9a:8c:a3:3f:26:88:4d:1f: 5e:be:e3:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjUwNTMwMTkyMjU0WhcNMjUwNjA2MTkyMjU0WjAYMRYwFAYD VQQDEw02ODNhMDU4ZS1jYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yA4cLKzfBG5Ys4EnvgOX9KLJLMyvj2xxgSBiXkHDuLYHzgN/dg37mt6DWjm gETX39OuZ7tRTotkoqMSpuzPK4nLgUONlhnt5q1UD2cP1QVxu4n3QiIxctlD7Cn6 uwJJyYQOAE04vtaKRJSU9JMrEcdIkSxt5YUAxqdqsCjHaJwyiorILCOZh3f2nTAg xaj0kUmWqn/8VoHoTnKczJzewkd/K2bYJ2CN71uqUZ0oHZHl5Ybgo0jUVw8H7BRW Hlk0aDEku85PUUpjjqhyBZdaPLASYNHmQ8CKz7wuh2919p0XH2ohcZJWZPVEMr2K c/8lVjofLdHMWl634fGuJ5KMQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9c6rUc j2Xj5B3QTItuvDmEakC5MB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLPuRjDp/sBLurTraWVMCYsY5GM4e3dyguOheSJYDPudx//fAkbUZp yTtYp17g9Rmrx2MvSFOXklaHp2EJ/xHhInBGSF0Io/FYS46E+/TiolSm0v2H/Vq+ nHxW/sw1i1xi6oBWaDqvd+ESdpVdxIRreBoDGFX7/QedtNTFnogY6RTA1XjJ7Qxd 3r+QXnCM3mF+/e+jw38F1lyBh1p0hxo1oomdavf5TSZwC2WEMh5+BOxejUX6kRYr mNmDCtSmD8r7CqpOa6nPgZLnUBRGB8Mzg7I9GhzJsJYmPMIOw5ECvToe7gSzBV8E DiTPaCjhx5tbOIvpmoyjPyaITR9evuMz -----END CERTIFICATE-----Generated at Sat May 31 15:35:07 2025 by rpki-client