$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: i1YGREeoYkauIsYCAie/IzauvHjqdOzx/rQbtM1eCaw= Subject key identifier: C1:FD:96:C9:29:5D:3C:9D:4D:64:6B:01:FA:00:02:BD:02:2B:7C:10 Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0B30 Signing time: Fri 30 May 2025 19:22:47 +0000 Manifest this update: Fri 30 May 2025 19:22:47 +0000 Manifest next update: Fri 06 Jun 2025 19:22:47 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: vRGpVQhIJMucwBuhvu1aB45J//LIXd687eafExhDeKE=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: as/dc/eVE0KE5cApiltGew64DOfzaL1TNpjwCt5VZmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: May 30 19:22:47 2025 GMT Not After : Jun 6 19:22:47 2025 GMT Subject: CN=683a0587-115f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:c2:22:86:be:82:37:5c:2d:44:99:59:0e: 9d:81:c7:f0:50:04:38:d6:bf:9a:71:48:65:dc:8f: 84:53:31:c7:d9:62:0b:cd:43:17:e5:51:e6:42:f3: 0b:2b:cd:81:fd:8d:02:f6:33:67:d4:33:cb:39:20: f3:ee:48:6c:8d:6f:9d:9e:f4:97:51:e2:dd:0c:93: d0:42:8c:61:d8:e2:6c:ca:90:1c:ce:c3:1f:de:ad: 5a:65:24:7a:8a:46:be:bc:7b:c9:82:e6:cf:92:4a: 82:fc:9d:2d:31:05:44:08:7f:59:49:1c:9a:32:8b: c8:3f:f9:ea:45:c5:d8:bc:95:ca:e2:28:ff:ac:6d: a0:7a:c9:3d:7a:f5:2b:23:ac:9b:ce:22:6d:62:d9: 02:1d:72:7e:33:36:6a:cf:6a:86:9f:c0:2d:55:c8: f4:ad:f9:ed:32:3e:4f:0c:2f:69:cd:2a:89:eb:3d: c4:15:02:cd:be:23:45:f4:3a:84:92:89:98:04:34: 68:86:7e:d1:3d:bb:b1:72:97:5e:eb:08:49:68:d4: a3:c2:3b:f4:f5:78:c8:1b:27:38:a2:f2:1b:98:74: d5:8a:75:da:e5:5d:43:ce:3c:58:dd:70:07:e3:c7: 9e:54:0e:93:b9:1c:2a:b8:da:ca:83:03:40:ce:d8: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FD:96:C9:29:5D:3C:9D:4D:64:6B:01:FA:00:02:BD:02:2B:7C:10 X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:53:26:16:3b:71:2b:39:74:31:64:f3:49:34:66:c4:f0:35: 4d:18:2f:8a:20:5d:30:89:c2:3f:a2:b5:b7:99:e3:ce:76:43: 83:2f:f0:96:03:df:a8:3d:d1:d6:b7:24:6b:75:f4:bb:59:8e: ec:71:7d:ba:f6:8a:99:d4:03:9e:88:54:6d:db:0b:6d:12:2d: 0d:73:5a:a3:c5:76:c7:66:c0:5e:4a:19:75:4a:1b:fd:c2:71: cc:04:42:c4:5a:81:5f:77:4f:25:fb:79:25:d6:18:77:53:7f: 60:96:7c:ac:41:d0:3e:65:52:a4:5a:a7:4b:dd:45:48:a5:71: 9c:2f:09:6e:69:27:7e:57:8e:5b:56:d3:06:2b:45:ad:c8:39: af:5b:36:8d:61:8c:1f:4b:94:38:7b:9d:92:40:0e:39:33:26: 93:37:f8:4b:a9:ea:44:f4:49:e2:8b:ea:f6:40:67:9c:14:16: a4:2f:bc:6c:40:e3:6b:e4:62:81:b1:39:c5:4f:ea:b1:3b:db: 6a:cf:56:fd:c7:19:d5:09:c0:7b:6d:29:e3:95:b4:b7:70:97: 92:dc:5a:23:11:d3:91:97:17:b5:8f:ce:42:35:62:f7:d3:a2: 5b:da:61:ef:64:f2:33:4a:b3:6c:22:8e:da:4e:00:30:96:45: ba:2f:51:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjUwNTMwMTkyMjQ3WhcNMjUwNjA2MTkyMjQ3WjAYMRYwFAYD VQQDEw02ODNhMDU4Ny0xMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWzCIoa+gjdcLUSZWQ6dgcfwUAQ41r+acUhl3I+EUzHH2WILzUMX5VHmQvML K82B/Y0C9jNn1DPLOSDz7khsjW+dnvSXUeLdDJPQQoxh2OJsypAczsMf3q1aZSR6 ika+vHvJgubPkkqC/J0tMQVECH9ZSRyaMovIP/nqRcXYvJXK4ij/rG2gesk9evUr I6ybziJtYtkCHXJ+MzZqz2qGn8AtVcj0rfntMj5PDC9pzSqJ6z3EFQLNviNF9DqE komYBDRohn7RPbuxcpde6whJaNSjwjv09XjIGyc4ovIbmHTVinXa5V1DzjxY3XAH 48eeVA6TuRwquNrKgwNAztjt8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH9lskp XTydTWRrAfoAAr0CK3wQMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRUyYWO3ErOXQxZPNJNGbE8DVNGC+KIF0wicI/orW3mePOdkODL/CW A9+oPdHWtyRrdfS7WY7scX269oqZ1AOeiFRt2wttEi0Nc1qjxXbHZsBeShl1Shv9 wnHMBELEWoFfd08l+3kl1hh3U39glnysQdA+ZVKkWqdL3UVIpXGcLwluaSd+V45b VtMGK0WtyDmvWzaNYYwfS5Q4e52SQA45MyaTN/hLqepE9Enii+r2QGecFBakL7xs QONr5GKBsTnFT+qxO9tqz1b9xxnVCcB7bSnjlbS3cJeS3FojEdORlxe1j85CNWL3 06Jb2mHvZPIzSrNsIo7aTgAwlkW6L1Hy -----END CERTIFICATE-----Generated at Sat May 31 17:49:44 2025 by rpki-client