$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: 8lTNC5t4H4HRq3YiR88tblwaj4HD0cBSGyMQmamVHFo= Subject key identifier: FF:C1:23:BA:25:EA:46:81:7D:E5:3E:56:CA:B2:53:6B:11:8E:37:99 Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 08AE Signing time: Fri 30 May 2025 21:21:00 +0000 Manifest this update: Fri 30 May 2025 21:21:00 +0000 Manifest next update: Fri 06 Jun 2025 21:21:00 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: uQBasxMWNX8lADQ1xNnciU98UcUYGlliM6x5VCKeIUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: May 30 21:21:00 2025 GMT Not After : Jun 6 21:21:00 2025 GMT Subject: CN=683a213c-02e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:3c:f9:35:0b:7c:61:49:5a:5e:09:d0:0d: 77:f7:14:1a:96:7c:46:d3:9f:63:71:ec:d9:27:6d: 45:66:ea:08:f4:74:fa:94:be:76:69:7c:fd:40:8b: fc:21:6c:38:4d:00:5a:b9:fa:2c:6e:4b:c6:c7:93: 34:0d:af:05:00:e5:42:8f:11:ec:b6:87:20:39:ce: b9:ae:89:49:94:ac:2f:7a:a4:b6:49:a7:15:95:57: 92:3a:52:b8:d7:2b:c0:e9:1b:7b:be:e3:54:c0:5c: 1f:18:9e:11:b1:92:eb:f2:6a:b7:a5:98:64:e2:4d: 4c:c2:c5:9d:d9:8c:4b:f0:29:48:c1:08:a9:e8:24: c2:aa:88:a4:29:7c:d7:57:d4:b5:f6:95:04:e2:31: 6a:9e:40:1c:1b:66:68:f3:88:49:1d:17:80:e3:04: 83:38:8e:87:6a:ef:7a:60:b0:b4:ed:36:e9:bb:d9: 5f:00:6b:81:6c:1b:9e:fc:1a:1e:9d:66:a1:0a:70: af:fa:7e:9d:ef:3d:43:22:25:00:f8:db:4f:31:f5: f3:fd:da:2c:c8:a0:dd:77:13:cb:a1:7e:d9:92:36: c2:81:e6:49:2a:80:6e:e6:8c:58:54:60:e2:3f:2d: 2f:bf:07:98:57:21:8a:1a:bb:08:b8:13:ab:f0:16: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C1:23:BA:25:EA:46:81:7D:E5:3E:56:CA:B2:53:6B:11:8E:37:99 X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0c:14:2b:ea:39:47:ab:a8:73:42:13:4f:55:b7:52:1b:99: b0:03:f6:43:60:d8:a9:26:e3:64:1b:72:b2:7f:7a:da:95:0e: 75:56:e9:71:5d:40:4c:ba:aa:3c:4a:dc:3c:42:1e:1b:02:c6: 0e:24:7a:05:6c:d0:78:90:18:53:4f:23:18:80:88:9c:ea:2f: bf:58:19:78:00:d7:67:a0:d1:83:19:c2:d7:66:79:e4:2c:89: 9f:8b:00:c3:35:76:1e:61:ec:cb:4b:95:0c:c7:cb:03:ac:2e: 91:45:c0:9c:0d:fd:65:cc:d2:35:ef:d5:eb:49:21:d7:72:7c: c5:83:de:e6:0e:90:61:a4:84:20:f4:1e:4f:1f:33:02:16:fb: 55:24:c3:31:2d:0f:3f:f8:24:e1:c9:e2:98:02:53:ed:d1:51: ec:8a:f7:78:87:2b:b7:0c:1c:81:6d:9f:9d:b2:dd:fb:ff:b5: 66:63:3e:4e:8e:41:ef:14:73:69:e2:aa:41:6b:55:61:0b:a3: 76:a6:4f:6b:9e:10:a7:15:44:27:0b:cd:d4:72:33:2b:42:b4: 75:dc:ed:6e:ed:f9:a1:e2:9b:3a:73:d1:d2:9b:b6:e9:17:de: 1f:ca:3c:fb:9b:27:38:e5:5e:52:48:fe:f0:50:04:9a:10:20: 28:60:61:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjUwNTMwMjEyMTAwWhcNMjUwNjA2MjEyMTAwWjAYMRYwFAYD VQQDEw02ODNhMjEzYy0wMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf08+TULfGFJWl4J0A139xQalnxG059jcezZJ21FZuoI9HT6lL52aXz9QIv8 IWw4TQBaufosbkvGx5M0Da8FAOVCjxHstocgOc65rolJlKwveqS2SacVlVeSOlK4 1yvA6Rt7vuNUwFwfGJ4RsZLr8mq3pZhk4k1MwsWd2YxL8ClIwQip6CTCqoikKXzX V9S19pUE4jFqnkAcG2Zo84hJHReA4wSDOI6Hau96YLC07Tbpu9lfAGuBbBue/Boe nWahCnCv+n6d7z1DIiUA+NtPMfXz/dosyKDddxPLoX7ZkjbCgeZJKoBu5oxYVGDi Py0vvweYVyGKGrsIuBOr8BYcVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/BI7ol 6kaBfeU+VsqyU2sRjjeZMB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdDBQr6jlHq6hzQhNPVbdSG5mwA/ZDYNipJuNkG3Kyf3ralQ51Vulx XUBMuqo8Stw8Qh4bAsYOJHoFbNB4kBhTTyMYgIic6i+/WBl4ANdnoNGDGcLXZnnk LImfiwDDNXYeYezLS5UMx8sDrC6RRcCcDf1lzNI179XrSSHXcnzFg97mDpBhpIQg 9B5PHzMCFvtVJMMxLQ8/+CThyeKYAlPt0VHsivd4hyu3DByBbZ+dst37/7VmYz5O jkHvFHNp4qpBa1VhC6N2pk9rnhCnFUQnC83UcjMrQrR13O1u7fmh4ps6c9HSm7bp F94fyjz7myc45V5SSP7wUASaECAoYGEK -----END CERTIFICATE-----Generated at Sat May 31 16:57:44 2025 by rpki-client