$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft File: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json) Hash identifier: +pc6RSGgnLLoUF7zxxYD1P5Y1jMAUEtAHhYcKSaEkuU= Subject key identifier: 1B:B0:F5:EF:D4:3C:C5:07:11:68:62:C5:3D:71:26:AF:5A:5B:0D:7E Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F Certificate issuer: /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft Manifest number: 079C Signing time: Fri 30 May 2025 21:30:43 +0000 Manifest this update: Fri 30 May 2025 21:30:43 +0000 Manifest next update: Fri 06 Jun 2025 21:30:43 +0000 Files and hashes: 1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: KVDEkZpLcK9u8vrCiQMsANEaVlGI4b20gLESv25VqF4=) 2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: 7kdaecQrFfrsndKpjXaOO6IRjRmwLt9+kq/Fe+7XLxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AA6, serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F Validity Not Before: May 30 21:30:43 2025 GMT Not After : Jun 6 21:30:43 2025 GMT Subject: CN=683a2383-a1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:63:06:2e:28:33:3b:40:d0:6e:af:79:3c: a0:d1:93:20:bb:8f:6d:b1:db:9e:2a:37:d9:34:81: 79:5a:aa:5f:95:8d:90:2d:34:07:51:a2:d3:fc:b1: 9c:75:cb:1e:cc:03:d5:40:ad:1a:ca:10:c2:38:8b: b3:2a:c1:a1:d7:6a:4d:3f:65:dc:ad:38:2a:5d:bc: e2:9d:25:a1:75:3f:f9:d3:67:e7:90:a5:19:69:dc: b4:0c:30:b4:e8:ee:7a:15:ee:88:78:3d:24:25:6d: ff:84:a5:6f:1e:7f:0a:e2:f5:d6:8f:f3:59:78:96: 1d:27:f6:dd:b5:b9:72:ca:5f:ea:4c:40:08:ef:07: 38:28:e4:3d:12:f6:a5:00:9b:52:ba:74:52:15:be: 20:74:fc:8d:71:aa:df:31:83:21:2a:2c:2b:69:96: f7:f9:8b:bb:f4:96:9b:31:d7:a7:54:c6:c1:c3:36: 18:5c:07:46:91:f1:7f:41:75:7d:b5:d6:be:84:5b: 06:a0:c0:cf:11:2f:14:7d:5a:ef:41:a7:52:29:12: b1:bc:d1:2d:26:68:cb:bd:1a:f2:c9:59:70:ed:18: b4:63:b9:e5:4c:40:e8:2e:29:82:ef:f9:e9:60:8c: 89:3e:43:2f:79:ca:f3:a0:b4:cb:28:3c:ad:65:9b: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B0:F5:EF:D4:3C:C5:07:11:68:62:C5:3D:71:26:AF:5A:5B:0D:7E X509v3 Authority Key Identifier: keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:c7:31:16:19:cc:dc:34:16:93:ba:f9:65:24:c5:6b:e9:86: 1b:e3:5a:75:a1:7c:93:4e:85:d9:0b:2e:96:d5:d1:10:66:53: 62:49:04:43:82:95:1b:c9:2f:50:ba:2e:1e:b5:d9:59:dc:b4: 30:20:56:df:35:e2:bd:63:ae:a3:b9:74:90:ca:99:44:0d:6c: e9:69:3f:f7:89:39:9f:22:87:aa:a7:70:2c:30:3b:29:5d:ff: 6d:0a:51:b7:4f:b6:c5:bc:92:19:15:c7:9b:94:79:31:bb:dd: bf:3b:8d:47:ca:20:78:8c:1d:b9:78:a3:c0:7b:7c:f0:4d:8a: 3c:5b:2d:4c:21:1c:e9:63:04:33:ba:43:32:d6:6a:11:38:59: 49:55:bb:d8:fc:80:dd:da:ab:94:18:23:dc:5b:05:7c:ed:98: 4d:17:20:15:c1:a4:6d:85:ec:0a:10:ee:8a:3a:6a:0d:e4:3d: 8b:2a:cf:07:38:fb:8b:ff:56:b2:51:0d:21:1c:4d:72:93:41: 84:c5:90:a9:47:2b:20:cf:c9:4c:a1:52:bf:c5:1b:36:fb:ad: d3:ba:0e:8f:b3:be:ce:ec:a7:f4:47:62:a4:a3:77:1b:6a:ac: d5:83:6f:e4:9c:4c:ff:3e:94:78:17:a1:f4:c5:66:f8:a2:78: 40:d0:73:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVBQTYxMTAvBgNVBAUTKDg4Q0Q2RDQ3MkRDQTE2QjBGNDFGMkVBRThFRDkyMTU4 MUMyNzhENkYwHhcNMjUwNTMwMjEzMDQzWhcNMjUwNjA2MjEzMDQzWjAYMRYwFAYD VQQDEw02ODNhMjM4My1hMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlZjBi4oMztA0G6veTyg0ZMgu49tsdueKjfZNIF5WqpflY2QLTQHUaLT/LGc dcsezAPVQK0ayhDCOIuzKsGh12pNP2XcrTgqXbzinSWhdT/502fnkKUZady0DDC0 6O56Fe6IeD0kJW3/hKVvHn8K4vXWj/NZeJYdJ/bdtblyyl/qTEAI7wc4KOQ9Eval AJtSunRSFb4gdPyNcarfMYMhKiwraZb3+Yu79JabMdenVMbBwzYYXAdGkfF/QXV9 tda+hFsGoMDPES8UfVrvQadSKRKxvNEtJmjLvRryyVlw7Ri0Y7nlTEDoLimC7/np YIyJPkMvecrzoLTLKDytZZuXGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuw9e/U PMUHEWhixT1xJq9aWw1+MB8GA1UdIwQYMBaAFIjNbUctyhaw9B8uro7ZIVgcJ41v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFBNi9BRDlFREYwNjA2 OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0ZyRDBIeTZ1anRraFdCd25q VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lNMXRSeTNLRnJEMEh5NnVqdGtoV0J3bmpXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUFBNi9BRDlFREYwNjA2OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0Zy RDBIeTZ1anRraFdCd25qVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCxzEWGczcNBaTuvllJMVr6YYb41p1oXyTToXZCy6W1dEQZlNiSQRD gpUbyS9Qui4etdlZ3LQwIFbfNeK9Y66juXSQyplEDWzpaT/3iTmfIoeqp3AsMDsp Xf9tClG3T7bFvJIZFceblHkxu92/O41HyiB4jB25eKPAe3zwTYo8Wy1MIRzpYwQz ukMy1moROFlJVbvY/IDd2quUGCPcWwV87ZhNFyAVwaRthewKEO6KOmoN5D2LKs8H OPuL/1ayUQ0hHE1yk0GExZCpRysgz8lMoVK/xRs2+63Tug6Ps77O7Kf0R2Kko3cb aqzVg2/knEz/PpR4F6H0xWb4onhA0HPF -----END CERTIFICATE-----Generated at Sat May 31 16:59:22 2025 by rpki-client