$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft File: IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json) Hash identifier: vv6ekDzKQYRne3fVciXaL+a/P5XkFNsgi0wTqUKW8S4= Subject key identifier: 90:37:8E:D4:80:A4:5F:B8:77:E8:A4:73:19:C2:24:C3:4A:BE:79:44 Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft Manifest number: AE Signing time: Sat 31 May 2025 05:39:42 +0000 Manifest this update: Sat 31 May 2025 05:39:41 +0000 Manifest next update: Sat 07 Jun 2025 05:39:41 +0000 Files and hashes: 1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: HBOcZJE4OMj8rFuYrEZbH4KufozessWIf/ZV1zEBy2Y=) 2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: wZz+OlqUMy/mBTlpV+JPL6/+u7+0FBG8gjwEC4u2wAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Validity Not Before: May 31 05:39:41 2025 GMT Not After : Jun 7 05:39:41 2025 GMT Subject: CN=683a961e-55af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:f7:da:fc:99:2b:e5:56:09:d4:af:3e:55: 03:d0:0a:06:c5:a2:54:ae:8d:20:0a:7d:19:32:f4: 47:90:ad:c8:33:b8:1a:df:6b:3b:cb:0f:02:58:7e: 1c:f9:a2:73:2a:37:c3:b5:b1:b2:91:8f:6d:c0:1f: af:0c:a4:6f:dc:63:8b:4a:86:8d:3c:38:3f:c5:31: 83:b7:e6:6b:65:1f:4b:20:61:5f:8b:02:29:d8:08: 5e:38:98:48:4a:a4:d3:d0:39:7a:29:39:ea:6e:84: 7d:20:1f:60:61:22:2f:cb:1b:c6:4b:6c:46:50:99: b7:4c:8b:d7:32:7a:60:9c:97:84:d7:10:da:3d:f8: 09:36:25:34:17:0c:19:71:2c:3d:d4:07:98:19:b5: 88:62:ae:73:fc:de:81:ad:54:14:c4:5c:aa:83:6f: 2e:23:3a:1f:3e:0e:62:a4:07:ae:64:01:3a:02:33: 58:1a:5d:52:35:88:bb:25:df:63:91:de:d6:55:d2: 65:51:37:5b:30:c8:22:c4:b5:0c:48:ea:20:70:72: 31:fd:f4:4d:d5:4b:12:18:ac:f6:06:2a:f7:7d:eb: 94:08:70:66:f9:9f:72:6c:9d:44:30:82:11:f2:ce: 87:2a:8a:d1:16:06:2f:ea:8f:5e:ca:a0:88:f7:2b: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:37:8E:D4:80:A4:5F:B8:77:E8:A4:73:19:C2:24:C3:4A:BE:79:44 X509v3 Authority Key Identifier: keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:6b:05:68:09:34:ed:d3:7f:37:90:50:a3:b4:1c:b9:51:68: c7:af:3d:8b:dc:c5:db:58:12:35:af:eb:e6:81:1c:38:27:db: 36:db:7c:12:fd:24:e1:32:9f:53:40:bd:d0:4a:93:8b:3f:24: 3f:9f:4d:19:db:ca:8e:e0:2a:96:f7:1a:56:e8:ae:62:7f:aa: 70:db:4f:44:74:6c:fa:df:b5:38:1e:fe:cd:c8:db:7c:bb:bf: ad:a9:22:44:1e:28:ea:e2:f1:b7:3f:63:6b:3d:84:42:4a:1a: 52:10:29:25:8d:e5:73:5d:21:a5:7f:17:b9:02:11:9e:ae:5e: 71:ee:a1:05:8c:93:3c:99:44:01:a3:b2:70:1d:66:71:c0:1a: 81:60:3e:30:e1:49:91:c2:1d:00:71:86:43:88:ca:0e:5b:2e: 8b:99:68:eb:46:6e:99:b2:7c:a9:b7:3a:99:ce:a4:21:4f:49: 79:77:6b:41:0d:43:e4:fd:2f:b2:fa:a8:fa:cb:0d:96:7c:0e: d9:e1:df:d7:08:5b:40:84:5e:77:08:0c:e4:33:f8:b7:ad:31: 33:2c:43:6b:4b:26:00:13:5a:bf:b0:b0:bd:b7:9e:8f:b0:f0: c7:e8:7f:a9:10:39:c9:83:aa:07:bf:2a:73:00:b0:ed:c0:ef: 6a:3a:8a:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQTcxMTAvBgNVBAUTKDIyQTYyQzE0RDJCRDMyRTNFNTk2RDhBM0U2MkJCQzMy NzQ0NjhGOTkwHhcNMjUwNTMxMDUzOTQxWhcNMjUwNjA3MDUzOTQxWjAYMRYwFAYD VQQDEw02ODNhOTYxZS01NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ff32vyZK+VWCdSvPlUD0AoGxaJUro0gCn0ZMvRHkK3IM7ga32s7yw8CWH4c +aJzKjfDtbGykY9twB+vDKRv3GOLSoaNPDg/xTGDt+ZrZR9LIGFfiwIp2AheOJhI SqTT0Dl6KTnqboR9IB9gYSIvyxvGS2xGUJm3TIvXMnpgnJeE1xDaPfgJNiU0FwwZ cSw91AeYGbWIYq5z/N6BrVQUxFyqg28uIzofPg5ipAeuZAE6AjNYGl1SNYi7Jd9j kd7WVdJlUTdbMMgixLUMSOogcHIx/fRN1UsSGKz2Bir3feuUCHBm+Z9ybJ1EMIIR 8s6HKorRFgYv6o9eyqCI9yssgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJA3jtSA pF+4d+ikcxnCJMNKvnlEMB8GA1UdIwQYMBaAFCKmLBTSvTLj5ZbYo+YrvDJ0Ro+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVBNy9CMUIzRTJENjM4 NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11UGxsdGlqNWl1OE1uUkdq NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVBNy9CMUIzRTJENjM4NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11 UGxsdGlqNWl1OE1uUkdqNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGawVoCTTt0383kFCjtBy5UWjHrz2L3MXbWBI1r+vmgRw4J9s223wS /SThMp9TQL3QSpOLPyQ/n00Z28qO4CqW9xpW6K5if6pw209EdGz637U4Hv7NyNt8 u7+tqSJEHijq4vG3P2NrPYRCShpSECkljeVzXSGlfxe5AhGerl5x7qEFjJM8mUQB o7JwHWZxwBqBYD4w4UmRwh0AcYZDiMoOWy6LmWjrRm6ZsnyptzqZzqQhT0l5d2tB DUPk/S+y+qj6yw2WfA7Z4d/XCFtAhF53CAzkM/i3rTEzLENrSyYAE1q/sLC9t56P sPDH6H+pEDnJg6oHvypzALDtwO9qOoqq -----END CERTIFICATE-----Generated at Sat May 31 17:01:17 2025 by rpki-client