$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: mLT1I99D3fLQAY3VDyowhYhHslRKgfX4ZrFiIxER720= Subject key identifier: EC:1C:39:70:C7:14:85:63:9A:31:28:3E:AA:7B:64:A1:F5:C3:15:03 Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0ABB Signing time: Fri 30 May 2025 19:40:12 +0000 Manifest this update: Fri 30 May 2025 19:40:12 +0000 Manifest next update: Fri 06 Jun 2025 19:40:12 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: PR5V8vZxDn5XppFmySUqQRq8+/hMtcaePcB1yyfkBfI=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: AU3Frw6p1SnNaYVLPNPNSlHZdunuBupMTCIgXK+Ojng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: May 30 19:40:12 2025 GMT Not After : Jun 6 19:40:12 2025 GMT Subject: CN=683a099c-5475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:d6:46:04:23:25:3b:f7:85:10:26:83:f2: fd:f7:26:df:c5:ac:3a:f6:74:97:72:54:4e:0b:1b: ce:50:0b:e5:f1:e2:0f:a8:2a:9c:d4:6e:03:a4:0e: ad:ef:cb:69:b2:52:7a:ee:af:28:11:5f:dc:c6:40: 45:b5:a9:c2:bf:97:37:cc:e5:ee:c0:3d:48:20:b3: 5b:b5:76:68:67:25:40:a4:46:aa:74:e8:c0:b3:7d: af:6d:c3:20:12:8e:fb:f5:6a:23:cb:38:a4:ae:f5: 48:bc:99:2d:b5:ae:60:8b:80:f8:67:26:8b:1e:44: 02:9a:8f:4a:1e:c5:46:6c:50:83:a4:34:a1:ef:59: fa:da:77:b7:7b:5d:ad:e8:c1:f9:7f:8e:14:b6:4c: 2d:97:29:c6:26:eb:1b:34:2f:e8:49:d6:8f:62:84: ad:20:cb:88:a1:f9:86:96:d3:53:a5:a4:ef:f7:19: b1:e0:82:d8:1f:7e:0b:a9:74:75:88:42:0c:b5:f5: 2f:62:cb:f7:2d:f2:18:4f:f0:b0:d1:c8:8a:6d:95: 2b:29:63:8b:b8:3a:3f:09:82:fc:f1:ca:30:97:19: 30:24:e5:5d:12:2b:19:49:21:45:dc:6d:16:bf:0c: e9:05:51:fc:9b:40:01:b8:af:e0:bf:bc:c6:73:b5: 25:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1C:39:70:C7:14:85:63:9A:31:28:3E:AA:7B:64:A1:F5:C3:15:03 X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:8f:8c:06:2b:1e:eb:97:cc:eb:23:0e:06:9e:41:74:55:1d: 2f:da:93:0a:0f:fa:a1:be:3e:0e:85:a1:ee:9a:80:12:1a:a9: c3:a8:93:4a:fc:71:82:0d:57:a1:64:66:70:5a:8b:0d:c2:05: be:5d:fa:08:c5:a2:85:62:85:44:4f:a9:1d:28:e2:db:e2:8d: f3:4f:1d:cd:d9:d4:8a:9f:46:40:71:95:30:c3:4f:1e:87:1b: 02:3a:97:8e:2c:50:78:94:14:0c:96:08:43:71:ac:67:ee:a9: 40:d7:f5:e6:50:0a:f8:83:11:20:bc:31:d0:7b:72:1e:f9:42: 7a:86:22:09:0a:63:e9:16:f3:1c:1d:e5:fd:a1:6b:6b:13:10: 27:de:a9:e3:55:43:86:8a:13:bf:4a:ce:96:4f:90:4c:e0:ce: 94:cd:19:05:b1:88:27:69:67:8c:81:e1:f6:89:44:67:e0:b5: 5a:a6:19:e1:46:9f:55:1c:44:f9:28:8d:d2:37:51:87:cd:24: 84:d1:cb:85:6a:c5:d8:87:b3:cc:04:2b:a6:36:7f:db:c8:b2: 8f:a3:b3:92:b7:5e:32:2f:31:92:ae:73:87:68:a4:54:86:67: b5:3c:03:49:80:22:ea:7f:10:36:be:3f:f2:1b:42:59:57:17: 2f:0b:9f:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjUwNTMwMTk0MDEyWhcNMjUwNjA2MTk0MDEyWjAYMRYwFAYD VQQDEw02ODNhMDk5Yy01NDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU7WRgQjJTv3hRAmg/L99ybfxaw69nSXclROCxvOUAvl8eIPqCqc1G4DpA6t 78tpslJ67q8oEV/cxkBFtanCv5c3zOXuwD1IILNbtXZoZyVApEaqdOjAs32vbcMg Eo779WojyzikrvVIvJktta5gi4D4ZyaLHkQCmo9KHsVGbFCDpDSh71n62ne3e12t 6MH5f44UtkwtlynGJusbNC/oSdaPYoStIMuIofmGltNTpaTv9xmx4ILYH34LqXR1 iEIMtfUvYsv3LfIYT/Cw0ciKbZUrKWOLuDo/CYL88cowlxkwJOVdEisZSSFF3G0W vwzpBVH8m0ABuK/gv7zGc7UllwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwcOXDH FIVjmjEoPqp7ZKH1wxUDMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSj4wGKx7rl8zrIw4GnkF0VR0v2pMKD/qhvj4OhaHumoASGqnDqJNK /HGCDVehZGZwWosNwgW+XfoIxaKFYoVET6kdKOLb4o3zTx3N2dSKn0ZAcZUww08e hxsCOpeOLFB4lBQMlghDcaxn7qlA1/XmUAr4gxEgvDHQe3Ie+UJ6hiIJCmPpFvMc HeX9oWtrExAn3qnjVUOGihO/Ss6WT5BM4M6UzRkFsYgnaWeMgeH2iURn4LVaphnh Rp9VHET5KI3SN1GHzSSE0cuFasXYh7PMBCumNn/byLKPo7OSt14yLzGSrnOHaKRU hme1PANJgCLqfxA2vj/yG0JZVxcvC5+H -----END CERTIFICATE-----Generated at Sat May 31 17:04:57 2025 by rpki-client