$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: 8KQSbvjYdI9yM8A3JXtKcBfalWK7u+m/UiQlJvf4sC4= Subject key identifier: DC:16:4E:5A:62:06:11:12:52:9A:E0:2C:A0:23:08:FE:A1:EF:DE:FF Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 0795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 078A Signing time: Fri 30 May 2025 21:36:43 +0000 Manifest this update: Fri 30 May 2025 21:36:43 +0000 Manifest next update: Fri 06 Jun 2025 21:36:43 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: Hdm7xLZmq4SMvmSJMCwRV7lkp21ivRfPycMZNrsptLA=) 2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: TZy3mzqffsTM4n4Rbmohmuv3VCPWE9WJRvRzq53CbvQ=) 3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: IPmClsdSMbassfXddv44p/mv8kyQ7PdScutwrTiO+q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1941 (0x795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: May 30 21:36:43 2025 GMT Not After : Jun 6 21:36:43 2025 GMT Subject: CN=683a24eb-6ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:c3:ba:61:a5:dc:1c:89:75:dc:92:4c:ec: a4:53:5b:ff:3e:e0:91:09:01:90:67:1d:7a:91:1f: 92:49:2a:1d:a0:b2:2d:31:fa:f9:6d:9c:08:a1:7a: ae:d6:24:91:63:0a:85:88:f3:45:da:e6:2b:37:62: 06:5e:e6:8d:13:fc:81:d2:82:57:d3:86:81:9c:d0: d2:29:03:a4:10:ae:ec:dc:70:83:a1:58:c5:68:27: 0f:75:8d:94:34:41:63:cf:40:ec:df:86:93:08:c0: a4:9b:82:4a:60:bd:36:30:82:0b:e3:11:ce:de:a6: c2:6a:ff:93:36:1b:c2:ed:84:ee:4f:cf:c1:b4:fc: 80:53:5b:e2:bc:13:8d:48:c4:37:26:a3:68:d4:e0: 03:16:12:7d:79:e3:e1:4a:97:28:fc:c1:1b:f5:dd: fb:5e:6e:0c:40:b3:ee:ed:b5:c0:62:9d:4f:7d:bd: c4:c1:51:6c:f9:50:41:3d:ea:4c:23:28:e7:ee:a4: 2e:d1:2e:6f:76:ea:42:7e:94:7e:a1:15:f5:39:fc: 05:52:22:a8:11:5e:3f:54:3f:82:f7:c9:0f:be:78: 6c:32:30:16:24:ee:fd:52:33:57:07:bc:f8:4a:46: 55:e1:fb:3c:68:ef:92:47:79:9b:a6:ad:1e:65:d0: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:16:4E:5A:62:06:11:12:52:9A:E0:2C:A0:23:08:FE:A1:EF:DE:FF X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:7f:26:a7:48:91:0f:28:bf:30:2e:c2:c7:fa:96:b2:e8:09: 7b:cf:f7:f4:65:9f:f9:8a:e1:8f:9f:bd:ee:b5:b9:68:a9:d7: 2e:f9:c8:44:a5:e0:f1:fd:66:dd:77:08:f6:4f:b8:2b:56:4d: cd:cf:4b:d4:d8:65:40:df:06:db:ee:3f:37:0d:a0:50:26:5c: ac:be:25:59:08:97:99:71:61:b3:97:32:18:87:ea:8e:08:e0: f4:76:c3:ab:a5:23:6f:36:7b:4b:ac:c2:5c:65:e0:5c:0f:21: d3:6d:c0:39:e8:c2:8d:b9:f0:63:b4:d0:2d:53:4c:9e:ec:81: 4e:d5:b0:ae:a1:d4:79:30:d5:78:14:5a:b9:33:15:55:c9:b0: 6e:50:cf:fe:66:78:a6:f0:1e:25:4c:80:a0:ef:e3:13:f4:80: df:99:80:09:ae:79:70:f5:45:a7:ae:48:0c:40:51:81:c1:74: 65:5e:da:d8:b9:41:9a:8a:ec:30:89:08:1d:a5:58:44:c1:ba: 23:89:2a:e8:3d:30:2f:ab:75:5f:ec:ff:72:9f:43:b9:7c:f0: 4a:8b:30:be:8f:0e:50:00:25:ee:b4:9f:29:25:63:40:59:96: 98:f1:46:67:c8:0b:b8:b3:49:a3:08:83:0e:88:61:b0:da:ae: c8:ab:3e:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjUwNTMwMjEzNjQzWhcNMjUwNjA2MjEzNjQzWjAYMRYwFAYD VQQDEw02ODNhMjRlYi02ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1bDumGl3ByJddySTOykU1v/PuCRCQGQZx16kR+SSSodoLItMfr5bZwIoXqu 1iSRYwqFiPNF2uYrN2IGXuaNE/yB0oJX04aBnNDSKQOkEK7s3HCDoVjFaCcPdY2U NEFjz0Ds34aTCMCkm4JKYL02MIIL4xHO3qbCav+TNhvC7YTuT8/BtPyAU1vivBON SMQ3JqNo1OADFhJ9eePhSpco/MEb9d37Xm4MQLPu7bXAYp1Pfb3EwVFs+VBBPepM Iyjn7qQu0S5vdupCfpR+oRX1OfwFUiKoEV4/VD+C98kPvnhsMjAWJO79UjNXB7z4 SkZV4fs8aO+SR3mbpq0eZdAwWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwWTlpi BhESUprgLKAjCP6h797/MB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQfyanSJEPKL8wLsLH+pay6Al7z/f0ZZ/5iuGPn73utbloqdcu+chE peDx/Wbddwj2T7grVk3Nz0vU2GVA3wbb7j83DaBQJlysviVZCJeZcWGzlzIYh+qO COD0dsOrpSNvNntLrMJcZeBcDyHTbcA56MKNufBjtNAtU0ye7IFO1bCuodR5MNV4 FFq5MxVVybBuUM/+Znim8B4lTICg7+MT9IDfmYAJrnlw9UWnrkgMQFGBwXRlXtrY uUGaiuwwiQgdpVhEwbojiSroPTAvq3Vf7P9yn0O5fPBKizC+jw5QACXutJ8pJWNA WZaY8UZnyAu4s0mjCIMOiGGw2q7Iqz7m -----END CERTIFICATE-----Generated at Sat May 31 17:29:02 2025 by rpki-client