$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: x9CLzwaji3kz1XGIR8Y2ESxaCVWMLJp55B3eR/70i8Q= Subject key identifier: 51:27:94:BE:C9:B7:F1:C9:71:13:1F:11:75:69:3D:25:0B:D5:1D:AE Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: BA Signing time: Sat 31 May 2025 05:30:43 +0000 Manifest this update: Sat 31 May 2025 05:30:42 +0000 Manifest next update: Sat 07 Jun 2025 05:30:42 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: xlGi01/pOzsVngt1i1MF/cCbBDiYgURkugib+5OIP1w=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: KwkklQiSakEeltaaQOJwnjAgXDHwV1KOPtVGyZJnp/Q=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: May 31 05:30:42 2025 GMT Not After : Jun 7 05:30:42 2025 GMT Subject: CN=683a9403-d9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:02:1c:71:18:0d:63:74:06:d7:58:fd:6b: 7c:54:d4:2c:5a:38:b0:06:51:36:c8:a9:54:95:2c: 61:b3:0a:59:13:a2:84:cf:f5:39:9c:f1:c3:e2:b8: 45:0c:51:50:1c:72:6d:29:8e:08:9d:6f:8e:cb:c3: 4e:8a:93:04:4b:15:31:9c:28:48:25:47:70:b7:9a: 95:5e:40:95:b7:6f:3d:92:42:95:30:a4:2a:b7:ed: 44:00:c8:79:a9:0e:4a:bf:a0:8f:31:6a:3b:1d:4e: 65:0e:0a:8e:a0:cb:02:3b:25:1c:a5:c9:26:b7:e8: fa:d0:29:0d:ae:5b:c7:e0:05:9c:e9:d1:09:7e:6b: f0:c5:5b:6b:63:70:4a:7d:6e:9c:2d:ed:c6:50:de: f5:92:00:19:64:88:08:f4:83:c0:fc:f6:10:d5:cf: 08:be:04:36:00:d8:ad:ab:94:34:15:9c:da:c0:f4: 4d:03:85:39:d1:4c:e9:f2:17:04:ea:73:f2:38:97: dd:08:43:79:ba:53:eb:53:a8:2f:f2:89:a4:fd:c1: 91:91:ad:3e:89:18:1b:cd:7d:b7:8d:d5:4d:54:4e: e4:b0:b5:a2:d5:a7:b0:79:2a:86:53:f6:6d:21:94: ab:c7:38:68:62:96:c8:98:9f:15:73:d3:f5:d6:12: d7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:27:94:BE:C9:B7:F1:C9:71:13:1F:11:75:69:3D:25:0B:D5:1D:AE X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7d:35:40:03:7b:d0:2f:9e:93:87:af:98:f8:32:df:07:b1: b3:5f:7c:36:56:88:d6:24:bc:a8:d3:ac:8d:55:06:fd:c0:57: fc:1f:b2:cb:ec:63:fb:2b:31:df:de:44:ce:3f:ae:75:e9:c2: c3:f8:ba:69:d5:d8:9b:b4:7a:e5:ba:b1:8a:f7:e0:2c:95:2b: 66:e8:c1:9a:c4:db:01:cf:e7:7c:b4:e3:24:6b:a4:d8:4e:ba: 2e:10:64:df:b3:2e:24:c7:96:d6:bd:4a:af:59:fd:5d:0a:b4: 24:56:24:0b:e5:99:43:b8:fd:9e:e1:c7:fa:84:46:be:e6:c1: 5d:4d:17:0c:e7:35:f7:8e:38:1b:13:ed:57:7b:e9:5f:9b:b7: 27:ce:f7:87:7f:b9:24:7f:93:28:a6:f9:87:13:77:81:a6:8e: 61:89:0e:5d:0a:3e:90:9f:6a:a6:65:a6:9c:1d:3c:f7:a2:48: 7f:9e:f1:7e:53:df:c9:4a:fe:da:ea:a8:11:4a:3c:36:9a:c4: 82:66:7a:57:6d:65:5f:17:6c:8e:44:52:cf:d1:a1:96:f0:d0: 18:93:67:18:a0:d8:ce:43:e8:f2:d8:83:52:eb:1b:4f:83:c7: 4d:10:5e:65:0b:5c:44:4e:8a:fd:66:7a:97:ca:c2:3c:b0:a8: f5:61:e1:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUwNTMxMDUzMDQyWhcNMjUwNjA3MDUzMDQyWjAYMRYwFAYD VQQDEw02ODNhOTQwMy1kOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmACHHEYDWN0BtdY/Wt8VNQsWjiwBlE2yKlUlSxhswpZE6KEz/U5nPHD4rhF DFFQHHJtKY4InW+Oy8NOipMESxUxnChIJUdwt5qVXkCVt289kkKVMKQqt+1EAMh5 qQ5Kv6CPMWo7HU5lDgqOoMsCOyUcpckmt+j60CkNrlvH4AWc6dEJfmvwxVtrY3BK fW6cLe3GUN71kgAZZIgI9IPA/PYQ1c8IvgQ2ANitq5Q0FZzawPRNA4U50Uzp8hcE 6nPyOJfdCEN5ulPrU6gv8omk/cGRka0+iRgbzX23jdVNVE7ksLWi1aeweSqGU/Zt IZSrxzhoYpbImJ8Vc9P11hLXhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEnlL7J t/HJcRMfEXVpPSUL1R2uMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtfTVAA3vQL56Th6+Y+DLfB7GzX3w2VojWJLyo06yNVQb9wFf8H7LL 7GP7KzHf3kTOP6516cLD+Lpp1dibtHrlurGK9+AslStm6MGaxNsBz+d8tOMka6TY TrouEGTfsy4kx5bWvUqvWf1dCrQkViQL5ZlDuP2e4cf6hEa+5sFdTRcM5zX3jjgb E+1Xe+lfm7cnzveHf7kkf5MopvmHE3eBpo5hiQ5dCj6Qn2qmZaacHTz3okh/nvF+ U9/JSv7a6qgRSjw2msSCZnpXbWVfF2yORFLP0aGW8NAYk2cYoNjOQ+jy2INS6xtP g8dNEF5lC1xETor9ZnqXysI8sKj1YeHR -----END CERTIFICATE-----Generated at Sat May 31 16:38:05 2025 by rpki-client