$ rpki-client -vvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft File: iifxtRRZ_TbLLIBghxxVOPnSPX4.mft (raw, json) Hash identifier: dIbYAeg+6nEMQLlTiKkJ5gu76Q/D36IPPLSbinlVS9Q= Subject key identifier: 65:28:4C:3E:E3:D1:91:7B:BB:37:4D:5C:42:96:F6:B8:5A:B2:2D:E3 Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E Certificate issuer: /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft Manifest number: C2 Signing time: Sat 31 May 2025 05:26:26 +0000 Manifest this update: Sat 31 May 2025 05:26:26 +0000 Manifest next update: Sat 07 Jun 2025 05:26:26 +0000 Files and hashes: 1: iifxtRRZ_TbLLIBghxxVOPnSPX4.crl (hash: y/wAN87FpK6HsGNraEi04T0HHR9iDPUQwY92DmYwnu0=) 2: 7DA22F2C199D11EFB19DA380C4F9AE02.roa (hash: m/G/Sff8tqA/XbNYboOxx50mkuYuHxKvPy3vRj80oOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AACD, serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Validity Not Before: May 31 05:26:26 2025 GMT Not After : Jun 7 05:26:26 2025 GMT Subject: CN=683a9302-118c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5b:c4:51:d9:62:02:8d:85:1a:50:e7:0d:c6: 15:a4:ef:08:12:26:74:eb:b4:c9:50:dc:d2:58:71: ae:51:25:db:74:49:be:19:26:c7:e6:04:8c:fc:f4: 1e:0a:e3:73:9b:e5:62:46:b6:65:da:18:57:0f:60: 8c:5b:35:a7:98:98:fa:2f:20:7b:ee:58:43:d0:7b: ac:49:a5:24:03:fd:91:a8:9e:f7:29:e9:1d:6d:05: c2:07:53:f8:a0:de:63:be:fd:36:76:68:c9:fc:f8: 3c:c9:83:c9:e7:99:ea:3d:b9:d1:23:cd:d3:d5:41: 23:a4:0b:15:45:dd:9c:3f:d8:2b:1e:b6:54:91:6c: 69:cc:a4:bc:ba:cf:dc:4e:45:14:7d:f7:7f:31:f5: 13:5c:62:dd:c5:ac:22:da:0f:ee:cd:74:08:99:f2: 52:75:92:26:32:5a:99:31:bf:84:5b:a2:1e:cd:d3: b9:61:5b:84:cf:35:83:6e:f0:a4:7c:2d:17:06:7f: 8d:73:b1:b6:d0:a8:ba:16:04:f7:54:d6:13:f4:9e: 1b:15:1c:cc:df:5c:a9:1e:e4:db:72:ee:9b:06:27: 2d:0d:03:b2:b8:67:74:7f:6d:f0:e6:57:32:49:eb: 38:60:35:41:ed:71:9a:05:24:d9:9b:7c:b9:92:46: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:28:4C:3E:E3:D1:91:7B:BB:37:4D:5C:42:96:F6:B8:5A:B2:2D:E3 X509v3 Authority Key Identifier: keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4f:bc:b2:d9:ad:59:a7:11:6c:d5:1f:75:71:5f:b6:8c:21: 93:93:ac:a2:f6:f4:c7:48:08:1c:f3:86:19:5d:e6:4d:5b:ab: 79:f7:46:24:d6:5f:08:f7:94:2b:56:6c:c6:1f:d7:3a:d9:21: c2:f2:e5:d0:5b:bd:26:fe:ad:57:5b:c6:ac:cc:8e:87:9a:1a: d4:12:42:01:86:6a:b4:99:15:cf:0e:3b:1f:1a:d4:53:15:19: 91:66:5a:76:01:a2:86:f0:f5:85:71:32:3a:0c:51:45:d1:e3: 79:b2:60:3d:48:93:4e:ff:d8:f1:da:37:55:18:77:28:31:3c: a5:7f:c2:30:b5:c2:20:c0:2c:46:22:e9:9c:22:ee:74:c9:28: c5:ae:71:14:a6:9a:dd:48:b0:d5:0b:1a:3c:00:0f:9e:4d:94: 38:f9:8c:90:65:23:c4:30:0d:a9:0e:0c:22:46:f7:3b:e3:6b: f0:19:9b:e3:f2:05:7c:7c:56:c0:8e:12:09:03:fe:89:4e:7c: 73:17:e3:ff:0c:87:88:a0:c2:a3:ba:38:6e:1d:70:75:7e:06: f2:43:76:c1:0a:c8:9b:d5:92:b0:53:1b:6b:ce:82:7c:55:71: 0e:86:4e:33:3d:2a:84:d6:a1:92:c3:00:aa:e6:d1:ef:52:c4: 5a:a0:77:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBQ0QxMTAvBgNVBAUTKDhBMjdGMUI1MTQ1OUZEMzZDQjJDODA2MDg3MUM1NTM4 RjlEMjNEN0UwHhcNMjUwNTMxMDUyNjI2WhcNMjUwNjA3MDUyNjI2WjAYMRYwFAYD VQQDEw02ODNhOTMwMi0xMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1vEUdliAo2FGlDnDcYVpO8IEiZ067TJUNzSWHGuUSXbdEm+GSbH5gSM/PQe CuNzm+ViRrZl2hhXD2CMWzWnmJj6LyB77lhD0HusSaUkA/2RqJ73KekdbQXCB1P4 oN5jvv02dmjJ/Pg8yYPJ55nqPbnRI83T1UEjpAsVRd2cP9grHrZUkWxpzKS8us/c TkUUffd/MfUTXGLdxawi2g/uzXQImfJSdZImMlqZMb+EW6IezdO5YVuEzzWDbvCk fC0XBn+Nc7G20Ki6FgT3VNYT9J4bFRzM31ypHuTbcu6bBictDQOyuGd0f23w5lcy Ses4YDVB7XGaBSTZm3y5kkaZTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUoTD7j 0ZF7uzdNXEKW9rhasi3jMB8GA1UdIwQYMBaAFIon8bUUWf02yyyAYIccVTj50j1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUFDRC84RUExOUFBMjE5 OUMxMUVGOTY5NzM0N0ZDNEY5QUUwMi9paWZ4dFJSWl9UYkxMSUJnaHh4Vk9QblNQ WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpZnh0UlJaX1RiTExJQmdoeHhWT1BuU1BYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUFDRC84RUExOUFBMjE5OUMxMUVGOTY5NzM0N0ZDNEY5QUUwMi9paWZ4dFJSWl9U YkxMSUJnaHh4Vk9QblNQWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4T7yy2a1ZpxFs1R91cV+2jCGTk6yi9vTHSAgc84YZXeZNW6t590Yk 1l8I95QrVmzGH9c62SHC8uXQW70m/q1XW8aszI6HmhrUEkIBhmq0mRXPDjsfGtRT FRmRZlp2AaKG8PWFcTI6DFFF0eN5smA9SJNO/9jx2jdVGHcoMTylf8IwtcIgwCxG IumcIu50ySjFrnEUpprdSLDVCxo8AA+eTZQ4+YyQZSPEMA2pDgwiRvc742vwGZvj 8gV8fFbAjhIJA/6JTnxzF+P/DIeIoMKjujhuHXB1fgbyQ3bBCsib1ZKwUxtrzoJ8 VXEOhk4zPSqE1qGSwwCq5tHvUsRaoHdO -----END CERTIFICATE-----Generated at Sat May 31 17:20:40 2025 by rpki-client