$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: JOAEGamLs6hcUSBLyhMK1qDrAN6SHq5KQj1x6RSByRQ= Subject key identifier: E4:B9:3A:6D:DC:DD:EF:9F:59:64:7C:D1:8C:91:D7:C0:35:37:14:B8 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 09DF Signing time: Sat 31 May 2025 20:04:56 +0000 Manifest this update: Sat 31 May 2025 20:04:55 +0000 Manifest next update: Sat 07 Jun 2025 20:04:55 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: qz3CUhLb/wi6uYIKdD7TXd62GVdOOSSdYKCe9zZkvKk=) 2: 794C43721A5F11F080409056C4F9AE02.roa (hash: tliF6bTq6KTU3ampYuLl3Y31z/FfmmETEltl1u+bSdc=) 3: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=) 4: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w=) 5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: 5GewRvUgDB6rcXNpXbxI+RsMmEZ6AmWtSegm+so4e0M=) 6: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: dXngOtAcFhvArc3Tgv9HMRYfy3lpLyOKuQ2Q99Bv4cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: May 31 20:04:55 2025 GMT Not After : Jun 7 20:04:55 2025 GMT Subject: CN=683b60e8-5da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5f:5f:f4:d8:6e:33:b1:79:fe:f6:1e:c8:71: b1:c7:c7:15:ee:63:2d:00:18:51:25:7f:bc:5b:f3: 92:fa:36:15:21:36:e8:9a:5f:3b:76:27:c4:68:ef: b3:f7:a3:b7:26:68:ce:5b:17:7e:69:46:ac:2b:f2: 0c:8c:76:43:b5:a9:76:18:77:4e:9f:eb:8a:83:35: 7e:af:6b:5e:40:8b:e9:2e:fc:6a:28:ad:bc:5e:b7: 02:3d:82:aa:97:ea:bd:a3:cf:da:81:68:5f:b9:49: 31:5e:ba:2c:65:30:ac:0b:0c:ad:93:c3:b5:64:f9: 17:77:d5:7b:b5:b9:8d:9b:d7:d0:09:35:f2:34:94: 2f:45:ca:f0:b6:aa:88:03:b8:b3:c9:90:98:3f:48: 33:8b:a5:76:7c:13:2b:3d:36:83:a9:98:2c:c7:3b: c8:89:8f:bd:86:c6:4b:8a:a2:d6:ae:bf:da:6b:a5: 55:56:39:3d:58:87:18:f7:9f:8b:41:4e:47:cd:4a: c6:c8:ce:40:a3:68:47:fb:81:62:9d:f0:e2:6d:eb: 42:e3:65:a4:c5:54:9a:73:e5:39:2b:5e:6c:61:be: 87:0e:2d:0f:3f:bd:35:20:cb:54:5a:7b:de:57:ea: eb:ba:5e:15:2d:1e:22:89:fe:40:bc:2c:5d:de:ba: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B9:3A:6D:DC:DD:EF:9F:59:64:7C:D1:8C:91:D7:C0:35:37:14:B8 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:52:cb:18:44:c7:af:a3:5f:74:fe:41:f8:0f:58:ca:49:19: f6:89:85:14:b1:73:92:51:d1:2f:7a:da:50:a1:58:27:f0:bb: 63:87:3c:e0:be:3f:0f:0b:3c:a6:6e:a6:bf:fe:ed:ec:0f:4d: cc:23:bd:5f:0b:19:b7:4f:ad:36:14:81:c3:6f:0c:ad:25:54: 2a:0f:8e:e5:29:06:f4:3d:1f:0a:bb:9c:d1:3b:05:d2:ea:d7: 0e:b8:15:52:b6:45:c8:fa:4b:90:71:18:20:c4:af:89:6a:9a: 4b:a0:47:74:75:3a:68:ab:b3:49:eb:02:84:3d:ce:f2:fb:51: 93:e2:38:14:c4:95:8d:4d:98:41:46:35:87:e1:58:12:0e:54: 6e:b6:4d:d9:58:ba:ba:a0:5c:ec:32:8f:d1:3f:45:17:14:ca: 54:af:a1:c0:ef:1e:7b:be:94:49:91:26:42:01:82:6b:85:8c: 12:e5:c1:94:87:79:3b:fa:73:31:e7:84:54:1b:65:a9:4a:42: 41:58:c9:2e:10:f5:96:61:f8:6f:aa:be:d0:b5:d4:65:49:5e: bf:d4:40:5d:5c:24:4f:71:0e:3b:a0:03:66:6f:ae:b6:db:c4: ce:bf:bc:4b:78:a6:89:e8:6c:ce:cf:a4:a7:6c:e6:29:96:89: ef:4d:c0:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUwNTMxMjAwNDU1WhcNMjUwNjA3MjAwNDU1WjAYMRYwFAYD VQQDEw02ODNiNjBlOC01ZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2V9f9NhuM7F5/vYeyHGxx8cV7mMtABhRJX+8W/OS+jYVITboml87difEaO+z 96O3JmjOWxd+aUasK/IMjHZDtal2GHdOn+uKgzV+r2teQIvpLvxqKK28XrcCPYKq l+q9o8/agWhfuUkxXrosZTCsCwytk8O1ZPkXd9V7tbmNm9fQCTXyNJQvRcrwtqqI A7izyZCYP0gzi6V2fBMrPTaDqZgsxzvIiY+9hsZLiqLWrr/aa6VVVjk9WIcY95+L QU5HzUrGyM5Ao2hH+4FinfDibetC42WkxVSac+U5K15sYb6HDi0PP701IMtUWnve V+rrul4VLR4iif5AvCxd3rpURwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS5Om3c 3e+fWWR80YyR18A1NxS4MB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByUssYRMevo190/kH4D1jKSRn2iYUUsXOSUdEvetpQoVgn8Ltjhzzg vj8PCzymbqa//u3sD03MI71fCxm3T602FIHDbwytJVQqD47lKQb0PR8Ku5zROwXS 6tcOuBVStkXI+kuQcRggxK+JappLoEd0dTpoq7NJ6wKEPc7y+1GT4jgUxJWNTZhB RjWH4VgSDlRutk3ZWLq6oFzsMo/RP0UXFMpUr6HA7x57vpRJkSZCAYJrhYwS5cGU h3k7+nMx54RUG2WpSkJBWMkuEPWWYfhvqr7QtdRlSV6/1EBdXCRPcQ47oANmb662 28TOv7xLeKaJ6GzOz6SnbOYplonvTcC+ -----END CERTIFICATE-----Generated at Mon Jun 2 19:52:32 2025 by rpki-client