$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: hvKFt0MkmHgMTrHGvWHVqr+BLzohuaPSYt3yl4wWuXs= Subject key identifier: 1D:9B:EC:0F:C4:A6:3E:95:B1:9F:52:6A:3B:E5:21:8B:45:4B:72:F9 Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 07F8 Signing time: Fri 30 May 2025 21:10:33 +0000 Manifest this update: Fri 30 May 2025 21:10:33 +0000 Manifest next update: Fri 06 Jun 2025 21:10:33 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: 1i/MUiIkZNTt6b7FBCN5WyGx/e+kfpd6fQLSvPerVtk=) 2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: HYLlaeYCfOhwQIw7Fb2O6gPao8D0dgK0DzH31riAA30=) 3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: CYIyqLTD/N7RHKkzVI9yCjfPCRo2bvj5EsxmVhBkQbM=) 4: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: EAWxypzDCQPQzqcMnvR1K/XDUjaENmu81MPhjQzqwkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: May 30 21:10:33 2025 GMT Not After : Jun 6 21:10:33 2025 GMT Subject: CN=683a1ec9-0fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:89:f3:37:53:3d:ed:86:e6:34:a1:ca:53: d1:0d:14:ad:33:fd:1c:da:45:88:bd:ab:00:bd:c8: c6:dc:59:96:93:fb:d7:b8:07:04:8c:49:dc:c4:c5: 1b:f3:a9:df:06:cd:0c:ab:89:2a:62:11:ec:b7:57: 66:60:5a:24:e3:ed:4a:82:a0:98:f2:3f:0e:f5:d3: a5:c7:36:31:2b:d7:a6:fd:d6:15:a1:09:6a:44:9e: 68:d8:4b:7a:be:e3:bc:f2:f1:73:3c:40:31:b4:61: 1a:10:20:5f:2f:66:5e:8c:bb:cd:94:1e:3c:7b:13: 29:59:8c:b7:d5:1b:08:08:45:6e:18:57:f0:72:6d: e0:b5:e4:b9:5e:a6:66:62:96:82:0e:c4:ca:3f:ec: cb:38:c8:ca:99:6a:55:af:e9:fd:46:cb:bd:c5:71: cb:89:ea:7c:03:9c:d6:1b:71:59:3d:f7:8c:bd:76: 22:ff:21:3a:c3:6c:e3:5f:8b:ec:11:f9:05:66:8e: e0:7e:8e:16:2e:8a:a4:a0:46:e9:7a:ae:2e:9b:73: fc:c6:7a:0c:25:32:3c:12:aa:d2:be:39:97:54:f9: 67:61:cc:b7:6e:f7:f0:5b:92:dc:67:f9:05:1a:25: 35:7c:da:6b:05:34:5d:b7:1b:8f:81:0b:ca:47:3e: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9B:EC:0F:C4:A6:3E:95:B1:9F:52:6A:3B:E5:21:8B:45:4B:72:F9 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a6:c9:f3:aa:f5:87:b7:92:06:91:e3:3c:33:ab:df:55:f2: 4e:8d:59:11:13:22:61:aa:07:c5:49:3c:f5:cb:f5:40:c1:9d: 4a:d9:91:9d:9f:2b:9f:e5:00:02:48:2e:83:e0:61:e3:06:8a: 72:7d:9f:5e:03:c6:ed:d2:4d:35:dc:7c:2a:a6:d0:83:fd:72: f3:36:80:c9:f1:cc:bb:79:a8:37:c0:df:e4:2f:95:2b:8f:42: ae:0d:e0:a4:7a:37:25:4e:4a:63:b5:03:96:02:1e:e7:18:0d: e6:41:3d:58:1b:e0:41:2f:03:1c:b4:8d:ef:01:08:98:3f:e0: b2:43:26:21:21:7c:e4:16:01:b8:62:8c:f2:48:99:b8:80:a5: 2a:64:c0:da:65:7e:0b:81:84:5f:1e:a2:0d:43:6a:23:10:b3: c7:02:c8:2a:25:1c:1b:90:d1:06:3a:ab:a4:f0:10:72:6d:8d: bf:88:f9:d7:80:d0:a3:38:6b:6f:9b:2c:74:9b:0d:1a:7d:26: e6:4b:c6:30:7c:fc:84:05:77:b2:32:16:09:86:c6:36:6f:97: 29:bd:e8:88:44:bd:d5:04:67:86:0e:02:23:37:9c:85:18:c6: 0a:81:d2:99:62:2b:d3:b2:b5:ec:21:58:3a:36:19:7b:29:3a: 38:fb:c2:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjUwNTMwMjExMDMzWhcNMjUwNjA2MjExMDMzWjAYMRYwFAYD VQQDEw02ODNhMWVjOS0wZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4+J8zdTPe2G5jShylPRDRStM/0c2kWIvasAvcjG3FmWk/vXuAcEjEncxMUb 86nfBs0Mq4kqYhHst1dmYFok4+1KgqCY8j8O9dOlxzYxK9em/dYVoQlqRJ5o2Et6 vuO88vFzPEAxtGEaECBfL2ZejLvNlB48exMpWYy31RsICEVuGFfwcm3gteS5XqZm YpaCDsTKP+zLOMjKmWpVr+n9Rsu9xXHLiep8A5zWG3FZPfeMvXYi/yE6w2zjX4vs EfkFZo7gfo4WLoqkoEbpeq4um3P8xnoMJTI8EqrSvjmXVPlnYcy3bvfwW5LcZ/kF GiU1fNprBTRdtxuPgQvKRz6oXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2b7A/E pj6VsZ9SajvlIYtFS3L5MB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjpsnzqvWHt5IGkeM8M6vfVfJOjVkREyJhqgfFSTz1y/VAwZ1K2ZGd nyuf5QACSC6D4GHjBopyfZ9eA8bt0k013HwqptCD/XLzNoDJ8cy7eag3wN/kL5Ur j0KuDeCkejclTkpjtQOWAh7nGA3mQT1YG+BBLwMctI3vAQiYP+CyQyYhIXzkFgG4 YozySJm4gKUqZMDaZX4LgYRfHqINQ2ojELPHAsgqJRwbkNEGOquk8BBybY2/iPnX gNCjOGtvmyx0mw0afSbmS8YwfPyEBXeyMhYJhsY2b5cpveiIRL3VBGeGDgIjN5yF GMYKgdKZYivTsrXsIVg6Nhl7KTo4+8Jk -----END CERTIFICATE-----Generated at Sat May 31 17:39:15 2025 by rpki-client