$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft File: -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json) Hash identifier: +0ShnR1Uj+X9MhmbAW0/O/Mk4cc6x3geHOP75/AjjWo= Subject key identifier: 03:FE:48:B8:9A:1D:8F:F5:8D:D1:8E:11:51:FB:5C:7D:44:7E:BC:D8 Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B Certificate issuer: /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft Manifest number: 83 Signing time: Sat 31 May 2025 06:17:12 +0000 Manifest this update: Sat 31 May 2025 06:17:12 +0000 Manifest next update: Sat 07 Jun 2025 06:17:12 +0000 Files and hashes: 1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: W4FvcSONIBqqA6eev2X/KQNLTeIZD9AsSCAnyf9fYQ4=) 2: C276060084F011EF9D52F573C4F9AE02.roa (hash: /tD3m0UAwlMwH5KNwcamave93IXNHxAGbXTHUSH9zMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Validity Not Before: May 31 06:17:12 2025 GMT Not After : Jun 7 06:17:12 2025 GMT Subject: CN=683a9ee8-51b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:d2:0e:a3:fe:0b:ac:09:c4:b7:88:54:23: ca:51:66:b1:c4:7f:a7:f5:7e:e4:a2:98:0c:21:30: 3a:06:26:09:43:ee:c2:e8:ea:5d:52:a3:8a:ad:2d: 27:39:16:85:35:e1:f4:5b:7b:64:32:5b:6d:e2:4b: a8:dd:4a:44:c7:47:87:72:4b:09:cc:a0:97:86:ae: 05:af:17:6e:81:f2:a0:f0:f5:35:da:b0:66:a7:4d: 25:bc:ca:30:31:26:1b:e1:ee:a0:e1:45:91:9a:74: b7:a3:78:c4:49:eb:e0:c8:87:3d:76:11:a0:22:af: 95:be:5d:e7:9e:1a:be:1d:c8:02:52:cc:79:1f:6c: 8b:b6:6e:2f:b6:ed:fa:98:31:d2:bf:3d:c2:00:a2: 16:54:08:ae:e5:63:62:df:7b:4f:0a:76:80:83:11: 95:16:b8:ea:36:c8:3e:34:4e:b2:9b:12:f8:ac:f1: aa:79:1f:86:03:08:55:b6:a6:1d:00:e5:7e:c1:58: c6:a4:66:6e:e7:94:b6:95:50:e5:c8:d9:b0:8f:83: c1:dc:6c:1e:f9:57:7d:29:e0:8f:25:76:3c:28:78: 51:68:9b:e2:c4:0d:a0:63:42:fc:a4:41:54:6b:43: 3b:00:e6:c4:91:75:e5:3d:52:60:df:87:82:74:2f: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FE:48:B8:9A:1D:8F:F5:8D:D1:8E:11:51:FB:5C:7D:44:7E:BC:D8 X509v3 Authority Key Identifier: keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:87:9c:44:0d:f1:4d:03:eb:51:c6:56:ce:7b:80:2f:ce:86: 83:0a:42:6f:7d:25:67:5c:d7:7f:17:ae:42:b6:55:e9:6d:a3: 99:b4:3e:51:94:24:03:35:6b:95:4f:bc:2b:d3:30:f4:ac:bf: 3b:68:a1:b4:44:9a:37:28:86:7d:95:ae:58:37:9e:d9:47:ce: 80:22:db:2c:10:58:e0:63:b2:48:b1:d1:97:db:70:c9:56:90: d8:f1:84:66:b6:59:1e:e1:90:cc:b3:dd:bb:1d:75:ea:d8:d4: f5:28:a2:0f:f4:ab:98:e2:7c:56:aa:d0:fb:8c:de:4b:06:0b: 7f:eb:60:80:91:00:40:0f:c9:7b:03:e9:4c:84:56:89:e0:dd: f3:dd:47:2c:35:e8:cf:ac:0e:ad:e9:ec:14:e8:6c:be:0e:7a: 86:26:99:de:3e:c7:ed:89:d8:51:f8:f0:1c:f8:f4:35:f6:17: 5b:d0:69:34:18:95:be:50:4b:64:0e:33:e0:a3:eb:64:bb:cf: 6a:e4:84:03:52:c9:16:9c:5b:cc:94:f5:29:be:ab:3a:2a:b7: 6d:da:10:17:8d:1c:86:2a:c6:12:6e:a6:ee:ba:c9:6c:e1:bc: 9f:a8:07:9b:e9:f5:23:24:93:64:6e:19:42:2b:f2:c2:06:42: 6c:25:78:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1MjUxMTAvBgNVBAUTKEZCRkY4OEFERTk5MzY2ODlCMzI0MTQ1QkZFNjNCNzRE NTdBQUFDMEIwHhcNMjUwNTMxMDYxNzEyWhcNMjUwNjA3MDYxNzEyWjAYMRYwFAYD VQQDEw02ODNhOWVlOC01MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCLSDqP+C6wJxLeIVCPKUWaxxH+n9X7kopgMITA6BiYJQ+7C6OpdUqOKrS0n ORaFNeH0W3tkMltt4kuo3UpEx0eHcksJzKCXhq4FrxdugfKg8PU12rBmp00lvMow MSYb4e6g4UWRmnS3o3jESevgyIc9dhGgIq+Vvl3nnhq+HcgCUsx5H2yLtm4vtu36 mDHSvz3CAKIWVAiu5WNi33tPCnaAgxGVFrjqNsg+NE6ymxL4rPGqeR+GAwhVtqYd AOV+wVjGpGZu55S2lVDlyNmwj4PB3Gwe+Vd9KeCPJXY8KHhRaJvixA2gY0L8pEFU a0M7AObEkXXlPVJg34eCdC/JyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAP+SLia HY/1jdGOEVH7XH1EfrzYMB8GA1UdIwQYMBaAFPv/iK3pk2aJsyQUW/5jt01XqqwL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FQTAyMzQxQzg0 RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpvbXpKQlJiX21PM1RWZXFy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1fLUlyZW1UWm9tekpCUmJfbU8zVFZlcXJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUyNS9FQTAyMzQxQzg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpv bXpKQlJiX21PM1RWZXFyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFh5xEDfFNA+tRxlbOe4AvzoaDCkJvfSVnXNd/F65CtlXpbaOZtD5R lCQDNWuVT7wr0zD0rL87aKG0RJo3KIZ9la5YN57ZR86AItssEFjgY7JIsdGX23DJ VpDY8YRmtlke4ZDMs927HXXq2NT1KKIP9KuY4nxWqtD7jN5LBgt/62CAkQBAD8l7 A+lMhFaJ4N3z3UcsNejPrA6t6ewU6Gy+DnqGJpnePsftidhR+PAc+PQ19hdb0Gk0 GJW+UEtkDjPgo+tku89q5IQDUskWnFvMlPUpvqs6Krdt2hAXjRyGKsYSbqbuusls 4byfqAeb6fUjJJNkbhlCK/LCBkJsJXgg -----END CERTIFICATE-----Generated at Sat May 31 17:17:29 2025 by rpki-client