$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft File: iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json) Hash identifier: o9EP+qgCRKo7o81b126RWM4OirRYOtZqyTrpUyo/2G0= Subject key identifier: 8E:84:9C:18:C7:54:48:67:D9:F7:51:6D:F0:C1:74:0F:03:BB:96:74 Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 Certificate issuer: /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft Manifest number: 1B Signing time: Sun 01 Jun 2025 07:38:16 +0000 Manifest this update: Sun 01 Jun 2025 07:38:16 +0000 Manifest next update: Sun 08 Jun 2025 07:38:16 +0000 Files and hashes: 1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: gM8PvAwUe+n7Wf25k9ArmWkGqes4b3twJ9/ESCVb070=) 2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: v93VVwAanSucSOqj9EwS1pD5Lqih1cuGiSwwM282Dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Validity Not Before: Jun 1 07:38:16 2025 GMT Not After : Jun 8 07:38:16 2025 GMT Subject: CN=683c0368-8f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:ff:ef:fc:1b:7d:53:b3:28:ad:08:3d:ab: 41:3f:f1:2a:cb:1f:4a:27:b6:d0:ba:5c:02:3c:a5: c9:8f:b5:37:2f:0f:c3:31:99:6a:b9:f5:58:82:0a: 06:83:ea:0c:8c:75:82:37:c4:97:d9:7a:93:54:99: 84:a6:49:8e:db:5b:ea:70:88:2b:2e:28:a2:b8:88: 79:1b:92:13:7a:3d:85:ed:88:51:7e:d5:59:3d:42: aa:71:bc:a8:84:3d:13:29:07:53:18:4c:6b:19:19: a6:d1:9b:f5:5b:3d:06:16:2f:92:c7:e1:e4:cb:47: d0:4f:0a:c9:a6:2c:58:3b:80:fa:a3:33:83:70:11: 4c:e9:3c:ae:3f:d4:0f:08:21:b8:72:3f:9c:62:ba: 2b:14:7f:93:e1:d9:34:83:62:29:60:7c:78:90:cc: 7a:05:af:43:f3:4f:c8:12:bd:c2:86:0d:03:f8:f0: af:3f:fc:98:37:04:14:f0:ae:54:59:bb:41:d1:17: 91:52:48:b2:40:c2:0a:c2:7f:09:44:57:de:9a:e5: bb:e8:07:b9:00:d8:db:1b:a0:2a:a4:93:56:46:35: 44:cf:4f:fa:c6:54:4e:af:bd:2a:d1:d7:5e:26:04: cb:12:f7:82:bf:b2:63:1b:61:6c:d4:3d:06:6b:7f: 62:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:84:9C:18:C7:54:48:67:D9:F7:51:6D:F0:C1:74:0F:03:BB:96:74 X509v3 Authority Key Identifier: keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b7:ed:8d:0b:b0:27:f5:e5:26:ba:7d:19:84:7d:42:b7:d7: 4a:af:a7:47:2c:3f:dc:6d:ac:75:01:3e:8b:e1:9e:10:86:03: 2a:9e:17:73:a6:89:e8:18:8a:7d:f3:a4:05:b5:31:f4:ff:18: a2:73:6d:32:00:46:40:42:87:b2:4e:49:c0:4a:cb:e4:81:90: 84:73:b4:c7:ef:95:e8:ab:ba:2b:74:4b:d1:52:e6:4b:37:c8: b1:a5:c8:6e:30:58:15:2f:d1:0e:37:25:5b:7e:09:43:3a:e4: f0:a2:9c:53:0c:ed:ab:97:b2:15:95:0f:61:a8:b8:30:0c:25: 7a:da:c5:2e:d3:df:3c:6a:97:fa:60:ab:99:66:e0:de:11:f5: 63:69:fb:ae:2d:fd:93:ce:a2:ed:67:b4:e1:e3:17:d8:66:08: 85:e8:0a:10:6f:45:75:0e:68:eb:07:3e:01:1a:a3:0b:06:73: b7:61:20:35:12:cf:02:e2:52:7b:55:3f:ee:ee:c2:13:f2:2c: 05:e1:de:3f:6d:e7:16:38:f3:73:72:0a:4f:bf:b1:74:02:db: 5c:fc:41:75:df:23:78:f7:17:ec:f0:f9:e9:09:5a:e7:d8:06: c0:de:f4:5f:19:a0:1b:a6:12:08:4f:1d:fc:71:90:9d:30:87: 07:37:b5:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoODg5MTk1MzhFRURFQzgzMjBENUVBRjZCMUYzMkIyOTgy M0FCNzgxMDAeFw0yNTA2MDEwNzM4MTZaFw0yNTA2MDgwNzM4MTZaMBgxFjAUBgNV BAMTDTY4M2MwMzY4LThmMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKeP/v/Bt9U7MorQg9q0E/8SrLH0onttC6XAI8pcmPtTcvD8MxmWq59ViCCgaD 6gyMdYI3xJfZepNUmYSmSY7bW+pwiCsuKKK4iHkbkhN6PYXtiFF+1Vk9QqpxvKiE PRMpB1MYTGsZGabRm/VbPQYWL5LH4eTLR9BPCsmmLFg7gPqjM4NwEUzpPK4/1A8I IbhyP5xiuisUf5Ph2TSDYilgfHiQzHoFr0PzT8gSvcKGDQP48K8//Jg3BBTwrlRZ u0HRF5FSSLJAwgrCfwlEV96a5bvoB7kA2NsboCqkk1ZGNUTPT/rGVE6vvSrR114m BMsS94K/smMbYWzUPQZrf2I1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjoScGMdU SGfZ91Ft8MF0DwO7lnQwHwYDVR0jBBgwFoAUiJGVOO7eyDINXq9rHzKymCOreBAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzA0OTg2NDc2MTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVC QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaUpHVk9PN2V5RElOWHE5ckh6S3ltQ09yZUJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzA0OTg2NDc2MTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJ TlhxOXJIekt5bUNPcmVCQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEi37Y0LsCf15Sa6fRmEfUK310qvp0csP9xtrHUBPovhnhCGAyqeF3Om iegYin3zpAW1MfT/GKJzbTIARkBCh7JOScBKy+SBkIRztMfvleiruit0S9FS5ks3 yLGlyG4wWBUv0Q43JVt+CUM65PCinFMM7auXshWVD2GouDAMJXraxS7T3zxql/pg q5lm4N4R9WNp+64t/ZPOou1ntOHjF9hmCIXoChBvRXUOaOsHPgEaowsGc7dhIDUS zwLiUntVP+7uwhPyLAXh3j9t5xY483NyCk+/sXQC21z8QXXfI3j3F+zw+ekJWufY BsDe9F8ZoBumEghPHfxxkJ0whwc3tf8= -----END CERTIFICATE-----Generated at Mon Jun 2 20:50:10 2025 by rpki-client