$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: cDDipNtUqGN9fVqFanTe7M4TTknzSNpKFk5Edkd46+o= Subject key identifier: B8:9F:45:2E:CC:54:02:53:FE:91:62:42:64:6F:B0:D8:68:18:B3:27 Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 06ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 06E2 Signing time: Fri 30 May 2025 22:13:11 +0000 Manifest this update: Fri 30 May 2025 22:13:10 +0000 Manifest next update: Fri 06 Jun 2025 22:13:10 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: 10wBig81qN/QPtRB/exWBYApCT/Qgig8TDG1jmz+qXg=) 2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1773 (0x6ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: May 30 22:13:10 2025 GMT Not After : Jun 6 22:13:10 2025 GMT Subject: CN=683a2d77-a622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:5e:63:b4:2d:fb:a6:0f:12:9f:f4:70:f2: 6e:a8:77:f3:99:37:3c:32:1e:14:68:ae:93:36:6e: fc:a9:a3:40:65:61:ca:4d:af:15:b1:ad:c4:2e:86: d9:37:55:97:00:d0:46:a9:83:06:6c:aa:0c:8e:04: 28:5a:13:50:fb:d9:4c:69:c5:e4:44:62:c8:b4:59: 78:33:92:64:64:2d:91:14:68:c6:48:e7:b9:4c:cd: 0e:b1:44:ca:61:c6:4d:3f:45:63:e9:c3:89:00:6c: 47:22:38:c5:96:a6:14:68:4b:53:d3:b0:31:4f:23: 35:a1:6f:6c:55:11:bf:91:16:89:45:6c:c6:8e:bc: 09:be:a4:d5:55:36:58:a2:2d:d1:8a:5a:c5:2e:bb: 4c:20:a4:38:07:1c:c1:51:9d:e1:b4:69:3b:c7:b5: 3f:48:9b:2c:31:79:10:0e:42:78:87:de:55:3c:d8: b5:34:bf:78:dc:42:6b:41:dc:36:54:7a:93:38:28: 4a:aa:a0:21:ad:01:07:1f:b9:7c:c6:37:05:55:6b: b3:5c:fc:ec:f1:f1:68:d3:bf:99:ef:b1:1e:0a:2c: 7d:a0:86:20:62:20:32:41:71:41:86:6a:52:d6:7c: 26:7b:7c:58:2e:24:d7:7c:9c:97:49:1b:b2:b1:72: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:45:2E:CC:54:02:53:FE:91:62:42:64:6F:B0:D8:68:18:B3:27 X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:9d:8b:28:6a:2e:aa:ca:40:2f:d4:d4:ec:7d:18:b2:ea:15: 35:52:e3:aa:42:5e:17:87:63:13:a1:fb:0f:ca:1c:62:a8:18: e6:48:54:6a:e7:b7:f1:73:2c:01:7c:a6:de:af:82:d6:80:36: af:94:75:8c:9c:14:fd:3c:42:b9:90:cf:13:45:81:59:a6:89: df:d4:fe:93:b9:bb:a2:75:e4:18:74:42:bc:17:15:61:ce:31: 32:44:e5:17:ef:6a:dd:84:6c:1c:67:5e:ee:bb:df:49:b3:a3: f8:fd:05:77:bb:bd:c9:b0:13:21:89:77:53:e6:9b:f0:47:8a: eb:46:be:c4:cf:21:6d:7a:2e:68:d8:c8:d4:a0:e7:26:92:d7: 41:0b:4b:58:20:38:a6:f8:95:0a:12:12:85:b3:66:f9:67:a1: 6b:4c:b7:42:8d:c1:bd:c1:35:a1:f3:ae:c8:e9:94:97:11:2d: 58:d0:f3:12:eb:8e:ec:30:df:b5:0e:d9:ed:1b:ab:01:c9:dc: 1e:e7:8d:b4:d0:d1:06:34:c3:1c:ea:01:e5:f5:69:29:f1:b1: 66:f5:62:62:6c:9f:f3:a9:0e:2c:37:bf:c7:fa:96:8c:1b:02: f6:56:f7:d0:57:42:8a:12:44:f1:36:04:04:ca:8c:62:02:4c: 63:b6:3e:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjUwNTMwMjIxMzEwWhcNMjUwNjA2MjIxMzEwWjAYMRYwFAYD VQQDEw02ODNhMmQ3Ny1hNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ5eY7Qt+6YPEp/0cPJuqHfzmTc8Mh4UaK6TNm78qaNAZWHKTa8Vsa3ELobZ N1WXANBGqYMGbKoMjgQoWhNQ+9lMacXkRGLItFl4M5JkZC2RFGjGSOe5TM0OsUTK YcZNP0Vj6cOJAGxHIjjFlqYUaEtT07AxTyM1oW9sVRG/kRaJRWzGjrwJvqTVVTZY oi3RilrFLrtMIKQ4BxzBUZ3htGk7x7U/SJssMXkQDkJ4h95VPNi1NL943EJrQdw2 VHqTOChKqqAhrQEHH7l8xjcFVWuzXPzs8fFo07+Z77EeCix9oIYgYiAyQXFBhmpS 1nwme3xYLiTXfJyXSRuysXIt9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLifRS7M VAJT/pFiQmRvsNhoGLMnMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxnYsoai6qykAv1NTsfRiy6hU1UuOqQl4Xh2MTofsPyhxiqBjmSFRq 57fxcywBfKber4LWgDavlHWMnBT9PEK5kM8TRYFZponf1P6TubuideQYdEK8FxVh zjEyROUX72rdhGwcZ17uu99Js6P4/QV3u73JsBMhiXdT5pvwR4rrRr7EzyFtei5o 2MjUoOcmktdBC0tYIDim+JUKEhKFs2b5Z6FrTLdCjcG9wTWh867I6ZSXES1Y0PMS 647sMN+1DtntG6sBydwe54200NEGNMMc6gHl9Wkp8bFm9WJibJ/zqQ4sN7/H+paM GwL2VvfQV0KKEkTxNgQEyoxiAkxjtj4L -----END CERTIFICATE-----Generated at Sat May 31 16:57:42 2025 by rpki-client