$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: V2D6uIKxCYod0sIB0mvnFAnIHg6i03QUUpcbpKh45BI= Subject key identifier: B2:3C:F5:E1:A9:4F:9A:64:92:C1:0B:90:79:89:62:1F:E9:31:1E:0F Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 0159 Signing time: Thu 05 Jun 2025 03:29:04 +0000 Manifest this update: Thu 05 Jun 2025 03:29:03 +0000 Manifest next update: Thu 12 Jun 2025 03:29:03 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: pBgYY0KCt+LY79/Mljlq8DL63z1bhwX4ljOWeXMv8Dw=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: MRW+pxq2rIQWqz0eewlHDxgHTLGzIYysThVYJrp2BDc=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: Fv5yzaRaYXm7EcaxJ9d0RT5up4myTdlO4UPvIXp3L88=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: mGJXgF/PKI9FEq/cPxsdqAyVl2gi74HVL2n1gwNWhDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 03:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Jun 5 03:29:03 2025 GMT Not After : Jun 12 03:29:03 2025 GMT Subject: CN=68410eff-1118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:1b:99:07:f2:d4:51:ac:8f:a2:4c:6f:c8: 45:e2:4f:01:70:e4:f9:25:a9:d3:7a:fb:07:20:27: 48:a1:b9:88:50:da:52:74:c0:75:66:99:8c:01:0b: c4:2a:ee:b6:9e:6d:36:5f:0f:bc:bd:da:33:20:46: f3:3e:82:0c:f8:eb:cd:8d:32:76:71:3c:5c:6c:17: a3:73:62:8b:23:20:2d:0d:ec:80:42:ae:57:dd:32: d4:c5:8c:f2:98:a7:26:2e:83:bc:d3:fa:1c:7c:fb: 52:9e:dc:d0:5d:c7:a2:81:80:3d:39:d2:85:f6:80: 88:94:92:05:4d:0b:92:a4:84:8d:f2:c5:c7:67:2c: 8e:12:d6:bc:14:28:6d:37:36:19:29:b7:c5:bb:39: 86:44:7a:40:11:6d:34:6f:4b:dc:ca:c0:27:39:10: f0:10:13:e4:d9:27:47:ca:bf:ae:99:7f:de:b0:29: 1c:0d:5d:23:bb:bc:c3:17:6b:23:67:5d:f9:0b:68: a6:22:0b:74:06:0f:49:25:84:49:50:3b:63:d1:b3: 1a:67:37:d7:49:2e:02:46:0d:16:2e:b3:aa:be:98: 16:28:77:16:f6:bf:11:22:e8:25:37:bc:9f:67:67: ac:d9:0d:71:63:e9:f3:01:80:0c:0b:6d:c0:93:31: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3C:F5:E1:A9:4F:9A:64:92:C1:0B:90:79:89:62:1F:E9:31:1E:0F X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a5:3c:dc:81:da:df:c9:56:1a:c5:64:03:c6:d2:6a:0c:53: 9b:ed:83:1d:d7:af:2e:b5:9b:b0:97:73:c9:9f:91:7b:7b:08: b6:7c:1d:61:bd:ff:7b:cd:2b:52:1b:28:1e:a4:9e:3d:e7:f8: dc:53:f5:56:5c:63:31:02:b4:94:5c:75:89:80:04:88:b9:68: f0:df:d0:ba:6f:29:f3:cd:46:85:fe:cb:83:f4:b0:7e:a0:19: 93:bc:38:dc:13:20:35:16:22:f4:9c:f7:92:ed:ab:6c:54:74: 65:e5:66:2e:fb:e4:e0:e7:9b:0e:a9:9c:c6:c7:1f:82:0e:4c: 70:83:16:fb:00:38:0c:bf:56:b8:3f:f6:ae:f7:0b:74:83:3e: 0d:3a:d3:1e:16:ea:31:e7:2e:d3:12:d4:be:98:01:bd:36:45: d9:a2:dd:74:23:93:27:03:5a:87:5c:d5:e7:6d:fe:a9:ef:a3: d3:6f:2b:aa:6c:46:a0:6c:a1:8b:c8:e5:be:39:05:ed:a8:b4: 90:c9:64:de:05:dd:9b:75:fa:38:31:b2:ba:0b:72:45:ea:b6: 3f:76:f8:3f:b5:ce:4a:d5:c4:94:26:4a:de:3b:e7:85:4f:03: d0:8d:ce:3e:35:f9:c2:4d:74:c8:74:14:32:28:24:80:0e:f9: 2f:94:44:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjUwNjA1MDMyOTAzWhcNMjUwNjEyMDMyOTAzWjAYMRYwFAYD VQQDEw02ODQxMGVmZi0xMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqgbmQfy1FGsj6JMb8hF4k8BcOT5JanTevsHICdIobmIUNpSdMB1ZpmMAQvE Ku62nm02Xw+8vdozIEbzPoIM+OvNjTJ2cTxcbBejc2KLIyAtDeyAQq5X3TLUxYzy mKcmLoO80/ocfPtSntzQXceigYA9OdKF9oCIlJIFTQuSpISN8sXHZyyOEta8FCht NzYZKbfFuzmGRHpAEW00b0vcysAnORDwEBPk2SdHyr+umX/esCkcDV0ju7zDF2sj Z135C2imIgt0Bg9JJYRJUDtj0bMaZzfXSS4CRg0WLrOqvpgWKHcW9r8RIuglN7yf Z2es2Q1xY+nzAYAMC23AkzEvEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI89eGp T5pkksELkHmJYh/pMR4PMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHpTzcgdrfyVYaxWQDxtJqDFOb7YMd168utZuwl3PJn5F7ewi2fB1h vf97zStSGygepJ495/jcU/VWXGMxArSUXHWJgASIuWjw39C6bynzzUaF/suD9LB+ oBmTvDjcEyA1FiL0nPeS7atsVHRl5WYu++Tg55sOqZzGxx+CDkxwgxb7ADgMv1a4 P/au9wt0gz4NOtMeFuox5y7TEtS+mAG9NkXZot10I5MnA1qHXNXnbf6p76PTbyuq bEagbKGLyOW+OQXtqLSQyWTeBd2bdfo4MbK6C3JF6rY/dvg/tc5K1cSUJkreO+eF TwPQjc4+NfnCTXTIdBQyKCSADvkvlETH -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:27 2025 by rpki-client