$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: lZEt4xszrRvjPtfFkWlUd0Dtb8B4nO9CgN+zHUkLNiY= Subject key identifier: E6:41:DD:4B:3F:B5:6E:14:45:2F:35:7F:AB:9C:D3:75:E3:2B:AE:A3 Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 0421 Signing time: Tue 17 Jun 2025 00:08:39 +0000 Manifest this update: Tue 17 Jun 2025 00:08:39 +0000 Manifest next update: Tue 24 Jun 2025 00:08:39 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: R4hBxO+c/cXTjewCOWSl/LA/Z0J3xmDUoWsgIexZux0=) 2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: tHlnHTM42fIgrOKj6B5mEiDlxGJ8PU+aATIjcWUbfzQ=) 3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: G91/+5P90Gbi5PgxXduUuTfOqPoMJhhodtxKYVTEQhU=) 4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: dDUwPb8yT4c7h8uvXZN4RSXgwF3JJh0qprW0Nf2AMic=) 5: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: 6FWLxJ0tuemCPYBLnFeCXc6fNxB9xk/e0IXfBTmtzAk=) 6: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: OW2gDSL6apVk21WPZdNUp4voxwL3co7ZVV/LZN2sPnI=) 7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: rr7JwL3aP2xt22xpI8m2scwwvBMRgYndiZXBSENrUYA=) 8: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: P6m9Y8fkMm3GUB3vWCGhg/CMVh26A+E6bYvQlekbBbQ=) 9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: onTCqXS9qZGzhIeTCRHgBXLlG0kEyR1ncJjeY60B73A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Jun 17 00:08:39 2025 GMT Not After : Jun 24 00:08:39 2025 GMT Subject: CN=6850b207-3bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:0d:41:04:ac:10:4c:39:65:d7:6c:51:eb: b3:5b:b0:74:3d:7a:51:18:a3:93:43:5c:b1:e7:a7: 00:f0:21:4c:89:f6:93:59:b4:37:be:da:ca:60:87: 68:a1:bf:6c:69:1b:6f:01:db:15:3a:fa:74:32:18: 5a:b9:7b:16:4b:63:b4:cd:89:c7:e4:4a:2b:75:82: cd:b4:7d:4a:57:70:f8:21:2c:4e:d3:e9:f1:27:94: 41:d1:5c:c7:20:af:a2:d5:ba:2d:b5:07:b7:3e:51: 13:86:f5:8a:b5:cc:0f:cd:34:45:59:79:8a:d1:5a: 04:f6:cd:a0:13:ae:33:ba:b5:e3:36:17:6a:59:fe: dd:d9:31:92:f9:d2:39:51:fb:87:d2:d5:90:e4:c9: 6c:10:6f:b1:10:4b:2c:6f:21:40:a3:6b:6c:fa:f1: 27:01:c7:ed:4f:5f:0c:1c:e6:50:8b:cd:e7:f6:8f: a3:40:fa:90:63:84:83:44:98:eb:b2:1c:6e:05:ff: 80:8d:33:be:ea:51:0e:e0:53:11:44:06:f8:af:29: f5:3b:ae:e4:eb:13:fb:e6:bd:d8:be:b2:d6:a1:08: e5:36:24:f8:68:49:2c:d0:a7:a3:f4:9a:b3:c5:30: 68:8a:c2:bc:de:e2:3e:2e:53:73:bf:da:3c:8b:b9: a6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:41:DD:4B:3F:B5:6E:14:45:2F:35:7F:AB:9C:D3:75:E3:2B:AE:A3 X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:f3:fd:02:c2:b1:5e:30:4d:8a:ad:b5:4e:c8:c1:21:1d:03: f1:fc:5b:6b:1d:b5:55:c8:f3:bc:2a:ef:bc:b1:28:93:ba:7d: 7c:a8:12:ad:27:eb:c5:09:33:26:39:6c:d8:9f:c9:90:6a:fd: a5:38:16:8d:78:8d:f9:92:8c:f6:2c:b8:1e:23:cc:46:9b:b1: 25:b8:fc:43:b2:eb:df:6c:f9:e7:33:0b:41:12:ce:a6:a5:54: 62:a4:19:bf:68:14:d8:ce:bf:1c:f5:bd:a0:69:ac:db:0f:e2: 95:eb:d5:8d:7c:05:3c:11:ff:58:76:e7:dd:9c:52:b5:9b:12: cf:99:7b:61:28:f6:7b:f0:1e:ae:e7:af:5a:f9:de:1d:45:d8: ed:d1:b2:8d:c4:af:2c:bb:3e:d3:02:7f:2f:92:d1:97:90:96: 7e:26:ba:a4:a6:f7:0a:77:51:16:cb:4e:9f:b8:b9:39:19:7f: 22:db:22:a0:9b:e9:0e:32:f2:8d:5b:2a:0b:ca:34:10:26:98: 7d:af:d5:fb:2b:bf:6f:5d:3f:b5:76:46:9e:02:42:0e:66:77: 7e:21:cf:8c:74:98:e2:d1:ac:92:a0:f2:cb:56:e2:2b:93:58: 04:eb:0d:69:0c:53:3a:87:69:e1:49:c9:3b:ed:26:f5:f1:3c: da:f1:ee:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUwNjE3MDAwODM5WhcNMjUwNjI0MDAwODM5WjAYMRYwFAYD VQQDEw02ODUwYjIwNy0zYmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtMNQQSsEEw5ZddsUeuzW7B0PXpRGKOTQ1yx56cA8CFMifaTWbQ3vtrKYIdo ob9saRtvAdsVOvp0MhhauXsWS2O0zYnH5EordYLNtH1KV3D4ISxO0+nxJ5RB0VzH IK+i1bottQe3PlEThvWKtcwPzTRFWXmK0VoE9s2gE64zurXjNhdqWf7d2TGS+dI5 UfuH0tWQ5MlsEG+xEEssbyFAo2ts+vEnAcftT18MHOZQi83n9o+jQPqQY4SDRJjr shxuBf+AjTO+6lEO4FMRRAb4ryn1O67k6xP75r3YvrLWoQjlNiT4aEks0Kej9Jqz xTBoisK83uI+LlNzv9o8i7mmlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZB3Us/ tW4URS81f6uc03XjK66jMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC8/0CwrFeME2KrbVOyMEhHQPx/FtrHbVVyPO8Ku+8sSiTun18qBKt J+vFCTMmOWzYn8mQav2lOBaNeI35koz2LLgeI8xGm7EluPxDsuvfbPnnMwtBEs6m pVRipBm/aBTYzr8c9b2gaazbD+KV69WNfAU8Ef9YdufdnFK1mxLPmXthKPZ78B6u 569a+d4dRdjt0bKNxK8suz7TAn8vktGXkJZ+JrqkpvcKd1EWy06fuLk5GX8i2yKg m+kOMvKNWyoLyjQQJph9r9X7K79vXT+1dkaeAkIOZnd+Ic+MdJji0aySoPLLVuIr k1gE6w1pDFM6h2nhSck77Sb18Tza8e6/ -----END CERTIFICATE-----Generated at Tue Jun 17 07:21:59 2025 by rpki-client