$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft File: IcuqoETeGlZkRp9Bi80Id7ITlzo.mft (raw, json) Hash identifier: +35R6x+RPDeyISgCLdP8TXWoOOXbT31KoFQgjVKIBfk= Subject key identifier: 80:FB:2A:3E:7D:E2:0C:09:0A:C0:42:B0:4D:CC:23:45:0F:BB:39:32 Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A Certificate issuer: /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft Manifest number: 013F Signing time: Sun 15 Jun 2025 03:33:57 +0000 Manifest this update: Sun 15 Jun 2025 03:33:56 +0000 Manifest next update: Sun 22 Jun 2025 03:33:56 +0000 Files and hashes: 1: IcuqoETeGlZkRp9Bi80Id7ITlzo.crl (hash: Uof0Ny8hrz9z5euhlcoxCHN0ybMmSdl1rQvN7wsOay4=) 2: 6538D178628E11EEBF375134C4F9AE02.roa (hash: a5Qs3LUcbSVUj/0GZbXTErNFIjAHGfhVv7lawUtiA/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A Validity Not Before: Jun 15 03:33:56 2025 GMT Not After : Jun 22 03:33:56 2025 GMT Subject: CN=684e3f25-5430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:7a:c9:b2:bd:db:f3:aa:52:d4:31:e6:18: 92:45:ac:7c:8b:10:30:02:df:ad:c6:d0:dd:91:b0: 10:4e:a2:30:a8:f6:e9:08:2c:4a:79:38:12:a3:97: a1:06:93:1d:78:18:c8:be:b1:52:4d:b7:30:c8:d5: 9d:bf:b4:8e:06:59:77:6b:d1:da:f7:dc:87:0e:dd: 58:c5:b7:cb:e0:b2:07:e8:64:a4:de:44:00:90:9e: 2a:6e:f0:0d:2d:d1:76:b5:89:75:62:f5:40:ba:59: 9c:f6:d9:90:b6:c4:12:ce:80:6f:1b:d3:f7:cc:69: 1b:d2:11:fe:d9:35:aa:8c:a2:0e:14:8a:64:14:a5: c3:33:31:d9:93:8c:fe:13:9e:27:3e:ed:54:45:b1: 24:32:80:e8:a5:58:1a:ad:e7:4d:10:5e:fb:5b:6a: 19:b0:97:f8:9e:1b:50:a7:3a:a3:a8:6e:f0:f2:64: ad:6f:60:3d:af:28:3a:64:99:e0:b0:64:66:97:48: a9:62:91:5d:51:3a:a2:33:49:ca:37:ae:5a:19:32: 79:04:1f:35:be:b0:83:82:90:fd:66:d2:ff:a7:8c: b9:22:71:b1:a6:fb:3c:ff:3e:fd:97:e3:35:d7:55: 9f:34:3e:48:e7:ad:bb:d0:c1:40:c9:25:d0:08:79: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FB:2A:3E:7D:E2:0C:09:0A:C0:42:B0:4D:CC:23:45:0F:BB:39:32 X509v3 Authority Key Identifier: keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f0:0d:3b:b2:42:4e:b1:b0:61:00:6b:87:a1:18:db:bf:a9: b2:3c:15:7c:03:ac:50:b5:54:45:9c:e5:d6:d9:aa:f5:7a:a8: 52:bc:1f:9e:36:b3:16:f3:e1:9b:79:62:e7:6a:5d:9c:52:2c: 3a:60:02:72:df:47:b5:ac:43:e3:72:9d:23:df:2c:90:ab:18: cc:61:df:ee:f4:83:32:0b:28:d9:34:69:c3:ff:19:89:d6:12: cd:ef:55:d9:20:2a:18:a4:31:25:b4:46:6c:3b:84:9d:98:6b: 91:a0:7f:4c:ce:5c:2a:be:5a:34:91:65:58:30:bf:77:64:8b: fa:5c:00:ae:02:d5:dc:5d:fb:db:83:7e:cf:07:37:a6:8f:4d: 53:35:46:cf:9a:40:58:92:a8:2e:88:a5:bd:4b:2f:a7:74:52: b5:6a:0b:1d:bb:0f:51:7a:71:5e:84:e0:4b:28:9f:23:5a:8b: a7:32:cc:c2:e7:14:47:52:25:02:ff:15:02:cf:78:d7:ce:1c: 03:2b:7e:54:34:c3:bd:2b:98:00:61:36:23:6d:a9:7f:2f:d1: 8a:90:6a:ed:db:73:8f:3f:78:c9:8e:64:37:3c:16:f7:0a:78: e3:15:e2:9c:c4:7f:3f:30:28:51:48:5a:f0:fe:e3:ee:01:0b: b2:e9:4a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5M0IxMTAvBgNVBAUTKDIxQ0JBQUEwNDRERTFBNTY2NDQ2OUY0MThCQ0QwODc3 QjIxMzk3M0EwHhcNMjUwNjE1MDMzMzU2WhcNMjUwNjIyMDMzMzU2WjAYMRYwFAYD VQQDEw02ODRlM2YyNS01NDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEJ6ybK92/OqUtQx5hiSRax8ixAwAt+txtDdkbAQTqIwqPbpCCxKeTgSo5eh BpMdeBjIvrFSTbcwyNWdv7SOBll3a9Ha99yHDt1YxbfL4LIH6GSk3kQAkJ4qbvAN LdF2tYl1YvVAulmc9tmQtsQSzoBvG9P3zGkb0hH+2TWqjKIOFIpkFKXDMzHZk4z+ E54nPu1URbEkMoDopVgaredNEF77W2oZsJf4nhtQpzqjqG7w8mStb2A9ryg6ZJng sGRml0ipYpFdUTqiM0nKN65aGTJ5BB81vrCDgpD9ZtL/p4y5InGxpvs8/z79l+M1 11WfND5I56270MFAySXQCHmj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFID7Kj59 4gwJCsBCsE3MI0UPuzkyMB8GA1UdIwQYMBaAFCHLqqBE3hpWZEafQYvNCHeyE5c6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzkzQi82N0QwOEJBODYy OEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUdsWmtScDlCaTgwSWQ3SVRs em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdXFvRVRlR2xaa1JwOUJpODBJZDdJVGx6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzkzQi82N0QwOEJBODYyOEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUds WmtScDlCaTgwSWQ3SVRsem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB8A07skJOsbBhAGuHoRjbv6myPBV8A6xQtVRFnOXW2ar1eqhSvB+e NrMW8+GbeWLnal2cUiw6YAJy30e1rEPjcp0j3yyQqxjMYd/u9IMyCyjZNGnD/xmJ 1hLN71XZICoYpDEltEZsO4SdmGuRoH9Mzlwqvlo0kWVYML93ZIv6XACuAtXcXfvb g37PBzemj01TNUbPmkBYkqguiKW9Sy+ndFK1agsduw9RenFehOBLKJ8jWounMszC 5xRHUiUC/xUCz3jXzhwDK35UNMO9K5gAYTYjbal/L9GKkGrt23OPP3jJjmQ3PBb3 CnjjFeKcxH8/MChRSFrw/uPuAQuy6UoX -----END CERTIFICATE-----Generated at Sun Jun 15 08:51:28 2025 by rpki-client