$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: iONO1IAGpZxUBjlSYhMqiLn4l+HEW3vnGoAaeCxbx70= Subject key identifier: 70:1C:CE:6A:3F:82:DF:BA:6C:FB:95:BD:EA:F1:C6:93:0B:D1:3D:31 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 0797 Signing time: Thu 12 Jun 2025 21:04:47 +0000 Manifest this update: Thu 12 Jun 2025 21:04:47 +0000 Manifest next update: Thu 19 Jun 2025 21:04:47 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: o9dbEgzIdMwvDQa+iOnR52gUs32TbWW/JzMjQASSJ7g=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Jun 12 21:04:47 2025 GMT Not After : Jun 19 21:04:47 2025 GMT Subject: CN=684b40ef-ae4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:d9:5c:32:5b:b8:d2:32:59:50:dd:10:bf: 4c:a9:a2:f8:cb:8d:fb:ab:d4:7f:fb:0c:d2:d8:9a: dc:95:d0:d1:5d:af:0d:a4:3f:56:98:e3:9a:c3:e3: 44:7c:b7:61:64:db:8f:a7:fd:5a:86:79:08:e1:06: ca:67:4c:49:59:bd:e8:bd:eb:1a:c3:97:b4:53:d9: 7f:29:b3:de:51:f0:e8:92:00:8c:cb:8d:e1:4d:27: 08:d0:b2:96:3d:67:de:a4:4e:22:d5:52:01:8d:69: a3:f4:18:16:5f:ae:41:b1:40:84:87:51:bd:b8:d5: 0d:fc:24:8d:3a:41:56:ac:14:8e:82:b4:24:93:74: b2:01:94:80:dc:8d:01:07:84:dd:cc:9b:67:33:f0: b5:af:50:90:58:83:d8:c6:70:16:d1:30:f9:78:fa: b0:ef:0a:03:db:2d:36:1e:59:86:26:71:15:f3:df: 12:1d:b6:e1:ba:52:38:7f:c9:96:36:d1:4e:86:6c: 5d:28:25:29:c3:55:73:c1:2a:36:50:61:54:95:a2: 39:a7:f1:54:95:73:cb:5c:e2:45:6f:92:dc:92:20: 11:a6:75:7f:bd:a8:a3:13:38:eb:83:20:3f:8b:04: 12:74:88:1c:e1:b9:e7:4c:b6:1c:1f:a3:8c:07:3e: d9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1C:CE:6A:3F:82:DF:BA:6C:FB:95:BD:EA:F1:C6:93:0B:D1:3D:31 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4d:0b:84:f5:76:ae:c1:15:6f:f6:8d:fc:72:bb:01:81:6d: aa:83:e3:b7:44:f5:92:d2:13:0d:48:a6:0d:86:7e:7f:05:b7: 6c:60:a3:72:1d:d1:46:c2:81:8d:68:87:e7:35:04:e3:c4:d2: 23:f6:e9:21:f8:0a:fe:c3:85:37:bf:00:ce:60:ca:67:9e:4e: 9c:53:12:83:96:3a:d5:bc:01:f5:34:64:f5:52:24:55:9f:09: 81:d1:dd:1d:0e:90:f6:65:49:05:2e:11:76:64:79:2e:8f:44: 02:ec:34:21:98:9f:d2:16:9a:33:f8:bf:16:29:14:c6:d6:b6: 06:03:54:8f:ef:fe:e1:6c:e8:65:fb:b7:95:33:50:da:b3:a8: 32:09:cf:af:f9:6a:e6:81:07:b1:8f:f2:c4:9b:b8:cf:5f:e3: b2:9f:c6:7a:be:ac:61:21:ad:d4:af:55:2f:ef:7e:c5:44:b1: 04:fc:5c:54:80:3c:ba:ce:f2:37:7e:97:74:a6:9e:bc:8f:8e: df:8a:1c:55:43:ff:06:ac:29:a2:7a:23:65:e0:a9:3f:99:f1: 4e:95:3e:fe:76:c5:be:7d:b2:1b:0e:88:76:43:a0:b0:ea:f0: 34:16:7b:45:76:13:2a:78:eb:d1:09:fa:08:d9:06:80:ea:a2: b0:27:47:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjUwNjEyMjEwNDQ3WhcNMjUwNjE5MjEwNDQ3WjAYMRYwFAYD VQQDEw02ODRiNDBlZi1hZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoTZXDJbuNIyWVDdEL9MqaL4y437q9R/+wzS2JrcldDRXa8NpD9WmOOaw+NE fLdhZNuPp/1ahnkI4QbKZ0xJWb3ovesaw5e0U9l/KbPeUfDokgCMy43hTScI0LKW PWfepE4i1VIBjWmj9BgWX65BsUCEh1G9uNUN/CSNOkFWrBSOgrQkk3SyAZSA3I0B B4TdzJtnM/C1r1CQWIPYxnAW0TD5ePqw7woD2y02HlmGJnEV898SHbbhulI4f8mW NtFOhmxdKCUpw1VzwSo2UGFUlaI5p/FUlXPLXOJFb5LckiARpnV/vaijEzjrgyA/ iwQSdIgc4bnnTLYcH6OMBz7Z1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAczmo/ gt+6bPuVverxxpML0T0xMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6TQuE9XauwRVv9o38crsBgW2qg+O3RPWS0hMNSKYNhn5/BbdsYKNy HdFGwoGNaIfnNQTjxNIj9ukh+Ar+w4U3vwDOYMpnnk6cUxKDljrVvAH1NGT1UiRV nwmB0d0dDpD2ZUkFLhF2ZHkuj0QC7DQhmJ/SFpoz+L8WKRTG1rYGA1SP7/7hbOhl +7eVM1Das6gyCc+v+WrmgQexj/LEm7jPX+Oyn8Z6vqxhIa3Ur1Uv737FRLEE/FxU gDy6zvI3fpd0pp68j47fihxVQ/8GrCmieiNl4Kk/mfFOlT7+dsW+fbIbDoh2Q6Cw 6vA0FntFdhMqeOvRCfoI2QaA6qKwJ0cj -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:28 2025 by rpki-client