$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json) Hash identifier: SymgABHbSt0/OQnqQPu9JnzeC8OH6eK/YtRrb6NdL+M= Subject key identifier: 7D:20:E4:19:00:FB:BF:FD:32:54:D0:C6:A3:BB:C2:15:7A:E2:B1:59 Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 033D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft Manifest number: 0336 Signing time: Sun 15 Jun 2025 00:46:49 +0000 Manifest this update: Sun 15 Jun 2025 00:46:49 +0000 Manifest next update: Sun 22 Jun 2025 00:46:49 +0000 Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: Y5UI+ZeCRtHzeSws6TP0XiX/dTH11kfXpZ07OETSJkk=) 2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: BWjw8ZzgxeIsXktsSggwFqoGIGBV9RKmqBd6UmUawiw=) 3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: w5wAGuBp2YZuw7r2gpx/dOhrAuPlBh9HGiqoIoNxrIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 829 (0x33d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Jun 15 00:46:49 2025 GMT Not After : Jun 22 00:46:49 2025 GMT Subject: CN=684e17f9-972c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:4c:fd:15:7c:fe:cd:34:ec:16:b3:cc:38: 98:ed:b5:12:50:63:3d:4c:6b:3a:29:15:89:a3:42: 87:3b:d8:c4:88:45:be:53:88:ed:49:cd:05:5f:dd: b2:10:02:16:97:4c:e5:6f:98:d2:1c:5f:b7:89:ac: 23:99:58:13:86:5c:20:26:dd:ff:97:f2:a6:52:26: 21:a3:c4:00:24:cb:e2:37:15:33:bd:be:d9:57:23: 27:cf:de:1f:e6:b2:ce:56:02:cf:52:e0:09:01:e7: 5c:c4:77:a6:05:6b:0c:fb:25:ba:94:3e:f9:6b:c9: b8:f9:f6:18:20:00:c4:64:35:d5:36:e9:87:37:80: 76:e1:a6:74:9f:1d:be:3a:af:e9:45:d4:52:0c:43: 47:23:b9:4b:1a:71:88:17:a4:75:1c:71:47:c6:87: 2f:90:54:47:f2:4c:f3:f3:56:39:b8:2f:81:bd:a3: 9b:c6:48:da:1a:f7:54:cd:fb:49:79:a3:87:ea:8c: 60:cd:b1:b6:71:d6:1d:d5:23:f2:b4:4a:80:33:cd: 08:a4:25:e2:9b:26:ad:d9:ce:1d:11:bc:88:d4:22: 6d:20:52:42:11:de:99:df:aa:b9:ea:21:35:20:b3: 11:a1:2f:58:34:01:3f:82:23:62:5a:6a:1d:be:18: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:20:E4:19:00:FB:BF:FD:32:54:D0:C6:A3:BB:C2:15:7A:E2:B1:59 X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a8:e4:c1:e6:bc:08:bc:5b:8a:f6:12:11:11:f7:a5:04:fb: 56:ad:e3:ba:2a:fd:ff:01:71:69:94:82:64:d9:fa:40:48:87: 73:23:42:33:8b:f4:7f:7f:a1:52:a5:54:74:2a:22:c8:83:8b: 2b:e0:a5:6a:c3:8c:b1:9b:ed:2b:4e:2a:57:f7:65:8a:8c:53: c6:a5:ed:d9:62:12:15:17:6b:09:6e:ab:de:d8:a8:7c:fd:20: cc:72:76:e3:50:26:6b:63:01:97:c6:62:cd:5a:04:0e:a5:d8: 35:17:55:37:71:30:93:44:dd:6b:70:36:8f:36:46:82:2c:78: 9f:ea:83:55:45:33:76:03:8f:30:a8:b4:4b:6c:74:9d:f3:2e: 47:68:6d:97:b3:08:2a:3d:1c:1f:ce:6f:eb:ca:96:17:90:68: 85:00:3f:24:b6:c8:bc:90:67:67:15:9e:f0:03:92:ad:81:82: 8b:55:76:f0:73:ed:20:59:4c:88:06:19:34:a5:fe:bd:06:05: 1c:ae:44:e5:ac:9f:69:19:98:82:0d:24:59:1f:e6:90:59:a7: a1:78:50:d2:14:52:50:3a:e0:e6:08:24:2a:2e:d9:ed:af:70: da:b5:a8:62:19:58:36:ae:c3:cd:51:e5:42:5f:f5:2e:0c:45: 0b:8f:1a:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjUwNjE1MDA0NjQ5WhcNMjUwNjIyMDA0NjQ5WjAYMRYwFAYD VQQDEw02ODRlMTdmOS05NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXhM/RV8/s007BazzDiY7bUSUGM9TGs6KRWJo0KHO9jEiEW+U4jtSc0FX92y EAIWl0zlb5jSHF+3iawjmVgThlwgJt3/l/KmUiYho8QAJMviNxUzvb7ZVyMnz94f 5rLOVgLPUuAJAedcxHemBWsM+yW6lD75a8m4+fYYIADEZDXVNumHN4B24aZ0nx2+ Oq/pRdRSDENHI7lLGnGIF6R1HHFHxocvkFRH8kzz81Y5uC+BvaObxkjaGvdUzftJ eaOH6oxgzbG2cdYd1SPytEqAM80IpCXimyat2c4dEbyI1CJtIFJCEd6Z36q56iE1 ILMRoS9YNAE/giNiWmodvhi5FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0g5BkA +7/9MlTQxqO7whV64rFZMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARqOTB5rwIvFuK9hIREfelBPtWreO6Kv3/AXFplIJk2fpASIdzI0Iz i/R/f6FSpVR0KiLIg4sr4KVqw4yxm+0rTipX92WKjFPGpe3ZYhIVF2sJbqve2Kh8 /SDMcnbjUCZrYwGXxmLNWgQOpdg1F1U3cTCTRN1rcDaPNkaCLHif6oNVRTN2A48w qLRLbHSd8y5HaG2XswgqPRwfzm/rypYXkGiFAD8ktsi8kGdnFZ7wA5KtgYKLVXbw c+0gWUyIBhk0pf69BgUcrkTlrJ9pGZiCDSRZH+aQWaeheFDSFFJQOuDmCCQqLtnt r3DatahiGVg2rsPNUeVCX/UuDEULjxp3 -----END CERTIFICATE-----Generated at Sun Jun 15 05:51:45 2025 by rpki-client