$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json) Hash identifier: SQYn+GiVAfKTw4m0UiUpsfRdzinNTryc3tLDiI4vXDo= Subject key identifier: A0:75:81:76:24:84:D4:9F:C1:6B:CF:E0:F3:FF:3B:08:A3:33:9D:50 Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Certificate serial: 0405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft Manifest number: 03F8 Signing time: Thu 19 Jun 2025 00:21:27 +0000 Manifest this update: Thu 19 Jun 2025 00:21:27 +0000 Manifest next update: Thu 26 Jun 2025 00:21:27 +0000 Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: 70Gv/1Uol2YzZ4nsirO1yUiedRWmz0aW/gX/oKiZ0Do=) 2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: n7VFHzeUDeBuyUWNvkox2wNIAXMws0upgX8rIok/ab4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Validity Not Before: Jun 19 00:21:27 2025 GMT Not After : Jun 26 00:21:27 2025 GMT Subject: CN=68535807-caee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:37:39:8f:e8:a2:15:8a:f1:61:68:8a:ac: 02:d1:3b:16:e6:b0:96:cd:7b:8a:28:f2:1a:a1:da: df:9c:73:5f:e6:a4:b3:bd:7b:da:0b:a7:68:86:f4: 7c:9a:0b:7c:a4:8f:35:a3:a4:a9:2b:43:e6:93:a5: 8b:18:e6:fe:86:0a:83:74:05:6f:f7:a6:30:c6:29: f5:f8:43:81:a0:bf:c4:63:f9:97:59:69:ba:e2:57: 8f:e6:e3:50:b5:2c:90:83:cf:71:62:aa:16:2e:e1: 65:fa:da:9d:ac:6d:cf:15:5d:64:6c:24:e9:8a:33: aa:34:3f:ea:39:10:f8:82:65:38:68:1a:ad:46:7b: e1:b2:9b:fc:62:82:b7:70:87:68:d0:54:a9:18:7b: d4:36:1d:64:cb:f6:aa:41:0c:ed:1d:b6:d4:7d:b3: 07:c8:01:df:53:cf:f7:f0:95:18:62:a1:81:f3:f5: 0a:72:75:6c:92:65:e2:21:7a:78:7c:83:5d:8e:a2: b4:e1:da:a4:b4:18:1c:cb:a4:31:f4:9a:5c:c4:f8: 0d:26:35:1e:cd:ed:20:d0:92:fa:c7:94:d4:56:d0: 16:08:d3:5d:72:60:72:50:60:8e:b5:3f:f5:ee:6d: f6:3b:fe:73:9a:ad:32:d1:3f:d0:ee:1b:20:51:76: 06:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:75:81:76:24:84:D4:9F:C1:6B:CF:E0:F3:FF:3B:08:A3:33:9D:50 X509v3 Authority Key Identifier: keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6e:44:00:bd:74:15:c2:d9:6c:82:20:34:87:2a:12:80:41: c4:7a:77:25:eb:b5:9b:fc:40:e0:73:5e:9a:2f:fd:11:9b:bf: 45:9f:a9:3c:e8:5e:8d:b6:30:9c:be:3b:75:08:a1:35:26:fb: 46:54:eb:34:5a:30:2b:75:df:dc:1e:40:2e:63:d0:17:40:8f: 4a:a6:bf:10:31:9c:24:53:b1:c0:2e:28:1c:2e:f4:3f:c6:79: 86:4d:b6:e7:b5:b5:88:55:18:f8:38:49:52:d9:6b:00:19:5e: b7:1d:69:b6:e5:e5:d5:11:bb:bb:32:43:67:eb:5d:17:89:0f: 3a:2e:be:13:cd:b8:07:9d:cc:41:63:dd:9a:c1:c3:ec:e9:d2: f7:b7:26:d0:0b:67:ea:a3:85:bc:de:69:58:15:16:64:03:82: 3b:6f:3a:ec:7a:da:40:8b:a7:4f:e9:a2:17:6f:44:99:b8:80: e1:06:32:3c:dc:35:fa:c8:eb:90:5b:93:4e:dc:b9:e7:0d:5f: c5:d0:95:33:71:f1:ce:fe:2b:4a:af:e8:4b:fb:4e:7f:e7:85: fc:43:d5:3b:6b:82:09:f6:09:1d:18:9b:9c:ec:ec:88:ec:bd: 7a:81:ea:6b:6e:3c:53:dd:ac:b9:df:42:b5:76:6b:8b:b0:4b: 2b:a2:be:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBNjIxMTAvBgNVBAUTKDg5RjU5NjExMDAzMEJEQzlCM0JBRDc2Q0ZEMDVDMzEy NDYxN0M5NTIwHhcNMjUwNjE5MDAyMTI3WhcNMjUwNjI2MDAyMTI3WjAYMRYwFAYD VQQDEw02ODUzNTgwNy1jYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCs3OY/oohWK8WFoiqwC0TsW5rCWzXuKKPIaodrfnHNf5qSzvXvaC6dohvR8 mgt8pI81o6SpK0Pmk6WLGOb+hgqDdAVv96Ywxin1+EOBoL/EY/mXWWm64leP5uNQ tSyQg89xYqoWLuFl+tqdrG3PFV1kbCTpijOqND/qORD4gmU4aBqtRnvhspv8YoK3 cIdo0FSpGHvUNh1ky/aqQQztHbbUfbMHyAHfU8/38JUYYqGB8/UKcnVskmXiIXp4 fINdjqK04dqktBgcy6Qx9JpcxPgNJjUeze0g0JL6x5TUVtAWCNNdcmByUGCOtT/1 7m32O/5zmq0y0T/Q7hsgUXYG4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB1gXYk hNSfwWvP4PP/OwijM51QMB8GA1UdIwQYMBaAFIn1lhEAML3Js7rXbP0FwxJGF8lS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE2Mi8xMTY4MjExQzgw NkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3ZjbXp1dGRzX1FYREVrWVh5 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmV1dFUUF3dmNtenV0ZHNfUVhERWtZWHlWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUE2Mi8xMTY4MjExQzgwNkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3Zj bXp1dGRzX1FYREVrWVh5VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCbkQAvXQVwtlsgiA0hyoSgEHEencl67Wb/EDgc16aL/0Rm79Fn6k8 6F6NtjCcvjt1CKE1JvtGVOs0WjArdd/cHkAuY9AXQI9Kpr8QMZwkU7HALigcLvQ/ xnmGTbbntbWIVRj4OElS2WsAGV63HWm25eXVEbu7MkNn610XiQ86Lr4TzbgHncxB Y92awcPs6dL3tybQC2fqo4W83mlYFRZkA4I7bzrsetpAi6dP6aIXb0SZuIDhBjI8 3DX6yOuQW5NO3LnnDV/F0JUzcfHO/itKr+hL+05/54X8Q9U7a4IJ9gkdGJuc7OyI 7L16geprbjxT3ay530K1dmuLsEsror5e -----END CERTIFICATE-----Generated at Thu Jun 19 05:41:51 2025 by rpki-client