$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json) Hash identifier: WsxkdfaFEG30OquJMG6VQDtjnxD6CTyRTbyMog7htMw= Subject key identifier: D5:AB:80:8A:94:02:6F:72:92:2F:95:0B:69:E8:F3:38:81:56:38:A5 Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Certificate serial: 083F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft Manifest number: 0832 Signing time: Thu 12 Jun 2025 20:31:24 +0000 Manifest this update: Thu 12 Jun 2025 20:31:23 +0000 Manifest next update: Thu 19 Jun 2025 20:31:23 +0000 Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: xFEmiHw/3fR/nMW1O1eH/YPCnflYlq28QRJvrMH+OyE=) 2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: yWbFOWnQZIbWuGJvtHpTMaWCZFK5VHcHceysjqEH3mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Validity Not Before: Jun 12 20:31:23 2025 GMT Not After : Jun 19 20:31:23 2025 GMT Subject: CN=684b391b-8a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:9a:b3:b0:92:f8:5a:8b:ae:4e:5b:92:9f: a9:73:d3:d3:90:ed:6a:61:d3:05:03:4b:d5:d5:db: 8a:7e:4d:ed:63:78:c6:3b:89:3e:c8:76:84:7d:b4: 81:3b:8b:0a:9c:1f:46:4f:5e:4b:09:02:ef:be:22: a8:ce:e7:b7:4e:9a:23:97:3d:aa:0f:58:9d:0e:08: cb:9a:61:42:0f:45:bc:73:74:66:a8:86:78:2c:f2: ea:29:ba:a1:58:bd:a2:c6:4c:07:04:d3:36:6a:87: 03:b2:6c:46:b1:47:63:c4:80:37:23:97:b0:1e:62: a2:46:dc:6a:d9:6d:5d:63:44:f4:56:11:ed:6d:97: 10:a9:03:a5:8c:c6:a8:69:78:48:67:a9:ad:d6:1b: 82:a4:e7:bf:56:31:f2:5b:98:3b:4b:70:1c:f3:aa: 9e:f8:b3:54:a0:50:30:4a:cc:2e:b0:21:61:47:6b: 77:aa:9f:5e:33:21:af:94:ff:5a:82:9f:8a:46:45: 08:aa:c4:e8:d2:a3:61:69:4d:d3:27:70:f2:65:0c: 32:ed:63:ab:15:f1:18:f0:9f:08:e8:fb:ea:a7:24: 28:39:6f:76:f6:69:f4:ee:97:b7:19:ac:d0:ab:6c: 8a:5d:60:6b:2d:63:6d:d2:ab:a7:46:ad:19:bb:94: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AB:80:8A:94:02:6F:72:92:2F:95:0B:69:E8:F3:38:81:56:38:A5 X509v3 Authority Key Identifier: keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:42:38:4f:cf:48:68:16:eb:59:c5:84:e8:07:ed:42:79:bf: a2:52:78:18:9d:9d:18:6c:c9:05:5a:4d:c0:c8:a1:ef:97:58: 8f:2e:62:21:85:b8:33:74:d9:d7:c8:aa:70:d6:0a:6a:ce:21: 42:f0:f8:43:e7:a9:df:66:d1:69:83:43:38:45:cb:81:09:10: 04:91:cc:22:ed:41:30:23:9e:29:ad:5b:b8:1a:f7:ae:4a:93: 6b:12:d2:fb:19:73:4e:46:5e:b4:9e:f8:50:7f:7b:b6:3e:56: f8:29:e1:5d:08:ae:4f:1a:84:8b:be:53:3a:1f:d9:37:8d:54: 64:41:bd:a8:db:21:e1:bb:35:9c:22:4d:36:89:65:b0:dd:d2: c2:97:8b:c6:53:37:ca:db:c7:d3:5d:61:75:c4:92:cc:32:6c: cc:ee:0d:0f:b7:b5:81:e0:1b:25:91:93:5d:2e:a4:ec:c5:9c: b5:ef:5b:92:44:6a:fb:1f:76:5b:ff:d2:93:25:9e:7d:4e:cb: df:d4:c3:47:88:90:ce:9d:25:1e:f3:d1:85:a2:5c:48:38:b4: f2:39:72:f2:e5:3f:ad:bc:e0:9b:0c:79:be:a5:fb:d4:f2:c8: 6f:a5:b8:fd:13:bf:de:5a:dd:28:d8:1c:7a:d1:0c:32:6c:f6: 72:8c:1c:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD NDVDMzg1MDMwHhcNMjUwNjEyMjAzMTIzWhcNMjUwNjE5MjAzMTIzWjAYMRYwFAYD VQQDEw02ODRiMzkxYi04YTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBKas7CS+FqLrk5bkp+pc9PTkO1qYdMFA0vV1duKfk3tY3jGO4k+yHaEfbSB O4sKnB9GT15LCQLvviKozue3Tpojlz2qD1idDgjLmmFCD0W8c3RmqIZ4LPLqKbqh WL2ixkwHBNM2aocDsmxGsUdjxIA3I5ewHmKiRtxq2W1dY0T0VhHtbZcQqQOljMao aXhIZ6mt1huCpOe/VjHyW5g7S3Ac86qe+LNUoFAwSswusCFhR2t3qp9eMyGvlP9a gp+KRkUIqsTo0qNhaU3TJ3DyZQwy7WOrFfEY8J8I6PvqpyQoOW929mn07pe3GazQ q2yKXWBrLWNt0qunRq0Zu5SHtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWrgIqU Am9yki+VC2no8ziBVjilMB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY VGpFWkR0clZoU3JFWERoUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsQjhPz0hoFutZxYToB+1Ceb+iUngYnZ0YbMkFWk3AyKHvl1iPLmIh hbgzdNnXyKpw1gpqziFC8PhD56nfZtFpg0M4RcuBCRAEkcwi7UEwI54prVu4Gveu SpNrEtL7GXNORl60nvhQf3u2Plb4KeFdCK5PGoSLvlM6H9k3jVRkQb2o2yHhuzWc Ik02iWWw3dLCl4vGUzfK28fTXWF1xJLMMmzM7g0Pt7WB4BslkZNdLqTsxZy171uS RGr7H3Zb/9KTJZ59Tsvf1MNHiJDOnSUe89GFolxIOLTyOXLy5T+tvOCbDHm+pfvU 8shvpbj9E7/eWt0o2Bx60QwybPZyjBwf -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:18 2025 by rpki-client