$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft File: IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json) Hash identifier: /NVVst5o4wuf2QfxSr2PKDdAemBfH7NEws17FFfMVmA= Subject key identifier: 41:ED:F7:AE:26:7B:86:94:73:AF:B5:CF:BD:34:97:08:6A:3B:A8:F1 Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft Manifest number: 068D Signing time: Thu 12 Jun 2025 21:55:08 +0000 Manifest this update: Thu 12 Jun 2025 21:55:07 +0000 Manifest next update: Thu 19 Jun 2025 21:55:07 +0000 Files and hashes: 1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: jYdUEP5LxwkNJwCxo/coj2o7VHLXOEr2IQA6aU9XVaY=) 2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: 08F6ONsLtIONFt4iRDBy4HnEz2B6jrKqNj5tRZhjdMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Validity Not Before: Jun 12 21:55:07 2025 GMT Not After : Jun 19 21:55:07 2025 GMT Subject: CN=684b4cbc-c26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:df:67:92:8c:e4:6a:58:52:df:7c:32:70: f2:13:c4:f7:91:ea:6c:40:c0:87:36:06:3d:76:b7: 69:f6:03:59:16:25:7a:fb:a5:08:58:ac:b6:10:5b: cf:d3:ad:0c:8a:98:3e:f1:56:14:45:91:ba:81:69: 43:71:c0:f7:19:2a:df:07:08:7d:37:3b:b0:28:1c: f5:61:a5:e5:64:d4:a8:4e:36:fb:09:2b:aa:fa:59: 04:d0:55:04:8b:ba:cb:64:51:f7:46:f5:47:b5:e4: 52:33:2a:66:5d:28:4c:87:ab:e3:4f:0f:3c:2d:ae: 8b:66:06:e2:be:06:f7:09:10:a0:96:1c:fe:5b:51: d7:0e:a1:61:89:a4:2f:19:7a:6f:e7:6f:cd:cc:ac: e1:c5:58:e8:59:c1:3f:4b:09:b6:46:e1:be:3c:a2: 22:23:d4:76:b5:e8:f8:65:bd:ad:d0:86:d3:5e:d1: 70:ec:60:ce:4e:a9:c9:39:ca:81:f0:88:e2:68:64: d3:58:da:c9:a4:dc:1f:f4:67:52:b5:1f:4d:07:e8: 1b:f9:71:67:0b:9c:7f:91:7a:c3:d2:16:ed:bd:d9: 1f:cb:31:29:2e:12:b1:99:6d:68:76:41:0c:04:72: 09:97:78:04:f2:77:6c:44:bf:4d:0f:fd:8e:32:78: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:ED:F7:AE:26:7B:86:94:73:AF:B5:CF:BD:34:97:08:6A:3B:A8:F1 X509v3 Authority Key Identifier: keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:09:5e:e2:c4:17:c1:0a:cd:5e:8d:a3:62:f2:99:95:8f:1a: 82:bb:b5:7a:f4:1b:31:cc:18:f2:f3:0e:09:c7:e6:73:03:2c: a4:e8:25:c8:81:77:8c:5c:c6:65:35:c7:1a:a7:82:2b:c0:9d: 94:c1:46:30:b6:c0:7c:df:6f:ac:28:32:df:dc:03:55:da:3d: ad:24:38:1f:ee:27:09:06:12:5f:82:b7:c9:17:03:d0:aa:fd: 2a:ca:55:74:c1:8b:cb:a6:09:fa:30:3f:42:e6:e1:f2:06:c4: 3b:d0:d5:95:fe:90:3c:0b:b7:26:27:e3:df:77:9b:e0:76:09: b7:7e:a1:3b:23:72:e7:f5:1e:f0:35:0a:81:ef:25:1b:98:01: 39:27:91:2d:03:09:d4:16:b0:9b:7e:2e:a7:42:08:c3:86:8b: f6:40:e9:f6:a3:24:f1:44:ae:a7:b5:96:f9:24:c9:ca:47:30: 19:a5:5a:99:66:5a:af:8c:5c:34:f5:57:d1:e4:4e:69:e5:19: d2:aa:7f:22:e8:23:ea:58:b0:70:e2:58:f6:30:0d:ee:45:5e: ac:c9:b4:20:b8:fd:67:16:0e:e1:e9:d4:73:f5:c4:58:4a:4e: aa:2b:7d:08:3f:25:a6:00:9b:58:45:93:c2:5d:76:8c:ef:df: 2f:45:f5:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyMkYxMTAvBgNVBAUTKDIxNEIyRkNGNDJCQjJCOTg5MDU4NDVENzMzRDk0NUQ5 NUMyRENBMTIwHhcNMjUwNjEyMjE1NTA3WhcNMjUwNjE5MjE1NTA3WjAYMRYwFAYD VQQDEw02ODRiNGNiYy1jMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QjfZ5KM5GpYUt98MnDyE8T3kepsQMCHNgY9drdp9gNZFiV6+6UIWKy2EFvP 060Mipg+8VYURZG6gWlDccD3GSrfBwh9NzuwKBz1YaXlZNSoTjb7CSuq+lkE0FUE i7rLZFH3RvVHteRSMypmXShMh6vjTw88La6LZgbivgb3CRCglhz+W1HXDqFhiaQv GXpv52/NzKzhxVjoWcE/Swm2RuG+PKIiI9R2tej4Zb2t0IbTXtFw7GDOTqnJOcqB 8IjiaGTTWNrJpNwf9GdStR9NB+gb+XFnC5x/kXrD0hbtvdkfyzEpLhKxmW1odkEM BHIJl3gE8ndsRL9ND/2OMngF1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHt964m e4aUc6+1z700lwhqO6jxMB8GA1UdIwQYMBaAFCFLL89CuyuYkFhF1zPZRdlcLcoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDIyRi83QzY0NDQyNjc3 NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1aVFXRVhYTTlsRjJWd3R5 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVc3Z6MEs3SzVpUVdFWFhNOWxGMlZ3dHloSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDIyRi83QzY0NDQyNjc3NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1 aVFXRVhYTTlsRjJWd3R5aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZCV7ixBfBCs1ejaNi8pmVjxqCu7V69BsxzBjy8w4Jx+ZzAyyk6CXI gXeMXMZlNccap4IrwJ2UwUYwtsB832+sKDLf3ANV2j2tJDgf7icJBhJfgrfJFwPQ qv0qylV0wYvLpgn6MD9C5uHyBsQ70NWV/pA8C7cmJ+Pfd5vgdgm3fqE7I3Ln9R7w NQqB7yUbmAE5J5EtAwnUFrCbfi6nQgjDhov2QOn2oyTxRK6ntZb5JMnKRzAZpVqZ ZlqvjFw09VfR5E5p5RnSqn8i6CPqWLBw4lj2MA3uRV6sybQguP1nFg7h6dRz9cRY Sk6qK30IPyWmAJtYRZPCXXaM798vRfUe -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:18 2025 by rpki-client