$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: u+LksK/Ckhnrq7GBQtNoJYOuLe6puuDcUUSpr+0sUug= Subject key identifier: 72:08:35:90:F9:7E:11:B3:91:05:72:48:66:D3:00:62:25:89:F8:F6 Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0C50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0C47 Signing time: Sat 14 Jun 2025 18:20:23 +0000 Manifest this update: Sat 14 Jun 2025 18:20:22 +0000 Manifest next update: Sat 21 Jun 2025 18:20:22 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: wKmUnUoDm4vcc7Axg6RiJnvELq4bxAUQErpLDdPnog4=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: ZF76+TdQMAvJkkO6rvtsiHzBwUDEVkLOtw/tW67c6tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Jun 14 18:20:22 2025 GMT Not After : Jun 21 18:20:22 2025 GMT Subject: CN=684dbd66-2491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5c:ff:19:ab:c7:34:57:6b:96:8c:1b:d9:a5: 52:d5:53:e0:f6:04:c0:f8:ab:e3:2d:30:aa:3c:12: cc:cf:f3:a7:01:47:ba:db:f3:2a:04:67:90:9a:ea: 62:c6:09:85:db:82:1a:ff:89:4c:31:f5:01:8e:d0: cb:32:be:43:c0:f3:b7:76:ab:b0:e5:a4:1e:d3:ab: d3:01:df:eb:89:93:c6:7c:f9:ca:a1:49:2b:55:48: f4:ff:e7:e1:3f:61:16:1a:81:7b:be:c5:61:7d:0c: a5:8d:c5:59:57:7c:ba:95:03:82:44:ee:56:96:f0: 77:ea:94:5c:05:77:a7:8b:2e:1a:dc:2c:ad:f1:d0: eb:83:d6:7f:cb:13:c6:d6:86:b0:6d:95:34:0e:62: 5f:13:2c:db:ab:97:7c:f0:9a:79:2c:54:5b:9e:f7: 4e:e7:db:3d:15:70:38:78:36:90:b2:7f:f1:4d:6c: 4d:6e:91:46:60:02:98:eb:9d:aa:c0:d9:be:fb:48: 72:27:5f:3f:b6:a3:a3:49:4e:4f:09:a5:64:db:c9: 69:53:73:5f:9f:b7:84:08:94:2d:65:7f:d6:a2:4d: 04:bc:e3:8a:b8:bc:5b:82:bc:c7:46:07:be:e9:76: 2f:dd:a4:40:68:c0:40:b6:44:94:5b:d3:4e:e9:91: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:08:35:90:F9:7E:11:B3:91:05:72:48:66:D3:00:62:25:89:F8:F6 X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:89:b9:8c:c9:63:5f:8d:df:fc:e3:d7:6a:10:7a:f3:5c:1b: f2:c2:d1:eb:d4:63:5b:ea:78:bd:ba:6d:c8:a6:1d:79:8a:27: e3:2b:d7:a1:ba:0c:e9:d3:47:35:8b:db:d6:84:05:4d:10:b1: 87:29:37:2d:ee:ab:b0:e2:78:32:fd:db:82:98:ab:8a:9b:c0: 29:51:d3:64:ca:00:17:f1:5f:ee:d4:e2:67:0a:2a:0d:74:c7: 33:3d:65:57:6b:c3:7d:85:66:5b:b4:68:13:fb:dd:22:87:b7: 2b:47:d3:14:79:3f:4e:6a:0b:0a:23:ac:01:a2:2c:c6:b9:cb: e0:8b:8b:49:d1:b5:97:91:a2:af:57:36:a7:06:25:8e:f4:97: 06:3e:e8:70:05:cd:a4:d8:51:7f:5d:1f:11:b2:65:81:2b:d0: 03:d4:cd:29:7e:01:1e:d0:0d:6c:02:f1:96:e8:01:b6:53:6b: 91:6c:4e:5e:ec:bc:c2:d6:02:01:c4:c5:9b:25:74:82:a5:47: ec:07:6b:85:ef:e4:83:b3:aa:ba:9f:f1:fe:6f:b3:38:80:b6: 1a:3f:99:d3:e4:a9:7b:38:db:37:49:10:6d:8e:65:29:e5:03: 9b:43:91:9d:cb:de:d5:cd:86:3d:f6:c2:9c:94:c7:04:ff:cd: 95:40:6c:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjUwNjE0MTgyMDIyWhcNMjUwNjIxMTgyMDIyWjAYMRYwFAYD VQQDEw02ODRkYmQ2Ni0yNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lz/GavHNFdrlowb2aVS1VPg9gTA+KvjLTCqPBLMz/OnAUe62/MqBGeQmupi xgmF24Ia/4lMMfUBjtDLMr5DwPO3dquw5aQe06vTAd/riZPGfPnKoUkrVUj0/+fh P2EWGoF7vsVhfQyljcVZV3y6lQOCRO5WlvB36pRcBXeniy4a3Cyt8dDrg9Z/yxPG 1oawbZU0DmJfEyzbq5d88Jp5LFRbnvdO59s9FXA4eDaQsn/xTWxNbpFGYAKY652q wNm++0hyJ18/tqOjSU5PCaVk28lpU3Nfn7eECJQtZX/Wok0EvOOKuLxbgrzHRge+ 6XYv3aRAaMBAtkSUW9NO6ZGxGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIINZD5 fhGzkQVySGbTAGIlifj2MB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJibmMyWNfjd/849dqEHrzXBvywtHr1GNb6ni9um3Iph15iifjK9eh ugzp00c1i9vWhAVNELGHKTct7quw4ngy/duCmKuKm8ApUdNkygAX8V/u1OJnCioN dMczPWVXa8N9hWZbtGgT+90ih7crR9MUeT9OagsKI6wBoizGucvgi4tJ0bWXkaKv VzanBiWO9JcGPuhwBc2k2FF/XR8RsmWBK9AD1M0pfgEe0A1sAvGW6AG2U2uRbE5e 7LzC1gIBxMWbJXSCpUfsB2uF7+SDs6q6n/H+b7M4gLYaP5nT5Kl7ONs3SRBtjmUp 5QObQ5Gdy97VzYY99sKclMcE/82VQGyH -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:33 2025 by rpki-client