$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: Mo25r+UOJmD8hjeVL/eh7WHDHL52CUo/zfMwPyX4sgg= Subject key identifier: 53:7B:BE:36:63:FC:2B:B3:C4:C3:9A:F4:63:03:15:57:A4:0E:FD:27 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 56 Signing time: Tue 17 Jun 2025 06:04:49 +0000 Manifest this update: Tue 17 Jun 2025 06:04:48 +0000 Manifest next update: Tue 24 Jun 2025 06:04:48 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: KCMLF9/S6aBieUwMPedzR/3lJVkpqONCbui1BAsX8HQ=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Jun 17 06:04:48 2025 GMT Not After : Jun 24 06:04:48 2025 GMT Subject: CN=68510581-36db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:5c:1b:bf:76:fa:5f:b8:c9:e1:c6:5e:63: 1b:bb:ef:c5:8a:36:5d:da:54:85:1f:36:d9:fe:59: 20:af:23:c8:e1:43:c7:10:0c:ad:52:48:35:a9:b6: c4:e2:01:84:eb:aa:31:dc:be:4d:8b:a9:c9:92:63: b2:17:0d:17:a6:04:bb:50:eb:55:23:c2:9a:46:7f: fc:44:bf:ad:98:ec:77:d7:27:d1:83:ed:d8:a9:96: a6:c1:51:ca:c7:62:71:2b:a4:7d:09:a4:f4:88:75: 59:d7:94:e1:00:30:a8:27:37:92:0b:5e:31:29:49: cb:be:2d:d7:d8:d9:1b:d2:f6:a1:df:03:77:6d:6f: f8:a9:5f:01:8f:96:1d:93:55:00:56:ab:0a:ad:af: b2:0a:fc:b2:34:22:13:40:41:14:ec:b8:88:76:b4: af:b9:34:1c:77:a6:bc:1b:97:5c:56:5e:99:54:4c: df:8c:ea:fa:84:f5:20:90:8f:b1:a1:13:d2:6a:86: 63:5c:3a:72:b6:8e:8d:67:db:b3:08:7e:1f:e0:91: aa:94:ff:1c:9b:3f:3d:1f:09:44:60:6f:61:e8:15: 63:b1:12:01:e9:b8:c1:c6:69:05:17:60:11:99:61: d6:10:01:52:73:8c:3b:90:e1:b3:21:f2:c1:9e:5a: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7B:BE:36:63:FC:2B:B3:C4:C3:9A:F4:63:03:15:57:A4:0E:FD:27 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:1b:fb:6a:45:09:b8:f4:45:a8:80:b8:ab:d2:21:97:98:3f: 48:c5:f4:15:86:c5:30:99:55:33:9b:a2:e6:25:fd:5d:1c:a5: ae:e9:95:65:b8:10:e6:c5:47:77:2b:c5:83:0b:bf:17:c2:f1: cc:eb:91:7d:90:63:9d:cf:4f:3c:65:53:73:68:9f:8f:b0:53: 27:92:0c:fc:36:00:b7:2c:17:55:67:6f:85:ba:4c:fa:4d:59: 7c:ae:09:8c:bb:1f:4d:b9:4d:25:43:51:94:f9:3e:73:4d:7b: 3f:77:f6:9c:8f:08:bb:61:13:7b:46:2a:96:93:3b:b8:7c:bd: 29:5a:15:c0:f7:83:b0:e7:0d:f5:a8:12:e8:72:d4:db:b4:a5: 72:b2:06:f6:5d:f1:99:d8:5d:5b:0e:61:a9:06:51:3a:81:da: c4:07:a5:4d:37:72:e5:c6:32:43:dd:eb:cd:a5:8b:b7:32:6e: 02:48:ef:cd:d9:6d:dc:1c:bf:ee:06:70:3f:bb:1c:ec:d0:dc: 8e:11:c6:4d:88:d4:37:b7:e5:89:9a:6b:1a:04:f7:b2:84:df: 3d:f3:e0:36:1a:30:ec:3d:a0:b3:d6:df:69:50:55:9c:0f:98: 66:1f:13:ed:4b:21:45:cf:44:1d:c7:e2:fe:17:32:d2:55:13: eb:d6:a1:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoOEIzNDcxQjkwQjdBNUJDNzZDRTNGQzA5QUNBQzg5MjhF QjREODE3OTAeFw0yNTA2MTcwNjA0NDhaFw0yNTA2MjQwNjA0NDhaMBgxFjAUBgNV BAMTDTY4NTEwNTgxLTM2ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8eFwbv3b6X7jJ4cZeYxu778WKNl3aVIUfNtn+WSCvI8jhQ8cQDK1SSDWptsTi AYTrqjHcvk2LqcmSY7IXDRemBLtQ61UjwppGf/xEv62Y7HfXJ9GD7diplqbBUcrH YnErpH0JpPSIdVnXlOEAMKgnN5ILXjEpScu+LdfY2RvS9qHfA3dtb/ipXwGPlh2T VQBWqwqtr7IK/LI0IhNAQRTsuIh2tK+5NBx3prwbl1xWXplUTN+M6vqE9SCQj7Gh E9JqhmNcOnK2jo1n27MIfh/gkaqU/xybPz0fCURgb2HoFWOxEgHpuMHGaQUXYBGZ YdYQAVJzjDuQ4bMh8sGeWlnDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU3u+NmP8 K7PEw5r0YwMVV6QO/ScwHwYDVR0jBBgwFoAUizRxuQt6W8ds4/wJrKyJKOtNgXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0Q1M0UxQjZFQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXpSeHVRdDZXOGRzNF93SnJLeUpLT3ROZ1hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 ODU0L0Q1M0UxQjZFQ0IyMzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2Vzhk czRfd0pyS3lKS090TmdYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHAb+2pFCbj0RaiAuKvSIZeYP0jF9BWGxTCZVTObouYl/V0cpa7plWW4 EObFR3crxYMLvxfC8czrkX2QY53PTzxlU3Non4+wUyeSDPw2ALcsF1Vnb4W6TPpN WXyuCYy7H025TSVDUZT5PnNNez939pyPCLthE3tGKpaTO7h8vSlaFcD3g7DnDfWo Euhy1Nu0pXKyBvZd8ZnYXVsOYakGUTqB2sQHpU03cuXGMkPd682li7cybgJI783Z bdwcv+4GcD+7HOzQ3I4Rxk2I1De35YmaaxoE97KE3z3z4DYaMOw9oLPW32lQVZwP mGYfE+1LIUXPRB3H4v4XMtJVE+vWobI= -----END CERTIFICATE-----Generated at Wed Jun 18 05:16:38 2025 by rpki-client