$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json) Hash identifier: JMx75XSkwBNqMEijdD728/GIEEFvJupUrcoYYcFrazg= Subject key identifier: 7E:5F:11:4B:B8:33:0E:87:51:14:77:4C:B3:A5:17:A6:8B:48:8F:3C Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft Manifest number: DE Signing time: Sat 21 Jun 2025 04:38:12 +0000 Manifest this update: Sat 21 Jun 2025 04:38:12 +0000 Manifest next update: Sat 28 Jun 2025 04:38:12 +0000 Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: 104VhAQ1QidO/EdLfg5fTzmqvl6c7+7hEtHZtd7Jt4U=) 2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 0tr4K36tCLfkZ4nhSjqeW9dVetaArPPfGAxuclpW9yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Validity Not Before: Jun 21 04:38:12 2025 GMT Not After : Jun 28 04:38:12 2025 GMT Subject: CN=68563734-e0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:86:0d:58:c4:7e:2b:17:a5:ff:b4:07:2a:d0: 44:a0:16:39:ef:c5:27:46:69:3f:21:9a:96:02:97: 55:8a:3b:3c:83:cf:95:5b:8e:7a:f1:2b:54:d9:7d: ec:26:02:4d:3a:d0:65:e2:00:c6:18:8a:2d:06:76: a3:88:6b:9a:50:5a:d9:9d:03:d5:85:33:4b:66:84: 74:fe:ba:46:24:fe:f1:50:9a:7c:f4:1f:ca:e7:44: da:11:09:e2:43:83:80:50:4b:df:eb:c1:8c:05:d0: 2e:51:f8:96:18:52:9c:77:c5:ca:e2:3b:be:b7:9e: 78:a6:6f:9d:d0:ea:9f:27:eb:b1:cc:52:30:2f:42: c6:26:3b:cf:b8:5d:37:71:c1:96:d7:4f:2a:a3:75: 04:67:6b:75:e6:3b:f6:98:93:52:a7:39:b8:32:66: 49:c3:60:f6:bf:a7:cc:8f:78:73:e5:97:13:f4:87: 84:53:2d:18:ee:1d:33:9e:31:c9:3e:88:7c:de:1b: e1:9a:b8:6c:d9:ea:e9:36:f1:48:73:70:83:14:2b: 9c:9f:e1:e2:c6:7d:6a:24:a0:4a:e0:84:8a:69:14: 78:bf:3d:03:55:8f:30:b9:a5:ea:82:77:f8:11:f6: d9:0c:b3:f9:a7:65:14:5b:71:0d:35:bb:b3:85:e4: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5F:11:4B:B8:33:0E:87:51:14:77:4C:B3:A5:17:A6:8B:48:8F:3C X509v3 Authority Key Identifier: keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:0f:bb:a3:f6:f3:82:08:d8:d5:01:69:e1:d8:e8:ef:70:64: 78:3b:78:c3:95:36:c5:e1:f2:71:13:e9:35:6f:46:67:4f:94: b9:37:61:37:90:f3:77:3a:a6:6a:56:e6:67:43:0c:64:85:dd: be:8f:9a:67:f9:d3:18:04:e5:8f:ff:48:30:54:88:dd:7a:7e: 36:30:5d:5a:81:37:f3:6e:ed:ec:10:0f:9f:79:29:29:81:81: 89:71:b1:0e:53:5d:d5:b7:f9:a3:d5:d6:4d:6c:83:1d:b2:93: 6c:a3:61:7f:b1:48:84:07:36:fa:f7:d9:f2:a0:7f:cb:8b:66: 62:99:69:6e:ac:01:7f:64:f1:c1:e0:cd:a4:3c:f2:58:60:65: 08:e4:25:54:8d:de:af:7c:56:21:93:d9:ff:a3:4b:2a:a7:ec: ba:f4:91:f5:e4:9a:fc:41:c2:fc:a4:b3:84:d9:fc:5d:85:92: 96:1d:ed:6d:a3:1f:e7:1f:7f:38:9b:22:03:63:28:1e:c2:4e: 6d:fe:ef:19:4e:49:0a:c7:f4:9d:4e:ab:f0:a3:3e:e2:60:09: 5f:50:6d:fa:4b:93:2e:07:70:fb:7c:f5:fe:ba:f1:ca:74:34: f9:98:6f:ae:23:db:c9:20:48:ed:a0:b0:eb:67:5b:cf:f2:5a: 5a:2d:84:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDhBMjgyRDFDOEY5MEMzMEQ2NTlFNkQ4QzBCOUJFNDIy MUMyNTMxOUMwHhcNMjUwNjIxMDQzODEyWhcNMjUwNjI4MDQzODEyWjAYMRYwFAYD VQQDEw02ODU2MzczNC1lMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/oYNWMR+Kxel/7QHKtBEoBY578UnRmk/IZqWApdVijs8g8+VW4568StU2X3s JgJNOtBl4gDGGIotBnajiGuaUFrZnQPVhTNLZoR0/rpGJP7xUJp89B/K50TaEQni Q4OAUEvf68GMBdAuUfiWGFKcd8XK4ju+t554pm+d0OqfJ+uxzFIwL0LGJjvPuF03 ccGW108qo3UEZ2t15jv2mJNSpzm4MmZJw2D2v6fMj3hz5ZcT9IeEUy0Y7h0znjHJ Poh83hvhmrhs2erpNvFIc3CDFCucn+Hixn1qJKBK4ISKaRR4vz0DVY8wuaXqgnf4 EfbZDLP5p2UUW3ENNbuzheQw7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5fEUu4 Mw6HURR3TLOlF6aLSI88MB8GA1UdIwQYMBaAFIooLRyPkMMNZZ5tjAub5CIcJTGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80NUJDRkMzMEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3MWxubTJNQzV2a0lod2xN WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80NUJDRkMzMEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3 MWxubTJNQzV2a0lod2xNWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgD7uj9vOCCNjVAWnh2OjvcGR4O3jDlTbF4fJxE+k1b0ZnT5S5N2E3 kPN3OqZqVuZnQwxkhd2+j5pn+dMYBOWP/0gwVIjden42MF1agTfzbu3sEA+feSkp gYGJcbEOU13Vt/mj1dZNbIMdspNso2F/sUiEBzb699nyoH/Li2ZimWlurAF/ZPHB 4M2kPPJYYGUI5CVUjd6vfFYhk9n/o0sqp+y69JH15Jr8QcL8pLOE2fxdhZKWHe1t ox/nH384myIDYygewk5t/u8ZTkkKx/SdTqvwoz7iYAlfUG36S5MuB3D7fPX+uvHK dDT5mG+uI9vJIEjtoLDrZ1vP8lpaLYQl -----END CERTIFICATE-----Generated at Sat Jun 21 16:56:30 2025 by rpki-client