$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json) Hash identifier: VaWthmo7skIQr6AFVNvEQb9lky5DyrlLbZry0txzaNU= Subject key identifier: D6:24:F2:BE:3B:3E:37:0E:9D:4F:D3:1A:EA:AD:62:B7:B5:F9:0C:FA Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft Manifest number: 01F2 Signing time: Tue 17 Jun 2025 01:42:05 +0000 Manifest this update: Tue 17 Jun 2025 01:42:04 +0000 Manifest next update: Tue 24 Jun 2025 01:42:04 +0000 Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: tdvCBRR76I5Y3gf0sZcBQFlxhUUdw75dc74Q7yAn0EQ=) 2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: i/snzsv5ugVK5M4wkOzh02txTFh9Vl9HyndyddhSqd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Validity Not Before: Jun 17 01:42:04 2025 GMT Not After : Jun 24 01:42:04 2025 GMT Subject: CN=6850c7ed-5b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:92:81:f0:a8:a1:fa:cf:52:79:04:74:13: f9:e0:4c:37:d6:d2:1a:74:6f:a1:1b:83:f8:95:b5: 43:8f:4a:a0:a2:86:ea:3e:ff:90:1c:93:23:9c:b9: c8:f3:82:6f:60:c6:9c:e7:eb:28:45:e5:8f:10:2f: ff:bc:db:11:55:81:f6:60:0c:0b:22:9c:5d:e7:da: 40:1c:2d:a2:38:65:00:77:d1:25:91:43:0a:20:c8: 36:a3:25:ce:7b:6a:5e:d4:bc:dc:a6:d1:ad:6b:21: 77:00:ed:8c:ee:0a:8a:fe:df:46:19:1f:60:23:d4: 4b:23:73:8d:85:8a:c8:84:8f:89:f3:b1:96:ce:82: 50:4c:64:fb:29:27:97:3b:b8:02:15:6a:e8:d1:b0: da:a7:6e:2d:ee:de:d2:06:35:16:ab:dd:00:dd:72: e3:b4:b9:b7:ae:97:b1:25:33:2b:41:0f:67:c4:88: 03:b3:f6:97:8f:4d:9d:3e:24:52:2f:6e:b1:42:0d: ac:f1:e5:1f:13:12:1a:37:ae:d8:c1:fe:74:11:f9: 5a:2e:92:58:86:47:8b:b9:a9:18:83:32:c2:f8:9f: 6e:bf:c0:be:ff:c3:7e:15:1e:89:1d:2e:52:3f:b8: 07:79:ba:25:a7:46:93:0d:5c:08:71:11:33:a5:9e: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:24:F2:BE:3B:3E:37:0E:9D:4F:D3:1A:EA:AD:62:B7:B5:F9:0C:FA X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:60:61:b3:38:94:82:54:b1:3b:b8:af:7b:13:7f:1f:cd:3a: 4d:8a:35:c3:c4:6c:37:21:d3:64:49:7f:d9:f0:dd:ae:b6:36: d4:9f:66:98:37:23:b8:14:c1:61:60:1f:5f:04:14:44:43:22: 92:9b:df:b0:47:34:2a:79:21:27:48:f8:0c:f8:3e:dd:49:9f: f3:38:50:7c:82:7e:7c:34:46:14:f5:a7:4f:37:64:e2:cc:6b: 3e:1b:92:af:e3:50:c2:d5:e7:fd:53:cb:bc:80:4b:c0:7a:a9: ea:1e:c9:b6:f0:c7:05:09:95:1d:41:52:32:10:7a:22:b7:1c: 73:2d:1d:00:67:99:67:66:a6:66:93:c2:4e:9c:5e:6c:9a:f5: 1f:30:8d:df:e4:f6:b0:5a:ee:4b:0a:af:08:56:23:8c:f6:38: cd:05:a5:36:e2:62:c7:f5:4d:35:b1:3c:f8:b8:59:23:b3:e6: d1:49:3d:57:12:9d:ac:79:ba:70:c8:30:3b:13:3b:d8:3e:18: 19:1d:d1:38:64:86:33:87:8c:ee:1c:43:96:98:4a:93:9e:0f: c4:3d:cc:56:d0:19:0a:c1:3a:ca:ad:2a:85:d6:c5:8b:07:52: bb:f8:0c:64:03:8d:d8:d6:c0:f8:3d:22:5e:28:63:95:6c:57: 80:ea:22:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjUwNjE3MDE0MjA0WhcNMjUwNjI0MDE0MjA0WjAYMRYwFAYD VQQDEw02ODUwYzdlZC01YjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8CSgfCoofrPUnkEdBP54Ew31tIadG+hG4P4lbVDj0qgoobqPv+QHJMjnLnI 84JvYMac5+soReWPEC//vNsRVYH2YAwLIpxd59pAHC2iOGUAd9ElkUMKIMg2oyXO e2pe1LzcptGtayF3AO2M7gqK/t9GGR9gI9RLI3ONhYrIhI+J87GWzoJQTGT7KSeX O7gCFWro0bDap24t7t7SBjUWq90A3XLjtLm3rpexJTMrQQ9nxIgDs/aXj02dPiRS L26xQg2s8eUfExIaN67Ywf50EflaLpJYhkeLuakYgzLC+J9uv8C+/8N+FR6JHS5S P7gHebolp0aTDVwIcREzpZ7H7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYk8r47 PjcOnU/TGuqtYre1+Qz6MB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlCNy9CMUU1NEFCODU2QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5 UEtuRU9lMlBWVGlQYW1qT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFYGGzOJSCVLE7uK97E38fzTpNijXDxGw3IdNkSX/Z8N2utjbUn2aY NyO4FMFhYB9fBBREQyKSm9+wRzQqeSEnSPgM+D7dSZ/zOFB8gn58NEYU9adPN2Ti zGs+G5Kv41DC1ef9U8u8gEvAeqnqHsm28McFCZUdQVIyEHoitxxzLR0AZ5lnZqZm k8JOnF5smvUfMI3f5PawWu5LCq8IViOM9jjNBaU24mLH9U01sTz4uFkjs+bRST1X Ep2sebpwyDA7EzvYPhgZHdE4ZIYzh4zuHEOWmEqTng/EPcxW0BkKwTrKrSqF1sWL B1K7+AxkA43Y1sD4PSJeKGOVbFeA6iIM -----END CERTIFICATE-----Generated at Wed Jun 18 01:46:27 2025 by rpki-client