$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: UAd0HUK4HmhAjBXY8qj5fcUhXgD3Ojb99Ev8q+tKF+U= Subject key identifier: 1B:47:EE:E2:FF:D8:BE:C5:BB:33:56:3A:48:1C:24:BA:D9:28:68:57 Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0B33 Signing time: Thu 12 Jun 2025 18:58:37 +0000 Manifest this update: Thu 12 Jun 2025 18:58:36 +0000 Manifest next update: Thu 19 Jun 2025 18:58:36 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: wM0N+eIc1CLe9AKTRT2XMfjMiOHCUy+KBnpdquGzARo=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: 6Ds3NGu2wYLJMMD3M602IBKNI5PFzIBlSYGM/Hpizc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: Jun 12 18:58:36 2025 GMT Not After : Jun 19 18:58:36 2025 GMT Subject: CN=684b235d-2dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:e3:6e:8e:61:e6:18:63:7c:60:e7:00:47: 64:e1:13:40:34:12:e7:bc:a1:e5:34:3f:86:b8:5f: cb:ea:d2:2b:a6:0e:3e:cb:9c:42:93:3d:7f:0d:26: bf:e7:19:26:bb:d4:9d:1d:0d:2a:93:d3:0e:28:d9: df:37:1e:04:92:0e:79:58:c6:62:cd:1a:c7:dd:71: 7e:c5:91:20:47:cd:52:98:6c:d0:2d:1c:35:ed:d6: 85:1b:82:2d:78:96:d4:e4:04:38:c0:fc:84:bc:b0: 1d:d3:47:d4:e3:30:b8:f7:4b:6e:2c:c5:1d:e4:3a: 2d:11:76:a5:d9:5b:2a:72:b0:82:e1:83:b5:22:ad: 19:f2:3e:58:ea:3a:4c:0b:3e:cf:34:d9:cc:d2:0f: 74:a8:40:6f:45:83:78:ad:19:ec:34:b4:4b:ff:9b: bd:88:96:ab:0f:0d:3a:da:0d:d9:56:a8:5e:b1:16: a5:be:fc:d3:2e:19:cf:18:7d:b8:d0:89:b8:1c:d1: 84:8a:91:c5:40:b6:29:0f:6b:db:7e:e1:8c:cd:59: e4:36:19:50:b9:cb:5f:e0:b3:5e:28:d4:7e:51:d9: 11:3b:8e:bb:92:6a:11:9c:15:51:75:2f:04:d7:fe: fb:b6:00:0e:84:89:4c:11:7b:61:31:c4:2b:ab:75: 0c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:47:EE:E2:FF:D8:BE:C5:BB:33:56:3A:48:1C:24:BA:D9:28:68:57 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:68:3a:ed:bc:bb:68:18:a5:69:71:2a:4a:6c:80:e5:0b:cf: f4:8d:be:c8:5b:ea:b5:d1:7a:3e:1e:8c:06:58:a2:05:3c:91: 5a:9f:1d:a5:47:83:5b:31:02:a7:c1:33:99:3d:a3:e0:98:cd: 2a:81:4c:bf:1d:16:f1:43:49:9d:fe:8c:7d:f8:f7:1d:25:47: 3c:ca:06:a2:c2:a9:5b:7d:a1:90:fa:f7:88:6c:22:32:8f:17: cf:bc:9a:e7:b1:77:a7:c4:9a:cf:e1:2d:a9:e8:51:28:31:ca: 36:38:6c:9e:fe:6b:7a:63:2f:89:6e:c4:a6:fa:06:d4:07:fd: dc:89:32:72:2a:11:cd:29:69:0d:d2:33:f2:9c:e4:7c:d1:6d: 33:d8:8b:c8:45:84:ca:97:91:ad:6b:ab:d0:ac:c4:1e:b3:30: 9f:b9:1f:da:f3:59:f3:26:6c:80:e0:69:3b:fd:5b:21:b9:1a: 13:18:c0:f6:5a:8c:83:68:7e:84:33:e9:9d:e5:83:c9:21:7d: 12:55:cd:db:ed:76:33:b7:d4:00:45:be:ef:20:48:da:0b:3e: 99:f1:73:0b:4c:3d:2e:ea:da:17:01:ec:d9:a9:77:65:f6:33: 9b:a9:d1:b6:fe:c0:67:3a:05:f5:6d:ba:1d:f4:23:74:0a:de: 3a:4a:04:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjUwNjEyMTg1ODM2WhcNMjUwNjE5MTg1ODM2WjAYMRYwFAYD VQQDEw02ODRiMjM1ZC0yZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO7jbo5h5hhjfGDnAEdk4RNANBLnvKHlND+GuF/L6tIrpg4+y5xCkz1/DSa/ 5xkmu9SdHQ0qk9MOKNnfNx4Ekg55WMZizRrH3XF+xZEgR81SmGzQLRw17daFG4It eJbU5AQ4wPyEvLAd00fU4zC490tuLMUd5DotEXal2VsqcrCC4YO1Iq0Z8j5Y6jpM Cz7PNNnM0g90qEBvRYN4rRnsNLRL/5u9iJarDw062g3ZVqhesRalvvzTLhnPGH24 0Im4HNGEipHFQLYpD2vbfuGMzVnkNhlQuctf4LNeKNR+UdkRO467kmoRnBVRdS8E 1/77tgAOhIlMEXthMcQrq3UM+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtH7uL/ 2L7FuzNWOkgcJLrZKGhXMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAraDrtvLtoGKVpcSpKbIDlC8/0jb7IW+q10Xo+HowGWKIFPJFanx2l R4NbMQKnwTOZPaPgmM0qgUy/HRbxQ0md/ox9+PcdJUc8ygaiwqlbfaGQ+veIbCIy jxfPvJrnsXenxJrP4S2p6FEoMco2OGye/mt6Yy+JbsSm+gbUB/3ciTJyKhHNKWkN 0jPynOR80W0z2IvIRYTKl5Gta6vQrMQeszCfuR/a81nzJmyA4Gk7/VshuRoTGMD2 WoyDaH6EM+md5YPJIX0SVc3b7XYzt9QARb7vIEjaCz6Z8XMLTD0u6toXAezZqXdl 9jObqdG2/sBnOgX1bbod9CN0Ct46SgQ6 -----END CERTIFICATE-----Generated at Sat Jun 14 18:07:14 2025 by rpki-client