$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: rKhe5jZkwxBNMeFvAhvMs3Dzgmgcp+RRwuDR9OLbAqg= Subject key identifier: A0:16:A1:DB:DF:70:1F:38:22:6E:95:65:86:3C:3A:F8:5A:6C:A4:1C Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0B37 Signing time: Thu 12 Jun 2025 18:58:29 +0000 Manifest this update: Thu 12 Jun 2025 18:58:29 +0000 Manifest next update: Thu 19 Jun 2025 18:58:29 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: pzSWr6U09dBmtEmoaevLP22aPnUGXvnXkN+cNy7TJg0=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: as/dc/eVE0KE5cApiltGew64DOfzaL1TNpjwCt5VZmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: Jun 12 18:58:29 2025 GMT Not After : Jun 19 18:58:29 2025 GMT Subject: CN=684b2355-41cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f0:b2:19:d4:c6:bb:06:ea:da:ea:bf:fc:d0: ee:11:fd:de:a3:72:7a:32:66:56:ad:9a:a2:73:9d: 66:ae:11:0c:72:c8:1e:7a:c3:0d:a0:eb:a8:b8:ca: 6b:41:11:76:f7:5c:19:80:43:97:e4:14:7d:49:c3: 59:22:c0:c2:16:5b:48:c6:44:24:bb:04:05:c2:d6: aa:c5:a7:03:2e:1c:89:27:3d:5c:0a:01:a6:01:84: 5a:1f:23:fb:02:c0:61:3e:c1:c6:0a:4f:a1:be:c4: 31:3c:f8:5a:dc:b4:48:1a:f0:7a:c9:80:a5:e0:09: 11:94:76:a0:4c:e7:b6:b6:7f:b2:d6:ab:39:33:31: c0:3e:9a:60:36:3c:04:09:65:d9:ba:bc:8b:ef:5b: 6b:d6:0c:00:e9:d6:6d:5d:c2:a3:f0:12:ad:99:57: e6:4c:70:0e:c1:3f:77:1d:98:dc:4f:de:5c:e3:73: 83:6a:5d:a9:aa:41:d9:8b:31:68:e3:9f:45:09:1c: 0f:f9:c2:e4:7c:53:29:b6:e0:94:82:e7:ec:1a:ac: 13:70:28:3c:73:56:7a:e9:f6:28:ea:ef:d8:11:a6: 4c:a9:fe:7e:07:58:dc:ac:2c:50:af:fb:3a:af:73: a7:30:32:19:41:35:92:d2:15:22:1e:db:de:43:ca: 57:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:16:A1:DB:DF:70:1F:38:22:6E:95:65:86:3C:3A:F8:5A:6C:A4:1C X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:29:64:72:fb:33:4b:38:d9:d1:a6:c8:6d:ed:53:88:ad:38: 72:bb:63:0d:00:48:8a:90:60:62:85:dc:6e:e1:5c:df:42:e3: f1:b1:52:e1:fd:ce:1c:ea:69:41:be:a7:79:f4:93:39:c0:5c: 18:c3:0d:8f:d8:10:30:32:74:80:02:cb:80:2c:36:b4:0c:60: 0a:80:57:71:b8:79:dc:de:2b:fa:8c:40:93:c6:98:94:d4:31: 61:5f:0e:95:9f:59:61:29:55:42:1b:f6:bc:0a:31:ce:5e:2c: d8:40:cf:63:44:e9:8a:36:12:5e:c7:7c:75:c2:0b:cb:b8:0c: 7e:26:c5:67:63:69:4b:29:ec:2f:b2:19:c0:6b:b4:a1:7c:2a: 59:30:8b:8b:e5:f8:04:a1:c8:da:89:0b:cc:0a:3e:bc:eb:7c: 9c:99:af:08:b7:23:31:ec:80:91:08:cb:04:59:fd:0a:57:be: 37:f5:b8:7d:bc:da:3a:ad:d6:ae:96:3b:42:10:66:8e:84:c4: 12:a7:57:3b:2f:ad:e6:20:51:55:27:45:07:ae:70:2e:3f:be: a1:39:a2:1e:63:97:25:98:f3:a4:fe:ba:2d:c2:fc:f9:7d:82: 92:fc:31:f4:12:d3:22:ff:61:48:e7:e7:3d:8c:82:bf:e8:55: 57:83:3f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjUwNjEyMTg1ODI5WhcNMjUwNjE5MTg1ODI5WjAYMRYwFAYD VQQDEw02ODRiMjM1NS00MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkvCyGdTGuwbq2uq//NDuEf3eo3J6MmZWrZqic51mrhEMcsgeesMNoOuouMpr QRF291wZgEOX5BR9ScNZIsDCFltIxkQkuwQFwtaqxacDLhyJJz1cCgGmAYRaHyP7 AsBhPsHGCk+hvsQxPPha3LRIGvB6yYCl4AkRlHagTOe2tn+y1qs5MzHAPppgNjwE CWXZuryL71tr1gwA6dZtXcKj8BKtmVfmTHAOwT93HZjcT95c43ODal2pqkHZizFo 459FCRwP+cLkfFMptuCUgufsGqwTcCg8c1Z66fYo6u/YEaZMqf5+B1jcrCxQr/s6 r3OnMDIZQTWS0hUiHtveQ8pXsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAWodvf cB84Im6VZYY8OvhabKQcMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYKWRy+zNLONnRpsht7VOIrThyu2MNAEiKkGBihdxu4VzfQuPxsVLh /c4c6mlBvqd59JM5wFwYww2P2BAwMnSAAsuALDa0DGAKgFdxuHnc3iv6jECTxpiU 1DFhXw6Vn1lhKVVCG/a8CjHOXizYQM9jROmKNhJex3x1wgvLuAx+JsVnY2lLKewv shnAa7ShfCpZMIuL5fgEocjaiQvMCj6863ycma8ItyMx7ICRCMsEWf0KV7439bh9 vNo6rdauljtCEGaOhMQSp1c7L63mIFFVJ0UHrnAuP76hOaIeY5clmPOk/rotwvz5 fYKS/DH0EtMi/2FI5+c9jIK/6FVXgz+q -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:08 2025 by rpki-client