$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: RDQPZgkzPxlS42Kw48EdcH9nEaCA9HnAad+lQ99dx5M= Subject key identifier: B5:A1:7C:AE:99:A1:12:BB:5B:AA:A2:04:E6:BA:2E:1E:72:FC:E2:B1 Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 07E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 08C0 Signing time: Mon 16 Jun 2025 20:51:18 +0000 Manifest this update: Mon 16 Jun 2025 20:51:18 +0000 Manifest next update: Mon 23 Jun 2025 20:51:18 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: AGeu8ZQdgPFa2sl9JB/ztkIf8oS+0O7x8IBabAxTXPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2016 (0x7e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: Jun 16 20:51:18 2025 GMT Not After : Jun 23 20:51:18 2025 GMT Subject: CN=685083c6-712d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:0e:00:de:3a:2c:9d:b6:fa:96:47:81:2d: 0a:de:50:f5:d3:a5:08:bc:47:26:f6:91:ef:33:27: bc:0d:9a:83:c4:b0:f4:8e:20:56:fe:f7:e2:f9:48: 40:68:ff:8c:95:42:95:72:31:60:96:e8:5e:59:48: 57:9e:13:43:f7:5b:b4:47:bc:81:cd:38:ae:52:12: 89:e6:b9:0d:1a:be:00:ca:2c:a1:9c:4b:60:d6:96: 17:4d:8c:a5:69:77:58:c6:68:dc:eb:54:db:86:a3: 47:83:d7:87:f2:1b:06:2a:f6:de:7f:24:b7:3e:b4: 97:e4:aa:85:5e:8f:84:d5:52:f7:85:21:2b:be:e6: 49:ff:d8:8f:53:21:67:b8:41:ad:b2:ea:f5:f8:fb: 0e:ce:c7:bf:f4:63:52:ef:7e:2d:20:c7:df:9f:ba: e5:db:32:09:ac:bc:be:2f:f1:8b:b7:c5:ee:e3:9e: ac:93:c8:e3:d0:a6:48:01:c6:b6:a8:67:c4:b6:0a: 3b:c6:af:15:a7:f0:83:02:14:61:10:91:a7:cb:98: 70:8f:6c:8a:22:f0:51:99:6d:31:2e:c0:9d:96:4a: c1:25:73:c5:e6:84:f2:5c:3d:0d:d0:a7:ac:69:1f: 4f:9f:1c:4a:ec:ef:72:08:5d:c7:e1:05:ca:61:f1: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A1:7C:AE:99:A1:12:BB:5B:AA:A2:04:E6:BA:2E:1E:72:FC:E2:B1 X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d8:6e:66:8c:78:31:07:61:39:7f:a7:87:07:fc:07:0f:9f: 81:83:a5:5c:7f:13:68:6a:b9:bf:43:db:0d:cb:5f:47:16:27: dd:87:8f:7e:57:6a:01:fb:2d:df:f4:79:1e:fc:63:22:be:71: db:1e:75:0a:97:78:e8:c5:16:1c:17:51:1d:19:44:f0:95:bc: ec:57:2b:15:9b:80:31:42:09:0b:0a:db:63:3a:b6:42:07:76: b9:4e:0c:46:55:04:86:83:6b:e8:03:e6:38:b1:4d:04:f9:b5: 1f:16:94:5d:c3:aa:68:cc:f4:f7:67:df:83:92:aa:af:53:5b: e8:51:f2:ae:08:36:09:3a:98:05:6a:66:c6:75:c3:fa:81:8a: 3f:51:ab:4e:58:c6:01:87:48:bb:d9:62:73:ce:60:fc:b0:74: e2:33:a9:72:7a:23:8c:f0:15:85:13:30:27:1b:c2:cc:9e:27: bd:fa:2e:80:6a:2c:3e:8e:e8:9e:e1:5b:69:4e:54:e8:1b:13: fa:a3:09:05:68:6e:2d:51:6c:d4:0c:8c:f1:9a:d4:92:55:47: b4:29:eb:44:f4:e6:78:e2:2c:e7:e1:b9:73:c1:f5:98:c9:d5: 9b:75:4a:84:0b:50:12:7b:63:42:0f:d8:25:a3:af:fa:54:d9: 4b:1e:4b:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjUwNjE2MjA1MTE4WhcNMjUwNjIzMjA1MTE4WjAYMRYwFAYD VQQDEw02ODUwODNjNi03MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3wOAN46LJ22+pZHgS0K3lD106UIvEcm9pHvMye8DZqDxLD0jiBW/vfi+UhA aP+MlUKVcjFgluheWUhXnhND91u0R7yBzTiuUhKJ5rkNGr4AyiyhnEtg1pYXTYyl aXdYxmjc61TbhqNHg9eH8hsGKvbefyS3PrSX5KqFXo+E1VL3hSErvuZJ/9iPUyFn uEGtsur1+PsOzse/9GNS734tIMffn7rl2zIJrLy+L/GLt8Xu456sk8jj0KZIAca2 qGfEtgo7xq8Vp/CDAhRhEJGny5hwj2yKIvBRmW0xLsCdlkrBJXPF5oTyXD0N0Kes aR9PnxxK7O9yCF3H4QXKYfFNOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWhfK6Z oRK7W6qiBOa6Lh5y/OKxMB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA72G5mjHgxB2E5f6eHB/wHD5+Bg6VcfxNoarm/Q9sNy19HFifdh49+ V2oB+y3f9Hke/GMivnHbHnUKl3joxRYcF1EdGUTwlbzsVysVm4AxQgkLCttjOrZC B3a5TgxGVQSGg2voA+Y4sU0E+bUfFpRdw6pozPT3Z9+DkqqvU1voUfKuCDYJOpgF ambGdcP6gYo/UatOWMYBh0i72WJzzmD8sHTiM6lyeiOM8BWFEzAnG8LMnie9+i6A aiw+juie4VtpTlToGxP6owkFaG4tUWzUDIzxmtSSVUe0KetE9OZ44izn4blzwfWY ydWbdUqEC1ASe2NCD9glo6/6VNlLHkvB -----END CERTIFICATE-----Generated at Wed Jun 18 16:35:44 2025 by rpki-client