$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: znjcFDm94cCHsWKIPa6N44PZQNmFreMK+LGkOiyiR2Y= Subject key identifier: DB:CA:EE:21:C4:E9:2C:28:4B:2C:2E:2F:EF:CB:3E:C4:66:C4:78:76 Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: C2 Signing time: Sun 15 Jun 2025 04:57:17 +0000 Manifest this update: Sun 15 Jun 2025 04:57:16 +0000 Manifest next update: Sun 22 Jun 2025 04:57:16 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: udzYUi8mR76VoWC7Ylm1+9QsOV/CP8eCaBR2PRL78FU=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: KwkklQiSakEeltaaQOJwnjAgXDHwV1KOPtVGyZJnp/Q=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Jun 15 04:57:16 2025 GMT Not After : Jun 22 04:57:16 2025 GMT Subject: CN=684e52ac-80d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8a:b9:2f:ca:d9:7e:2d:a7:8e:d4:6f:dc:4d: f0:0b:d3:0c:29:e2:0e:5f:e9:5a:a7:07:7d:8f:77: 25:2d:ac:01:9c:0c:2e:c4:45:e0:e3:8b:67:6b:f8: f9:d0:a1:16:09:49:5b:ba:5b:25:92:16:d7:5d:51: 61:87:19:eb:38:1f:a3:f0:38:a7:27:09:2d:48:a2: 88:dc:f6:00:60:68:f9:d8:62:78:e7:d3:9d:1c:f9: eb:f4:1e:6c:85:b6:35:e1:36:0d:6f:bf:88:3c:71: 24:21:cc:e7:e0:59:1e:00:d0:ee:4c:0c:78:fe:f1: ea:9f:ea:4e:81:3b:b7:9c:84:82:06:54:20:cb:64: 60:11:65:66:23:75:7e:e1:bf:8e:7d:8b:77:90:f3: 42:c1:90:8a:ec:7b:f9:2d:09:7a:d3:35:5c:a0:9e: 52:fe:2f:a8:01:af:38:8a:ac:eb:e9:f1:76:aa:6a: ed:85:ef:09:da:7b:ad:44:b8:95:ec:07:7f:da:49: dd:cc:2b:6d:2c:3b:fc:56:37:96:d5:1c:49:c1:de: 50:4d:f4:a3:96:84:1b:73:ab:c7:a5:26:f2:df:64: 97:79:9d:be:dc:97:ce:58:51:9a:ad:1d:5b:d7:56: c1:76:76:12:c6:65:9b:cf:c4:0b:a7:c8:f2:8b:ca: 44:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CA:EE:21:C4:E9:2C:28:4B:2C:2E:2F:EF:CB:3E:C4:66:C4:78:76 X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3f:8b:1f:bc:28:d7:2d:aa:c9:65:c4:b2:72:01:de:d7:c9: 73:23:14:44:ea:90:04:72:3e:92:d4:23:0b:8a:0c:51:ae:46: 35:73:5f:89:af:56:54:34:1d:d6:43:31:e5:68:5d:cf:ea:93: 14:73:e3:07:af:a2:ef:48:48:20:94:aa:32:79:97:40:e4:d0: e6:f0:67:91:73:b2:5a:d5:d1:b3:c1:e4:dc:79:4d:e8:8e:c3: 05:a1:3b:08:e3:74:28:45:04:6e:52:6d:fc:da:73:c8:6b:cf: 08:ef:7b:eb:bf:ab:b6:e3:59:9f:b7:d3:2c:63:6d:92:1e:be: f5:97:41:e9:49:aa:a5:65:38:ee:91:51:03:86:62:cd:7a:35: 14:04:41:d4:38:91:b5:b4:e9:8f:f3:93:b7:ad:06:bb:e2:44: 30:ac:bc:b1:5a:0c:c8:3c:25:12:cd:b8:a5:c0:ca:bf:db:55: e6:f5:93:91:2b:38:d2:04:7a:6e:dc:92:8d:88:09:b1:14:e0: 8f:52:00:8e:9c:58:92:9a:6d:01:bc:e9:fd:da:98:0e:5d:0c: 94:55:73:5f:dc:35:e0:4b:fa:d9:7b:b2:63:a3:96:4e:44:7e: 8a:34:38:a1:ec:5b:03:42:2e:ea:fa:43:3c:9f:95:32:2f:72: 97:5f:91:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUwNjE1MDQ1NzE2WhcNMjUwNjIyMDQ1NzE2WjAYMRYwFAYD VQQDEw02ODRlNTJhYy04MGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Yq5L8rZfi2njtRv3E3wC9MMKeIOX+lapwd9j3clLawBnAwuxEXg44tna/j5 0KEWCUlbulslkhbXXVFhhxnrOB+j8DinJwktSKKI3PYAYGj52GJ459OdHPnr9B5s hbY14TYNb7+IPHEkIczn4FkeANDuTAx4/vHqn+pOgTu3nISCBlQgy2RgEWVmI3V+ 4b+OfYt3kPNCwZCK7Hv5LQl60zVcoJ5S/i+oAa84iqzr6fF2qmrthe8J2nutRLiV 7Ad/2kndzCttLDv8VjeW1RxJwd5QTfSjloQbc6vHpSby32SXeZ2+3JfOWFGarR1b 11bBdnYSxmWbz8QLp8jyi8pEowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvK7iHE 6SwoSywuL+/LPsRmxHh2MB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIP4sfvCjXLarJZcSycgHe18lzIxRE6pAEcj6S1CMLigxRrkY1c1+J r1ZUNB3WQzHlaF3P6pMUc+MHr6LvSEgglKoyeZdA5NDm8GeRc7Ja1dGzweTceU3o jsMFoTsI43QoRQRuUm382nPIa88I73vrv6u241mft9MsY22SHr71l0HpSaqlZTju kVEDhmLNejUUBEHUOJG1tOmP85O3rQa74kQwrLyxWgzIPCUSzbilwMq/21Xm9ZOR KzjSBHpu3JKNiAmxFOCPUgCOnFiSmm0BvOn92pgOXQyUVXNf3DXgS/rZe7Jjo5ZO RH6KNDih7FsDQi7q+kM8n5UyL3KXX5FD -----END CERTIFICATE-----Generated at Mon Jun 16 22:13:45 2025 by rpki-client