$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: 5gJbeHMqwOnl+vnfWtUmvGF2CcVtaBFl5MtncI6k2qY= Subject key identifier: 53:FE:A8:A3:41:22:9E:7C:56:0F:E5:8B:3F:E5:14:41:5A:2A:95:34 Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0AC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0AB9 Signing time: Thu 12 Jun 2025 19:18:34 +0000 Manifest this update: Thu 12 Jun 2025 19:18:33 +0000 Manifest next update: Thu 19 Jun 2025 19:18:33 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: MKnEOFpSKwI804F3YrtjAtu6ovgnyKbN2/RvCqtQAbk=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: jqqBqCZOKu2qIALXNmkWZIy2E6GEnPXSik4fgBrMrDA=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: lxeOojn+XYimi3V1BZ9O9tBljDRntCvGVjoxX3VG+x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2761 (0xac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: Jun 12 19:18:33 2025 GMT Not After : Jun 19 19:18:33 2025 GMT Subject: CN=684b2809-323d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:a2:81:19:fb:e0:2a:ac:56:29:1d:fc:66: 8b:cf:16:61:cf:7a:ae:03:e8:b9:0d:9c:e2:80:4b: d7:b4:81:65:b0:bd:e0:84:ca:56:39:9d:fa:94:dd: ec:06:f1:76:9b:3d:11:47:7f:96:e7:08:8d:f1:85: 2a:05:55:e9:3e:11:22:43:35:ea:a0:e8:8e:66:ab: 45:5d:c4:9d:9e:59:18:a9:33:04:ae:f5:d8:ad:fa: 94:12:ae:0c:e5:e9:26:a5:82:7a:e4:90:86:29:f2: 07:89:ce:15:07:55:57:54:77:c6:2b:0d:cd:a4:d7: 62:d0:d8:3a:f8:f2:d5:b9:e0:3a:e7:fe:b2:c3:02: 0d:6c:4f:e9:ea:5d:06:1d:e6:db:88:d2:9c:49:ef: 35:be:9a:46:e8:5b:0f:07:b0:fe:10:ba:15:8a:8c: 50:9f:f9:ba:5a:fd:7b:9d:cf:78:be:c3:97:5a:55: ef:79:14:6c:ca:e9:05:de:a9:84:c2:34:52:9d:90: 7f:28:05:87:af:ab:6b:f2:b6:f6:36:35:77:64:1e: 6e:13:d9:30:99:ff:50:dd:ba:d5:c9:2f:3a:7f:7b: ff:28:5b:ad:29:f8:9a:fe:db:bd:26:b1:72:0c:05: e1:13:8d:2a:ef:81:67:01:f3:f5:8e:7d:ff:ca:db: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FE:A8:A3:41:22:9E:7C:56:0F:E5:8B:3F:E5:14:41:5A:2A:95:34 X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d5:c3:43:20:11:02:3d:13:81:a4:a5:c7:fc:31:f1:a1:9c: c0:af:8d:fc:3a:ef:4c:d6:d6:81:89:ea:ae:61:22:e2:0f:4a: 84:06:e2:70:87:f3:83:a0:86:62:f1:94:bb:50:ad:71:4a:4f: 4b:f5:41:ee:6b:bc:31:35:bb:89:bf:27:e1:b6:f0:bb:9e:bd: 2a:c2:87:e4:9b:f0:6a:86:9c:91:2c:c0:7b:5a:b6:50:26:04: 57:77:ed:3d:12:d0:24:d0:67:b9:ed:93:86:41:e5:8d:de:9a: 80:b2:13:23:5a:22:ff:09:09:1e:a0:85:c3:6d:63:2e:b7:75: b2:b2:de:b7:e4:da:45:ce:86:88:58:85:fc:55:ee:87:e5:9c: 92:84:ca:e1:6d:66:23:99:3a:1f:08:02:a8:59:57:11:f2:26: 98:b4:71:9b:36:fc:9d:9e:e3:3d:47:99:41:32:99:8a:0b:f7: 61:0e:b8:89:26:b3:45:55:22:46:fb:a2:47:1a:45:95:8e:5d: 99:73:2f:09:29:b0:07:a4:1e:f5:86:75:cb:7c:af:f7:cf:65: a6:7e:c4:fc:58:a7:38:a4:d8:d5:22:73:c5:34:cb:35:b6:a0: d1:af:a8:bb:b9:6c:f1:c3:2d:32:53:e6:69:1d:10:5f:9c:77: d5:f6:ab:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjUwNjEyMTkxODMzWhcNMjUwNjE5MTkxODMzWjAYMRYwFAYD VQQDEw02ODRiMjgwOS0zMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTmigRn74CqsVikd/GaLzxZhz3quA+i5DZzigEvXtIFlsL3ghMpWOZ36lN3s BvF2mz0RR3+W5wiN8YUqBVXpPhEiQzXqoOiOZqtFXcSdnlkYqTMErvXYrfqUEq4M 5ekmpYJ65JCGKfIHic4VB1VXVHfGKw3NpNdi0Ng6+PLVueA65/6ywwINbE/p6l0G HebbiNKcSe81vppG6FsPB7D+ELoVioxQn/m6Wv17nc94vsOXWlXveRRsyukF3qmE wjRSnZB/KAWHr6tr8rb2NjV3ZB5uE9kwmf9Q3brVyS86f3v/KFutKfia/tu9JrFy DAXhE40q74FnAfP1jn3/yttkMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFP+qKNB Ip58Vg/liz/lFEFaKpU0MB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv1cNDIBECPROBpKXH/DHxoZzAr438Ou9M1taBiequYSLiD0qEBuJw h/ODoIZi8ZS7UK1xSk9L9UHua7wxNbuJvyfhtvC7nr0qwofkm/BqhpyRLMB7WrZQ JgRXd+09EtAk0Ge57ZOGQeWN3pqAshMjWiL/CQkeoIXDbWMut3Wyst635NpFzoaI WIX8Ve6H5ZyShMrhbWYjmTofCAKoWVcR8iaYtHGbNvydnuM9R5lBMpmKC/dhDriJ JrNFVSJG+6JHGkWVjl2Zcy8JKbAHpB71hnXLfK/3z2WmfsT8WKc4pNjVInPFNMs1 tqDRr6i7uWzxwy0yU+ZpHRBfnHfV9qty -----END CERTIFICATE-----Generated at Sat Jun 14 20:55:22 2025 by rpki-client