$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft File: IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json) Hash identifier: RjxQZaoRje7ZLWBkwxRW/k2094huu5oiZACGTHbmGeo= Subject key identifier: 71:0E:90:30:72:88:DB:81:6E:26:F7:61:03:8D:8A:D6:0D:1A:16:AF Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft Manifest number: 0191 Signing time: Fri 13 Jun 2025 02:30:03 +0000 Manifest this update: Fri 13 Jun 2025 02:30:02 +0000 Manifest next update: Fri 20 Jun 2025 02:30:02 +0000 Files and hashes: 1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: 2hfWUFs6LbsgM46a4B6Wnxboxi9N9vcVJM42EkO2bP8=) 2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: KHyj1otfkf2S5YApB/OtC5OI1QkNCQ8X27Eo+XCQipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: Jun 13 02:30:02 2025 GMT Not After : Jun 20 02:30:02 2025 GMT Subject: CN=684b8d2b-8af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:39:bf:fe:a2:3a:50:50:26:a4:d0:c0:da: 98:9a:b8:9a:7f:87:bc:8a:fd:89:ba:74:92:2f:f2: 6f:ae:52:f2:3d:7c:6f:cf:6c:0d:0a:af:36:e8:fb: 4f:b7:77:58:59:d2:20:0e:37:51:95:80:67:2d:cb: 60:a9:92:37:5c:43:ed:19:ef:35:2a:d8:0f:3f:5e: 0a:ce:96:c2:68:41:89:bf:c1:58:40:7e:02:26:72: 47:7b:7e:ef:50:3c:ab:2d:78:9b:d3:8f:91:d1:49: de:f0:15:67:dd:17:af:df:16:12:f5:3a:18:12:c7: b2:cd:5a:54:87:95:47:ec:ff:e5:a3:34:62:ff:d4: 05:c1:be:e3:61:e0:ef:21:5f:e8:d5:82:40:03:9e: 23:0c:bb:93:a9:8c:e3:a8:e9:ac:bd:ef:ed:cf:51: 8f:0c:c8:41:f7:7b:a0:43:3c:07:63:b2:f7:90:46: 0f:f1:88:e9:0b:47:b3:57:0d:fa:0a:65:45:7e:72: e2:fc:38:ee:23:26:64:0d:89:32:55:cd:f9:88:cd: f8:89:a9:b2:7d:f9:66:9c:be:08:5b:97:8f:c3:a8: f8:bf:a1:47:3c:13:cf:ec:1b:9f:e5:94:ee:57:b8: 15:63:4a:38:ee:a4:d0:55:9e:cc:6a:d8:ca:2f:bd: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0E:90:30:72:88:DB:81:6E:26:F7:61:03:8D:8A:D6:0D:1A:16:AF X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:52:7b:b1:e5:ad:b5:5f:d3:e6:ea:1b:7e:98:fa:89:2e:d8: 8e:fb:66:ff:36:02:b7:3e:82:ab:6b:f8:6f:00:8b:84:43:5e: 96:59:b7:65:e7:45:a6:db:d5:b6:20:84:a8:6e:d7:53:68:81: 03:2e:7f:6e:83:d9:0c:2e:32:cf:c1:82:f1:cb:ef:27:5a:c7: fc:70:4c:56:52:5c:52:64:ea:e9:3d:62:22:63:0c:9a:aa:81: 56:83:8b:0d:3f:67:af:29:15:f3:2f:9b:5b:a4:72:7e:51:b7: 6f:7f:73:b8:f6:ff:4d:5f:bb:0e:12:11:1b:11:a3:62:85:76: 7a:7a:37:93:a1:26:71:ed:eb:52:d6:a2:9e:4a:8a:cd:48:71: 48:f9:b4:df:d1:ff:c1:6f:c9:f1:14:8a:63:4e:80:cb:a6:92: 27:fb:6c:03:2c:ad:65:e8:8e:b9:69:ad:4f:fe:b9:69:2b:d7: 68:b0:ee:8d:b4:39:1b:62:13:e9:e0:fe:5d:d8:ae:be:85:30: 56:9b:ea:a5:64:65:6e:8a:43:30:b2:69:6b:7a:ef:ad:f3:97: 76:bb:61:49:a9:02:26:1c:80:ae:19:92:d3:31:53:42:da:26: 21:5a:f8:6c:0b:82:98:7c:25:ec:2c:58:0a:bc:22:60:a1:11: a5:0f:71:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjUwNjEzMDIzMDAyWhcNMjUwNjIwMDIzMDAyWjAYMRYwFAYD VQQDEw02ODRiOGQyYi04YWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsc5v/6iOlBQJqTQwNqYmriaf4e8iv2JunSSL/JvrlLyPXxvz2wNCq826PtP t3dYWdIgDjdRlYBnLctgqZI3XEPtGe81KtgPP14KzpbCaEGJv8FYQH4CJnJHe37v UDyrLXib04+R0Une8BVn3Rev3xYS9ToYEseyzVpUh5VH7P/lozRi/9QFwb7jYeDv IV/o1YJAA54jDLuTqYzjqOmsve/tz1GPDMhB93ugQzwHY7L3kEYP8YjpC0ezVw36 CmVFfnLi/DjuIyZkDYkyVc35iM34iamyfflmnL4IW5ePw6j4v6FHPBPP7Buf5ZTu V7gVY0o47qTQVZ7MatjKL71GnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEOkDBy iNuBbib3YQONitYNGhavMB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Nzk0RC9DMkNDRTFEQ0U0MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3Vmct Tm9mTjdMX0JQcGxCQWExQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOUnux5a21X9Pm6ht+mPqJLtiO+2b/NgK3PoKra/hvAIuEQ16WWbdl 50Wm29W2IISobtdTaIEDLn9ug9kMLjLPwYLxy+8nWsf8cExWUlxSZOrpPWIiYwya qoFWg4sNP2evKRXzL5tbpHJ+Ubdvf3O49v9NX7sOEhEbEaNihXZ6ejeToSZx7etS 1qKeSorNSHFI+bTf0f/Bb8nxFIpjToDLppIn+2wDLK1l6I65aa1P/rlpK9dosO6N tDkbYhPp4P5d2K6+hTBWm+qlZGVuikMwsmlreu+t85d2u2FJqQImHICuGZLTMVNC 2iYhWvhsC4KYfCXsLFgKvCJgoRGlD3Fy -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:42 2025 by rpki-client