$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: GTIiNincnmjQXPXncteQ2FzZ5+mwihFKlvaskYZaDOM= Subject key identifier: B9:3C:71:46:1E:09:C0:20:94:F2:9E:93:69:1D:5E:0A:37:BC:32:F3 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 0179 Signing time: Tue 17 Jun 2025 02:47:21 +0000 Manifest this update: Tue 17 Jun 2025 02:47:21 +0000 Manifest next update: Tue 24 Jun 2025 02:47:21 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: Mb8ra0Lk5cRHEhfzRl0lwpj9KW04TkBW/orFw6wfx/E=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 5G3UaqvRN/OiyPJztyDHavW6CqyUdsMIsiidpfCXP7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Jun 17 02:47:21 2025 GMT Not After : Jun 24 02:47:21 2025 GMT Subject: CN=6850d739-8618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:39:9c:10:fa:ba:4a:40:af:f1:7a:03:86: 73:b2:85:5f:df:c3:16:58:93:cf:4d:ec:d7:cb:4a: aa:ef:57:15:f4:38:32:2c:7c:d0:8b:9d:9d:66:7d: f5:80:b3:96:50:5e:56:d8:30:ef:7e:e7:44:4f:d4: 48:8f:5b:71:6b:8f:22:ee:7b:62:75:99:82:7e:d3: 46:af:9e:9b:36:ce:83:89:6f:c5:12:5b:62:38:58: 45:92:cf:32:a2:ee:f8:24:f8:17:26:8f:1f:c8:fe: bd:07:3e:e6:94:ee:96:e8:36:a4:c4:46:a7:10:68: fb:4f:9c:e7:8c:44:ac:65:d7:ba:7e:f3:f0:5f:11: 69:c8:48:0e:33:c8:c7:c3:41:6c:77:f7:42:53:c3: 7d:4e:af:95:ad:2b:fd:6d:31:cb:82:cd:a6:a7:8e: 70:f4:56:57:9e:30:48:a2:3e:af:4b:14:19:67:69: 9e:53:c5:f5:e0:08:38:46:21:51:16:67:fb:07:28: 3b:a9:7d:d7:9e:4b:99:9a:23:a2:12:0c:06:e1:ea: 32:f6:64:94:bb:30:bb:ce:86:99:a7:e4:52:4d:4e: d1:61:89:b8:31:39:a2:8c:15:6a:6c:b0:d8:9d:5e: 04:cf:62:74:ff:a1:47:a7:60:15:c1:59:0e:36:62: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:71:46:1E:09:C0:20:94:F2:9E:93:69:1D:5E:0A:37:BC:32:F3 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:72:f2:24:dc:6c:87:21:ef:82:db:68:80:84:af:a9:61:cc: fc:75:1d:21:b2:b9:cf:34:3c:5b:5d:d8:b9:aa:d6:e8:a2:1e: b6:0c:f6:90:6c:be:e3:15:21:8b:25:c9:77:b4:ba:02:a5:63: 41:3b:8f:ee:eb:0d:00:2c:7a:85:31:85:b5:0a:43:e7:c1:d2: 8d:52:38:94:16:4e:d9:04:26:8d:c6:ec:2a:67:c7:dc:a8:52: 1a:ec:e8:99:d6:c7:24:46:0b:af:55:bf:9a:83:87:24:96:86: 07:29:21:a4:eb:8f:81:12:7c:d1:1a:3a:ce:28:88:81:33:d6: e5:60:09:fe:ed:d5:5a:c0:34:0f:a4:40:06:5c:86:11:4a:fe: 1e:b7:dd:04:f4:31:ce:bd:a2:6b:f2:52:3b:0f:0d:26:98:61: 81:13:65:a3:e9:a6:cf:9f:33:76:69:a0:e6:b3:f5:9d:3c:ca: 0c:38:8e:ab:e6:91:e0:3a:01:6e:8c:57:17:0b:24:30:1a:53: 0a:b8:7a:15:74:46:e6:c9:18:ab:ff:14:fa:96:9d:5f:cd:41: 91:a0:64:2c:7a:21:b1:c1:fd:ae:cc:5f:fd:40:50:18:36:be: 85:c8:5e:2b:8d:b7:e9:2b:11:8f:bb:08:8e:41:61:91:60:ec: 67:2c:08:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjUwNjE3MDI0NzIxWhcNMjUwNjI0MDI0NzIxWjAYMRYwFAYD VQQDEw02ODUwZDczOS04NjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xo5nBD6ukpAr/F6A4ZzsoVf38MWWJPPTezXy0qq71cV9DgyLHzQi52dZn31 gLOWUF5W2DDvfudET9RIj1txa48i7ntidZmCftNGr56bNs6DiW/FEltiOFhFks8y ou74JPgXJo8fyP69Bz7mlO6W6DakxEanEGj7T5znjESsZde6fvPwXxFpyEgOM8jH w0Fsd/dCU8N9Tq+VrSv9bTHLgs2mp45w9FZXnjBIoj6vSxQZZ2meU8X14Ag4RiFR Fmf7Byg7qX3XnkuZmiOiEgwG4eoy9mSUuzC7zoaZp+RSTU7RYYm4MTmijBVqbLDY nV4Ez2J0/6FHp2AVwVkONmLWYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLk8cUYe CcAglPKek2kdXgo3vDLzMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIcvIk3GyHIe+C22iAhK+pYcz8dR0hsrnPNDxbXdi5qtbooh62DPaQ bL7jFSGLJcl3tLoCpWNBO4/u6w0ALHqFMYW1CkPnwdKNUjiUFk7ZBCaNxuwqZ8fc qFIa7OiZ1sckRguvVb+ag4ckloYHKSGk64+BEnzRGjrOKIiBM9blYAn+7dVawDQP pEAGXIYRSv4et90E9DHOvaJr8lI7Dw0mmGGBE2Wj6abPnzN2aaDms/WdPMoMOI6r 5pHgOgFujFcXCyQwGlMKuHoVdEbmyRir/xT6lp1fzUGRoGQseiGxwf2uzF/9QFAY Nr6FyF4rjbfpKxGPuwiOQWGRYOxnLAho -----END CERTIFICATE-----Generated at Wed Jun 18 22:19:48 2025 by rpki-client