$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: YrjQ6ddyqatG40T/LICWdnkjSrcx51kG9CPoyKRa9Yo= Subject key identifier: AC:B4:37:CD:73:86:1B:FD:05:F2:AB:8D:46:D9:BD:04:BC:5D:F5:F1 Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 06F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 06E9 Signing time: Thu 12 Jun 2025 21:39:18 +0000 Manifest this update: Thu 12 Jun 2025 21:39:17 +0000 Manifest next update: Thu 19 Jun 2025 21:39:17 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: SqrJlp7ORpdlu83qQ8M3iN6S2tS5cWgqgxJz7TFJijM=) 2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1780 (0x6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: Jun 12 21:39:17 2025 GMT Not After : Jun 19 21:39:17 2025 GMT Subject: CN=684b4905-51c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:26:a5:35:b8:a5:61:66:ac:4a:c5:ca:e0: 9c:df:8a:75:3d:b5:8f:f5:20:00:d6:02:a2:e0:d6: ea:ba:4b:2c:7f:7d:df:22:0e:55:89:66:7e:59:43: c2:1d:bf:70:21:83:4f:dc:30:c3:69:b0:1e:65:ae: 77:01:c1:78:52:e4:66:d8:42:c2:b0:82:3f:61:40: c7:57:9d:10:d0:c4:a3:37:20:d1:10:b6:22:f0:bb: 80:1d:c0:6d:d4:9a:29:c6:54:92:7e:02:59:e0:f7: 09:d1:d4:2d:cd:b1:fa:30:94:bb:47:51:5d:24:38: 7b:2a:58:28:cc:dd:d5:1a:c7:a5:28:b6:8d:db:15: aa:fe:86:d1:75:ff:9b:0c:f3:cb:9b:24:ef:7a:ed: 2a:c2:8d:e5:2a:01:9f:e7:57:a1:46:ab:fb:60:2f: 1a:4d:2a:3d:7e:28:e6:80:a5:36:08:5e:95:9d:aa: e9:29:91:d6:c5:17:0c:fe:df:ce:d5:73:81:d0:59: 95:ea:41:f4:c4:4c:b0:2b:c3:d4:3b:30:73:fc:8b: 0d:c3:d0:b3:cf:ae:a4:2e:ce:62:86:cb:68:fb:26: 6a:d2:a4:60:84:95:c0:10:91:2c:17:26:9b:5e:f8: 7b:3f:dc:27:17:ee:1b:33:25:7c:a2:ca:a0:0b:c0: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B4:37:CD:73:86:1B:FD:05:F2:AB:8D:46:D9:BD:04:BC:5D:F5:F1 X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7e:99:09:5b:37:7f:0b:1f:1f:dc:1c:2a:a4:7a:72:07:53: 28:30:f9:62:b3:f4:12:9d:f9:7f:6e:ba:90:c4:9e:b2:51:d9: 06:87:9a:6e:76:bc:e6:36:3b:dd:2f:b4:38:cd:d1:7a:98:53: 08:2c:cc:2e:8a:df:42:90:fb:4c:cf:50:1c:07:99:c9:b9:69: 1b:76:c3:e8:01:68:4d:26:17:a3:0d:74:81:2f:8d:98:a1:82: 28:ad:c5:56:0e:24:c6:1e:07:5c:2a:56:60:0d:f3:e7:b0:20: 29:0c:c3:41:aa:44:3a:e9:4b:ca:f2:52:c7:2a:6c:b1:5d:3a: b3:bc:58:4d:f9:e7:45:e4:07:81:26:ab:47:44:32:dc:4d:b6: 69:de:3c:82:71:fb:e9:ce:8a:af:8a:9d:ac:c1:04:a1:db:16: dd:d2:f5:84:5e:e1:8e:67:ad:24:e2:c5:82:97:b4:88:56:90: 3b:9c:cf:5b:42:d2:a5:5b:fe:9a:6c:6a:f0:05:f4:7b:9d:b1: 5f:31:77:ae:aa:38:45:c6:1a:c4:09:06:97:7f:db:98:50:21: 9a:19:3b:97:7a:0d:bc:be:e1:0d:ff:e3:ba:62:ae:2d:bc:14: 13:f4:06:f8:75:89:37:8d:ef:f9:29:a5:da:9d:49:a3:cb:2c: 16:8b:b8:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjUwNjEyMjEzOTE3WhcNMjUwNjE5MjEzOTE3WjAYMRYwFAYD VQQDEw02ODRiNDkwNS01MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxImpTW4pWFmrErFyuCc34p1PbWP9SAA1gKi4Nbqukssf33fIg5ViWZ+WUPC Hb9wIYNP3DDDabAeZa53AcF4UuRm2ELCsII/YUDHV50Q0MSjNyDRELYi8LuAHcBt 1JopxlSSfgJZ4PcJ0dQtzbH6MJS7R1FdJDh7KlgozN3VGselKLaN2xWq/obRdf+b DPPLmyTveu0qwo3lKgGf51ehRqv7YC8aTSo9fijmgKU2CF6VnarpKZHWxRcM/t/O 1XOB0FmV6kH0xEywK8PUOzBz/IsNw9Czz66kLs5ihsto+yZq0qRghJXAEJEsFyab Xvh7P9wnF+4bMyV8osqgC8AiDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKy0N81z hhv9BfKrjUbZvQS8XfXxMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADfpkJWzd/Cx8f3BwqpHpyB1MoMPlis/QSnfl/brqQxJ6yUdkGh5pu drzmNjvdL7Q4zdF6mFMILMwuit9CkPtMz1AcB5nJuWkbdsPoAWhNJhejDXSBL42Y oYIorcVWDiTGHgdcKlZgDfPnsCApDMNBqkQ66UvK8lLHKmyxXTqzvFhN+edF5AeB JqtHRDLcTbZp3jyCcfvpzoqvip2swQSh2xbd0vWEXuGOZ60k4sWCl7SIVpA7nM9b QtKlW/6abGrwBfR7nbFfMXeuqjhFxhrECQaXf9uYUCGaGTuXeg28vuEN/+O6Yq4t vBQT9Ab4dYk3je/5KaXanUmjyywWi7ia -----END CERTIFICATE-----Generated at Sat Jun 14 19:07:54 2025 by rpki-client