$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: qg/zRGnbuIebitT8E5kRLqzbRcOLiQVJV4ClxEOKEFo= Subject key identifier: C3:35:2D:A6:43:3B:BA:14:F6:82:50:0A:B4:77:87:16:7B:90:BE:1B Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 06DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 06D1 Signing time: Thu 24 Apr 2025 21:51:49 +0000 Manifest this update: Thu 24 Apr 2025 21:51:48 +0000 Manifest next update: Thu 01 May 2025 21:51:48 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: twRRrUfk2NvySAm7DSrSLiD0BpLfSRe2LlrNfaPBX+s=) 2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: Apr 24 21:51:48 2025 GMT Not After : May 1 21:51:48 2025 GMT Subject: CN=680ab275-61a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:70:de:6d:19:b5:25:6d:9c:c4:0e:ef:84: d6:75:40:9a:a9:dc:7e:8e:ba:72:cf:db:4a:0a:6c: ff:55:00:57:e0:6f:c0:e4:d1:14:66:97:41:05:cf: ae:11:67:89:0f:1c:8f:da:f6:f0:cc:e1:bf:24:6b: 4a:37:f9:d0:5c:a8:b7:5d:f6:1f:ab:af:4d:a1:01: 15:aa:2a:83:18:8e:ff:72:39:76:04:92:34:a1:80: a3:e5:65:dc:08:fe:06:c9:ce:18:f8:ec:fe:da:71: a3:d7:9d:ac:ba:92:77:04:e7:91:64:ab:bf:0f:5b: 03:8a:4a:3d:7a:57:99:c8:58:87:a2:a8:1e:a2:a3: 35:e4:4e:29:ce:2b:bb:85:bd:1e:ab:7c:44:70:f6: 3d:e2:90:e9:07:bf:b5:2d:c7:9f:b8:dc:91:7b:0b: a7:6b:bb:3a:72:4b:0a:0e:04:8e:63:8f:c7:3e:bd: 50:eb:af:8c:73:21:70:bf:94:9c:c9:64:06:43:07: 49:db:af:d1:7d:36:60:26:24:e0:4e:78:da:d7:62: 43:5b:49:55:09:5d:19:3f:c8:c7:33:90:37:b3:24: a6:04:e4:f4:f8:af:35:31:3c:98:27:d8:b3:e8:20: e4:d0:c0:3d:f2:d2:fc:f2:6f:e6:60:7f:13:66:d6: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:35:2D:A6:43:3B:BA:14:F6:82:50:0A:B4:77:87:16:7B:90:BE:1B X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cb:8c:0d:cf:c4:83:5f:85:8e:18:3e:a6:f6:01:8b:2d:1f: 8f:7f:d8:31:ba:d8:58:d7:a0:53:e2:28:70:bf:b2:03:5d:03: 49:e8:f7:74:f5:9f:56:a6:3d:8b:6f:2d:7c:4b:da:d7:90:a5: 47:bb:44:98:b9:a3:ee:13:48:96:19:a0:52:41:97:c6:a7:b7: 25:d5:d3:9a:d5:48:f1:37:fc:37:29:2e:16:ab:d3:22:cb:a1: ca:ab:2b:23:ae:88:fa:a1:11:45:f5:90:0a:c8:28:58:08:0b: 57:66:93:f0:b8:57:5d:96:73:98:43:8e:1c:a1:98:fc:f4:63: 28:aa:a5:f1:e4:21:3b:a5:a7:e9:da:93:30:08:e7:ff:30:39: bf:b9:82:bc:35:f5:6a:f3:66:da:05:21:32:f7:a4:87:93:dc: ca:00:d6:5a:95:db:fe:26:e5:b2:eb:08:a2:05:ee:18:08:e3: ce:89:56:86:66:d0:5b:cc:fe:5b:ed:aa:65:e5:0d:9e:4c:f5: c3:39:5b:db:3b:17:68:86:5f:9a:16:49:44:4d:0b:f8:1f:9f: 27:a7:6d:4c:2b:20:cf:f1:5b:7e:f5:14:27:aa:e1:1d:93:b1: e8:19:c4:c5:5d:ea:5c:9b:7c:9e:41:1a:ee:f2:67:01:6e:0d: 5e:fa:c4:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjUwNDI0MjE1MTQ4WhcNMjUwNTAxMjE1MTQ4WjAYMRYwFAYD VQQDEw02ODBhYjI3NS02MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvlw3m0ZtSVtnMQO74TWdUCaqdx+jrpyz9tKCmz/VQBX4G/A5NEUZpdBBc+u EWeJDxyP2vbwzOG/JGtKN/nQXKi3XfYfq69NoQEVqiqDGI7/cjl2BJI0oYCj5WXc CP4Gyc4Y+Oz+2nGj152supJ3BOeRZKu/D1sDiko9eleZyFiHoqgeoqM15E4pziu7 hb0eq3xEcPY94pDpB7+1LcefuNyRewuna7s6cksKDgSOY4/HPr1Q66+McyFwv5Sc yWQGQwdJ26/RfTZgJiTgTnja12JDW0lVCV0ZP8jHM5A3sySmBOT0+K81MTyYJ9iz 6CDk0MA98tL88m/mYH8TZtbQpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM1LaZD O7oU9oJQCrR3hxZ7kL4bMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAry4wNz8SDX4WOGD6m9gGLLR+Pf9gxuthY16BT4ihwv7IDXQNJ6Pd0 9Z9Wpj2Lby18S9rXkKVHu0SYuaPuE0iWGaBSQZfGp7cl1dOa1UjxN/w3KS4Wq9Mi y6HKqysjroj6oRFF9ZAKyChYCAtXZpPwuFddlnOYQ44coZj89GMoqqXx5CE7pafp 2pMwCOf/MDm/uYK8NfVq82baBSEy96SHk9zKANZaldv+JuWy6wiiBe4YCOPOiVaG ZtBbzP5b7apl5Q2eTPXDOVvbOxdohl+aFklETQv4H58np21MKyDP8Vt+9RQnquEd k7HoGcTFXepcm3yeQRru8mcBbg1e+sSL -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:31 2025 by rpki-client