$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft File: IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft (raw, json) Hash identifier: TkC3OLe9K95yzwtwpxs8pYcqaNriB518aB6uOU7Kulo= Subject key identifier: 5C:7E:A0:10:CA:C1:76:39:9B:51:0B:90:18:BE:9F:1E:02:1A:E7:34 Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft Manifest number: D9 Signing time: Thu 19 Jun 2025 04:54:50 +0000 Manifest this update: Thu 19 Jun 2025 04:54:50 +0000 Manifest next update: Thu 26 Jun 2025 04:54:50 +0000 Files and hashes: 1: IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl (hash: eIN/O5aDu6/ileZNUB+AlVspxjwvlYkizJay9J1yRPM=) 2: B15E8BECFF3211EEA8607454C4F9AE02.roa (hash: M9Q8RXEiuL/wyMNZhN9zbPG+N0QQluDkDpfmSIoYCRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53FD, serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Validity Not Before: Jun 19 04:54:50 2025 GMT Not After : Jun 26 04:54:50 2025 GMT Subject: CN=6853981a-8f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:8d:1e:e6:cf:ff:47:a1:8a:48:fb:a0:42: 85:1b:a5:0d:e4:b2:6e:26:ff:3e:90:4e:cc:4c:21: cb:c5:fa:5c:eb:6c:59:e2:71:f6:ab:d0:68:43:2a: 4b:9f:df:5d:37:ba:46:dd:c7:6f:87:1d:e0:54:bf: 95:7b:50:9e:76:bf:53:98:6a:c6:53:43:39:60:80: d1:8d:7f:f6:bc:3b:03:e1:64:de:00:42:dc:e3:1c: 4f:e8:b5:37:5c:5d:bd:03:31:d9:bc:ad:db:0c:8f: 73:ef:3c:36:5b:d0:b6:76:c6:f4:03:6f:b8:0e:d1: 68:46:0f:a3:06:d9:0c:45:37:ca:f8:a7:40:98:87: 8b:2b:0d:b8:de:05:ad:d2:d7:80:79:01:8c:64:fe: 77:21:5c:ee:d5:de:60:9a:ae:48:46:63:e5:a2:76: 1a:ee:a5:79:bb:48:5a:27:a1:be:83:71:c2:e1:2f: 06:1a:1d:9c:54:d9:58:c1:e6:36:c8:20:9e:08:77: 73:e9:03:f9:b3:ce:fb:58:b7:bc:8f:99:40:91:4a: 3f:ac:1e:be:24:37:8b:91:b4:09:e3:5e:03:c9:c5: 57:0e:a7:01:13:65:a2:2f:20:6c:50:85:5b:c8:a9: 61:e6:67:88:bc:95:9a:3d:23:3a:78:eb:0c:f5:56: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7E:A0:10:CA:C1:76:39:9B:51:0B:90:18:BE:9F:1E:02:1A:E7:34 X509v3 Authority Key Identifier: keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:36:93:5d:08:6d:7b:b4:35:3e:f5:65:08:b5:24:7c:01:c7: 63:a3:bf:fb:d0:85:0a:04:23:8e:66:4c:19:c4:c5:10:38:61: 19:59:0c:06:9d:12:fe:09:a0:dd:81:61:bb:8a:b3:25:ec:81: 72:0d:9d:a2:49:a1:ea:91:5a:47:47:09:82:11:5d:6b:6e:11: 53:cc:94:0f:fd:19:c9:47:8a:eb:f8:44:b4:f1:1a:c9:07:06: 46:2c:18:ab:86:e5:f6:36:22:f6:ad:3d:df:34:6e:ac:3b:5d: 8c:41:a0:07:0c:8f:65:20:9f:d4:0b:6b:0a:64:c2:52:72:c7: 8d:74:13:51:bc:2f:fe:61:97:31:30:59:ea:b7:89:3a:ba:66: bd:4c:ce:3c:f6:f7:a3:a4:e4:72:31:a6:eb:26:28:50:a5:d6: dc:0e:00:ed:83:6a:07:5d:a2:33:0c:f0:5d:2f:7c:7a:d8:42: 41:b6:cc:c7:de:f0:de:f1:ad:31:17:fb:0e:55:3a:39:1c:d3: a2:88:57:e9:5b:e8:2d:11:be:8c:0b:3c:47:6b:5f:63:c0:65: fa:08:0a:31:ed:9c:75:c3:cd:99:fd:88:59:66:0e:ae:e1:a3: 56:7d:d5:de:ed:01:3a:42:c6:da:f0:3e:b3:48:f3:f9:e3:19: 4a:2c:9a:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRkQxMTAvBgNVBAUTKDIxOTM0MTk4RTgzMzEwNjFEMjc1QjhDRkM3OTQ1OEQz MkZBQkQ2QzkwHhcNMjUwNjE5MDQ1NDUwWhcNMjUwNjI2MDQ1NDUwWjAYMRYwFAYD VQQDEw02ODUzOTgxYS04ZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5uNHubP/0ehikj7oEKFG6UN5LJuJv8+kE7MTCHLxfpc62xZ4nH2q9BoQypL n99dN7pG3cdvhx3gVL+Ve1Cedr9TmGrGU0M5YIDRjX/2vDsD4WTeAELc4xxP6LU3 XF29AzHZvK3bDI9z7zw2W9C2dsb0A2+4DtFoRg+jBtkMRTfK+KdAmIeLKw243gWt 0teAeQGMZP53IVzu1d5gmq5IRmPlonYa7qV5u0haJ6G+g3HC4S8GGh2cVNlYweY2 yCCeCHdz6QP5s877WLe8j5lAkUo/rB6+JDeLkbQJ414DycVXDqcBE2WiLyBsUIVb yKlh5meIvJWaPSM6eOsM9VZPaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFx+oBDK wXY5m1ELkBi+nx4CGuc0MB8GA1UdIwQYMBaAFCGTQZjoMxBh0nW4z8eUWNMvq9bJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNGRC82ODhFNTdFRUZG MzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVHSFNkYmpQeDVSWTB5LXIx c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laTkJtT2d6RUdIU2RialB4NVJZMHktcjFzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNGRC82ODhFNTdFRUZGMzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVH SFNkYmpQeDVSWTB5LXIxc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYNpNdCG17tDU+9WUItSR8Acdjo7/70IUKBCOOZkwZxMUQOGEZWQwG nRL+CaDdgWG7irMl7IFyDZ2iSaHqkVpHRwmCEV1rbhFTzJQP/RnJR4rr+ES08RrJ BwZGLBirhuX2NiL2rT3fNG6sO12MQaAHDI9lIJ/UC2sKZMJScseNdBNRvC/+YZcx MFnqt4k6uma9TM489vejpORyMabrJihQpdbcDgDtg2oHXaIzDPBdL3x62EJBtszH 3vDe8a0xF/sOVTo5HNOiiFfpW+gtEb6MCzxHa19jwGX6CAox7Zx1w82Z/YhZZg6u 4aNWfdXe7QE6Qsba8D6zSPP54xlKLJof -----END CERTIFICATE-----Generated at Fri Jun 20 11:42:36 2025 by rpki-client