$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: ha0rtx2b4Lgf7yY1O3DKSM8wrZQMhi5YJuzV1en5ass= Subject key identifier: 2A:D4:58:80:1F:4F:EF:3F:A3:4B:07:E5:40:9B:89:24:C5:17:1D:D0 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 034A Signing time: Sun 15 Jun 2025 00:43:41 +0000 Manifest this update: Sun 15 Jun 2025 00:43:40 +0000 Manifest next update: Sun 22 Jun 2025 00:43:40 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: j8EKlo+jsEzyVfwFedSan4FBVEgPWesAI20veR0j04c=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Jun 15 00:43:40 2025 GMT Not After : Jun 22 00:43:40 2025 GMT Subject: CN=684e173d-d699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:ec:61:74:fc:12:d0:24:bf:02:11:26:8f: 73:81:e8:f6:29:2f:ab:89:23:5d:e5:7d:91:32:6b: 18:8d:53:ce:a0:14:92:f4:ab:30:8b:ba:c8:bf:59: 6c:35:70:f9:45:bf:6a:80:41:0a:4a:14:18:39:a3: ad:2a:74:29:1e:a2:04:e7:91:6b:cf:99:2c:f1:16: ca:fe:6c:b3:47:ee:72:34:89:a1:fa:c8:49:bb:30: 0c:60:82:eb:94:04:3d:e6:5b:e9:29:5f:2a:d0:98: cb:a7:97:f5:55:21:af:6a:ca:1a:41:33:29:e3:de: 5a:91:cc:a8:43:c9:2e:f1:e6:c6:68:05:d1:43:f2: a5:97:f6:79:0d:12:1c:47:5b:94:fd:b7:7b:ef:7d: ee:54:a7:cf:83:99:20:16:b7:fc:49:9c:c8:26:d1: fd:85:db:a9:bc:f9:3b:46:21:21:08:0e:96:30:99: bd:fc:c8:f3:72:52:e7:14:e0:ed:b7:7e:59:a2:9e: 47:6e:7a:81:99:7f:85:72:65:61:0f:a3:cc:3d:7c: 69:49:e0:d9:a3:18:af:d4:9e:f5:8a:0a:a1:99:a8: e8:f3:ee:0d:df:73:50:1f:00:44:45:1b:1b:62:dd: d1:c9:48:7f:dc:d4:eb:ee:6d:70:0a:c9:9e:1b:5c: 23:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D4:58:80:1F:4F:EF:3F:A3:4B:07:E5:40:9B:89:24:C5:17:1D:D0 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b3:85:6a:31:9f:40:f5:e2:66:bf:fb:78:cb:b3:7d:06:cd: 3f:21:dc:3e:4c:92:d8:5f:ab:4b:64:ea:bf:22:73:df:6b:03: 4b:13:6c:a0:d1:c7:51:b9:73:94:3e:7d:6b:3b:96:bb:ef:31: b5:e6:27:5c:18:77:5f:f8:3b:56:24:5d:dd:ae:df:d9:7e:45: ed:f6:4d:2d:ce:1c:73:29:92:12:bd:17:4d:c6:4e:71:4a:b2: 26:e1:b0:04:2a:44:23:ef:84:49:c5:3b:8e:18:9f:22:70:6a: 02:22:38:cd:85:0d:5f:66:c7:3b:d6:79:8c:cf:7b:6f:6f:43: 56:9a:4b:71:f6:42:a9:5c:ae:6e:1a:1f:e7:ad:00:ac:74:2d: 3b:59:c6:cd:dc:ca:15:9a:99:32:2e:cc:79:3a:5d:51:93:41: 54:ee:3b:e7:ed:73:3b:6e:6e:18:a9:0e:e4:0c:de:46:49:bf: bd:64:6e:05:40:76:e4:7d:f0:e9:c3:a9:6f:b5:08:db:4b:2e: cc:a1:f1:96:4b:c9:de:85:47:80:aa:7e:9b:a9:8b:fa:e0:ac: ac:03:da:f6:7e:b6:70:84:f0:7c:20:66:3e:46:53:d2:da:28: 1a:30:50:5a:8f:96:b1:18:2a:59:2a:7e:a6:a7:87:9f:06:7c: bc:cc:bd:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwNjE1MDA0MzQwWhcNMjUwNjIyMDA0MzQwWjAYMRYwFAYD VQQDEw02ODRlMTczZC1kNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVXsYXT8EtAkvwIRJo9zgej2KS+riSNd5X2RMmsYjVPOoBSS9Kswi7rIv1ls NXD5Rb9qgEEKShQYOaOtKnQpHqIE55Frz5ks8RbK/myzR+5yNImh+shJuzAMYILr lAQ95lvpKV8q0JjLp5f1VSGvasoaQTMp495akcyoQ8ku8ebGaAXRQ/Kll/Z5DRIc R1uU/bd7733uVKfPg5kgFrf8SZzIJtH9hdupvPk7RiEhCA6WMJm9/MjzclLnFODt t35Zop5HbnqBmX+FcmVhD6PMPXxpSeDZoxiv1J71igqhmajo8+4N33NQHwBERRsb Yt3RyUh/3NTr7m1wCsmeG1wjcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrUWIAf T+8/o0sH5UCbiSTFFx3QMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAs4VqMZ9A9eJmv/t4y7N9Bs0/Idw+TJLYX6tLZOq/InPfawNLE2yg 0cdRuXOUPn1rO5a77zG15idcGHdf+DtWJF3drt/ZfkXt9k0tzhxzKZISvRdNxk5x SrIm4bAEKkQj74RJxTuOGJ8icGoCIjjNhQ1fZsc71nmMz3tvb0NWmktx9kKpXK5u Gh/nrQCsdC07WcbN3MoVmpkyLsx5Ol1Rk0FU7jvn7XM7bm4YqQ7kDN5GSb+9ZG4F QHbkffDpw6lvtQjbSy7MofGWS8nehUeAqn6bqYv64KysA9r2frZwhPB8IGY+RlPS 2igaMFBaj5axGCpZKn6mp4efBny8zL0g -----END CERTIFICATE-----Generated at Sun Jun 15 09:46:59 2025 by rpki-client