$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: fJQzBE4clBHWPrdQ0nMojhRvuegiWVd3iSrFSAYUbJQ= Subject key identifier: DB:E2:42:E4:EC:E3:45:16:F8:47:E1:73:57:30:7C:09:54:CF:03:AD Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: 09 Signing time: Tue 17 Jun 2025 07:00:38 +0000 Manifest this update: Tue 17 Jun 2025 07:00:38 +0000 Manifest next update: Tue 24 Jun 2025 07:00:38 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: hQRNxm8rcfOOtyrdCDnsSdhoZLO1iV92x5LoejxgimI=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: NGudT5ffYxQaLDuPITb3DSyOtSWSbubIZoe2i4vUMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Jun 17 07:00:38 2025 GMT Not After : Jun 24 07:00:38 2025 GMT Subject: CN=68511296-fa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:cc:d6:0f:53:b7:cd:cf:23:98:50:75:06: c5:51:53:02:dc:70:47:0c:a3:16:18:bb:5d:43:c0: ec:38:f2:9c:6b:85:a1:91:78:c6:6c:3e:f6:35:36: ca:9f:30:9d:b7:ad:29:92:fa:88:99:cd:de:73:4b: 6d:e9:55:d4:98:e0:ab:15:c3:b0:e7:d9:72:d3:2e: ec:cc:59:73:9e:df:4b:b2:6f:9b:be:b7:03:b9:80: 1b:34:5e:a3:df:56:e8:7b:df:ad:29:0d:16:78:e8: ae:f1:80:85:db:30:25:8c:1c:cd:b5:df:7f:5c:2b: df:b2:8e:e9:f6:e3:7b:0c:7e:0a:0e:63:16:af:fd: c2:93:79:f3:8d:9b:cf:0d:1d:b1:8b:79:fe:8f:7b: 15:16:53:8e:c6:c2:e9:27:fb:37:43:a4:0f:e8:a3: 6e:0b:d6:63:ac:1e:b9:5d:70:d3:96:9b:d2:d0:bd: 1e:df:cf:20:27:04:ff:1a:f4:f8:96:08:2a:8a:db: f5:29:77:7c:ee:b8:5a:43:86:19:24:54:9a:cc:2d: b8:60:a1:e9:f4:fe:95:77:a5:bf:a3:bd:fb:2b:f7: d5:26:77:d0:d7:1a:25:36:c5:58:9d:6c:55:e0:91: 8a:a1:d1:1f:df:91:ce:84:c1:7f:72:55:bc:88:96: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E2:42:E4:EC:E3:45:16:F8:47:E1:73:57:30:7C:09:54:CF:03:AD X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e8:18:16:f8:d8:16:f1:d2:ec:8d:7f:4b:ad:f8:91:d9:34: 46:5d:9c:ea:f5:58:1a:4d:a5:5b:5d:0d:a0:1a:ca:5a:0a:43: 9e:b0:49:08:d9:a0:92:5a:35:9f:20:00:35:7f:7a:b3:97:2d: 2c:9b:61:a0:19:65:09:89:75:a0:b7:71:f4:72:e5:56:9d:c8: 4c:40:4b:8d:99:2d:d6:7f:2a:5a:b4:1d:12:6d:f9:b6:86:24: 2e:e7:e8:9b:96:46:01:86:c7:17:04:c1:43:77:82:5c:d8:66: a1:e9:3a:eb:6f:72:55:c6:2a:9c:69:a5:f2:05:cb:94:82:02: ec:1a:a6:6d:75:98:e3:a0:5b:63:59:17:d0:72:28:ed:6e:d8: 27:97:a0:42:4b:dd:5a:f1:d7:fa:fb:9e:d5:ce:72:b4:92:93: 30:f5:cb:2e:99:aa:40:af:37:f8:45:7f:ed:03:13:bd:a2:2b: ae:ec:55:75:74:aa:d0:5e:b8:35:ba:18:37:91:6f:be:c9:42: e1:16:a2:3b:c3:5d:64:1c:eb:ec:95:fd:30:66:dc:06:2e:a7: b2:b4:f8:02:0c:1f:79:5a:85:c1:29:ef:4d:73:e2:b8:a0:e8: f3:41:8c:b6:e9:18:0f:92:f1:66:25:81:9b:50:be:11:e0:e9: 9b:5c:20:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkZDQjExMC8GA1UEBRMoMjIyNDI5NDQxNkI4NDY1NzA2NTU0QjUyQ0JDNTZGNDQ5 QkM0NkM4OTAeFw0yNTA2MTcwNzAwMzhaFw0yNTA2MjQwNzAwMzhaMBgxFjAUBgNV BAMTDTY4NTExMjk2LWZhNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLqszWD1O3zc8jmFB1BsVRUwLccEcMoxYYu11DwOw48pxrhaGReMZsPvY1Nsqf MJ23rSmS+oiZzd5zS23pVdSY4KsVw7Dn2XLTLuzMWXOe30uyb5u+twO5gBs0XqPf Vuh7360pDRZ46K7xgIXbMCWMHM21339cK9+yjun243sMfgoOYxav/cKTefONm88N HbGLef6PexUWU47Gwukn+zdDpA/oo24L1mOsHrldcNOWm9LQvR7fzyAnBP8a9PiW CCqK2/Upd3zuuFpDhhkkVJrMLbhgoen0/pV3pb+jvfsr99Umd9DXGiU2xVidbFXg kYqh0R/fkc6EwX9yVbyIlgOrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2+JC5Ozj RRb4R+FzVzB8CVTPA60wHwYDVR0jBBgwFoAUIiQpRBa4RlcGVUtSy8VvRJvEbIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRkNCL0VEMEYxMUY0NDIw NTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWlRcFJCYTRSbGNHVlV0U3k4VnZSSnZFYklrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RkNCL0VEMEYxMUY0NDIwNTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0Umxj R1ZVdFN5OFZ2Ukp2RWJJay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL7oGBb42Bbx0uyNf0ut+JHZNEZdnOr1WBpNpVtdDaAayloKQ56wSQjZ oJJaNZ8gADV/erOXLSybYaAZZQmJdaC3cfRy5VadyExAS42ZLdZ/Klq0HRJt+baG JC7n6JuWRgGGxxcEwUN3glzYZqHpOutvclXGKpxppfIFy5SCAuwapm11mOOgW2NZ F9ByKO1u2CeXoEJL3Vrx1/r7ntXOcrSSkzD1yy6ZqkCvN/hFf+0DE72iK67sVXV0 qtBeuDW6GDeRb77JQuEWojvDXWQc6+yV/TBm3AYup7K0+AIMH3lahcEp701z4rig 6PNBjLbpGA+S8WYlgZtQvhHg6ZtcIE0= -----END CERTIFICATE-----Generated at Wed Jun 18 07:56:33 2025 by rpki-client