$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json) Hash identifier: Z4TFARjD0Spis6TN4hBk3kwqLOMAZflfZt4O16aWj1Y= Subject key identifier: 19:73:3F:D1:30:A0:D4:8A:0E:C0:26:4A:83:03:95:C8:1A:CD:35:9E Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft Manifest number: 0524 Signing time: Mon 16 Jun 2025 23:12:45 +0000 Manifest this update: Mon 16 Jun 2025 23:12:45 +0000 Manifest next update: Mon 23 Jun 2025 23:12:45 +0000 Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: Eph5zUMdWKXX+Wisd92xxiloz7MLDBa1Gpx5QGqrWwo=) 2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: gNJTzz5gTRCi7TWu8OqobzQyrN+9OUDBMZ0c3PoKanY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Validity Not Before: Jun 16 23:12:45 2025 GMT Not After : Jun 23 23:12:45 2025 GMT Subject: CN=6850a4ed-e442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4a:e1:86:c6:79:44:d6:d5:6d:11:86:0a:d7: 81:90:d7:b8:d0:a2:6e:d7:86:59:d7:34:6f:f7:56: 75:01:23:9b:e4:53:79:02:6a:98:f4:78:5b:16:a5: f0:eb:e7:aa:5d:b9:31:dd:35:0e:11:83:ac:a9:11: 6d:d6:f0:66:fe:da:7e:10:f3:b8:37:63:50:75:c2: 3a:c7:1b:78:58:7a:6f:ca:a7:d6:66:20:49:24:0e: a5:ae:15:79:1c:3d:15:fa:78:7e:93:2c:35:24:04: 24:91:98:bf:0b:86:2f:1b:6b:53:f0:29:e2:d4:f9: c6:58:48:d9:04:11:16:53:83:e9:bb:5a:b8:34:68: c7:4b:d7:00:3b:f8:1d:5d:9e:5f:94:f9:5d:33:63: db:c9:67:8b:e9:cd:03:84:89:4c:52:d6:bd:00:ee: d8:fb:26:2b:63:a6:5c:2e:71:6b:e1:44:a3:7b:cd: a2:5c:b8:3b:02:ee:06:d4:7a:27:1e:44:32:48:0f: 7d:bd:42:4e:56:c9:8b:fa:36:10:79:4b:cd:22:c4: 62:d8:b3:b2:23:41:92:5a:06:ab:e9:43:00:0c:a6: cc:24:ae:05:7e:bd:67:3e:66:a3:6c:29:d0:80:8f: 87:48:13:08:f8:24:0d:ea:cf:74:37:d7:50:81:7d: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:73:3F:D1:30:A0:D4:8A:0E:C0:26:4A:83:03:95:C8:1A:CD:35:9E X509v3 Authority Key Identifier: keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:49:d7:a3:18:dd:cb:69:db:a0:53:d7:0e:bc:ec:8f:22:f1: f1:c9:95:19:71:a5:97:87:54:10:11:e1:f0:2f:15:0a:fb:b4: 82:ea:1f:17:a2:56:b3:7c:07:49:db:15:c2:62:e4:39:ca:36: 4e:7d:81:65:fd:15:53:6e:b8:a5:1b:77:20:20:e8:20:4e:fa: fd:12:a1:1c:cf:1b:5e:30:14:6e:46:3e:ae:8d:61:c4:5f:c9: 20:d6:ca:5f:75:c6:65:47:15:1b:23:91:55:20:67:7b:de:51: ab:03:7b:15:50:47:19:3b:2c:0b:ee:b8:4f:3e:eb:60:e1:3d: 88:9c:0c:6d:88:e5:55:33:10:fd:9b:af:ea:93:b8:10:06:0b: 38:dc:7c:08:1f:57:bc:62:7f:28:d4:77:4d:a0:c3:03:40:34: bf:1e:08:b2:14:dc:d1:3f:52:a4:b4:03:9e:40:36:37:1d:9a: 90:b4:3f:6a:bc:b7:2a:9d:84:62:c6:0b:f0:4e:be:53:92:97: f9:6f:d9:a5:11:79:60:70:8a:6b:37:79:11:9a:72:d7:c2:40: 0a:b2:10:95:fa:08:c9:1e:6c:c5:b7:3a:79:4a:1f:59:e2:45: 62:33:1c:12:7a:57:b1:7b:df:0d:20:94:49:75:6f:8b:6a:92: bf:b6:7f:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG Q0E4MDY0REEwHhcNMjUwNjE2MjMxMjQ1WhcNMjUwNjIzMjMxMjQ1WjAYMRYwFAYD VQQDEw02ODUwYTRlZC1lNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ErhhsZ5RNbVbRGGCteBkNe40KJu14ZZ1zRv91Z1ASOb5FN5AmqY9HhbFqXw 6+eqXbkx3TUOEYOsqRFt1vBm/tp+EPO4N2NQdcI6xxt4WHpvyqfWZiBJJA6lrhV5 HD0V+nh+kyw1JAQkkZi/C4YvG2tT8Cni1PnGWEjZBBEWU4Ppu1q4NGjHS9cAO/gd XZ5flPldM2PbyWeL6c0DhIlMUta9AO7Y+yYrY6ZcLnFr4USje82iXLg7Au4G1Hon HkQySA99vUJOVsmL+jYQeUvNIsRi2LOyI0GSWgar6UMADKbMJK4Ffr1nPmajbCnQ gI+HSBMI+CQN6s90N9dQgX2RbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlzP9Ew oNSKDsAmSoMDlcgazTWeMB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0 QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12 MU1uSkxkWGllaTM4cUFaTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZSdejGN3LadugU9cOvOyPIvHxyZUZcaWXh1QQEeHwLxUK+7SC6h8X olazfAdJ2xXCYuQ5yjZOfYFl/RVTbrilG3cgIOggTvr9EqEczxteMBRuRj6ujWHE X8kg1spfdcZlRxUbI5FVIGd73lGrA3sVUEcZOywL7rhPPutg4T2InAxtiOVVMxD9 m6/qk7gQBgs43HwIH1e8Yn8o1HdNoMMDQDS/HgiyFNzRP1KktAOeQDY3HZqQtD9q vLcqnYRixgvwTr5Tkpf5b9mlEXlgcIprN3kRmnLXwkAKshCV+gjJHmzFtzp5Sh9Z 4kViMxwSelexe98NIJRJdW+LapK/tn8C -----END CERTIFICATE-----Generated at Wed Jun 18 11:51:22 2025 by rpki-client