$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json) Hash identifier: UJoCCDLGT3N4QLkpbCKVhPUOE0efQiyiMPE7xzxE3dw= Subject key identifier: 56:B5:60:FB:E1:AB:58:56:8B:82:72:A3:6A:E8:81:E1:97:84:F9:34 Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Certificate serial: 3488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft Manifest number: 3488 Signing time: Sat 14 Jun 2025 14:49:25 +0000 Manifest this update: Sat 14 Jun 2025 14:49:24 +0000 Manifest next update: Sat 21 Jun 2025 14:49:24 +0000 Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: lCINaQL3ZaL3a4dB68JWs9u0HqnUrGCrEwX2wMfTrkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13448 (0x3488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Validity Not Before: Jun 14 14:49:24 2025 GMT Not After : Jun 21 14:49:24 2025 GMT Subject: CN=684d8bf4-529f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:79:b7:c1:02:a6:ab:6f:bc:ab:ff:43:98: a8:85:94:cc:17:9a:90:62:2e:00:00:c7:5f:f4:c8: 5e:0b:c0:01:42:d6:44:09:db:20:c5:17:ec:f3:ba: 87:23:11:d7:3a:53:72:0f:7a:2d:23:96:56:90:24: cc:62:43:5a:f7:7e:a7:81:f0:9e:10:8b:d3:68:9d: cd:4e:41:43:72:fd:23:9d:b8:be:c5:04:c8:b8:94: f5:f5:f5:1f:84:9a:80:6a:fe:00:63:05:db:ca:8a: 4c:e9:5f:06:6e:58:85:3a:da:c8:34:cc:26:69:77: 81:bd:65:68:be:bd:30:41:bc:eb:90:09:cc:80:95: fd:3f:33:26:b7:de:e8:8b:89:3c:d6:6d:f5:2d:6e: 73:90:7c:3f:9a:0e:8b:9e:30:d2:a4:ba:78:e9:b2: 65:7d:7c:f8:cf:30:3c:2f:48:3c:eb:17:5b:47:29: 4a:20:ea:58:0c:a8:29:8d:44:a1:4f:99:4e:30:09: a0:fb:fd:13:07:46:de:42:3f:1b:1d:ff:51:6d:62: 16:ef:66:4e:36:e2:a3:8a:24:54:b7:6a:dc:14:e9: ba:51:a6:b2:9d:44:6a:a2:f7:78:78:c7:e2:f6:0c: 04:bd:56:6f:13:25:f8:84:18:a1:0c:31:b9:ea:93: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B5:60:FB:E1:AB:58:56:8B:82:72:A3:6A:E8:81:E1:97:84:F9:34 X509v3 Authority Key Identifier: keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f5:12:7c:44:e6:83:da:70:4d:4d:e3:91:53:9e:e1:10:a4: c6:2a:cc:81:12:17:09:2c:18:5d:30:b5:4e:26:70:57:f7:90: e1:e3:a5:1f:29:50:6f:33:b7:49:21:84:04:7d:1e:33:1b:8e: c4:ba:af:a4:07:83:5b:73:fd:56:02:27:59:77:43:22:ea:07: b7:fb:a0:cb:55:75:fe:ad:94:cc:e1:d1:7e:40:e2:79:f6:3b: dc:e5:fb:bd:0a:9f:ff:9b:7c:52:e7:35:b7:c8:27:5c:fa:6d: 6b:cb:d6:41:f3:69:a5:a7:9a:21:37:78:10:9b:c0:c5:2f:14: 65:39:3b:b0:56:24:bf:e7:05:2b:3b:27:64:b2:30:b1:70:b7: ff:40:10:2e:d7:e3:ee:ce:fe:3a:d4:6e:b4:d7:3e:ae:39:bd: 79:f7:e4:44:c6:59:25:51:df:9e:37:54:38:13:dd:cd:2a:90: a8:ed:15:68:fc:b3:f6:fa:84:23:e3:50:d9:b7:3b:e7:ee:98: 9c:65:6b:45:52:24:db:e0:5d:54:74:7f:77:59:16:90:0c:41: 3d:e5:3e:15:d9:c1:ac:98:f9:5d:c7:89:23:ad:d9:c1:39:25: 21:ca:6f:51:4b:64:f0:1a:5c:32:c0:06:45:96:54:79:c4:fa: 05:6d:e7:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyMzQxMTAvBgNVBAUTKDg5MEExRTVDQ0MxRUM2QzdDRTFFQTcxRjQ5MTI5MTFG NTk5Mjg2QjIwHhcNMjUwNjE0MTQ0OTI0WhcNMjUwNjIxMTQ0OTI0WjAYMRYwFAYD VQQDEw02ODRkOGJmNC01MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt615t8ECpqtvvKv/Q5iohZTMF5qQYi4AAMdf9MheC8ABQtZECdsgxRfs87qH IxHXOlNyD3otI5ZWkCTMYkNa936ngfCeEIvTaJ3NTkFDcv0jnbi+xQTIuJT19fUf hJqAav4AYwXbyopM6V8GbliFOtrINMwmaXeBvWVovr0wQbzrkAnMgJX9PzMmt97o i4k81m31LW5zkHw/mg6LnjDSpLp46bJlfXz4zzA8L0g86xdbRylKIOpYDKgpjUSh T5lOMAmg+/0TB0beQj8bHf9RbWIW72ZONuKjiiRUt2rcFOm6UaaynURqovd4eMfi 9gwEvVZvEyX4hBihDDG56pOpWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa1YPvh q1hWi4Jyo2rogeGXhPk0MB8GA1UdIwQYMBaAFIkKHlzMHsbHzh6nH0kSkR9Zkoay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjIzNC81MjI1NjkxNDFE OTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhzZk9IcWNmU1JLUkgxbVNo ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRb2VYTXdleHNmT0hxY2ZTUktSSDFtU2hySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjIzNC81MjI1NjkxNDFEOTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhz Zk9IcWNmU1JLUkgxbVNockkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn9RJ8ROaD2nBNTeORU57hEKTGKsyBEhcJLBhdMLVOJnBX95Dh46Uf KVBvM7dJIYQEfR4zG47Euq+kB4Nbc/1WAidZd0Mi6ge3+6DLVXX+rZTM4dF+QOJ5 9jvc5fu9Cp//m3xS5zW3yCdc+m1ry9ZB82mlp5ohN3gQm8DFLxRlOTuwViS/5wUr OydksjCxcLf/QBAu1+Puzv461G601z6uOb159+RExlklUd+eN1Q4E93NKpCo7RVo /LP2+oQj41DZtzvn7picZWtFUiTb4F1UdH93WRaQDEE95T4V2cGsmPldx4kjrdnB OSUhym9RS2TwGlwywAZFllR5xPoFbeeJ -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:30 2025 by rpki-client