$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft File: iBzVaxmrfMJiYzdmnqtzClWnLLY.mft (raw, json) Hash identifier: cuimbdPl3aRKivb0jDD7TgezkHZyxSxA6bMCY2Y7Lao= Subject key identifier: 8F:13:2A:82:F2:21:86:8E:5C:72:9D:D2:19:F7:E3:AD:98:71:95:46 Authority key identifier: 88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6 Certificate issuer: /CN=A91ED9F9/serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft Manifest number: FF Signing time: Tue 17 Jun 2025 04:09:38 +0000 Manifest this update: Tue 17 Jun 2025 04:09:37 +0000 Manifest next update: Tue 24 Jun 2025 04:09:37 +0000 Files and hashes: 1: iBzVaxmrfMJiYzdmnqtzClWnLLY.crl (hash: XnFSrxrqbI1TiBL+qev/1AH0TjHjAc1/HrGh29s4wGg=) 2: D714E00CB26F11EFB2BFFC58C4F9AE02.roa (hash: fbK8JApyPVI7CqfBV4idqbGNutPDQ+/1nnEJoajk5Ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6 Validity Not Before: Jun 17 04:09:37 2025 GMT Not After : Jun 24 04:09:37 2025 GMT Subject: CN=6850ea81-0879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:b9:2e:e4:58:5b:63:88:16:44:82:a3:bf: ba:44:8a:46:b0:d0:e1:45:4d:27:b5:f7:63:44:95: 39:53:f4:56:94:07:a6:29:89:a7:98:00:4d:20:b7: 81:c9:eb:0e:f5:02:43:d4:40:f3:b3:a7:b1:fe:8a: 75:f2:29:4b:b7:18:48:6f:07:41:36:e8:b5:3c:76: 29:51:a9:63:37:b1:fd:d8:91:10:32:0c:d3:c4:32: ab:d0:b3:68:45:eb:4b:b8:46:8c:17:8b:79:6b:b8: 26:5c:96:4f:8e:ad:4e:62:18:e5:fe:bb:3c:c7:84: fb:04:32:6f:73:fe:3f:d4:a0:fb:f5:94:c7:cd:ee: be:17:84:f3:ca:a6:93:01:ea:83:c3:e0:d1:d7:a1: e6:5e:15:e3:1f:e9:bd:12:3d:bb:1c:eb:82:ab:1c: 43:bf:5b:f2:67:ba:dc:6b:7f:5c:32:8f:a4:76:59: a2:37:44:88:47:56:44:4d:7d:63:d7:b8:d1:8b:10: f7:62:b7:36:76:16:d3:d7:71:e6:93:71:29:0c:b1: e1:8f:28:b0:9c:49:46:ed:48:92:e7:0d:ee:de:91: 72:01:ad:65:c2:ea:35:4a:76:f7:c9:48:0f:9b:77: ea:c2:fb:f7:ee:e9:a0:ae:d0:05:9c:c9:1a:74:c9: e1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:13:2A:82:F2:21:86:8E:5C:72:9D:D2:19:F7:E3:AD:98:71:95:46 X509v3 Authority Key Identifier: keyid:88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:0d:ef:22:c0:3d:47:c9:dc:0b:64:4b:a3:d6:56:cf:a7:5f: 53:0b:2f:44:7c:20:8c:77:a6:cc:51:3f:41:c0:35:5d:99:9c: 83:59:96:15:60:90:ea:52:ed:5c:c3:e4:e2:a7:f5:9c:a1:0f: 0d:a8:98:8b:ae:d2:b5:3e:61:15:6a:82:d4:c0:cd:e8:34:1d: 8c:32:00:f4:a9:24:dd:4c:ab:70:3f:e9:a9:f1:fe:06:56:32: 54:bb:4a:2f:49:03:19:b0:0e:22:6b:70:97:03:d0:a6:ef:6a: c7:4a:d7:17:12:7d:99:aa:43:4c:5e:d0:e5:9d:e9:24:54:6b: b4:01:48:32:8e:4b:5d:87:f6:9b:06:c2:31:92:b7:0a:ff:f8: 1a:33:b0:5f:da:ca:3b:69:8b:88:3d:5a:07:e2:3d:dd:0c:cd: 04:a7:3f:cc:14:c7:c4:0e:aa:25:bc:22:c8:e4:9f:38:14:09: 12:e4:3b:fb:88:78:59:26:70:bd:f1:66:38:84:cb:08:47:25: e0:0f:02:65:76:b4:79:1a:ea:9c:5b:91:e9:cd:45:82:77:42: 24:70:8f:f5:a4:d9:9f:c3:f8:ae:d2:ca:f7:3e:e2:79:57:ad: 02:72:9b:76:07:a6:5e:4f:c5:23:35:de:2c:2b:07:88:fb:c5: 2e:84:50:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDg4MUNENTZCMTlBQjdDQzI2MjYzMzc2NjlFQUI3MzBB NTVBNzJDQjYwHhcNMjUwNjE3MDQwOTM3WhcNMjUwNjI0MDQwOTM3WjAYMRYwFAYD VQQDEw02ODUwZWE4MS0wODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK65LuRYW2OIFkSCo7+6RIpGsNDhRU0ntfdjRJU5U/RWlAemKYmnmABNILeB yesO9QJD1EDzs6ex/op18ilLtxhIbwdBNui1PHYpUaljN7H92JEQMgzTxDKr0LNo RetLuEaMF4t5a7gmXJZPjq1OYhjl/rs8x4T7BDJvc/4/1KD79ZTHze6+F4TzyqaT AeqDw+DR16HmXhXjH+m9Ej27HOuCqxxDv1vyZ7rca39cMo+kdlmiN0SIR1ZETX1j 17jRixD3Yrc2dhbT13Hmk3EpDLHhjyiwnElG7UiS5w3u3pFyAa1lwuo1Snb3yUgP m3fqwvv37umgrtAFnMkadMnhewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8TKoLy IYaOXHKd0hn3462YcZVGMB8GA1UdIwQYMBaAFIgc1WsZq3zCYmM3Zp6rcwpVpyy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS81RjM3OURCMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9pQnpWYXhtcmZNSmlZemRtbnF0ekNsV25M TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lCelZheG1yZk1KaVl6ZG1ucXR6Q2xXbkxMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS81RjM3OURCMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9pQnpWYXhtcmZN SmlZemRtbnF0ekNsV25MTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1De8iwD1HydwLZEuj1lbPp19TCy9EfCCMd6bMUT9BwDVdmZyDWZYV YJDqUu1cw+Tip/WcoQ8NqJiLrtK1PmEVaoLUwM3oNB2MMgD0qSTdTKtwP+mp8f4G VjJUu0ovSQMZsA4ia3CXA9Cm72rHStcXEn2ZqkNMXtDlnekkVGu0AUgyjktdh/ab BsIxkrcK//gaM7Bf2so7aYuIPVoH4j3dDM0Epz/MFMfEDqolvCLI5J84FAkS5Dv7 iHhZJnC98WY4hMsIRyXgDwJldrR5GuqcW5HpzUWCd0IkcI/1pNmfw/iu0sr3PuJ5 V60Ccpt2B6ZeT8UjNd4sKweI+8UuhFBl -----END CERTIFICATE-----Generated at Thu Jun 19 02:31:55 2025 by rpki-client