$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json) Hash identifier: yL1egybLrh9em/rs/QLoWiyv11K/JDuYwpv/uHXsR7M= Subject key identifier: 75:93:42:08:73:D9:E5:6D:66:D4:D5:42:DF:98:E7:45:F7:EF:1E:A7 Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft Manifest number: C2 Signing time: Sun 15 Jun 2025 04:59:06 +0000 Manifest this update: Sun 15 Jun 2025 04:59:06 +0000 Manifest next update: Sun 22 Jun 2025 04:59:06 +0000 Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: 3yKLaUO2tCZWJwqRFGEZALGhg+4/KgxgFJ6sGifb29Y=) 2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: TmyUhAAOaU6CYroA57XlncbnofjVXGoZ5jM7LnuMB/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Validity Not Before: Jun 15 04:59:06 2025 GMT Not After : Jun 22 04:59:06 2025 GMT Subject: CN=684e531a-c832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:ec:40:65:4f:1b:f0:ee:21:72:f6:70:03: fb:19:7f:9b:92:4d:a4:5c:50:d6:8d:66:67:bc:e7: 00:c7:df:6b:8f:14:e0:90:0f:61:ee:1f:55:4b:ae: 54:1b:2c:2e:5a:ce:cb:67:3a:ea:21:35:32:10:aa: ba:34:fe:ce:23:d5:40:bd:5b:90:bd:82:e5:56:f1: cd:96:eb:21:a2:1a:9a:44:7b:18:af:56:a4:9b:93: 21:bb:d9:95:3c:e2:b6:79:9c:77:42:54:95:9c:0b: b3:e8:20:a6:1f:cd:51:79:3d:48:88:a9:bb:0c:72: b3:01:4d:f6:46:67:43:88:e3:9e:dc:93:1a:a4:38: 68:d8:ae:23:7d:b9:ab:08:0b:07:6c:a8:79:b1:87: c7:71:42:5c:99:ec:30:54:c2:57:61:4a:18:75:f2: 74:8d:d0:2d:71:45:9e:6a:13:82:49:05:97:a2:0d: 0a:f9:ab:bf:13:0a:bb:b6:fd:1f:9d:13:73:17:6b: a7:fe:d3:c9:36:69:d5:74:8e:9f:a7:3b:dd:17:19: 6d:71:55:c2:9b:9c:2c:3c:91:4e:19:78:8b:ca:73: ec:f1:f2:61:ad:f1:c7:ff:be:87:47:f0:11:86:74: f1:5b:84:68:86:6d:7f:d7:a7:fe:86:7b:43:2d:bf: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:93:42:08:73:D9:E5:6D:66:D4:D5:42:DF:98:E7:45:F7:EF:1E:A7 X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4c:6f:bb:2b:de:01:73:66:12:2a:47:70:0d:79:c2:53:dc: ab:04:21:e6:ae:c3:fa:5d:ef:08:e7:8d:12:c3:ea:8d:ed:1c: 5b:1d:77:b8:20:0b:e8:87:99:8e:85:95:97:9a:53:57:f4:1b: 7e:60:1d:20:f7:e3:1e:00:d8:9f:13:ef:da:0e:c4:07:c6:44: 8e:72:e3:1d:08:5f:74:53:f7:1f:07:fb:73:ab:eb:4d:b4:18: 3c:d8:a8:c8:42:60:e9:8f:18:49:ea:bb:ed:b1:6e:e3:3b:b1: fc:78:d7:dc:74:c8:a5:c3:90:ab:2f:f0:59:70:3f:0e:f1:07: ed:9e:86:06:d6:6f:f5:3b:19:7d:ab:2b:71:0c:62:46:35:80: 1d:ed:2c:f5:15:cb:33:69:af:ea:b2:c2:1d:f4:61:f3:b4:33: ac:d2:4b:4d:c7:25:c7:31:e0:1e:41:cb:db:2c:67:34:6d:95: 86:31:89:6b:66:90:9d:b3:2a:46:95:22:3b:ff:98:ab:20:3c: 41:e1:24:b4:a9:69:02:f3:ad:0d:e0:cb:4e:7d:ec:c2:dc:d6: e7:ca:b8:82:d6:8c:99:7c:02:61:92:bf:2f:ee:32:26:8d:dd: 9c:bd:3c:99:37:d5:c7:48:94:3e:ce:21:42:70:02:01:3d:d7: 4e:67:44:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG OTQ2OEQ5NUEwHhcNMjUwNjE1MDQ1OTA2WhcNMjUwNjIyMDQ1OTA2WjAYMRYwFAYD VQQDEw02ODRlNTMxYS1jODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUTsQGVPG/DuIXL2cAP7GX+bkk2kXFDWjWZnvOcAx99rjxTgkA9h7h9VS65U GywuWs7LZzrqITUyEKq6NP7OI9VAvVuQvYLlVvHNlushohqaRHsYr1akm5Mhu9mV POK2eZx3QlSVnAuz6CCmH81ReT1IiKm7DHKzAU32RmdDiOOe3JMapDho2K4jfbmr CAsHbKh5sYfHcUJcmewwVMJXYUoYdfJ0jdAtcUWeahOCSQWXog0K+au/Ewq7tv0f nRNzF2un/tPJNmnVdI6fpzvdFxltcVXCm5wsPJFOGXiLynPs8fJhrfHH/76HR/AR hnTxW4Rohm1/16f+hntDLb/4EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWTQghz 2eVtZtTVQt+Y50X37x6nMB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy85OUM3NDg4ODI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0Fj cmNNNUU0UDhxVzM1Um8yVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALTG+7K94Bc2YSKkdwDXnCU9yrBCHmrsP6Xe8I540Sw+qN7RxbHXe4 IAvoh5mOhZWXmlNX9Bt+YB0g9+MeANifE+/aDsQHxkSOcuMdCF90U/cfB/tzq+tN tBg82KjIQmDpjxhJ6rvtsW7jO7H8eNfcdMilw5CrL/BZcD8O8QftnoYG1m/1Oxl9 qytxDGJGNYAd7Sz1Fcszaa/qssId9GHztDOs0ktNxyXHMeAeQcvbLGc0bZWGMYlr ZpCdsypGlSI7/5irIDxB4SS0qWkC860N4MtOfezC3NbnyriC1oyZfAJhkr8v7jIm jd2cvTyZN9XHSJQ+ziFCcAIBPddOZ0RR -----END CERTIFICATE-----Generated at Mon Jun 16 03:16:47 2025 by rpki-client