$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: GsfEsAWzaxw1HOPY2G08FvfH281ZwsgJp/koFywBCtw= Subject key identifier: D2:6D:B3:7F:A4:95:67:EC:61:CC:42:0D:5C:F0:C0:E5:67:3B:57:56 Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 0428 Signing time: Tue 01 Jul 2025 01:06:26 +0000 Manifest this update: Tue 01 Jul 2025 01:06:25 +0000 Manifest next update: Tue 08 Jul 2025 01:06:25 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: cez1GszAYxzw3jcy+A44I8WV5EisuU5n7YzbAY8YnPs=) 2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: tHlnHTM42fIgrOKj6B5mEiDlxGJ8PU+aATIjcWUbfzQ=) 3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: G91/+5P90Gbi5PgxXduUuTfOqPoMJhhodtxKYVTEQhU=) 4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: dDUwPb8yT4c7h8uvXZN4RSXgwF3JJh0qprW0Nf2AMic=) 5: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: 6FWLxJ0tuemCPYBLnFeCXc6fNxB9xk/e0IXfBTmtzAk=) 6: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: OW2gDSL6apVk21WPZdNUp4voxwL3co7ZVV/LZN2sPnI=) 7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: rr7JwL3aP2xt22xpI8m2scwwvBMRgYndiZXBSENrUYA=) 8: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: P6m9Y8fkMm3GUB3vWCGhg/CMVh26A+E6bYvQlekbBbQ=) 9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: onTCqXS9qZGzhIeTCRHgBXLlG0kEyR1ncJjeY60B73A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Jul 1 01:06:25 2025 GMT Not After : Jul 8 01:06:25 2025 GMT Subject: CN=68633491-74a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:b0:98:98:0b:79:20:a2:7b:c3:9a:bc:ff: 34:3f:1c:c5:71:39:3c:cc:75:19:bf:d1:c3:6c:69: 31:69:bc:2f:37:14:13:84:0b:e3:1d:a6:1e:cc:2f: 07:d9:dc:02:4e:fe:ac:8b:e7:29:65:fa:91:bb:43: e9:dd:a7:47:e5:bd:ca:95:2c:1e:d4:84:43:c3:fa: 5b:7c:40:a5:f5:1f:ad:34:d7:5a:99:dc:6a:12:30: 00:93:5a:82:6b:d6:04:94:4d:7e:b5:f1:31:f8:ab: 4f:d1:9f:b8:93:3e:cf:3b:86:9c:c2:98:4a:8f:ee: cf:0f:af:f9:71:66:ae:f0:1f:1b:83:d9:4e:c8:ad: a4:b2:2e:e9:e7:12:63:d4:88:69:4c:9b:1f:df:0a: b0:61:c7:7f:b8:7e:32:4d:4a:22:b8:49:87:9c:e7: fd:79:84:d9:a0:d1:25:7f:b9:3d:66:8b:c2:44:12: 0d:d8:bf:be:e9:c1:89:66:72:e8:7c:6e:ac:ce:2b: 37:8f:79:d3:e2:74:92:fe:fb:18:df:54:2b:6e:58: cd:a4:dd:44:c7:a8:04:15:39:bc:ee:04:28:ed:cd: a7:01:81:e9:e6:21:14:09:db:6c:80:13:82:8e:04: 70:91:13:e5:71:dd:b5:e1:ef:e9:e3:3c:99:2f:27: b8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:B3:7F:A4:95:67:EC:61:CC:42:0D:5C:F0:C0:E5:67:3B:57:56 X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8b:c7:4b:3c:80:51:e1:29:45:55:d0:d7:3f:5d:65:09:20: c2:42:7e:34:d7:46:1c:03:04:b0:97:ae:42:ee:94:b7:33:71: 13:b9:fa:18:2c:20:43:93:73:d5:11:7a:bb:10:a2:22:d0:86: 87:5f:54:a8:23:ad:b5:61:27:c7:4b:83:c0:a5:05:40:f2:4b: c6:5d:51:e0:be:31:b2:a5:dc:02:5e:62:1c:3f:2c:ad:43:7d: c9:11:85:69:70:c6:f2:2b:df:78:e1:54:3d:50:f4:71:38:65: d1:b3:a3:9c:6a:73:77:f3:8a:7e:9b:23:60:80:70:89:3f:95: ef:31:ab:ab:f2:33:0f:61:97:fc:c2:7d:e6:f9:2c:b5:27:ad: 16:a3:22:49:73:36:3d:d1:bd:a8:7b:a7:c4:06:25:1d:94:70: 1e:ae:4a:91:9f:cb:15:05:fc:90:c4:c5:d7:29:0c:cd:37:0f: 9a:1f:15:ef:c9:26:b8:14:e6:69:5d:ea:68:ca:5f:19:3b:0c: 9a:57:eb:fc:49:73:ae:d5:88:95:a3:d8:dd:49:45:18:73:f8: 4b:6e:ba:44:fb:4c:7e:83:50:08:b8:28:f2:fb:50:a7:3e:45: eb:6b:1a:07:bf:7a:38:50:cc:ba:14:13:1c:bc:60:15:14:38: 4c:ae:72:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUwNzAxMDEwNjI1WhcNMjUwNzA4MDEwNjI1WjAYMRYwFAYD VQQDEw02ODYzMzQ5MS03NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aSwmJgLeSCie8OavP80PxzFcTk8zHUZv9HDbGkxabwvNxQThAvjHaYezC8H 2dwCTv6si+cpZfqRu0Pp3adH5b3KlSwe1IRDw/pbfECl9R+tNNdamdxqEjAAk1qC a9YElE1+tfEx+KtP0Z+4kz7PO4acwphKj+7PD6/5cWau8B8bg9lOyK2ksi7p5xJj 1IhpTJsf3wqwYcd/uH4yTUoiuEmHnOf9eYTZoNElf7k9ZovCRBIN2L++6cGJZnLo fG6szis3j3nT4nSS/vsY31QrbljNpN1Ex6gEFTm87gQo7c2nAYHp5iEUCdtsgBOC jgRwkRPlcd214e/p4zyZLye41QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJts3+k lWfsYcxCDVzwwOVnO1dWMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBci8dLPIBR4SlFVdDXP11lCSDCQn4010YcAwSwl65C7pS3M3ETufoY LCBDk3PVEXq7EKIi0IaHX1SoI621YSfHS4PApQVA8kvGXVHgvjGypdwCXmIcPyyt Q33JEYVpcMbyK9944VQ9UPRxOGXRs6OcanN384p+myNggHCJP5XvMaur8jMPYZf8 wn3m+Sy1J60WoyJJczY90b2oe6fEBiUdlHAerkqRn8sVBfyQxMXXKQzNNw+aHxXv ySa4FOZpXepoyl8ZOwyaV+v8SXOu1YiVo9jdSUUYc/hLbrpE+0x+g1AIuCjy+1Cn PkXraxoHv3o4UMy6FBMcvGAVFDhMrnJR -----END CERTIFICATE-----Generated at Tue Jul 1 13:06:02 2025 by rpki-client