$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft File: I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json) Hash identifier: OIS6FUos7Vqb3Vmb3c7QRG7fcR07RAlCwdRQuskI3Gk= Subject key identifier: 21:3B:54:D6:46:41:43:AD:7F:9F:EB:A6:85:53:22:FA:04:2F:8A:C0 Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2 Certificate issuer: /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2 Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft Manifest number: 05D2 Signing time: Sat 28 Jun 2025 22:38:48 +0000 Manifest this update: Sat 28 Jun 2025 22:38:48 +0000 Manifest next update: Sat 05 Jul 2025 22:38:48 +0000 Files and hashes: 1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: fIZBarSbSAUgjWpEDP8S2r/UMX4U2aaOF0SzOtP2eZ8=) 2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: dCkT6bEicYFMQep7850krPGfdcTTuO3WSPylF2CQFFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2 Validity Not Before: Jun 28 22:38:48 2025 GMT Not After : Jul 5 22:38:48 2025 GMT Subject: CN=68606ef8-3f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:19:a1:e6:12:ff:1f:8b:2c:9e:9c:d8:0f: f9:40:b6:26:8b:4e:e7:9e:88:14:28:63:81:e8:6b: 96:53:02:d8:33:d1:26:1a:db:28:16:90:95:a0:f7: 28:26:db:48:4d:e7:51:04:8d:d4:98:3e:99:88:2a: 57:05:9a:60:a9:e4:92:4e:14:ab:71:12:47:18:18: cf:0f:cb:5b:a8:2b:0f:61:64:51:8c:44:d7:6e:31: 61:7b:ca:10:00:f2:1d:47:3d:c5:f8:d1:6c:d1:40: e8:7e:56:7a:51:45:4d:79:4b:18:aa:17:38:32:72: ac:78:c6:f9:96:9f:75:7f:24:a9:7d:51:88:76:4d: 00:3f:8c:75:88:6f:7a:d1:16:5a:85:86:72:e7:81: cd:33:d4:fe:80:01:47:e3:c6:87:a8:ef:92:d9:e8: 01:c8:ad:6b:49:bb:2d:66:f7:20:74:ef:70:53:f0: 1b:12:4e:1a:52:aa:bd:61:32:f2:20:8e:75:00:60: ba:d0:a2:c5:d4:58:99:99:09:9a:49:3e:35:29:77: c9:60:2e:e6:74:0e:f9:39:e2:f2:81:69:0a:8f:cf: 43:73:53:5f:11:7e:ac:47:b5:36:1e:43:af:ac:04: 59:20:94:c7:83:8c:eb:a1:63:ba:70:33:21:cc:fd: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3B:54:D6:46:41:43:AD:7F:9F:EB:A6:85:53:22:FA:04:2F:8A:C0 X509v3 Authority Key Identifier: keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:d0:45:45:7b:c0:a6:b7:ea:6e:ea:49:ff:3f:ef:fa:f3:0a: 7b:62:8c:da:d2:5a:37:a7:76:a2:58:f5:40:f0:f8:a0:c1:c9: 81:85:c9:08:d7:51:ff:d3:cc:7c:45:5c:8d:34:21:22:29:ad: a6:91:aa:69:d1:e9:2f:0f:46:d2:8b:db:fe:31:1c:2d:d5:58: 9b:dd:73:8e:23:b7:54:e8:0c:36:29:cc:13:e0:87:35:c9:19: 29:e9:b3:6d:65:12:03:85:f9:a6:9c:b6:59:30:9b:77:47:eb: ed:2f:53:45:95:d3:94:9c:90:8a:fc:2b:ba:1c:17:ed:4f:c2: eb:56:07:ec:b9:a3:ba:f9:c0:8c:2a:b7:91:11:24:80:a7:dd: ba:6a:f7:e2:6f:3d:3e:9c:32:dc:b0:33:f2:ec:d7:05:1a:1a: 0f:96:45:c7:cb:fc:32:eb:65:6f:3a:26:ef:b8:92:38:c3:79: 93:41:55:d5:8c:e0:b8:55:ee:5c:c9:c2:d6:dc:26:bf:10:95: 2d:65:3b:e3:43:18:f0:17:f3:cc:f9:66:85:bd:18:1c:24:04: 2d:00:bd:00:f3:fe:59:78:a9:af:e0:09:7a:51:cd:66:4a:19: 7e:a4:69:27:68:7d:16:07:97:2b:b5:01:2c:c8:e7:3f:9b:b9: 7e:1b:58:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEExMTAvBgNVBAUTKDIzREIzMzIzREQyQ0Q3OUMzNzM4NTgxRDQyRjRBQjBG NDk4ODM0QzIwHhcNMjUwNjI4MjIzODQ4WhcNMjUwNzA1MjIzODQ4WjAYMRYwFAYD VQQDEw02ODYwNmVmOC0zZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV4ZoeYS/x+LLJ6c2A/5QLYmi07nnogUKGOB6GuWUwLYM9EmGtsoFpCVoPco JttITedRBI3UmD6ZiCpXBZpgqeSSThSrcRJHGBjPD8tbqCsPYWRRjETXbjFhe8oQ APIdRz3F+NFs0UDoflZ6UUVNeUsYqhc4MnKseMb5lp91fySpfVGIdk0AP4x1iG96 0RZahYZy54HNM9T+gAFH48aHqO+S2egByK1rSbstZvcgdO9wU/AbEk4aUqq9YTLy II51AGC60KLF1FiZmQmaST41KXfJYC7mdA75OeLygWkKj89Dc1NfEX6sR7U2HkOv rARZIJTHg4zroWO6cDMhzP01yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCE7VNZG QUOtf5/rpoVTIvoEL4rAMB8GA1UdIwQYMBaAFCPbMyPdLNecNzhYHUL0qw9JiDTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4QS8yQTM1NjZBOEMy QTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1dzNPRmdkUXZTckQwbUlO TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5c3pJOTBzMTV3M09GZ2RRdlNyRDBtSU5NSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzI4QS8yQTM1NjZBOEMyQTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1 dzNPRmdkUXZTckQwbUlOTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC10EVFe8Cmt+pu6kn/P+/68wp7Yoza0lo3p3aiWPVA8PigwcmBhckI 11H/08x8RVyNNCEiKa2mkapp0ekvD0bSi9v+MRwt1Vib3XOOI7dU6Aw2KcwT4Ic1 yRkp6bNtZRIDhfmmnLZZMJt3R+vtL1NFldOUnJCK/Cu6HBftT8LrVgfsuaO6+cCM KreRESSAp926avfibz0+nDLcsDPy7NcFGhoPlkXHy/wy62VvOibvuJI4w3mTQVXV jOC4Ve5cycLW3Ca/EJUtZTvjQxjwF/PM+WaFvRgcJAQtAL0A8/5ZeKmv4Al6Uc1m Shl+pGknaH0WB5crtQEsyOc/m7l+G1hA -----END CERTIFICATE-----Generated at Sun Jun 29 16:26:39 2025 by rpki-client