$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: LW3nPjnAonsWv4NhVHGAZcjk5M7EVw6q/E3sjVQ9Low= Subject key identifier: 17:A5:A0:F9:23:BD:4A:3D:FD:85:19:A0:85:4B:5C:7A:3B:37:2B:36 Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 089E Signing time: Mon 12 May 2025 20:56:22 +0000 Manifest this update: Mon 12 May 2025 20:56:22 +0000 Manifest next update: Mon 19 May 2025 20:56:22 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: YiqxPzcAyiUbSMw+h/Ps21BvYiv7gkhz9DzI329giWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: May 12 20:56:22 2025 GMT Not After : May 19 20:56:22 2025 GMT Subject: CN=68226076-4917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:2d:5b:50:53:f5:56:2f:83:ca:a5:20:9f: a4:ee:38:b1:01:19:ac:6e:a4:bf:ef:80:0d:14:21: ca:a9:95:b0:83:2f:44:6f:94:f6:20:e4:ed:98:15: c5:7f:cc:b8:8e:a6:6f:a3:1e:11:a8:76:c7:de:1f: be:60:4a:67:f2:f7:31:e2:a2:7f:07:0d:42:98:59: 09:4f:f5:4b:04:af:22:87:c6:85:4c:78:b2:76:db: 17:e1:e0:76:da:08:4e:5f:79:7b:59:8d:e4:46:11: 7a:10:93:9f:ba:73:eb:ab:2a:bd:f8:2a:01:1a:34: f0:18:ca:05:1a:b4:58:f0:0f:3d:1c:f9:15:8e:90: e3:b9:7b:10:45:d6:ed:33:d2:ee:7d:cb:46:c0:47: f0:2d:61:f7:4b:2c:d3:24:83:12:58:e7:9c:1b:d5: 78:81:c7:a8:29:b3:4d:e3:87:25:5c:7d:05:ee:9c: cf:2b:80:27:ad:81:1a:6d:70:73:16:7f:c3:93:26: f4:6b:06:71:4b:90:8c:87:82:19:3a:d1:4b:bd:4c: 6f:a3:52:98:a4:9f:f4:35:96:e1:6f:a8:a6:a0:0d: c5:bb:a3:60:ff:9e:c7:87:d9:a2:a3:b2:9b:93:98: 8d:12:50:39:da:2f:bd:b0:b0:92:c6:6f:1c:c7:b6: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A5:A0:F9:23:BD:4A:3D:FD:85:19:A0:85:4B:5C:7A:3B:37:2B:36 X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:51:bd:08:17:40:c8:39:ec:31:ae:60:7c:a6:61:42:be:ab: 39:89:c3:4f:c1:f9:27:62:79:f4:86:fc:24:98:ff:46:7b:43: 77:48:24:a2:a5:d0:1e:fa:2e:2b:46:e5:27:63:a6:01:85:cd: 14:7b:44:47:4e:34:de:18:78:2e:4f:4b:52:31:51:be:0d:12: 9c:62:79:6d:c0:3b:71:f4:20:4a:c6:0f:29:af:a8:41:74:7b: ef:7d:01:e1:b6:8a:8b:d2:c8:a0:08:c0:74:a4:cc:80:69:d2: 0f:94:26:cb:a1:18:0d:ef:6e:8e:0e:eb:21:93:b8:04:13:a1: d7:04:0f:37:cd:3e:ff:df:35:74:ac:74:b3:16:5a:0d:34:99: 0a:c0:4c:75:f8:c6:8e:a4:94:6a:29:e2:3e:08:fc:94:8c:2f: 20:1f:b9:17:b8:91:6a:ec:1c:8c:6e:8f:73:c9:bf:05:34:75: 8b:82:82:49:37:86:8e:c4:3e:f2:1f:1b:b1:02:9f:ba:a6:37: a6:67:66:d9:da:32:26:93:6a:f2:39:3c:f2:31:c8:fe:d0:03: 5f:18:c5:e3:c2:e1:2e:1f:75:c6:e4:aa:12:19:ef:52:b6:fd: 3f:aa:51:45:60:82:0b:b7:be:64:ab:ce:11:a3:53:c6:30:d3: 71:6b:e7:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjUwNTEyMjA1NjIyWhcNMjUwNTE5MjA1NjIyWjAYMRYwFAYD VQQDEw02ODIyNjA3Ni00OTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk5gtW1BT9VYvg8qlIJ+k7jixARmsbqS/74ANFCHKqZWwgy9Eb5T2IOTtmBXF f8y4jqZvox4RqHbH3h++YEpn8vcx4qJ/Bw1CmFkJT/VLBK8ih8aFTHiydtsX4eB2 2ghOX3l7WY3kRhF6EJOfunPrqyq9+CoBGjTwGMoFGrRY8A89HPkVjpDjuXsQRdbt M9LufctGwEfwLWH3SyzTJIMSWOecG9V4gceoKbNN44clXH0F7pzPK4AnrYEabXBz Fn/Dkyb0awZxS5CMh4IZOtFLvUxvo1KYpJ/0NZbhb6imoA3Fu6Ng/57Hh9mio7Kb k5iNElA52i+9sLCSxm8cx7YcxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeloPkj vUo9/YUZoIVLXHo7Nys2MB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfUb0IF0DIOewxrmB8pmFCvqs5icNPwfknYnn0hvwkmP9Ge0N3SCSi pdAe+i4rRuUnY6YBhc0Ue0RHTjTeGHguT0tSMVG+DRKcYnltwDtx9CBKxg8pr6hB dHvvfQHhtoqL0sigCMB0pMyAadIPlCbLoRgN726ODushk7gEE6HXBA83zT7/3zV0 rHSzFloNNJkKwEx1+MaOpJRqKeI+CPyUjC8gH7kXuJFq7ByMbo9zyb8FNHWLgoJJ N4aOxD7yHxuxAp+6pjemZ2bZ2jImk2ryOTzyMcj+0ANfGMXjwuEuH3XG5KoSGe9S tv0/qlFFYIILt75kq84Ro1PGMNNxa+ci -----END CERTIFICATE-----Generated at Tue May 13 04:37:34 2025 by rpki-client