$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: cQI4Mi3GrdubXs0DmfHyD3WmSJZqeZSMlkzlOt9CCKE= Subject key identifier: 03:7E:14:F4:90:32:BA:1A:CE:3C:1C:03:F8:DE:1C:5C:7E:67:9B:49 Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 06DA Signing time: Mon 12 May 2025 21:49:11 +0000 Manifest this update: Mon 12 May 2025 21:49:10 +0000 Manifest next update: Mon 19 May 2025 21:49:10 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: +gf+LHzRWt++EFSjXsEqUgaipBLVmIHS/Yc8Ybt2+yw=) 2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: May 12 21:49:10 2025 GMT Not After : May 19 21:49:10 2025 GMT Subject: CN=68226cd6-e424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8b:f4:0c:db:bf:88:9b:84:b1:aa:6b:4a:88: 2b:01:b9:d4:bf:7a:f5:fe:ab:76:a6:51:e4:89:3c: 09:4c:dd:35:88:d1:03:d3:e3:b3:1e:ac:9f:37:96: f1:ef:93:12:62:58:c2:86:97:23:d1:b8:5c:4d:c8: 98:92:13:35:61:0d:e4:0d:85:5a:74:de:c5:61:91: e4:3a:20:fb:5a:fa:3a:42:82:2f:98:5f:27:ae:75: 51:61:9f:19:8f:68:68:1c:05:99:ae:28:f8:65:0b: 93:54:99:97:39:3d:81:6a:26:36:d8:ac:a9:11:11: 6f:e1:9f:85:f4:fd:0b:cb:59:a3:e5:cf:7e:9f:4e: 4c:a8:98:46:4b:9a:ea:81:d8:50:42:da:03:bf:87: d2:5b:77:8e:34:bb:50:04:cc:5d:2f:b7:4f:72:d7: cc:5b:44:3c:57:2b:e8:76:46:ff:b5:81:43:fa:73: 5c:82:45:b7:46:f7:33:a2:89:1b:03:24:58:6b:ca: c3:6c:df:07:7e:f9:2e:b2:bd:dd:a9:ea:d6:5e:80: cd:e0:68:9e:ac:4e:e2:04:da:ed:ad:8d:cb:fb:19: a2:01:cf:6c:66:37:1a:a8:fb:7c:08:2e:43:a7:3e: 7b:ff:ba:b8:47:a0:f2:a3:02:bb:6e:98:af:01:5c: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7E:14:F4:90:32:BA:1A:CE:3C:1C:03:F8:DE:1C:5C:7E:67:9B:49 X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:55:4e:cc:e6:52:c0:47:d7:f7:56:e4:eb:94:99:e1:2e:45: d7:e5:fe:94:e4:63:5d:c7:58:bb:21:7f:6f:26:b7:bd:7c:1e: a9:53:d7:d0:5d:c0:7d:2f:44:ec:e2:e3:1e:3b:9b:a3:34:8f: 5b:80:7e:5f:3a:e0:41:7a:27:78:53:1d:87:07:42:66:1c:49: 7f:4d:c7:ac:fb:61:a3:79:b4:35:7e:68:2c:04:50:79:5d:ae: 95:6d:75:02:fe:b5:ef:2a:24:4b:ab:e2:46:78:11:34:19:36: ce:a2:49:43:fc:3a:cc:d4:4f:b8:b4:42:3c:d0:f8:2e:e7:6a: 8d:6c:93:40:dd:56:b7:a9:37:22:bd:76:fe:4f:0a:ee:51:d6: 05:7f:4c:8d:80:b9:f0:d4:d2:89:f9:d9:db:31:6d:91:97:b2: 93:6b:1f:2e:51:17:85:1d:28:15:db:2b:de:79:1d:42:b3:35: 94:52:6b:89:f2:85:27:98:73:4a:09:02:a0:74:d6:29:5e:18: e6:c5:ef:3a:e6:3f:b8:94:e6:c1:31:52:4c:e8:68:99:83:26: bc:66:28:11:9d:01:a1:d1:be:96:f8:5e:d5:f6:3b:f7:51:b5: 9f:74:69:70:13:5b:1a:59:97:47:96:df:e7:17:b6:fd:d3:da: d6:69:64:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjUwNTEyMjE0OTEwWhcNMjUwNTE5MjE0OTEwWjAYMRYwFAYD VQQDEw02ODIyNmNkNi1lNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ov0DNu/iJuEsaprSogrAbnUv3r1/qt2plHkiTwJTN01iNED0+OzHqyfN5bx 75MSYljChpcj0bhcTciYkhM1YQ3kDYVadN7FYZHkOiD7Wvo6QoIvmF8nrnVRYZ8Z j2hoHAWZrij4ZQuTVJmXOT2BaiY22KypERFv4Z+F9P0Ly1mj5c9+n05MqJhGS5rq gdhQQtoDv4fSW3eONLtQBMxdL7dPctfMW0Q8Vyvodkb/tYFD+nNcgkW3Rvczookb AyRYa8rDbN8Hfvkusr3dqerWXoDN4GierE7iBNrtrY3L+xmiAc9sZjcaqPt8CC5D pz57/7q4R6DyowK7bpivAVw8XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN+FPSQ MroazjwcA/jeHFx+Z5tJMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNVU7M5lLAR9f3VuTrlJnhLkXX5f6U5GNdx1i7IX9vJre9fB6pU9fQ XcB9L0Ts4uMeO5ujNI9bgH5fOuBBeid4Ux2HB0JmHEl/Tces+2GjebQ1fmgsBFB5 Xa6VbXUC/rXvKiRLq+JGeBE0GTbOoklD/DrM1E+4tEI80Pgu52qNbJNA3Va3qTci vXb+TwruUdYFf0yNgLnw1NKJ+dnbMW2Rl7KTax8uUReFHSgV2yveeR1CszWUUmuJ 8oUnmHNKCQKgdNYpXhjmxe865j+4lObBMVJM6GiZgya8ZigRnQGh0b6W+F7V9jv3 UbWfdGlwE1saWZdHlt/nF7b909rWaWRJ -----END CERTIFICATE-----Generated at Tue May 13 01:52:57 2025 by rpki-client