$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft File: IcuqoETeGlZkRp9Bi80Id7ITlzo.mft (raw, json) Hash identifier: 23H5ERNzCo3/QlDaROmmtvJwgrJZ1Ic+i9u6INfELOs= Subject key identifier: 42:A9:44:0E:09:48:0B:0F:9E:8A:51:A6:D9:0D:C7:0D:35:CD:0C:AA Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A Certificate issuer: /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft Manifest number: 0126 Signing time: Fri 25 Apr 2025 03:45:25 +0000 Manifest this update: Fri 25 Apr 2025 03:45:24 +0000 Manifest next update: Fri 02 May 2025 03:45:24 +0000 Files and hashes: 1: IcuqoETeGlZkRp9Bi80Id7ITlzo.crl (hash: 4g1hoXSt33YUwxNVj+wcE9Jg+d5ZiykpHLh9Mn0e4to=) 2: 6538D178628E11EEBF375134C4F9AE02.roa (hash: a5Qs3LUcbSVUj/0GZbXTErNFIjAHGfhVv7lawUtiA/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A Validity Not Before: Apr 25 03:45:24 2025 GMT Not After : May 2 03:45:24 2025 GMT Subject: CN=680b0554-ba6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6c:70:53:20:ff:84:b6:17:93:7e:a5:90:dd: 55:ff:ea:d2:d5:58:6c:f7:74:ef:fa:c3:a9:23:68: a6:e9:36:7f:dc:5f:28:7b:d2:f3:85:5c:42:49:2b: 6b:6d:90:c3:48:4d:fd:51:51:ea:7f:cf:b4:70:24: 0e:59:c7:3e:3d:54:a0:16:af:29:03:e0:14:88:ca: 3a:87:a6:bc:ec:af:aa:cb:2e:45:d7:7e:4b:97:df: 2b:55:c9:a1:38:f0:8e:fd:48:c5:ed:30:c3:e4:be: 7a:40:d3:d4:32:cd:71:95:b4:0e:8c:55:4b:ed:02: 70:8f:c7:15:47:60:e2:94:66:61:8c:1a:ba:45:12: fb:0f:f1:61:9c:66:ef:d2:89:28:9c:5e:f6:cc:68: 5b:91:3e:65:3d:ad:7f:12:ce:50:cb:bf:28:5e:57: 5f:fb:8b:65:36:79:d5:1d:02:d3:a7:f1:dd:5c:3d: 2e:60:34:1c:14:fc:1e:87:b1:ff:5b:1c:94:6d:f1: 9c:51:2e:9d:6c:55:c8:80:55:a2:7a:01:7b:bc:9e: 92:07:75:55:9e:b9:5c:81:78:ef:e7:f1:b8:1f:6f: 76:70:67:a1:5f:fc:a1:c5:82:f3:6a:a0:8a:80:44: a7:78:d0:29:f2:25:35:b2:11:d8:c9:dc:a1:21:e2: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A9:44:0E:09:48:0B:0F:9E:8A:51:A6:D9:0D:C7:0D:35:CD:0C:AA X509v3 Authority Key Identifier: keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:79:32:00:de:c7:54:db:a3:50:98:35:2f:fd:4f:0b:9f:53: f5:6a:ae:b4:16:4b:7a:19:c8:98:a6:13:45:7d:c9:04:a6:72: 4d:0d:da:0f:a0:c6:ea:41:3c:32:2e:28:54:9d:2f:93:c4:00: b3:0a:65:7c:b7:92:86:82:40:ba:2a:4b:f6:4c:5e:eb:f6:ac: 21:51:c8:f3:09:fc:b2:a5:ae:71:e7:9b:9f:34:f4:25:a1:78: 58:39:6b:71:13:b2:ac:4c:6a:da:d4:f5:0b:1f:e2:09:62:a7: f2:2c:e5:77:2d:61:bd:02:6a:9f:59:af:c4:a2:6f:ea:73:d6: c0:ab:68:dc:62:1a:2e:78:7f:3f:90:b8:50:38:65:6f:a1:7e: e3:57:e7:bf:c6:0f:06:25:d5:4e:bc:63:6b:d2:aa:53:4d:53: 1e:c5:a9:90:e4:8e:e9:aa:05:4e:f7:3e:7b:a5:c2:30:f7:56: c0:c6:51:52:53:34:3b:2c:52:cd:e0:1f:e2:ec:93:5b:6f:c1: 05:3d:23:5a:00:d8:5f:f6:ad:29:fc:fb:78:f6:9d:b1:02:43: e3:50:a2:fb:eb:f6:f6:d5:1e:ff:ee:79:c9:0f:0d:72:44:db: 08:39:75:97:6b:e3:61:2c:46:be:2f:b8:ae:1f:9b:2b:01:6e: 3a:20:11:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5M0IxMTAvBgNVBAUTKDIxQ0JBQUEwNDRERTFBNTY2NDQ2OUY0MThCQ0QwODc3 QjIxMzk3M0EwHhcNMjUwNDI1MDM0NTI0WhcNMjUwNTAyMDM0NTI0WjAYMRYwFAYD VQQDEw02ODBiMDU1NC1iYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GxwUyD/hLYXk36lkN1V/+rS1Vhs93Tv+sOpI2im6TZ/3F8oe9LzhVxCSStr bZDDSE39UVHqf8+0cCQOWcc+PVSgFq8pA+AUiMo6h6a87K+qyy5F135Ll98rVcmh OPCO/UjF7TDD5L56QNPUMs1xlbQOjFVL7QJwj8cVR2DilGZhjBq6RRL7D/FhnGbv 0okonF72zGhbkT5lPa1/Es5Qy78oXldf+4tlNnnVHQLTp/HdXD0uYDQcFPweh7H/ WxyUbfGcUS6dbFXIgFWiegF7vJ6SB3VVnrlcgXjv5/G4H292cGehX/yhxYLzaqCK gESneNAp8iU1shHYydyhIeJSswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKpRA4J SAsPnopRptkNxw01zQyqMB8GA1UdIwQYMBaAFCHLqqBE3hpWZEafQYvNCHeyE5c6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzkzQi82N0QwOEJBODYy OEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUdsWmtScDlCaTgwSWQ3SVRs em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdXFvRVRlR2xaa1JwOUJpODBJZDdJVGx6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzkzQi82N0QwOEJBODYyOEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUds WmtScDlCaTgwSWQ3SVRsem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0eTIA3sdU26NQmDUv/U8Ln1P1aq60Fkt6GciYphNFfckEpnJNDdoP oMbqQTwyLihUnS+TxACzCmV8t5KGgkC6Kkv2TF7r9qwhUcjzCfyypa5x55ufNPQl oXhYOWtxE7KsTGra1PULH+IJYqfyLOV3LWG9AmqfWa/Eom/qc9bAq2jcYhoueH8/ kLhQOGVvoX7jV+e/xg8GJdVOvGNr0qpTTVMexamQ5I7pqgVO9z57pcIw91bAxlFS UzQ7LFLN4B/i7JNbb8EFPSNaANhf9q0p/Pt49p2xAkPjUKL76/b21R7/7nnJDw1y RNsIOXWXa+NhLEa+L7iuH5srAW46IBH4 -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:13 2025 by rpki-client