$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft File: iNHJlOgQj8ClM99LuOLOjRxLnxc.mft (raw, json) Hash identifier: m1C9Ecldr3+lYzzXok5wKx0DRrahOZFr/HD0zLCfHuk= Subject key identifier: 65:8F:49:75:72:C1:1A:9F:22:59:AF:62:A8:11:0E:57:59:3A:5A:DA Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 Certificate issuer: /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft Manifest number: 063A Signing time: Thu 24 Apr 2025 22:26:38 +0000 Manifest this update: Thu 24 Apr 2025 22:26:37 +0000 Manifest next update: Thu 01 May 2025 22:26:37 +0000 Files and hashes: 1: iNHJlOgQj8ClM99LuOLOjRxLnxc.crl (hash: CRk3qU4bWHtCOgVWKaz3u7/qgQNEF92ONwcVQ7FAHho=) 2: 6339493A516311ED90F04711C4F9AE02.roa (hash: UZVHz0fvOssKPNLwiZ35IeL2xHQA6a7FTosxanmpoZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17 Validity Not Before: Apr 24 22:26:37 2025 GMT Not After : May 1 22:26:37 2025 GMT Subject: CN=680aba9d-a9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:6a:44:7d:29:f6:d3:a7:9a:e3:f1:f1:91: c1:65:3f:63:6d:94:e3:71:f0:b9:04:81:6b:92:53: 44:4d:81:40:f1:dd:b2:fe:a6:07:f0:1e:8c:8a:48: 57:88:7f:65:d9:73:70:02:dc:b8:93:4a:c5:3e:97: c7:6a:34:23:52:2f:4b:c6:e8:9b:0a:a3:ee:d6:24: 9c:77:52:fd:e2:ee:8a:b2:d5:a2:df:c9:7d:81:8e: 96:ef:71:31:07:fb:13:69:83:eb:7b:db:a6:43:cc: 8f:15:a8:fb:6f:d1:f9:0d:ee:15:46:97:99:43:17: be:e4:60:29:13:91:2f:26:1a:80:a1:a2:18:9a:36: 1c:87:74:ac:eb:3c:a6:bf:7f:02:b7:51:18:fc:5c: e2:2b:76:06:89:fb:f8:a2:7c:1d:37:a7:41:ab:2e: e1:4d:80:33:0b:02:76:68:29:ed:7e:71:57:13:e8: ac:c7:f1:8d:73:fa:3d:46:48:8d:10:3e:6e:be:96: 2d:50:3a:03:85:a9:8c:f2:31:1b:dc:89:3d:e2:f5: aa:ef:53:46:7c:b1:2c:bb:a4:8f:88:6b:e9:ae:62: 32:8f:38:f7:a2:34:b3:07:3b:43:12:e3:e6:35:40: dc:a7:8c:d7:aa:4d:46:84:55:94:93:8a:07:6b:24: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8F:49:75:72:C1:1A:9F:22:59:AF:62:A8:11:0E:57:59:3A:5A:DA X509v3 Authority Key Identifier: keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:93:74:9b:41:c8:44:71:27:dd:0c:0b:02:10:ad:f5:cc:ee: 1e:49:d5:56:f7:e1:0e:73:7e:ab:8c:e6:ea:eb:7d:2a:9c:6e: a4:93:9d:e2:2b:7a:91:a3:58:5b:75:2f:a9:42:0c:25:de:05: db:3b:1d:13:80:cb:ad:cc:41:f2:cc:e8:02:0e:ed:39:fe:55: 78:3e:5c:f1:5a:dc:ab:ae:e3:9c:ac:36:a2:34:c4:c0:26:d5: e8:79:21:bb:9d:54:83:16:53:1c:1a:d8:9e:ee:ec:67:58:8e: 97:77:91:ab:6b:7d:a2:72:b2:7b:a4:1b:37:e4:c8:ee:45:5f: 2e:1e:88:c4:1f:cb:6c:62:25:de:3c:da:47:24:c4:a6:ee:9f: 61:fd:83:4c:8e:72:26:bb:08:62:43:4c:fb:fd:c5:c3:ad:02: 4a:d0:4b:af:4e:f6:de:52:db:b3:11:33:a5:dc:db:4d:b6:bb: 69:e9:fd:9a:ba:5e:a5:f0:c9:d3:0d:82:aa:64:80:3a:4e:2e: 82:6c:0b:0b:76:92:08:0e:ae:51:53:6c:e5:cc:cb:b8:d8:77: 7f:f7:08:63:4b:f1:b9:df:6e:71:3a:38:18:44:08:7f:52:00: fe:93:26:61:84:5f:56:50:0d:eb:9e:50:70:b4:63:6f:b0:22: 2d:58:a2:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MDIxMTAvBgNVBAUTKDg4RDFDOTk0RTgxMDhGQzBBNTMzREY0QkI4RTJDRThE MUM0QjlGMTcwHhcNMjUwNDI0MjIyNjM3WhcNMjUwNTAxMjIyNjM3WjAYMRYwFAYD VQQDEw02ODBhYmE5ZC1hOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hNqRH0p9tOnmuPx8ZHBZT9jbZTjcfC5BIFrklNETYFA8d2y/qYH8B6MikhX iH9l2XNwAty4k0rFPpfHajQjUi9LxuibCqPu1iScd1L94u6KstWi38l9gY6W73Ex B/sTaYPre9umQ8yPFaj7b9H5De4VRpeZQxe+5GApE5EvJhqAoaIYmjYch3Ss6zym v38Ct1EY/FziK3YGifv4onwdN6dBqy7hTYAzCwJ2aCntfnFXE+isx/GNc/o9RkiN ED5uvpYtUDoDhamM8jEb3Ik94vWq71NGfLEsu6SPiGvprmIyjzj3ojSzBztDEuPm NUDcp4zXqk1GhFWUk4oHayRrDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWPSXVy wRqfIlmvYqgRDldZOlraMB8GA1UdIwQYMBaAFIjRyZToEI/ApTPfS7jizo0cS58X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTcwMi85MzlDQUUyQzhE RDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4Q2xNOTlMdU9MT2pSeExu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOSEpsT2dRajhDbE05OUx1T0xPalJ4TG54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTcwMi85MzlDQUUyQzhERDkxMUVCOEVGQjQxNThDNEY5QUUwMi9pTkhKbE9nUWo4 Q2xNOTlMdU9MT2pSeExueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLk3SbQchEcSfdDAsCEK31zO4eSdVW9+EOc36rjObq630qnG6kk53i K3qRo1hbdS+pQgwl3gXbOx0TgMutzEHyzOgCDu05/lV4PlzxWtyrruOcrDaiNMTA JtXoeSG7nVSDFlMcGtie7uxnWI6Xd5Gra32icrJ7pBs35MjuRV8uHojEH8tsYiXe PNpHJMSm7p9h/YNMjnImuwhiQ0z7/cXDrQJK0EuvTvbeUtuzETOl3NtNtrtp6f2a ul6l8MnTDYKqZIA6Ti6CbAsLdpIIDq5RU2zlzMu42Hd/9whjS/G5325xOjgYRAh/ UgD+kyZhhF9WUA3rnlBwtGNvsCItWKJC -----END CERTIFICATE-----Generated at Sat Apr 26 05:57:27 2025 by rpki-client