$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: IXosyFXkxTQ//ywClurPQ41wnrTFYsn98r+IyQ3TFqg= Subject key identifier: 0E:F4:FD:60:52:55:27:E8:B0:48:C7:29:1E:5D:FD:53:65:EB:D8:B6 Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0C54 Signing time: Thu 24 Apr 2025 18:17:05 +0000 Manifest this update: Thu 24 Apr 2025 18:17:05 +0000 Manifest next update: Thu 01 May 2025 18:17:05 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: uoH1ydvWqibhsn7yXI97kg9iXv7ooHUDOJcBX6Yuloc=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: jSwMcFszO57ienV1VmhbXd49FtQGNQErTQsLI54ATCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Apr 24 18:17:05 2025 GMT Not After : May 1 18:17:05 2025 GMT Subject: CN=680a8021-6348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0f:6f:4a:e9:b2:97:cb:86:f2:ec:63:a7:d2: 60:ef:54:68:89:08:9d:f1:8a:6a:3f:6d:59:c3:30: 3c:78:6a:9f:64:01:51:69:2b:1d:1d:7c:12:41:44: 83:0e:07:49:0b:1a:e7:e6:ae:71:57:49:c3:f6:db: dd:dd:9f:70:a3:79:67:8f:91:7d:30:d2:ad:06:a3: fc:2f:5a:0f:e4:13:ba:8a:57:4d:3b:c0:f3:fe:d2: de:e6:3c:d6:e3:21:1c:f7:f7:e5:a9:6a:7d:eb:31: ac:46:e7:64:90:cb:e9:f2:d4:e4:b3:31:b9:0d:09: 31:11:7b:1e:4b:5a:84:23:7a:eb:e2:df:50:32:bc: 24:a5:ec:ca:09:6e:ee:13:98:fc:11:26:57:a7:1a: 59:c7:c8:5a:e5:f0:bf:b2:3d:44:9e:cd:dc:69:c5: 82:c2:a2:05:c8:18:8b:7c:d9:c8:82:9e:80:f4:f6: 01:d9:2c:2e:97:aa:95:81:f9:db:6d:46:fe:c2:f5: 04:18:fd:4d:ab:e4:96:0b:3f:80:f4:dd:7c:33:84: 69:f1:ed:f9:fb:57:67:56:13:a6:54:39:fa:e8:97: 28:96:50:97:cb:65:02:5d:fd:63:e0:68:62:11:4c: c1:b5:2d:5f:81:f2:b8:4d:e9:1b:11:13:d6:ac:fe: f2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F4:FD:60:52:55:27:E8:B0:48:C7:29:1E:5D:FD:53:65:EB:D8:B6 X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:59:b2:9e:41:d3:b4:b5:89:bc:19:e7:f1:85:e9:19:54:2e: 75:ce:b3:f0:cf:e5:56:7c:70:7e:e5:66:91:63:1b:98:bd:2f: 62:0c:40:78:3c:77:be:60:38:21:e7:1f:b7:09:a0:35:20:4c: 87:dd:75:23:d0:de:a7:93:5b:56:2d:fa:66:c4:65:b6:9e:e4: a7:c9:04:d4:96:95:1f:cf:18:7c:11:f8:d1:58:b3:58:0d:62: d8:34:88:c7:6a:44:d9:34:da:3b:58:e0:54:7c:3c:ca:4d:6f: 54:75:ac:f4:fe:e9:82:bd:b4:ce:88:2f:53:82:15:f3:00:49: d2:ce:a9:8f:17:b9:c5:4f:29:a3:7d:0d:41:1a:d9:44:a2:61: 8a:e0:4d:a0:22:47:69:05:2c:3f:cc:ba:5c:fe:af:d4:da:20: 9c:5a:67:5e:09:76:ba:2e:69:fd:76:0c:95:8b:02:78:5e:f3: f6:96:61:1e:c1:02:0f:d1:aa:9b:cd:f9:22:3e:5c:35:29:f9: 4c:ec:82:4f:88:90:0e:ac:8d:98:4b:60:9f:c4:e6:97:0b:4d: 19:e9:ff:ee:91:f3:ac:98:eb:8c:49:d8:11:e8:25:9d:82:b2: d8:c7:f2:b1:87:e7:a4:08:a0:f9:d4:4d:b4:f8:a9:08:0e:2b: 2d:d1:a3:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjUwNDI0MTgxNzA1WhcNMjUwNTAxMTgxNzA1WjAYMRYwFAYD VQQDEw02ODBhODAyMS02MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Q9vSumyl8uG8uxjp9Jg71RoiQid8YpqP21ZwzA8eGqfZAFRaSsdHXwSQUSD DgdJCxrn5q5xV0nD9tvd3Z9wo3lnj5F9MNKtBqP8L1oP5BO6ildNO8Dz/tLe5jzW 4yEc9/flqWp96zGsRudkkMvp8tTkszG5DQkxEXseS1qEI3rr4t9QMrwkpezKCW7u E5j8ESZXpxpZx8ha5fC/sj1Ens3cacWCwqIFyBiLfNnIgp6A9PYB2Swul6qVgfnb bUb+wvUEGP1Nq+SWCz+A9N18M4Rp8e35+1dnVhOmVDn66JcollCXy2UCXf1j4Ghi EUzBtS1fgfK4TekbERPWrP7yiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA70/WBS VSfosEjHKR5d/VNl69i2MB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOWbKeQdO0tYm8GefxhekZVC51zrPwz+VWfHB+5WaRYxuYvS9iDEB4 PHe+YDgh5x+3CaA1IEyH3XUj0N6nk1tWLfpmxGW2nuSnyQTUlpUfzxh8EfjRWLNY DWLYNIjHakTZNNo7WOBUfDzKTW9Udaz0/umCvbTOiC9TghXzAEnSzqmPF7nFTymj fQ1BGtlEomGK4E2gIkdpBSw/zLpc/q/U2iCcWmdeCXa6Lmn9dgyViwJ4XvP2lmEe wQIP0aqbzfkiPlw1KflM7IJPiJAOrI2YS2CfxOaXC00Z6f/ukfOsmOuMSdgR6CWd grLYx/Kxh+ekCKD51E20+KkIDist0aO+ -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:26 2025 by rpki-client