$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: OKHXsOezVessJ633ynf1JRaWDcO5u2nLoGyMh3dKeho= Subject key identifier: 76:B5:59:BD:7C:18:12:49:33:20:35:B4:D7:BF:3A:6B:03:1B:72:90 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0A67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0A4D Signing time: Thu 24 Apr 2025 19:37:27 +0000 Manifest this update: Thu 24 Apr 2025 19:37:27 +0000 Manifest next update: Thu 01 May 2025 19:37:27 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: LgSS4a0MIkzkKcfcADY3ZKm0RcjAgYvK+79A5lmCQbk=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: nBUoblotDyN0/Ui1SLb2Vd1fmIjqvsKS8zhy8qSXzhY=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: GuMyFs8mowkXrX6mHMVeKiU6aeZe3E0B32jb5heztzI=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: lYCr6kAfGaxdZr+eWwEYwFIaASsvVDDBGvokBcs3KLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2663 (0xa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Apr 24 19:37:27 2025 GMT Not After : May 1 19:37:27 2025 GMT Subject: CN=680a92f7-6717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:c5:bd:64:a8:9e:40:9b:2e:2c:c4:d3:5e: a6:a5:d4:bc:49:6c:6d:ce:b7:8a:37:64:9c:a1:51: 09:fa:73:5a:a6:2e:ee:58:32:5e:51:dd:a8:a4:4a: e9:80:64:7b:f6:e7:f7:f4:ca:7e:24:6b:46:5b:7b: b3:7e:ee:18:5f:b4:69:6e:6b:16:4a:bd:7c:79:7c: e4:f9:e8:6a:57:f0:8f:d3:9a:ec:8a:c7:34:ce:c4: 71:be:b1:17:3a:6c:5f:31:15:8b:c4:89:4c:43:60: 11:92:e0:67:b7:a0:de:cb:d4:7d:39:47:bc:e1:8f: e1:20:2f:df:e1:0c:c2:a1:d7:f0:f8:85:b3:ce:44: f4:a5:5a:63:dd:af:91:9e:4f:68:d1:ad:89:c0:2e: 36:61:b4:2c:4d:7e:24:10:53:a6:88:3f:30:08:21: c8:61:c3:ad:60:af:0d:52:96:d2:a7:e9:74:4d:69: d1:e0:4f:57:36:6d:7c:bc:00:ed:66:6d:e2:8f:22: 8c:b4:8b:79:2f:1d:41:eb:5f:e9:35:91:a7:b7:57: 22:31:86:07:4b:c7:5c:7f:b4:ab:13:01:6b:90:25: c6:2e:de:59:d4:41:98:32:6e:4e:a6:08:8d:b5:ca: f4:88:ca:06:72:89:6e:6d:f8:71:a3:40:f0:32:8c: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B5:59:BD:7C:18:12:49:33:20:35:B4:D7:BF:3A:6B:03:1B:72:90 X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f9:84:4b:bb:32:8c:8a:79:cc:da:64:50:f4:47:14:aa:91: 2c:9d:7a:1b:73:75:31:9c:c4:20:7d:83:8b:2d:7e:28:bc:d7: 68:f6:b2:69:a3:22:83:1a:20:e1:02:e0:61:58:b7:44:e1:77: fd:c5:2e:33:95:6a:58:f9:24:60:04:8f:55:61:84:1a:7c:5f: 43:e2:b7:69:b9:49:04:e3:9a:17:9e:f5:c7:8b:f0:8a:37:b8: a4:52:05:39:fb:fd:20:b4:85:96:ed:4d:c3:88:9c:38:aa:0f: 2b:95:f7:9d:17:9f:47:b4:50:a7:59:b6:8b:11:0e:0b:1d:45: 23:d5:9b:87:05:70:fe:b0:95:8d:b3:78:29:2e:de:12:9d:41: 0d:9a:b6:02:8e:ee:0e:ac:84:9d:4d:91:e8:37:88:ec:2d:51: d5:99:1a:d9:14:77:5e:94:e5:4e:7e:35:34:60:9f:51:a1:1d: 09:15:58:04:4d:10:92:e5:ba:d4:ab:c0:4f:81:45:bf:8a:6f: 35:a2:7a:8e:7a:3f:0d:9b:3e:c4:1d:51:50:52:a2:54:bc:87: a8:2d:7f:fd:0b:1d:40:d3:44:22:c5:91:67:f3:d1:8b:b8:9d: cb:f7:7a:d7:2c:e1:6b:0b:84:ae:b4:38:e0:7d:b9:e2:ae:c4: 75:5a:51:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUwNDI0MTkzNzI3WhcNMjUwNTAxMTkzNzI3WjAYMRYwFAYD VQQDEw02ODBhOTJmNy02NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2jFvWSonkCbLizE016mpdS8SWxtzreKN2ScoVEJ+nNapi7uWDJeUd2opErp gGR79uf39Mp+JGtGW3uzfu4YX7RpbmsWSr18eXzk+ehqV/CP05rsisc0zsRxvrEX OmxfMRWLxIlMQ2ARkuBnt6Dey9R9OUe84Y/hIC/f4QzCodfw+IWzzkT0pVpj3a+R nk9o0a2JwC42YbQsTX4kEFOmiD8wCCHIYcOtYK8NUpbSp+l0TWnR4E9XNm18vADt Zm3ijyKMtIt5Lx1B61/pNZGnt1ciMYYHS8dcf7SrEwFrkCXGLt5Z1EGYMm5OpgiN tcr0iMoGcolubfhxo0DwMoyWrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHa1Wb18 GBJJMyA1tNe/OmsDG3KQMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO+YRLuzKMinnM2mRQ9EcUqpEsnXobc3UxnMQgfYOLLX4ovNdo9rJp oyKDGiDhAuBhWLdE4Xf9xS4zlWpY+SRgBI9VYYQafF9D4rdpuUkE45oXnvXHi/CK N7ikUgU5+/0gtIWW7U3DiJw4qg8rlfedF59HtFCnWbaLEQ4LHUUj1ZuHBXD+sJWN s3gpLt4SnUENmrYCju4OrISdTZHoN4jsLVHVmRrZFHdelOVOfjU0YJ9RoR0JFVgE TRCS5brUq8BPgUW/im81onqOej8Nmz7EHVFQUqJUvIeoLX/9Cx1A00QixZFn89GL uJ3L93rXLOFrC4SutDjgfbnirsR1WlEt -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:03 2025 by rpki-client