$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft File: IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json) Hash identifier: EmwOqS1+Ia5hPSb7w4P5uPS5eYvN8GWIuJ23o9eBrKw= Subject key identifier: CC:96:0A:1A:6D:C0:07:12:45:14:3E:EC:50:B9:5E:CB:30:DD:4B:08 Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft Manifest number: 0674 Signing time: Thu 24 Apr 2025 22:08:24 +0000 Manifest this update: Thu 24 Apr 2025 22:08:24 +0000 Manifest next update: Thu 01 May 2025 22:08:24 +0000 Files and hashes: 1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: Fs6Y3QHr6ug1g88ooXjF2d/Q/XLZl4SHsbAFJgudyfo=) 2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: 08F6ONsLtIONFt4iRDBy4HnEz2B6jrKqNj5tRZhjdMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Validity Not Before: Apr 24 22:08:24 2025 GMT Not After : May 1 22:08:24 2025 GMT Subject: CN=680ab658-afc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:d7:fb:dd:73:4d:cf:99:d6:be:65:d9:4d: 6a:83:c8:39:d9:15:87:2d:cd:8f:9d:6a:0b:1f:ff: 38:23:af:2f:16:ca:49:8f:84:e6:bc:59:9d:59:a2: d8:0a:5f:65:65:3c:60:df:4b:67:ae:af:5d:11:5a: c3:ce:b6:bc:79:ba:12:1c:4f:9a:fb:17:ba:c4:b9: 9f:ff:bb:be:5b:c9:94:62:d9:fc:b2:01:40:fe:1d: d1:f7:d4:d3:27:43:c0:88:9b:f7:4c:34:c3:ed:c4: 7f:67:23:95:a3:38:eb:d4:c5:09:8d:c1:00:d3:22: f1:f8:bf:6f:1a:27:ce:f9:ae:9f:35:32:d9:a8:aa: 16:42:ae:77:c5:f1:4c:1d:a4:d3:9e:7f:01:ef:a2: e7:d3:0b:34:c6:25:43:8c:6d:ad:5f:34:3a:42:8b: a9:73:f9:ca:a0:2b:f6:82:b7:e4:95:bf:90:47:07: fc:52:2f:7a:64:9d:82:33:8f:5a:60:34:49:81:07: 8f:11:66:5e:86:6d:77:b6:e7:3d:6f:ea:ef:2c:72: 4d:09:31:24:ff:cf:4c:d5:c1:93:2b:51:45:d7:8c: a7:89:d5:77:ef:11:fa:59:6a:5e:bf:5e:78:c7:a5: ed:3d:88:32:8f:76:e2:29:87:79:ae:75:f7:84:95: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:96:0A:1A:6D:C0:07:12:45:14:3E:EC:50:B9:5E:CB:30:DD:4B:08 X509v3 Authority Key Identifier: keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:6c:06:47:6b:e5:d0:7d:0c:7f:31:d7:35:e5:0c:72:95:b7: a0:7b:84:b9:5c:4b:7f:8f:56:fd:c7:37:78:99:ab:b7:89:75: 2a:5a:31:cd:a0:91:1f:6b:78:d1:84:7c:e5:50:96:b9:21:d2: 27:b5:8a:87:98:de:db:70:4d:dc:c8:5e:18:56:b3:fe:c2:63: 8e:13:7e:10:00:b8:d6:4d:48:cd:1b:23:c2:4b:c3:2d:ae:a6: c7:a8:f9:15:2c:20:7c:84:ba:a2:55:14:18:38:de:03:24:24: d1:9a:61:b2:c3:48:d4:7e:12:8f:75:14:95:fe:ca:36:9d:ae: 2a:63:f1:a1:fd:db:3a:51:1e:a9:50:dd:2b:7a:e9:cb:c9:e8: 77:28:8c:8f:59:0f:1a:3c:e7:16:97:45:47:d2:1a:76:c1:93: e7:aa:68:ce:eb:c0:2b:49:b9:d8:11:ca:4a:b6:cc:fe:67:03: d4:47:c8:ab:3c:3e:e0:c3:b2:ca:4d:13:5f:53:77:12:c7:13: 03:d0:9d:e8:62:06:b0:54:5d:b5:72:a3:be:00:01:21:49:77: a4:e4:2a:f9:d0:ff:80:4a:fe:be:21:5a:02:0a:c9:60:eb:09: 00:a8:03:d7:2f:62:08:3f:7f:f5:37:1f:c3:f5:b4:0c:24:a0: d7:c6:32:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyMkYxMTAvBgNVBAUTKDIxNEIyRkNGNDJCQjJCOTg5MDU4NDVENzMzRDk0NUQ5 NUMyRENBMTIwHhcNMjUwNDI0MjIwODI0WhcNMjUwNTAxMjIwODI0WjAYMRYwFAYD VQQDEw02ODBhYjY1OC1hZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcLX+91zTc+Z1r5l2U1qg8g52RWHLc2PnWoLH/84I68vFspJj4TmvFmdWaLY Cl9lZTxg30tnrq9dEVrDzra8eboSHE+a+xe6xLmf/7u+W8mUYtn8sgFA/h3R99TT J0PAiJv3TDTD7cR/ZyOVozjr1MUJjcEA0yLx+L9vGifO+a6fNTLZqKoWQq53xfFM HaTTnn8B76Ln0ws0xiVDjG2tXzQ6Qoupc/nKoCv2grfklb+QRwf8Ui96ZJ2CM49a YDRJgQePEWZehm13tuc9b+rvLHJNCTEk/89M1cGTK1FF14ynidV37xH6WWpev154 x6XtPYgyj3biKYd5rnX3hJWVAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyWChpt wAcSRRQ+7FC5Xssw3UsIMB8GA1UdIwQYMBaAFCFLL89CuyuYkFhF1zPZRdlcLcoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDIyRi83QzY0NDQyNjc3 NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1aVFXRVhYTTlsRjJWd3R5 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVc3Z6MEs3SzVpUVdFWFhNOWxGMlZ3dHloSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDIyRi83QzY0NDQyNjc3NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1 aVFXRVhYTTlsRjJWd3R5aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkbAZHa+XQfQx/Mdc15Qxylbege4S5XEt/j1b9xzd4mau3iXUqWjHN oJEfa3jRhHzlUJa5IdIntYqHmN7bcE3cyF4YVrP+wmOOE34QALjWTUjNGyPCS8Mt rqbHqPkVLCB8hLqiVRQYON4DJCTRmmGyw0jUfhKPdRSV/so2na4qY/Gh/ds6UR6p UN0reunLyeh3KIyPWQ8aPOcWl0VH0hp2wZPnqmjO68ArSbnYEcpKtsz+ZwPUR8ir PD7gw7LKTRNfU3cSxxMD0J3oYgawVF21cqO+AAEhSXek5Cr50P+ASv6+IVoCCslg 6wkAqAPXL2IIP3/1Nx/D9bQMJKDXxjIT -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:26 2025 by rpki-client