$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: apIKWvL6dQsttXWQqj5GxziKZ9T//prD0O0S4dwvOXQ= Subject key identifier: 75:71:CF:B4:D0:6F:FD:BC:B3:FD:F2:FD:A0:0D:91:2B:E3:9C:B0:16 Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0C2D Signing time: Thu 24 Apr 2025 18:26:23 +0000 Manifest this update: Thu 24 Apr 2025 18:26:22 +0000 Manifest next update: Thu 01 May 2025 18:26:22 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: FUr1LDX2UC27GuNgYkt7hbxxxIhXyMbvU76esZr5v90=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: ZF76+TdQMAvJkkO6rvtsiHzBwUDEVkLOtw/tW67c6tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Apr 24 18:26:22 2025 GMT Not After : May 1 18:26:22 2025 GMT Subject: CN=680a824e-7995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:d6:74:3b:9b:da:ab:26:db:1a:1b:7d:c9: d1:ea:57:f1:5a:a0:38:d2:31:91:76:90:1d:cd:fb: 59:98:6e:f8:ed:cc:8b:ad:b4:1e:07:8c:58:f1:39: 15:58:09:38:ee:0f:84:cb:e4:2c:e7:d2:af:5f:00: cb:f4:64:27:9c:a7:e9:7b:f1:2a:2a:1d:f8:1d:0f: 2a:d7:f9:96:f8:d3:ff:8f:2d:ae:55:d2:61:e6:79: fb:5e:f8:23:a8:87:d6:58:89:28:42:6f:e9:f1:29: ff:cc:59:dd:79:51:5e:c4:02:29:b7:c8:0a:07:df: 29:93:28:6d:49:dd:4b:9c:6b:08:0d:28:75:c7:81: 12:bb:91:60:2b:bc:dd:51:72:74:7e:35:48:96:47: 5a:d2:71:7c:a5:67:a1:5b:2b:63:08:e8:fc:23:1e: 51:d0:6f:58:fd:7a:e9:3e:8a:dc:29:14:ce:5a:17: b3:8b:cf:ef:33:f4:d4:7a:b0:02:d7:05:10:c1:bc: 66:c6:2a:da:63:06:6e:e2:50:4e:4c:b7:bd:d6:49: 76:79:05:f8:b2:51:b0:4b:64:2a:8f:ad:84:e8:b2: 21:9d:ec:8c:77:88:21:e4:fd:bc:68:57:6a:9c:81: 97:fb:10:d2:8e:83:8f:20:91:1f:e7:46:19:3e:52: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:71:CF:B4:D0:6F:FD:BC:B3:FD:F2:FD:A0:0D:91:2B:E3:9C:B0:16 X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6c:7c:e0:ae:18:90:2c:74:4e:b7:69:f9:3b:49:3f:b3:82: 75:b9:1c:18:29:a8:f8:aa:26:f5:ff:b4:fe:68:54:3d:f1:62: 5a:ce:a9:10:55:9a:c4:e6:9b:25:38:eb:cf:75:58:1e:54:38: 55:50:85:98:64:e6:f3:b8:d8:fa:2e:72:6e:93:f8:a2:d6:5a: f6:50:38:02:b9:68:c6:b6:1c:44:47:97:fa:71:e2:07:c8:17: 7d:99:17:b4:3c:30:c4:a1:ca:eb:17:4e:a3:5b:f4:ee:01:28: 28:68:05:82:36:c5:0c:51:6a:bc:e0:39:1a:61:ee:f3:a8:07: dd:e2:c8:f9:a2:3d:53:1f:5c:5b:a2:ad:ad:a7:1f:2b:c3:fe: 9c:25:75:f5:bc:02:b8:06:96:86:20:90:90:5d:f1:75:0c:bf: 8c:6c:82:56:71:1a:98:5c:6a:b8:43:08:be:25:03:c2:8f:af: 0a:ee:1a:8d:9a:5e:7d:05:16:4e:e0:97:71:9b:90:7a:1c:6e: 32:9b:6f:da:4f:77:79:8e:ad:9b:8f:17:7e:92:49:a3:35:0b: 92:13:3a:7d:9a:95:23:db:c2:f3:88:fd:08:e7:e2:c1:c0:84: 28:8a:7b:4b:a4:b8:6c:ae:a1:1f:9e:9d:4a:8b:f1:5a:dc:27: 07:d3:c2:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjUwNDI0MTgyNjIyWhcNMjUwNTAxMTgyNjIyWjAYMRYwFAYD VQQDEw02ODBhODI0ZS03OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHDWdDub2qsm2xobfcnR6lfxWqA40jGRdpAdzftZmG747cyLrbQeB4xY8TkV WAk47g+Ey+Qs59KvXwDL9GQnnKfpe/EqKh34HQ8q1/mW+NP/jy2uVdJh5nn7Xvgj qIfWWIkoQm/p8Sn/zFndeVFexAIpt8gKB98pkyhtSd1LnGsIDSh1x4ESu5FgK7zd UXJ0fjVIlkda0nF8pWehWytjCOj8Ix5R0G9Y/XrpPorcKRTOWhezi8/vM/TUerAC 1wUQwbxmxiraYwZu4lBOTLe91kl2eQX4slGwS2Qqj62E6LIhneyMd4gh5P28aFdq nIGX+xDSjoOPIJEf50YZPlIioQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVxz7TQ b/28s/3y/aANkSvjnLAWMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcbHzgrhiQLHROt2n5O0k/s4J1uRwYKaj4qib1/7T+aFQ98WJazqkQ VZrE5pslOOvPdVgeVDhVUIWYZObzuNj6LnJuk/ii1lr2UDgCuWjGthxER5f6ceIH yBd9mRe0PDDEocrrF06jW/TuASgoaAWCNsUMUWq84DkaYe7zqAfd4sj5oj1TH1xb oq2tpx8rw/6cJXX1vAK4BpaGIJCQXfF1DL+MbIJWcRqYXGq4Qwi+JQPCj68K7hqN ml59BRZO4Jdxm5B6HG4ym2/aT3d5jq2bjxd+kkmjNQuSEzp9mpUj28LziP0I5+LB wIQointLpLhsrqEfnp1Ki/Fa3CcH08Kx -----END CERTIFICATE-----Generated at Sat Apr 26 14:02:08 2025 by rpki-client