$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft File: IAmPtDvZCsAy3VDJ-ufauiCggp4.mft (raw, json) Hash identifier: Rx83XOgSvADwn22RQl0Pev+NXuZHtBJkOg6nDJLuZcY= Subject key identifier: D6:6E:6D:09:36:38:C5:5C:2E:CF:88:A8:0B:5D:D0:6E:01:C3:F2:D1 Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E Certificate issuer: /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft Manifest number: 01A5 Signing time: Fri 25 Apr 2025 02:29:22 +0000 Manifest this update: Fri 25 Apr 2025 02:29:22 +0000 Manifest next update: Fri 02 May 2025 02:29:22 +0000 Files and hashes: 1: IAmPtDvZCsAy3VDJ-ufauiCggp4.crl (hash: S0gxCL07vkBAuCy9w2y02ov/9c7svzjdX+JWAIjL+ig=) 2: DF49E576A61711ED887EC04CC4F9AE02.roa (hash: cuyJes2LNe1DLICJKAu2N2g64dsZMgoY+9zmGAvCGMg=) 3: CC636E14FFE011EDA35F8946C4F9AE02.roa (hash: GXOHn0AK49u25tDuuMWJ/6hKr5TVf1Wysunj8q572D8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914334E, serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E Validity Not Before: Apr 25 02:29:22 2025 GMT Not After : May 2 02:29:22 2025 GMT Subject: CN=680af382-df65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:19:88:63:67:94:b4:0d:92:13:6c:8d:7a: ef:05:06:df:61:73:d8:4e:38:f0:02:36:61:5b:19: 92:e2:79:f9:af:4e:5e:92:8b:4a:8b:4a:f0:98:86: b0:f9:6f:0d:5b:c0:ef:9b:73:8d:36:1f:10:3d:f4: 49:43:fd:c2:f5:05:29:df:3b:8a:43:d6:98:48:65: df:7f:ae:f2:cb:8b:81:77:7a:64:f5:ca:d3:45:88: a9:a0:6c:47:f4:ff:91:44:78:16:31:96:99:15:bf: 8b:0e:2b:4e:2a:74:55:44:1f:33:ed:cd:d9:48:90: cd:cc:ee:d7:68:59:de:7f:97:c7:ae:fe:23:0d:3e: b7:83:80:a5:73:bf:f6:c8:65:e9:42:e5:84:e4:42: 77:06:6e:b7:8e:b0:6a:e5:6b:09:d1:86:f7:52:4e: 25:65:a3:6a:05:42:95:f1:44:77:f1:0b:b1:62:74: 14:20:be:81:96:3a:f9:56:0c:d4:0b:c4:ae:9c:71: 88:44:2b:72:22:07:f1:94:5d:f7:d2:46:8e:90:56: fa:27:48:75:a0:8b:06:75:be:e8:1a:49:7d:85:93: 54:2a:4f:64:7c:a6:2c:e0:8b:1d:4d:c0:e4:e5:3b: bf:8c:71:0d:f7:0b:cd:db:9b:49:9b:a9:9a:2a:5a: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6E:6D:09:36:38:C5:5C:2E:CF:88:A8:0B:5D:D0:6E:01:C3:F2:D1 X509v3 Authority Key Identifier: keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:32:0c:2d:c5:26:64:a9:50:68:95:0d:e9:a8:d3:65:f9:79: 43:0b:9e:c7:c7:41:ac:26:50:66:27:dd:49:a4:8c:f9:34:3c: e9:5c:16:6c:9b:a2:00:6f:23:88:7e:34:ae:09:e6:92:0d:12: 70:d3:5b:51:7d:a7:f8:e3:a3:63:59:0d:e8:47:c5:a2:56:d5: f3:e8:b1:3c:ed:3a:cb:1d:46:d3:68:11:05:66:af:d4:d4:3c: ac:7a:17:ef:51:f5:1f:3b:29:e8:5c:51:27:b4:70:d7:e9:f9: 47:d0:c5:23:af:45:f2:cf:de:81:f1:87:e4:6e:d5:f1:91:cd: e9:39:62:2c:ac:f3:0f:cb:64:0e:c0:06:c9:30:74:ef:8c:34: 1d:7b:71:91:25:e7:f1:5d:14:f2:d0:35:64:60:21:ba:ef:4d: 99:d3:53:36:7e:53:8f:af:fd:fc:38:3a:0f:d2:81:5d:24:7a: 6e:8b:ad:8f:76:c8:76:df:30:ee:6a:5e:dd:21:16:70:d5:0a: bc:6a:81:02:24:8d:a2:41:0b:63:23:d4:b9:8d:94:bf:17:23: 85:e4:5d:04:53:f2:ef:00:dc:1e:fc:bf:4b:14:ed:93:49:57: df:0f:30:aa:53:5c:0b:2f:1f:4d:bb:a9:0c:e3:49:83:e8:d5: 4c:6d:1a:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzNEUxMTAvBgNVBAUTKDIwMDk4RkI0M0JEOTBBQzAzMkRENTBDOUZBRTdEQUJB MjBBMDgyOUUwHhcNMjUwNDI1MDIyOTIyWhcNMjUwNTAyMDIyOTIyWjAYMRYwFAYD VQQDEw02ODBhZjM4Mi1kZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUUZiGNnlLQNkhNsjXrvBQbfYXPYTjjwAjZhWxmS4nn5r05ekotKi0rwmIaw +W8NW8Dvm3ONNh8QPfRJQ/3C9QUp3zuKQ9aYSGXff67yy4uBd3pk9crTRYipoGxH 9P+RRHgWMZaZFb+LDitOKnRVRB8z7c3ZSJDNzO7XaFnef5fHrv4jDT63g4Clc7/2 yGXpQuWE5EJ3Bm63jrBq5WsJ0Yb3Uk4lZaNqBUKV8UR38QuxYnQUIL6Bljr5VgzU C8SunHGIRCtyIgfxlF330kaOkFb6J0h1oIsGdb7oGkl9hZNUKk9kfKYs4IsdTcDk 5Tu/jHEN9wvN25tJm6maKlq9JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZubQk2 OMVcLs+IqAtd0G4Bw/LRMB8GA1UdIwQYMBaAFCAJj7Q72QrAMt1Qyfrn2rogoIKe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzM0RS9BMEYwNzM2MEE2 MTQxMUVEQjFBNDI3NDhDNEY5QUUwMi9JQW1QdER2WkNzQXkzVkRKLXVmYXVpQ2dn cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBbVB0RHZaQ3NBeTNWREotdWZhdWlDZ2dwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzM0RS9BMEYwNzM2MEE2MTQxMUVEQjFBNDI3NDhDNEY5QUUwMi9JQW1QdER2WkNz QXkzVkRKLXVmYXVpQ2dncDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZMgwtxSZkqVBolQ3pqNNl+XlDC57Hx0GsJlBmJ91JpIz5NDzpXBZs m6IAbyOIfjSuCeaSDRJw01tRfaf446NjWQ3oR8WiVtXz6LE87TrLHUbTaBEFZq/U 1DysehfvUfUfOynoXFEntHDX6flH0MUjr0Xyz96B8YfkbtXxkc3pOWIsrPMPy2QO wAbJMHTvjDQde3GRJefxXRTy0DVkYCG6702Z01M2flOPr/38ODoP0oFdJHpui62P dsh23zDual7dIRZw1Qq8aoECJI2iQQtjI9S5jZS/FyOF5F0EU/LvANwe/L9LFO2T SVffDzCqU1wLLx9Nu6kM40mD6NVMbRp1 -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:38 2025 by rpki-client