$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: BfslcgF+tcd8lAUTPsEu9EYJa+6EQMM3jr5DbzryRB0= Subject key identifier: 0F:F1:7C:CC:78:F2:FF:88:16:61:2A:7F:B3:C1:F8:FF:39:A1:9B:58 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: 012C Signing time: Fri 25 Apr 2025 03:41:34 +0000 Manifest this update: Fri 25 Apr 2025 03:41:34 +0000 Manifest next update: Fri 02 May 2025 03:41:34 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: ZrhJV069AgcMZLSruTRyAq2OANGkF+oTMZ2P1mTMPfk=) 2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=) 3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Apr 25 03:41:34 2025 GMT Not After : May 2 03:41:34 2025 GMT Subject: CN=680b046e-93f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:ce:05:68:c4:11:61:84:ac:89:a9:6b:b5: f9:61:15:b8:5a:cb:b8:3e:e9:9c:da:69:a0:ac:23: 6b:25:67:79:24:30:5a:a8:87:a6:16:30:da:37:c7: 26:81:21:97:48:9e:06:8f:7e:ae:66:59:16:51:dd: 07:4c:70:d9:2e:7b:3c:09:19:6c:be:2b:39:3d:57: e4:07:8b:62:5f:e9:8e:cf:dd:da:0d:af:69:74:78: 8d:9c:92:7b:01:4d:39:7c:a8:e4:1b:d3:03:ab:23: f8:44:e4:03:39:35:47:44:9b:5e:43:a4:96:09:6d: d6:a7:27:3b:cd:51:6b:d2:48:be:28:33:98:09:f0: 7e:62:49:0e:09:4d:02:0d:2b:e4:19:ba:02:a7:0e: 16:c0:60:18:28:4b:dc:de:6e:7f:2f:07:34:55:dd: ac:0b:fe:7a:2d:32:78:0f:07:d9:52:aa:1e:d8:90: a6:4c:ae:8c:25:fd:9b:db:05:07:94:ba:fe:9e:d8: 1f:3a:a3:86:d3:b4:a6:0f:fe:e0:58:09:a7:8f:c5: 57:d5:63:98:3f:45:7b:e2:16:63:62:67:3b:9d:8f: 6f:98:fa:30:51:53:8e:30:fb:e0:90:1b:85:a1:06: ce:dd:24:5e:17:56:92:e8:68:ae:1e:df:39:45:7a: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F1:7C:CC:78:F2:FF:88:16:61:2A:7F:B3:C1:F8:FF:39:A1:9B:58 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:76:ae:f4:51:be:79:ba:fc:83:30:ae:29:46:77:0f:fd:57: 14:ef:a0:35:1b:8a:10:ce:9f:3a:a7:27:0b:8f:79:89:80:b0: dc:79:b4:9f:5c:74:3c:49:89:21:a3:5e:cc:a9:73:bf:2f:b2: 88:5f:ba:7b:ec:9b:df:a2:0a:3b:12:75:a2:38:ce:b4:f6:55: a2:df:14:6d:f1:32:7f:7d:f6:e5:33:68:75:2a:54:eb:c3:30: e3:0a:43:5c:20:ee:e2:9d:bb:65:f4:5b:e3:08:09:c3:e8:0d: 0a:8d:57:0b:2b:21:11:16:d8:06:7f:b1:b8:c9:b0:11:48:2d: ff:c8:64:8a:c9:b9:57:f1:6b:e8:ce:fd:b7:15:99:71:31:db: 93:b3:93:55:15:5a:21:a2:75:b3:75:7d:ed:dc:34:c0:46:02: 55:30:a7:d8:dd:54:a8:3f:b8:fc:94:e6:05:ed:e9:51:4c:c3: 85:f5:18:cc:98:9f:3e:97:ed:43:11:36:71:8c:c9:55:0b:e7: 56:86:55:5e:66:75:01:b3:45:5d:06:b7:b0:d1:98:cd:52:26: d5:b9:63:81:da:0e:06:23:ef:d3:2b:ad:ce:87:1f:7c:3b:3e: 95:32:8f:d1:14:70:62:86:d3:e9:57:20:34:3a:68:71:e2:eb: 3f:cc:23:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjUwNDI1MDM0MTM0WhcNMjUwNTAyMDM0MTM0WjAYMRYwFAYD VQQDEw02ODBiMDQ2ZS05M2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1THOBWjEEWGErImpa7X5YRW4Wsu4Pumc2mmgrCNrJWd5JDBaqIemFjDaN8cm gSGXSJ4Gj36uZlkWUd0HTHDZLns8CRlsvis5PVfkB4tiX+mOz93aDa9pdHiNnJJ7 AU05fKjkG9MDqyP4ROQDOTVHRJteQ6SWCW3Wpyc7zVFr0ki+KDOYCfB+YkkOCU0C DSvkGboCpw4WwGAYKEvc3m5/Lwc0Vd2sC/56LTJ4DwfZUqoe2JCmTK6MJf2b2wUH lLr+ntgfOqOG07SmD/7gWAmnj8VX1WOYP0V74hZjYmc7nY9vmPowUVOOMPvgkBuF oQbO3SReF1aS6GiuHt85RXpsOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/xfMx4 8v+IFmEqf7PB+P85oZtYMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4 bkhyYUlqZzVfRHhUYkgteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASdq70Ub55uvyDMK4pRncP/VcU76A1G4oQzp86pycLj3mJgLDcebSf XHQ8SYkho17MqXO/L7KIX7p77Jvfogo7EnWiOM609lWi3xRt8TJ/ffblM2h1KlTr wzDjCkNcIO7inbtl9FvjCAnD6A0KjVcLKyERFtgGf7G4ybARSC3/yGSKyblX8Wvo zv23FZlxMduTs5NVFVohonWzdX3t3DTARgJVMKfY3VSoP7j8lOYF7elRTMOF9RjM mJ8+l+1DETZxjMlVC+dWhlVeZnUBs0VdBrew0ZjNUibVuWOB2g4GI+/TK63Ohx98 Oz6VMo/RFHBihtPpVyA0Omhx4us/zCNK -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:52 2025 by rpki-client