$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft File: ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json) Hash identifier: GGbjgrJAWLC3l3TlWk9zWQBlr+KSTdUQcO6UAwKdjrI= Subject key identifier: E7:3C:32:4E:04:DA:A1:BA:E6:BB:B0:9A:BE:11:30:64:E1:73:27:32 Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B Certificate issuer: /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft Manifest number: 0153 Signing time: Fri 25 Apr 2025 03:17:07 +0000 Manifest this update: Fri 25 Apr 2025 03:17:06 +0000 Manifest next update: Fri 02 May 2025 03:17:06 +0000 Files and hashes: 1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: QxnGTbh2/9ldK2quiZhSYetqdlVbwARcboBzbtwnzd0=) 2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: tPpYtoObLW6IaU9Qrnag/tKS5hGwADSPolXixr4yblo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Validity Not Before: Apr 25 03:17:06 2025 GMT Not After : May 2 03:17:06 2025 GMT Subject: CN=680afeb3-94fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:d1:1d:72:30:dc:a7:fb:20:9f:a7:be:91: 26:fe:98:7c:20:22:dd:c0:ec:dd:f2:cf:95:92:95: 0a:59:d7:d8:36:4c:3c:ad:e8:c2:5a:5c:27:96:9d: d0:bd:01:53:62:a9:99:00:7b:6c:92:52:ff:58:5b: e2:f1:9f:d6:73:f8:3d:64:29:b1:45:04:21:ae:8b: f4:0e:36:19:e4:e6:ee:5e:b8:0f:44:4c:f9:8e:10: 59:dd:20:a4:e6:63:fc:eb:f4:5e:78:56:a3:3f:27: f4:42:19:d9:43:fd:2d:7a:0a:94:d0:16:d8:bb:17: 7b:24:84:34:c9:d3:39:be:02:ab:0e:00:61:de:4a: 02:92:03:fa:95:1d:2c:df:d0:05:9f:17:b9:01:cc: 85:ca:a2:ba:77:2d:67:28:bd:4e:5b:39:ed:4f:2d: 69:cd:e3:27:62:5a:39:84:b2:fb:a8:f2:94:29:dc: 72:d5:39:7d:0e:46:ff:d4:0c:dd:69:93:aa:45:05: 02:66:5a:30:20:ca:d2:84:19:ea:d8:06:af:51:c7: 18:c1:b1:d8:10:8c:a2:ec:fa:57:18:04:4f:93:7f: a6:fc:b9:c2:db:0d:a0:b8:c3:a0:a7:41:f1:ec:82: d4:dd:5f:86:e0:37:7c:5a:0a:1b:13:d2:8d:c4:53: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3C:32:4E:04:DA:A1:BA:E6:BB:B0:9A:BE:11:30:64:E1:73:27:32 X509v3 Authority Key Identifier: keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9f:f7:eb:da:b1:5b:08:17:31:1d:84:03:ac:9b:aa:58:85: dc:9b:48:58:39:a9:24:f9:b5:32:b8:dc:76:d3:e1:20:91:9c: a2:51:f7:11:61:3c:bb:d7:ac:4e:a6:29:4a:56:df:cd:41:d5: 4b:73:ff:72:9e:99:e5:c8:60:d2:23:ee:ba:8e:64:0b:69:9a: ce:6c:1a:22:fa:6b:97:fc:fa:45:0a:36:9d:f9:64:43:2d:76: f5:46:4d:1f:e0:dd:fc:ce:04:36:bc:5d:be:17:88:b4:89:df: 1c:79:6a:d6:0b:96:33:a4:4e:09:90:2b:1a:93:5c:e2:66:74: a8:a7:1f:20:83:84:7f:d3:b7:b6:38:4c:d4:9b:05:64:9b:04: d7:22:cc:e1:c0:e2:a6:bc:54:ac:a6:44:62:02:5b:70:b3:68: 8e:e2:34:ac:1b:24:7c:f7:91:e8:35:8c:d4:13:12:ef:5e:62: 7b:d5:44:a1:01:a4:1c:90:bb:0d:97:07:2c:e0:2b:bd:9c:a4: bb:2d:c1:9b:bd:99:27:ff:40:f5:b7:93:70:80:bd:79:07:a9: 03:03:02:13:42:a6:2e:83:5d:a7:d1:51:cd:4c:e1:ae:01:b7: 35:db:a3:3c:6d:d5:9e:5d:73:71:28:b0:75:a8:1c:fd:75:07: 6b:b3:b9:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNzYxMTAvBgNVBAUTKDhBNTgxNjU1QzkyMkE3QTUxMjFFMDBGQjdBNDI3RTAx OUFDNzMwN0IwHhcNMjUwNDI1MDMxNzA2WhcNMjUwNTAyMDMxNzA2WjAYMRYwFAYD VQQDEw02ODBhZmViMy05NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlTRHXIw3Kf7IJ+nvpEm/ph8ICLdwOzd8s+VkpUKWdfYNkw8rejCWlwnlp3Q vQFTYqmZAHtsklL/WFvi8Z/Wc/g9ZCmxRQQhrov0DjYZ5ObuXrgPREz5jhBZ3SCk 5mP86/ReeFajPyf0QhnZQ/0tegqU0BbYuxd7JIQ0ydM5vgKrDgBh3koCkgP6lR0s 39AFnxe5AcyFyqK6dy1nKL1OWzntTy1pzeMnYlo5hLL7qPKUKdxy1Tl9Dkb/1Azd aZOqRQUCZlowIMrShBnq2AavUccYwbHYEIyi7PpXGARPk3+m/LnC2w2guMOgp0Hx 7ILU3V+G4Dd8WgobE9KNxFNuHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc8Mk4E 2qG65ruwmr4RMGThcycyMB8GA1UdIwQYMBaAFIpYFlXJIqelEh4A+3pCfgGaxzB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM3Ni9BMzU3RDc5NjIw OEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2VVNIZ0Q3ZWtKLUFackhN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lsZ1dWY2tpcDZVU0hnRDdla0otQVpySE1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM3Ni9BMzU3RDc5NjIwOEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2 VVNIZ0Q3ZWtKLUFackhNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnn/fr2rFbCBcxHYQDrJuqWIXcm0hYOakk+bUyuNx20+EgkZyiUfcR YTy716xOpilKVt/NQdVLc/9ynpnlyGDSI+66jmQLaZrObBoi+muX/PpFCjad+WRD LXb1Rk0f4N38zgQ2vF2+F4i0id8ceWrWC5YzpE4JkCsak1ziZnSopx8gg4R/07e2 OEzUmwVkmwTXIszhwOKmvFSspkRiAltws2iO4jSsGyR895HoNYzUExLvXmJ71USh AaQckLsNlwcs4Cu9nKS7LcGbvZkn/0D1t5NwgL15B6kDAwITQqYug12n0VHNTOGu Abc126M8bdWeXXNxKLB1qBz9dQdrs7mN -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:58 2025 by rpki-client