$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json) Hash identifier: xj+arut2GZ0vgh+lANCgz7hoFrJMlk5NEPJ7kO6lO0k= Subject key identifier: 48:26:8C:62:23:EB:C7:3A:BD:2D:DA:D2:CE:20:4E:EE:D9:3A:45:1C Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft Manifest number: 7E Signing time: Fri 25 Apr 2025 05:46:12 +0000 Manifest this update: Fri 25 Apr 2025 05:46:11 +0000 Manifest next update: Fri 02 May 2025 05:46:11 +0000 Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: xKsaF6f5d9NWYupKvsXN2ayO/p1jfW22JI8+Lgov5YI=) 2: 10435EE8740511EF93658977C4F9AE02.roa (hash: xmMmx42YHDQ1ahK54oeYt43Mx+x7gEXdRkvJnhnT9V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Validity Not Before: Apr 25 05:46:11 2025 GMT Not After : May 2 05:46:11 2025 GMT Subject: CN=680b21a3-9b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:75:6a:27:7c:9b:85:e3:e1:9d:bc:99:e0: bb:2b:f8:1d:2e:e5:43:21:66:88:cf:31:6a:37:b0: d1:12:d2:3d:a4:bd:c8:ce:74:0c:35:66:89:7a:33: 67:8d:03:34:7d:bd:c7:ff:7a:47:0f:4f:32:6d:6b: 32:4a:1c:d5:f2:e0:cf:94:9d:d5:02:ae:30:6d:ef: 8e:d3:82:f1:d0:99:56:ee:2e:74:31:5b:bf:33:95: e7:3d:b6:bf:85:7e:98:10:2a:0c:b7:7a:0d:32:03: 7c:a5:55:3c:f0:86:e5:03:ab:9a:52:99:09:ca:6e: 10:fe:b7:bb:25:5b:90:3a:b4:09:f7:f0:a8:e7:77: da:24:12:77:72:42:33:a9:f9:bc:89:c6:92:7a:ec: 1b:a3:25:05:1b:ca:62:a6:d1:f9:82:5b:78:9a:ff: c5:a8:5b:b2:fc:fe:30:9f:04:1f:e6:7b:ea:00:0b: 84:a7:12:41:09:81:54:b0:0d:69:05:6f:15:ab:38: 3c:69:07:a7:fe:a8:09:ad:a6:29:34:a6:e8:d3:48: 92:26:bd:89:39:04:a7:57:8b:a7:27:56:da:e6:42: 3f:99:ff:2b:df:0e:47:5d:21:c9:9b:ee:98:ab:b3: 64:9d:34:ca:b5:4f:2b:6b:91:06:6e:2c:6b:de:ce: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:26:8C:62:23:EB:C7:3A:BD:2D:DA:D2:CE:20:4E:EE:D9:3A:45:1C X509v3 Authority Key Identifier: keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c4:65:b7:fe:9f:36:14:14:11:da:db:8d:87:fa:66:72:e9: 99:8b:c5:01:91:8f:a6:7a:8f:8a:95:cd:40:1b:70:e1:9a:17: 25:0e:a0:0e:e8:82:4f:3d:94:82:7b:c8:e5:7c:9c:e6:df:86: f9:c2:b5:a2:88:0c:bf:73:92:0c:cc:b0:ce:59:8b:02:d0:53: 9f:98:c1:0f:78:ac:be:d0:e4:8e:df:35:f3:d4:7b:04:68:e8: 08:91:c5:8b:1c:79:a9:f6:24:c9:5d:f7:61:49:8c:de:22:57: df:77:1c:24:36:81:cf:99:4b:84:bd:48:34:43:9e:3a:53:07: 2e:e5:4a:d5:dc:ae:ca:2e:a4:ad:a2:00:31:cb:4f:f6:e6:24: 7d:aa:f5:c0:de:46:00:c9:d5:37:1d:3f:bd:98:5d:76:a0:d3: 27:a1:eb:45:af:0d:40:fe:81:20:15:aa:bc:cc:19:97:c7:84: 7c:ae:4b:2f:b7:e1:eb:5a:f1:23:cc:dd:0f:1f:29:2e:a7:bd: 39:2f:8e:85:d4:f8:e6:01:29:26:36:2b:a3:07:8f:5a:4f:3c: d7:a4:ad:5b:c8:e4:a6:64:a6:81:0f:25:68:67:68:ee:42:81: b9:87:fc:f5:01:53:1b:91:e5:ea:94:e3:a7:55:16:c0:f7:91: cb:7b:11:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDg4N0UxMTA3QTgzRjExNzRGRjdFM0U3ODA4ODhEQjU3 MjNCNzkyNUIwHhcNMjUwNDI1MDU0NjExWhcNMjUwNTAyMDU0NjExWjAYMRYwFAYD VQQDEw02ODBiMjFhMy05Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTx1aid8m4Xj4Z28meC7K/gdLuVDIWaIzzFqN7DREtI9pL3IznQMNWaJejNn jQM0fb3H/3pHD08ybWsyShzV8uDPlJ3VAq4wbe+O04Lx0JlW7i50MVu/M5XnPba/ hX6YECoMt3oNMgN8pVU88IblA6uaUpkJym4Q/re7JVuQOrQJ9/Co53faJBJ3ckIz qfm8icaSeuwboyUFG8piptH5glt4mv/FqFuy/P4wnwQf5nvqAAuEpxJBCYFUsA1p BW8Vqzg8aQen/qgJraYpNKbo00iSJr2JOQSnV4unJ1ba5kI/mf8r3w5HXSHJm+6Y q7NknTTKtU8ra5EGbixr3s75NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgmjGIj 68c6vS3a0s4gTu7ZOkUcMB8GA1UdIwQYMBaAFIh+EQeoPxF0/34+eAiI21cjt5Jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9DNzM5QkFFRTZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VYVF9majU0Q0lqYlZ5TzNr bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lINFJCNmdfRVhUX2ZqNTRDSWpiVnlPM2tscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9DNzM5QkFFRTZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VY VF9majU0Q0lqYlZ5TzNrbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNxGW3/p82FBQR2tuNh/pmcumZi8UBkY+meo+Klc1AG3DhmhclDqAO 6IJPPZSCe8jlfJzm34b5wrWiiAy/c5IMzLDOWYsC0FOfmMEPeKy+0OSO3zXz1HsE aOgIkcWLHHmp9iTJXfdhSYzeIlffdxwkNoHPmUuEvUg0Q546Uwcu5UrV3K7KLqSt ogAxy0/25iR9qvXA3kYAydU3HT+9mF12oNMnoetFrw1A/oEgFaq8zBmXx4R8rksv t+HrWvEjzN0PHykup705L46F1PjmASkmNiujB49aTzzXpK1byOSmZKaBDyVoZ2ju QoG5h/z1AVMbkeXqlOOnVRbA95HLexG+ -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:15 2025 by rpki-client