$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json) Hash identifier: Br2GZ2htSi/9ZLXLZ+WjEyJfKOGOcthbzxRJWItHQfI= Subject key identifier: A6:84:30:C6:B7:9F:64:29:C0:5B:6D:43:68:9D:9F:F4:6A:32:02:69 Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft Manifest number: 0703 Signing time: Thu 24 Apr 2025 21:44:32 +0000 Manifest this update: Thu 24 Apr 2025 21:44:31 +0000 Manifest next update: Thu 01 May 2025 21:44:31 +0000 Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: nwT/BMfCkxaZPAMasd1RngBrqd9P+rj6fv7f5p7UgJ8=) 2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: cX9Jr6xc2q7kpQ4bV2j0kItAk4ZpyW8j6vKTdZBHzDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Validity Not Before: Apr 24 21:44:31 2025 GMT Not After : May 1 21:44:31 2025 GMT Subject: CN=680ab0bf-fee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:09:ce:7d:a0:87:35:8a:9a:f2:68:af:82: 82:a7:a5:43:ac:7b:36:be:57:55:b9:46:67:48:03: 9d:f4:e4:32:be:e7:b6:d3:cb:c4:b3:a2:23:20:9a: 7a:22:de:49:37:77:30:a5:42:86:8b:15:d9:a2:b7: 33:aa:73:07:f2:a7:30:37:a1:1c:eb:f0:8a:86:03: a7:2c:15:22:40:d8:d9:49:e7:76:e0:40:f8:9f:74: da:8f:07:f1:8d:67:7e:ca:2a:04:cf:83:e0:d3:10: 64:a6:46:a9:70:0b:6a:70:4a:a1:00:1b:0d:c1:c1: 10:4d:c9:ab:79:aa:41:76:69:02:51:cb:1c:06:80: 5d:ab:ac:52:f3:b7:5d:5c:59:f8:54:d5:88:87:9e: 1b:e7:4c:af:31:3e:6f:93:79:29:b0:fc:68:79:1d: bd:43:72:57:e6:48:35:65:0e:34:07:e5:7d:bf:f4: 33:16:59:37:87:73:a9:5e:0c:d1:f2:ed:f0:3b:c8: 7a:1f:66:cc:88:6f:1f:68:42:ea:33:2c:0b:38:bf: d6:6f:da:1c:4f:89:38:f8:6a:04:85:10:03:be:cb: 5f:15:4c:ae:b9:c2:f1:25:32:d3:2c:71:04:6c:61: 02:b9:64:cb:a4:c7:eb:29:52:b6:84:80:27:67:4d: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:84:30:C6:B7:9F:64:29:C0:5B:6D:43:68:9D:9F:F4:6A:32:02:69 X509v3 Authority Key Identifier: keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:9a:9d:83:62:e9:a9:56:b4:5d:41:49:53:e4:c6:df:05:1f: ff:1a:70:38:9f:98:c1:0e:0a:66:85:02:ee:5e:82:c9:46:c7: 2b:eb:e1:bd:4c:38:6c:21:e0:44:2c:d5:09:28:a4:df:1d:12: 0c:fd:f4:56:08:00:d2:3f:d0:8e:1b:bb:c7:69:d3:96:c4:b0: ba:37:e9:25:49:eb:b6:7b:4d:51:e8:2e:fc:14:a3:9d:f2:b7: c1:c6:7d:52:a9:61:b8:68:bd:c8:6c:27:d1:e0:cb:e1:bd:81: 01:56:2d:61:4f:21:e9:79:91:ac:0a:36:6a:5a:50:aa:a3:b5: b6:72:a5:c4:ed:76:e6:f8:c5:24:e8:fc:0f:2b:7b:c0:23:bb: 93:77:0d:ed:d5:63:2c:fb:95:20:b2:54:4e:9c:b1:5a:63:bd: 4a:01:7a:21:0d:7d:76:06:fd:60:e3:69:a1:8f:89:e5:56:d1: ce:7c:9a:3c:c3:89:ce:11:1f:5e:35:24:44:98:a5:28:3b:ea: ad:88:be:e0:81:c1:0d:4d:6f:1c:34:1d:89:52:af:18:53:46: 0f:4e:83:3f:6f:70:11:09:d1:7a:ae:62:87:1e:7f:77:ec:d7: ae:c0:3b:be:b5:dc:b8:34:9c:61:19:63:ea:81:a0:24:f9:ef: 99:9c:56:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1 MkIxN0I2QkIwHhcNMjUwNDI0MjE0NDMxWhcNMjUwNTAxMjE0NDMxWjAYMRYwFAYD VQQDEw02ODBhYjBiZi1mZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiAJzn2ghzWKmvJor4KCp6VDrHs2vldVuUZnSAOd9OQyvue208vEs6IjIJp6 It5JN3cwpUKGixXZorczqnMH8qcwN6Ec6/CKhgOnLBUiQNjZSed24ED4n3Tajwfx jWd+yioEz4Pg0xBkpkapcAtqcEqhABsNwcEQTcmreapBdmkCUcscBoBdq6xS87dd XFn4VNWIh54b50yvMT5vk3kpsPxoeR29Q3JX5kg1ZQ40B+V9v/QzFlk3h3OpXgzR 8u3wO8h6H2bMiG8faELqMywLOL/Wb9ocT4k4+GoEhRADvstfFUyuucLxJTLTLHEE bGECuWTLpMfrKVK2hIAnZ03zgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaEMMa3 n2QpwFttQ2idn/RqMgJpMB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu ak0wMWtPQzBTY3RTc1h0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDmp2DYumpVrRdQUlT5MbfBR//GnA4n5jBDgpmhQLuXoLJRscr6+G9 TDhsIeBELNUJKKTfHRIM/fRWCADSP9COG7vHadOWxLC6N+klSeu2e01R6C78FKOd 8rfBxn1SqWG4aL3IbCfR4MvhvYEBVi1hTyHpeZGsCjZqWlCqo7W2cqXE7Xbm+MUk 6PwPK3vAI7uTdw3t1WMs+5UgslROnLFaY71KAXohDX12Bv1g42mhj4nlVtHOfJo8 w4nOER9eNSREmKUoO+qtiL7ggcENTW8cNB2JUq8YU0YPToM/b3ARCdF6rmKHHn93 7NeuwDu+tdy4NJxhGWPqgaAk+e+ZnFa2 -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:35 2025 by rpki-client