$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json) Hash identifier: YaBM7BXKFbFxrIEFuAA0BelUxgG7MJzbJUqqjmsH8mU= Subject key identifier: 41:57:71:CC:73:2A:72:A6:0A:B3:10:40:96:19:11:4D:15:EF:B1:CB Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft Manifest number: C2 Signing time: Fri 25 Apr 2025 04:53:41 +0000 Manifest this update: Fri 25 Apr 2025 04:53:41 +0000 Manifest next update: Fri 02 May 2025 04:53:41 +0000 Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: 1tZXJ+JGbxYpS1IwQTqji84FsFX4aut9Fe9nbrq/Lh4=) 2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 0tr4K36tCLfkZ4nhSjqeW9dVetaArPPfGAxuclpW9yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Validity Not Before: Apr 25 04:53:41 2025 GMT Not After : May 2 04:53:41 2025 GMT Subject: CN=680b1555-7a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:55:80:9d:8d:fe:74:cd:e9:af:58:f7:f9: ba:76:85:75:6d:ff:f8:ad:18:ef:50:40:83:d4:9e: 6b:82:db:bb:51:74:33:3d:f4:9b:d7:4d:82:c1:d0: 0d:7c:2c:2c:4a:9e:5b:98:df:3d:ff:25:ac:6f:ee: ed:be:5c:54:80:7a:10:4f:70:45:13:f3:70:7a:4e: 12:35:d8:87:e1:3a:5c:d5:84:a1:63:da:eb:0e:eb: 01:bc:5e:4c:1c:47:18:02:64:8e:0c:1f:ba:1a:10: c6:96:8e:56:ac:a0:1d:79:7d:c2:ab:0e:4f:1c:e8: 2b:bc:0b:27:40:99:02:d7:5f:8b:1f:19:a8:88:4f: ff:cc:33:f2:d8:46:c2:87:72:73:52:24:fd:6c:5f: fd:eb:9d:2d:1b:84:78:d1:ff:67:30:e8:bc:b6:6d: 59:9e:a3:81:10:20:6c:2a:74:78:14:75:a7:5e:50: ce:71:64:38:21:e7:40:15:f1:b5:4d:db:aa:e3:9b: e3:cd:a6:a1:be:62:d0:34:b4:a8:44:7e:eb:a3:57: 67:09:8f:54:f8:35:aa:30:a8:34:70:4c:ab:7b:09: b6:57:22:e2:fe:6d:33:19:6b:b1:2d:83:8d:99:42: 0f:e3:4a:19:c7:92:c4:93:90:90:43:01:be:06:6a: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:71:CC:73:2A:72:A6:0A:B3:10:40:96:19:11:4D:15:EF:B1:CB X509v3 Authority Key Identifier: keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ca:8d:25:a9:73:8b:6f:b1:73:84:77:bb:ef:d8:b7:a8:9b: 26:26:60:cd:87:8e:37:99:30:d6:13:83:c1:fc:33:7e:3a:32: 72:37:28:0c:07:e6:f1:ad:7c:3f:8f:31:e5:42:88:e2:9c:46: e1:ec:78:31:06:02:2c:02:ea:c4:54:62:6a:a6:48:0f:46:ba: 65:75:e6:0b:5b:d5:06:7d:79:2d:f5:d9:a1:79:56:3c:fb:ba: d2:cb:b2:e3:df:05:6f:a1:7f:c8:1e:4a:66:91:d3:7f:1e:e9: 5a:91:87:be:63:2d:e3:00:6d:7e:66:36:d2:8b:c3:d6:57:33: 1d:a3:ae:bf:23:9e:8f:97:52:ed:e3:d7:45:57:6d:58:34:e3: b0:d4:18:0d:95:61:05:d1:18:81:3c:ec:c0:03:cd:e9:fc:bb: fa:52:13:92:d3:9a:33:04:fe:fd:3b:9e:76:a5:2d:44:e0:90: 00:66:1e:cf:8b:1f:3d:e5:d3:55:6c:ec:7d:fe:f5:38:d2:9e: d1:63:7a:b0:f0:64:4d:1d:71:13:34:70:1a:57:5f:54:5b:61: 71:fe:7a:b0:d4:6e:9f:c6:c2:1c:a7:bf:69:51:7c:7e:78:d4: 73:c6:22:58:4b:5b:f9:be:bb:f6:2d:f1:15:e5:89:70:53:83: 21:c0:98:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDhBMjgyRDFDOEY5MEMzMEQ2NTlFNkQ4QzBCOUJFNDIy MUMyNTMxOUMwHhcNMjUwNDI1MDQ1MzQxWhcNMjUwNTAyMDQ1MzQxWjAYMRYwFAYD VQQDEw02ODBiMTU1NS03YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPBVgJ2N/nTN6a9Y9/m6doV1bf/4rRjvUECD1J5rgtu7UXQzPfSb102CwdAN fCwsSp5bmN89/yWsb+7tvlxUgHoQT3BFE/Nwek4SNdiH4Tpc1YShY9rrDusBvF5M HEcYAmSODB+6GhDGlo5WrKAdeX3Cqw5PHOgrvAsnQJkC11+LHxmoiE//zDPy2EbC h3JzUiT9bF/9650tG4R40f9nMOi8tm1ZnqOBECBsKnR4FHWnXlDOcWQ4IedAFfG1 Tduq45vjzaahvmLQNLSoRH7ro1dnCY9U+DWqMKg0cEyrewm2VyLi/m0zGWuxLYON mUIP40oZx5LEk5CQQwG+BmrewQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFXccxz KnKmCrMQQJYZEU0V77HLMB8GA1UdIwQYMBaAFIooLRyPkMMNZZ5tjAub5CIcJTGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80NUJDRkMzMEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3MWxubTJNQzV2a0lod2xN WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80NUJDRkMzMEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3 MWxubTJNQzV2a0lod2xNWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAByo0lqXOLb7FzhHe779i3qJsmJmDNh443mTDWE4PB/DN+OjJyNygM B+bxrXw/jzHlQojinEbh7HgxBgIsAurEVGJqpkgPRrpldeYLW9UGfXkt9dmheVY8 +7rSy7Lj3wVvoX/IHkpmkdN/HulakYe+Yy3jAG1+ZjbSi8PWVzMdo66/I56Pl1Lt 49dFV21YNOOw1BgNlWEF0RiBPOzAA83p/Lv6UhOS05ozBP79O552pS1E4JAAZh7P ix895dNVbOx9/vU40p7RY3qw8GRNHXETNHAaV19UW2Fx/nqw1G6fxsIcp79pUXx+ eNRzxiJYS1v5vrv2LfEV5YlwU4MhwJhX -----END CERTIFICATE-----Generated at Sat Apr 26 15:13:16 2025 by rpki-client