$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: td06728OTlqvkw4qfXEHzyygHyjjc7Ma1mVSlSJnlfU= Subject key identifier: 65:C3:D6:6F:B0:CB:66:D2:70:55:34:5F:44:B3:ED:37:0E:2F:6C:18 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 0781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 077B Signing time: Thu 24 Apr 2025 21:14:15 +0000 Manifest this update: Thu 24 Apr 2025 21:14:15 +0000 Manifest next update: Thu 01 May 2025 21:14:15 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: cUNPzwuqvMn3vTE1+hxEjYTqh/PxhfzoSXUVBljm7uA=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: ZpzsQA87GX/2tqviCQB0PEkhLyPLFjNjzd1SWJ2fekk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: Apr 24 21:14:15 2025 GMT Not After : May 1 21:14:15 2025 GMT Subject: CN=680aa9a7-2d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:52:bf:a5:e3:1c:85:3f:3e:93:b2:93:d3: 8c:b9:ed:41:dd:f5:57:b8:85:32:9a:7a:34:de:1c: f8:9e:0c:64:e3:1a:6b:03:96:a6:8a:6a:36:ad:b3: 07:46:ca:bf:72:39:6a:5d:fd:89:93:5a:19:b2:49: 64:f1:07:3f:ad:1b:c4:2e:4c:c6:3f:7d:c2:26:f4: 02:06:7e:c6:f8:f7:c6:ed:32:e0:2e:71:3e:3c:7f: 62:30:a2:04:ff:1b:d0:c3:94:1a:f2:61:b8:65:ef: 76:9b:05:30:e7:ad:19:f1:9b:ce:64:bc:2c:42:51: 37:50:90:22:a9:4e:1f:b2:63:0b:34:e1:78:ed:fc: 63:29:eb:0b:2e:a3:46:69:18:8a:1d:f7:0f:6f:93: b8:57:1e:73:50:8d:ce:c8:17:69:b5:cf:e2:09:19: 73:f6:b1:7b:d4:86:1f:02:a9:fa:b0:a3:d1:62:d8: a3:91:14:3c:6e:fd:90:3c:06:f9:b9:6b:2d:ec:2c: 7b:55:cc:f5:f6:94:ac:d8:d8:01:91:b3:5c:26:d2: 46:a4:69:d2:5c:b7:d1:9d:ce:dc:5f:ae:09:7a:8a: 94:30:7f:7d:a3:b8:31:d1:a4:a6:6b:56:5d:0d:b7: 97:8a:ce:b2:8e:ea:c0:9d:c3:e5:63:e6:24:83:5e: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C3:D6:6F:B0:CB:66:D2:70:55:34:5F:44:B3:ED:37:0E:2F:6C:18 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:76:14:27:a5:e1:8e:fd:ce:82:1c:9a:aa:ac:31:db:27:cd: 1d:c0:a2:e6:03:2b:b2:06:b4:d3:8d:38:5a:10:ef:23:e1:f8: 64:1b:8b:44:3c:bd:a9:94:4d:d4:6b:12:77:49:39:7f:b2:08: e3:87:98:9d:a2:9e:48:39:03:ea:5e:d6:4e:4a:3c:f7:6d:77: 37:94:40:8a:d0:54:28:c0:0e:48:10:5e:47:f5:d3:e2:3d:aa: 51:d9:b3:81:05:f4:46:35:47:c3:18:40:bc:d1:e9:9a:89:36: 0d:65:e4:cc:ee:5f:03:b5:ec:00:ce:41:5f:50:9a:fc:a8:73: c7:18:39:5a:13:76:3a:43:0d:66:05:9b:0a:ac:14:0e:de:80: a7:fc:ad:bf:ac:1e:26:99:b2:0c:b6:4a:35:01:b5:ca:49:22: 59:64:e9:20:dd:1a:35:b2:66:f0:a9:fc:ad:a1:9a:00:97:ae: 10:be:22:3b:03:80:d4:7e:23:de:22:86:83:cd:9f:6e:1c:28: 3d:89:38:46:e8:e5:4f:de:25:f0:2d:ed:ae:07:be:c8:8b:0b: df:e3:d8:6c:f1:af:44:b3:1b:7c:7e:b2:a9:90:0d:2f:a9:2d: 52:c2:ef:17:35:85:d3:47:eb:03:ed:b4:58:35:29:9f:84:d4: 52:f2:d3:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjUwNDI0MjExNDE1WhcNMjUwNTAxMjExNDE1WjAYMRYwFAYD VQQDEw02ODBhYTlhNy0yZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8dSv6XjHIU/PpOyk9OMue1B3fVXuIUymno03hz4ngxk4xprA5amimo2rbMH Rsq/cjlqXf2Jk1oZsklk8Qc/rRvELkzGP33CJvQCBn7G+PfG7TLgLnE+PH9iMKIE /xvQw5Qa8mG4Ze92mwUw560Z8ZvOZLwsQlE3UJAiqU4fsmMLNOF47fxjKesLLqNG aRiKHfcPb5O4Vx5zUI3OyBdptc/iCRlz9rF71IYfAqn6sKPRYtijkRQ8bv2QPAb5 uWst7Cx7Vcz19pSs2NgBkbNcJtJGpGnSXLfRnc7cX64JeoqUMH99o7gx0aSma1Zd DbeXis6yjurAncPlY+Ykg17QLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXD1m+w y2bScFU0X0Sz7TcOL2wYMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+dhQnpeGO/c6CHJqqrDHbJ80dwKLmAyuyBrTTjThaEO8j4fhkG4tE PL2plE3UaxJ3STl/sgjjh5idop5IOQPqXtZOSjz3bXc3lECK0FQowA5IEF5H9dPi PapR2bOBBfRGNUfDGEC80emaiTYNZeTM7l8DtewAzkFfUJr8qHPHGDlaE3Y6Qw1m BZsKrBQO3oCn/K2/rB4mmbIMtko1AbXKSSJZZOkg3Ro1smbwqfytoZoAl64QviI7 A4DUfiPeIoaDzZ9uHCg9iThG6OVP3iXwLe2uB77Iiwvf49hs8a9Esxt8frKpkA0v qS1Swu8XNYXTR+sD7bRYNSmfhNRS8tOa -----END CERTIFICATE-----Generated at Sat Apr 26 05:18:46 2025 by rpki-client