$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: /gtKds32GyVHyuo6uczYzF3SW88ARpZhhn9GOmLz2vc= Subject key identifier: FB:05:7D:A9:CB:15:8F:E7:B2:DC:59:63:79:8C:5A:D7:8B:D0:9C:6D Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: 50 Signing time: Fri 25 Apr 2025 06:16:47 +0000 Manifest this update: Fri 25 Apr 2025 06:16:47 +0000 Manifest next update: Fri 02 May 2025 06:16:47 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: 7oNXbdyBKizBTCs85wyI1lrJEaNbF6G841GVUByzZb0=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: ykJZ1vokWQVQModznO57DFIfns9B6rl6axv/cLKTInk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Apr 25 06:16:47 2025 GMT Not After : May 2 06:16:47 2025 GMT Subject: CN=680b28cf-39d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:86:84:65:da:fd:d1:67:fa:8b:d1:32:09: a2:5a:1a:44:a3:19:68:95:63:04:85:5c:16:b3:16: 82:c3:05:8c:ba:84:f2:47:33:ac:99:3b:88:c5:27: 9d:de:a2:7f:cd:07:78:f8:55:db:cb:0d:8b:58:e8: b0:31:72:02:29:51:4e:39:12:f6:b9:0b:e8:de:0d: f3:b3:0f:c1:20:e5:6e:f2:de:e1:da:68:ac:6c:9a: 83:30:d8:31:65:61:f3:c1:b2:dd:3f:84:cd:80:25: f4:4b:5c:b4:5b:cb:ff:21:28:65:d3:dc:7f:13:f2: 1a:b8:70:c6:38:d1:e2:97:43:2e:bc:a6:4c:25:3e: a3:c1:20:c4:5d:ad:7f:da:8a:9a:ae:13:ff:ef:dc: 99:c9:e8:20:be:e6:be:2c:f0:01:e3:c2:cb:65:60: 41:20:ec:f5:0b:4d:97:bf:9d:12:a2:fd:ec:1c:e2: 22:69:b6:59:1b:6e:76:29:de:66:86:9a:31:2a:89: 97:b7:7f:4f:e6:9f:e9:a3:1d:2b:ae:ef:88:bd:c6: de:8f:08:5a:dc:a7:8d:52:80:e0:9b:bd:5d:ef:dc: eb:0a:7b:09:f3:ea:84:c4:be:30:e5:1c:dd:66:25: 9f:49:c1:ac:99:4d:88:bb:a7:ed:0b:4d:c7:ce:f3: e1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:7D:A9:CB:15:8F:E7:B2:DC:59:63:79:8C:5A:D7:8B:D0:9C:6D X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ed:96:91:d0:ac:d9:0e:b2:67:45:2a:c7:99:82:4a:a2:d3: df:bf:c8:88:aa:3a:cf:2e:39:ff:0d:f0:2a:b4:02:5d:83:49: e0:6b:f2:7e:84:a4:c1:f6:ab:6c:8b:24:c6:ce:57:5a:99:e4: d1:3f:0b:a2:38:d6:b1:07:88:66:d9:f4:4d:41:41:d8:80:d9: bf:99:ec:44:f0:95:99:d6:2f:3c:cf:14:7e:b6:7d:c8:6e:8e: 3a:e5:3f:59:47:ad:34:00:6d:99:bc:c3:1d:2e:b1:20:df:86: 45:b7:c6:fc:76:4c:a9:88:20:74:db:9f:82:ad:30:c7:f9:d3: 11:01:fc:11:38:fe:88:1d:60:99:67:30:44:ba:4a:cd:e5:ce: 4f:56:af:c9:56:47:13:64:52:2b:44:8f:77:03:70:56:32:eb: 7a:f2:7f:ab:d4:47:a3:a0:97:b4:1c:cb:00:5a:bc:2e:54:a9: 34:bf:a9:74:23:78:34:8d:41:8f:3d:e7:d8:bf:39:12:06:b9: 39:4b:42:b8:7b:79:bb:23:dc:56:b5:ca:0a:b7:5f:0b:88:d9: 12:f4:c8:6b:74:12:d7:0c:98:01:37:9b:a5:5b:c7:26:1c:aa: ee:72:08:df:99:23:7c:4b:7f:93:d2:e6:03:24:81:e2:7e:e7: ce:91:c4:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUIzNzExMC8GA1UEBRMoOEE4MEZFOEEwRDIzQkMzMEM2NjRBNzdBQTA4RUQ5MEUx OUI1OTFEQzAeFw0yNTA0MjUwNjE2NDdaFw0yNTA1MDIwNjE2NDdaMBgxFjAUBgNV BAMTDTY4MGIyOGNmLTM5ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIUYaEZdr90Wf6i9EyCaJaGkSjGWiVYwSFXBazFoLDBYy6hPJHM6yZO4jFJ53e on/NB3j4VdvLDYtY6LAxcgIpUU45Eva5C+jeDfOzD8Eg5W7y3uHaaKxsmoMw2DFl YfPBst0/hM2AJfRLXLRby/8hKGXT3H8T8hq4cMY40eKXQy68pkwlPqPBIMRdrX/a ipquE//v3JnJ6CC+5r4s8AHjwstlYEEg7PULTZe/nRKi/ewc4iJptlkbbnYp3maG mjEqiZe3f0/mn+mjHSuu74i9xt6PCFrcp41SgOCbvV3v3OsKewnz6oTEvjDlHN1m JZ9JwayZTYi7p+0LTcfO8+ElAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+wV9qcsV j+ey3FljeYxa14vQnG0wHwYDVR0jBBgwFoAUioD+ig0jvDDGZKd6oI7ZDhm1kdww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQjM3LzUzMkEyRTBBQUJC QzExRUZCM0Q5Q0U2RUM0RjlBRTAyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaW9ELWlnMGp2RERHWktkNm9JN1pEaG0xa2R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QjM3LzUzMkEyRTBBQUJCQzExRUZCM0Q5Q0U2RUM0RjlBRTAyL2lvRC1pZzBqdkRE R1pLZDZvSTdaRGhtMWtkdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJbtlpHQrNkOsmdFKseZgkqi09+/yIiqOs8uOf8N8Cq0Al2DSeBr8n6E pMH2q2yLJMbOV1qZ5NE/C6I41rEHiGbZ9E1BQdiA2b+Z7ETwlZnWLzzPFH62fchu jjrlP1lHrTQAbZm8wx0usSDfhkW3xvx2TKmIIHTbn4KtMMf50xEB/BE4/ogdYJln MES6Ss3lzk9Wr8lWRxNkUitEj3cDcFYy63ryf6vUR6Ogl7QcywBavC5UqTS/qXQj eDSNQY8959i/ORIGuTlLQrh7ebsj3Fa1ygq3XwuI2RL0yGt0EtcMmAE3m6VbxyYc qu5yCN+ZI3xLf5PS5gMkgeJ+586RxLk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:23 2025 by rpki-client