$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: wZ7cF7OB2mvBO0o0ntRH/BQBq+gxTGlwnYcpO2EBd2U= Subject key identifier: 18:1D:20:57:29:80:13:A5:48:9A:8B:3E:A4:82:32:5F:BE:49:BD:8F Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0B1B Signing time: Thu 24 Apr 2025 19:07:16 +0000 Manifest this update: Thu 24 Apr 2025 19:07:15 +0000 Manifest next update: Thu 01 May 2025 19:07:15 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: KaW7YShkFfv1VZPXhq79fcpQEqDLhVhCzLezIznzpGE=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: 6Ds3NGu2wYLJMMD3M602IBKNI5PFzIBlSYGM/Hpizc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: Apr 24 19:07:15 2025 GMT Not After : May 1 19:07:15 2025 GMT Subject: CN=680a8be3-df13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:05:b4:ea:a1:4a:85:55:ba:20:09:94:e1: 65:d5:6d:66:1a:51:b0:5a:23:2c:04:b3:24:73:1d: 73:c8:f6:53:97:55:9c:83:25:53:f0:b0:dd:47:07: f0:25:97:0e:c2:4e:89:54:9c:8b:a0:8a:02:51:b7: e3:52:2c:f9:ee:0f:e6:1a:b3:61:b7:bb:02:06:9e: 29:34:2a:ce:29:da:bc:2e:0b:62:56:84:71:26:01: 0c:c7:3d:07:37:4e:15:11:c6:d3:04:37:07:d3:f8: 2a:5c:92:a1:64:24:ad:12:2b:29:54:d7:5e:1b:e7: 30:de:00:ed:48:fe:26:c5:81:a5:c2:77:3a:b6:5c: e2:18:17:ec:c1:7b:61:7f:d8:af:e6:f2:a9:13:24: 84:0b:8c:62:c3:6a:65:f8:71:d2:e5:f2:38:9e:28: c5:ce:4b:10:37:04:68:6e:df:88:42:d8:21:8c:d9: a4:46:85:f3:05:52:69:51:4a:f1:67:7b:86:7f:57: 06:a9:5e:d6:71:b9:76:53:0d:55:0f:62:bc:a0:97: a9:b3:f3:ff:08:a6:06:bb:a4:42:d9:40:de:31:53: f8:df:6a:29:7e:fc:5b:88:33:98:4e:42:6b:5b:07: 5a:09:4e:c5:61:a4:f5:15:3d:fd:50:99:6c:24:ae: 04:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1D:20:57:29:80:13:A5:48:9A:8B:3E:A4:82:32:5F:BE:49:BD:8F X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1d:91:a3:a7:2f:55:a5:d4:85:27:d9:8d:8a:66:22:c1:7f: a0:ec:b3:cb:6f:a3:6a:79:32:6a:47:e5:4e:56:f5:aa:f3:16: db:ed:64:bc:5f:4a:5c:0c:01:32:8c:e7:a8:c8:1d:06:ad:7b: 75:1e:0f:5a:cb:d4:70:0e:78:78:61:15:39:4f:72:34:f2:d8: e9:5e:ae:20:0e:2a:58:75:28:02:63:58:b6:ad:77:52:23:c0: 19:8c:de:eb:9f:bb:ce:be:ad:97:83:eb:d2:c3:cd:35:60:80: 79:c8:fd:02:95:ce:50:6c:82:09:e9:ae:c3:cd:b1:26:f3:59: 94:63:a1:f0:30:59:a5:0d:b9:c1:88:d9:4a:4f:6b:55:e0:ea: ec:87:00:6f:1c:b5:3b:03:e1:0f:66:3e:99:cf:18:55:9f:1c: e4:d9:1d:eb:55:7d:f0:ff:c2:64:c5:43:72:e6:40:65:28:ad: 18:94:a2:62:98:ae:a1:d4:ef:8d:26:d5:65:f3:b2:28:fd:09: 75:52:2a:65:15:f9:25:87:b4:a7:e4:d3:d9:0d:b5:2f:02:b4: de:f3:11:dd:fe:b4:21:ad:df:3c:9e:7a:82:3e:50:8d:8a:68: ec:c1:46:13:6d:66:cb:a1:b9:f7:43:d7:9d:06:6d:4f:b4:21: 36:c9:6b:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjUwNDI0MTkwNzE1WhcNMjUwNTAxMTkwNzE1WjAYMRYwFAYD VQQDEw02ODBhOGJlMy1kZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi8FtOqhSoVVuiAJlOFl1W1mGlGwWiMsBLMkcx1zyPZTl1WcgyVT8LDdRwfw JZcOwk6JVJyLoIoCUbfjUiz57g/mGrNht7sCBp4pNCrOKdq8LgtiVoRxJgEMxz0H N04VEcbTBDcH0/gqXJKhZCStEispVNdeG+cw3gDtSP4mxYGlwnc6tlziGBfswXth f9iv5vKpEySEC4xiw2pl+HHS5fI4nijFzksQNwRobt+IQtghjNmkRoXzBVJpUUrx Z3uGf1cGqV7Wcbl2Uw1VD2K8oJeps/P/CKYGu6RC2UDeMVP432opfvxbiDOYTkJr WwdaCU7FYaT1FT39UJlsJK4EOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgdIFcp gBOlSJqLPqSCMl++Sb2PMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7HZGjpy9VpdSFJ9mNimYiwX+g7LPLb6NqeTJqR+VOVvWq8xbb7WS8 X0pcDAEyjOeoyB0GrXt1Hg9ay9RwDnh4YRU5T3I08tjpXq4gDipYdSgCY1i2rXdS I8AZjN7rn7vOvq2Xg+vSw801YIB5yP0Clc5QbIIJ6a7DzbEm81mUY6HwMFmlDbnB iNlKT2tV4OrshwBvHLU7A+EPZj6ZzxhVnxzk2R3rVX3w/8JkxUNy5kBlKK0YlKJi mK6h1O+NJtVl87Io/Ql1UiplFfklh7Sn5NPZDbUvArTe8xHd/rQhrd88nnqCPlCN imjswUYTbWbLobn3Q9edBm1PtCE2yWv3 -----END CERTIFICATE-----Generated at Sat Apr 26 05:18:47 2025 by rpki-client