$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: chKOaKJSHD5P6ZHmL0wREWuEzlipulr1fgE9jmSiGa0= Subject key identifier: F8:A3:54:5A:D5:BE:48:8B:90:10:C3:FE:82:A1:90:16:60:C0:39:63 Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0B1F Signing time: Thu 24 Apr 2025 19:07:08 +0000 Manifest this update: Thu 24 Apr 2025 19:07:08 +0000 Manifest next update: Thu 01 May 2025 19:07:08 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: h3ZkbxSaSd6shQMOcF46KdI7EWYox+yrDTpXGbO8X5E=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: as/dc/eVE0KE5cApiltGew64DOfzaL1TNpjwCt5VZmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: Apr 24 19:07:08 2025 GMT Not After : May 1 19:07:08 2025 GMT Subject: CN=680a8bdc-b6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:81:88:e4:49:35:0e:18:ee:3b:b4:bf:54: 70:5d:9e:f5:be:78:f4:3c:8f:7e:1e:49:e5:17:3f: aa:1b:cb:6f:10:3a:57:d7:65:33:2c:c8:e8:d3:a5: 2d:b1:f5:bc:ca:45:ad:62:ce:0e:db:86:ea:e7:ea: 5e:f4:54:26:ec:62:c6:f2:20:5b:aa:85:fb:a3:d7: 6d:90:51:6f:e8:d2:ee:53:6f:46:30:18:d2:e9:f8: 0e:ba:6d:6a:19:dd:0d:e1:0a:fb:76:7c:95:ed:49: b2:05:8d:f3:f7:1f:ae:3f:62:29:e6:1a:42:65:ba: 41:27:63:d1:0a:51:90:36:6c:e9:2b:a3:39:ce:e3: ec:78:4e:d2:6d:cf:52:dc:5b:0f:34:b2:30:43:2b: fb:bf:66:55:00:00:c3:8d:ed:d7:c8:0c:6d:03:bd: 8f:35:c1:5c:95:bb:38:fe:ab:f6:50:01:3a:ae:7c: dc:80:84:a3:8d:55:25:7b:04:52:85:91:82:2c:40: 65:f8:7b:80:e1:89:5a:03:3a:b2:13:e7:05:e1:cf: 3e:03:12:17:95:ca:90:3d:af:0a:5e:89:9c:25:2f: 45:63:d4:60:c2:1f:ba:57:55:3d:01:3d:f6:e7:2e: a1:92:47:18:d0:30:0c:a6:fc:27:87:19:0e:d8:e0: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A3:54:5A:D5:BE:48:8B:90:10:C3:FE:82:A1:90:16:60:C0:39:63 X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:b3:1d:fa:02:b5:1e:fd:35:3e:b9:95:1b:91:53:fa:a4:93: 5e:84:9e:49:e1:5d:94:f4:f1:9c:ed:ef:23:c6:84:91:99:a5: 9b:d4:ab:ba:cb:4e:58:65:f9:f1:e7:c7:4a:17:be:3c:d1:78: 8d:1b:0e:8f:48:49:4f:41:12:7e:53:a7:61:22:9f:bc:4f:8a: 91:2c:c0:7f:48:5c:22:e5:79:50:72:8f:69:64:e6:f1:b1:36: ed:b5:b5:3b:4a:c7:62:15:86:01:be:ad:57:c3:5f:a5:2c:8c: 51:c7:53:8d:f0:6b:f7:8e:6a:65:a6:f1:2f:d4:4c:c6:d9:07: 50:28:e2:25:68:55:2a:e4:6a:c4:fb:b3:99:51:a6:54:fa:fc: 3e:d8:f6:3d:97:ff:a9:98:f6:9a:2e:56:10:54:09:f7:cd:1a: 42:fb:01:1d:68:64:ff:b6:8f:bc:78:8f:33:cb:c7:a0:1c:24: 26:7d:6e:9c:0a:8b:e3:ad:98:cd:7f:2d:7e:1b:30:51:bf:26: 1a:f5:a6:00:87:65:6e:3d:e8:a2:a8:af:f1:d7:c6:60:54:81: 42:f0:6e:ef:c9:d0:b2:19:c6:aa:18:21:08:d4:ac:d7:ac:57: 28:e4:d8:54:ad:e4:6f:10:5f:62:ac:7c:77:19:01:f7:98:0f: 73:66:76:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjUwNDI0MTkwNzA4WhcNMjUwNTAxMTkwNzA4WjAYMRYwFAYD VQQDEw02ODBhOGJkYy1iNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsWBiORJNQ4Y7ju0v1RwXZ71vnj0PI9+HknlFz+qG8tvEDpX12UzLMjo06Ut sfW8ykWtYs4O24bq5+pe9FQm7GLG8iBbqoX7o9dtkFFv6NLuU29GMBjS6fgOum1q Gd0N4Qr7dnyV7UmyBY3z9x+uP2Ip5hpCZbpBJ2PRClGQNmzpK6M5zuPseE7Sbc9S 3FsPNLIwQyv7v2ZVAADDje3XyAxtA72PNcFclbs4/qv2UAE6rnzcgISjjVUlewRS hZGCLEBl+HuA4YlaAzqyE+cF4c8+AxIXlcqQPa8KXomcJS9FY9Rgwh+6V1U9AT32 5y6hkkcY0DAMpvwnhxkO2ODVlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPijVFrV vkiLkBDD/oKhkBZgwDljMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfsx36ArUe/TU+uZUbkVP6pJNehJ5J4V2U9PGc7e8jxoSRmaWb1Ku6 y05YZfnx58dKF7480XiNGw6PSElPQRJ+U6dhIp+8T4qRLMB/SFwi5XlQco9pZObx sTbttbU7SsdiFYYBvq1Xw1+lLIxRx1ON8Gv3jmplpvEv1EzG2QdQKOIlaFUq5GrE +7OZUaZU+vw+2PY9l/+pmPaaLlYQVAn3zRpC+wEdaGT/to+8eI8zy8egHCQmfW6c CovjrZjNfy1+GzBRvyYa9aYAh2VuPeiiqK/x18ZgVIFC8G7vydCyGcaqGCEI1KzX rFco5NhUreRvEF9irHx3GQH3mA9zZnbv -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:43 2025 by rpki-client