$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft File: IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json) Hash identifier: sSF2rcRs4DJTGdHKi315VCB7MBCwvo3+c6nb/i1+g7s= Subject key identifier: 84:A0:4B:8A:20:FB:3E:7B:CA:BB:1D:61:94:FC:7A:68:D6:EF:10:76 Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 Certificate issuer: /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft Manifest number: 86 Signing time: Fri 25 Apr 2025 05:34:10 +0000 Manifest this update: Fri 25 Apr 2025 05:34:09 +0000 Manifest next update: Fri 02 May 2025 05:34:09 +0000 Files and hashes: 1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: 14f2U0odFN6dLtgsNNqd5BJnnFFyi1yGl/bNHLImZ7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Validity Not Before: Apr 25 05:34:09 2025 GMT Not After : May 2 05:34:09 2025 GMT Subject: CN=680b1ed2-1a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:7d:b7:04:58:b0:83:7d:f4:72:44:dd:6c: e5:e2:a3:8a:02:0f:6d:6f:8c:76:f0:4c:16:70:94: 25:7c:83:06:c7:44:ba:2a:c7:68:76:37:35:93:12: a6:50:96:03:00:9b:4a:5f:f0:d7:25:1c:55:70:ff: 96:8b:24:39:4f:a8:48:de:0d:37:d1:35:b6:e3:13: 5f:c1:1e:96:2e:3f:4a:ef:42:89:08:57:a4:25:79: f7:0d:b7:83:0b:c5:8a:00:ae:17:00:d7:a2:49:ca: c3:a0:32:87:0e:a2:7a:f9:60:65:f7:43:f8:b6:fa: 8d:f2:08:9a:70:e2:14:45:69:b4:3a:3f:db:00:45: ba:3c:36:dd:f0:e1:c8:78:1a:b3:5b:59:d3:8f:87: 63:e1:3e:47:88:1f:78:a4:29:3f:0d:5c:4c:7a:9e: 8a:cf:b1:27:ec:60:95:ec:e6:38:22:b9:40:14:7d: 8c:42:30:c4:70:07:85:d7:f0:47:e8:07:e8:64:b7: 0a:3e:8c:c2:a2:7f:70:9a:22:04:c0:8c:66:90:89: 69:58:32:1b:a5:5e:8a:48:59:6d:4e:69:10:a5:2a: 17:75:56:66:b9:39:1c:db:8a:91:a6:7e:5a:15:d4: 10:b4:ca:94:9b:78:0c:c8:aa:c4:b1:05:56:c1:59: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A0:4B:8A:20:FB:3E:7B:CA:BB:1D:61:94:FC:7A:68:D6:EF:10:76 X509v3 Authority Key Identifier: keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:0d:26:37:1e:dd:f9:b0:74:4f:02:1f:8a:5e:b9:f5:4d:49: d3:87:27:9e:8d:4e:c8:bf:b2:3f:f7:8f:40:33:e1:f6:c9:77: ff:11:e0:4e:eb:9e:87:11:aa:02:06:e9:21:e4:83:02:4e:a3: 4c:30:bd:d3:92:6f:8b:bc:cf:c3:83:e1:d8:49:cf:90:79:b9: 7f:f1:15:24:c5:83:30:ca:98:57:43:cd:bd:e8:48:65:f6:b9: 77:a8:78:61:67:a3:cb:c7:01:5f:2b:c8:e1:b3:7c:19:14:bc: 6c:c1:8b:c1:ea:ad:2d:27:51:58:75:e1:47:a9:1f:15:bd:bf: 4d:ee:43:79:84:b8:79:89:e7:2e:72:8b:7f:99:65:67:bf:5e: 2d:8f:38:91:11:ee:c6:7e:bd:aa:7e:28:9d:28:78:11:7e:7e: 9d:de:b4:04:39:3c:4e:30:8d:5d:ea:84:dc:63:bc:52:ae:2b: 6e:42:16:cd:fe:43:b6:dc:e9:fd:36:e5:b3:5d:75:af:2d:47: 09:6a:03:d8:48:ff:14:3e:cf:5a:13:97:94:cc:b8:d8:5b:5a: 48:2c:c6:90:a0:eb:4b:49:08:63:1e:2c:2f:d0:c8:dd:b9:00: 80:1f:07:a3:a3:13:fd:48:a7:ca:98:a1:3b:76:f4:c8:d1:80: 8c:c5:68:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKDIxRDNFRDIxRjdDREVCQzdEMDBGMUJCN0EwOTUxMUI5 NUNERUZFMjMwHhcNMjUwNDI1MDUzNDA5WhcNMjUwNTAyMDUzNDA5WjAYMRYwFAYD VQQDEw02ODBiMWVkMi0xYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzJ9twRYsIN99HJE3Wzl4qOKAg9tb4x28EwWcJQlfIMGx0S6Ksdodjc1kxKm UJYDAJtKX/DXJRxVcP+WiyQ5T6hI3g030TW24xNfwR6WLj9K70KJCFekJXn3DbeD C8WKAK4XANeiScrDoDKHDqJ6+WBl90P4tvqN8giacOIURWm0Oj/bAEW6PDbd8OHI eBqzW1nTj4dj4T5HiB94pCk/DVxMep6Kz7En7GCV7OY4IrlAFH2MQjDEcAeF1/BH 6AfoZLcKPozCon9wmiIEwIxmkIlpWDIbpV6KSFltTmkQpSoXdVZmuTkc24qRpn5a FdQQtMqUm3gMyKrEsQVWwVkx0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISgS4og +z57yrsdYZT8emjW7xB2MB8GA1UdIwQYMBaAFCHT7SH3zevH0A8bt6CVEblc3v4j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84RjVBOTM1NjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4ZlFEeHUzb0pVUnVWemVf aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9pTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84RjVBOTM1NjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4 ZlFEeHUzb0pVUnVWemVfaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFDSY3Ht35sHRPAh+KXrn1TUnThyeejU7Iv7I/949AM+H2yXf/EeBO 656HEaoCBukh5IMCTqNMML3Tkm+LvM/Dg+HYSc+Qebl/8RUkxYMwyphXQ8296Ehl 9rl3qHhhZ6PLxwFfK8jhs3wZFLxswYvB6q0tJ1FYdeFHqR8Vvb9N7kN5hLh5iecu cot/mWVnv14tjziREe7Gfr2qfiidKHgRfn6d3rQEOTxOMI1d6oTcY7xSrituQhbN /kO23On9NuWzXXWvLUcJagPYSP8UPs9aE5eUzLjYW1pILMaQoOtLSQhjHiwv0Mjd uQCAHwejoxP9SKfKmKE7dvTI0YCMxWh3 -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:37 2025 by rpki-client