$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json) Hash identifier: zhnw5zaY49XoS0yWFI0F9j2LZ05t7C6exVET1q8w4Xg= Subject key identifier: AE:9C:91:2E:BD:E7:7D:1A:30:74:95:B7:E3:53:B3:CE:2C:0C:48:5E Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft Manifest number: 0111 Signing time: Fri 25 Apr 2025 03:57:46 +0000 Manifest this update: Fri 25 Apr 2025 03:57:46 +0000 Manifest next update: Fri 02 May 2025 03:57:46 +0000 Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: BwwZi6QEHvdGKfixd70LQHesNHjEIJdjuyx1+J8FHrA=) 2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: dQp1RFXkmdHYdN2uYRrVX4OpwPj5pGn/GAC5Xyj0LE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA Validity Not Before: Apr 25 03:57:46 2025 GMT Not After : May 2 03:57:46 2025 GMT Subject: CN=680b083a-2fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:59:33:ad:28:ca:a0:60:35:d2:33:a8:49: 37:c1:cd:c8:a4:b6:06:2a:96:9b:54:bf:47:6d:d9: b8:f4:ad:7e:e7:43:be:a6:0b:e9:d3:8f:44:67:78: b3:0b:76:52:57:d4:b4:25:2b:dc:c3:93:b4:5f:ad: 28:6a:e2:58:09:02:25:a9:6d:8f:63:63:da:a3:5d: 75:8d:9f:9e:0d:5a:72:11:02:06:fb:84:06:56:0b: 44:11:74:a4:d3:c7:9c:09:c6:45:74:ea:f2:b4:21: 0f:bc:cb:ad:cf:b7:3c:8f:e3:d0:0e:7e:dc:94:1d: d4:2b:48:d1:e7:b2:a4:c3:00:d1:7f:b6:54:7a:5f: 63:5b:81:64:48:60:21:8b:89:ba:92:06:4a:0a:a9: 30:0a:d8:0f:42:75:51:0d:dc:b3:43:75:3e:ba:97: ee:1e:cf:d9:0d:ac:9f:8f:b8:8c:89:a6:d7:22:35: a2:5e:2c:92:7b:7e:24:db:d5:09:89:37:02:04:76: c3:28:fb:cc:bf:59:74:dd:86:fb:6d:84:55:d6:ce: bd:df:88:b7:8a:a2:37:de:d5:09:61:51:b4:e8:77: 5a:92:bf:dc:2b:44:c2:7b:ad:f3:15:bd:58:44:08: 06:78:c4:05:ff:b0:da:02:80:a6:ab:85:4b:fb:f8: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9C:91:2E:BD:E7:7D:1A:30:74:95:B7:E3:53:B3:CE:2C:0C:48:5E X509v3 Authority Key Identifier: keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fa:48:ec:50:08:c6:15:96:6d:5f:23:da:52:cb:bf:79:d9: 89:74:cf:dc:12:15:0f:6c:0d:a7:30:f9:4c:ac:1c:9c:13:8d: e0:af:d2:b6:46:71:c1:3d:12:ec:a3:79:9f:15:cb:ba:78:3c: 06:84:98:39:a8:ad:15:95:a9:e0:2f:df:45:17:cb:ab:4b:3a: 1a:3a:85:fd:b0:2f:51:21:5d:10:36:7d:03:7e:cb:20:b3:81: a1:03:a5:86:e3:af:82:64:71:ba:4a:c7:da:20:3d:be:aa:07: 21:15:6f:4e:d4:19:ea:9f:b4:32:1e:3c:8d:0f:b8:ad:85:f3: c1:45:a2:b5:55:57:1a:40:b6:fe:37:5d:24:88:0a:11:58:8f: ae:f8:7c:e3:d6:54:20:e4:a4:9a:60:0e:94:46:61:bd:26:97: 72:62:13:b3:a3:b7:31:19:dc:0b:f4:c8:42:7e:8c:0d:85:15: e7:c5:d6:dd:63:ec:eb:42:25:e3:b8:f7:57:57:2e:7c:dd:93: 2a:b3:ef:a1:46:29:09:81:26:c7:30:d0:20:69:3f:7f:2e:4c: 76:d6:f1:e5:f5:4c:b1:bb:b4:e2:0f:31:79:f6:d3:61:65:7f: f8:59:86:c1:17:fa:07:f1:91:ea:6a:a8:3e:dd:53:bd:80:5f: c7:b5:cb:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0RjcxMTAvBgNVBAUTKDIyRDNFOTc0NERBRDQ5NzUwMzZDQzQyMkFDMTFDNDA0 NzIwRTY2RUEwHhcNMjUwNDI1MDM1NzQ2WhcNMjUwNTAyMDM1NzQ2WjAYMRYwFAYD VQQDEw02ODBiMDgzYS0yZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc1ZM60oyqBgNdIzqEk3wc3IpLYGKpabVL9Hbdm49K1+50O+pgvp049EZ3iz C3ZSV9S0JSvcw5O0X60oauJYCQIlqW2PY2Pao111jZ+eDVpyEQIG+4QGVgtEEXSk 08ecCcZFdOrytCEPvMutz7c8j+PQDn7clB3UK0jR57KkwwDRf7ZUel9jW4FkSGAh i4m6kgZKCqkwCtgPQnVRDdyzQ3U+upfuHs/ZDayfj7iMiabXIjWiXiySe34k29UJ iTcCBHbDKPvMv1l03Yb7bYRV1s6934i3iqI33tUJYVG06Hdakr/cK0TCe63zFb1Y RAgGeMQF/7DaAoCmq4VL+/j1yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6ckS69 530aMHSVt+NTs84sDEheMB8GA1UdIwQYMBaAFCLT6XRNrUl1A2zEIqwRxARyDmbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRGNy8yQTQ4OTM4NjdF ODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNYVURiTVFpckJIRUJISU9a dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0UHBkRTJ0U1hVRGJNUWlyQkhFQkhJT1p1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRGNy8yQTQ4OTM4NjdFODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNY VURiTVFpckJIRUJISU9adW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc+kjsUAjGFZZtXyPaUsu/edmJdM/cEhUPbA2nMPlMrBycE43gr9K2 RnHBPRLso3mfFcu6eDwGhJg5qK0VlangL99FF8urSzoaOoX9sC9RIV0QNn0Dfssg s4GhA6WG46+CZHG6SsfaID2+qgchFW9O1Bnqn7QyHjyND7ithfPBRaK1VVcaQLb+ N10kiAoRWI+u+Hzj1lQg5KSaYA6URmG9JpdyYhOzo7cxGdwL9MhCfowNhRXnxdbd Y+zrQiXjuPdXVy583ZMqs++hRikJgSbHMNAgaT9/Lkx21vHl9Uyxu7TiDzF59tNh ZX/4WYbBF/oH8ZHqaqg+3VO9gF/Htcsm -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:31 2025 by rpki-client