$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: ojTahdXyrwFDDcR2kj4LSEbJvQOODRPoU5w5GXt6XlE= Subject key identifier: 69:FA:53:E4:5B:23:4B:BD:D8:3B:C5:E8:D1:41:43:B0:35:34:4B:AF Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: A7 Signing time: Fri 25 Apr 2025 05:09:08 +0000 Manifest this update: Fri 25 Apr 2025 05:09:07 +0000 Manifest next update: Fri 02 May 2025 05:09:07 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: jnt72Aa+LsfWkRaLdz1uxKBHkGrbnECN4voWjwTGwxk=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: UxAygpfGpi/7LbfgcrDHteILaaTojTUKGBKpExRn4ds=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: tT0U7je/lStzl+Gd03/CVrFPBnBeNuZUlfzB9Ibn9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Apr 25 05:09:07 2025 GMT Not After : May 2 05:09:07 2025 GMT Subject: CN=680b18f4-21b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ce:43:15:01:86:76:de:48:0a:61:ad:94:d8: 3b:7a:4f:30:47:1a:dd:57:6b:e7:5e:a3:96:e9:99: 0c:96:eb:ea:53:e9:21:cd:ad:7a:6e:5a:58:79:d8: 4e:ef:9e:1a:2c:d6:b8:06:c8:69:9a:11:d5:28:3c: a0:df:6a:04:98:16:f5:84:de:61:8e:af:ab:3b:bb: 6f:4f:51:a9:4d:5c:d7:a9:89:35:11:db:03:09:78: ea:1c:bf:36:df:66:f3:27:b6:c7:b8:2d:26:25:c6: 2d:41:41:3a:cc:10:54:7c:2a:2c:9a:7e:ae:77:99: c9:4c:1a:34:37:25:f0:1e:9f:a8:c2:54:4f:96:a8: ea:26:35:a4:b8:9a:59:1a:2d:10:88:28:8f:88:1b: a5:ca:fe:29:0a:a5:5d:b0:47:87:a3:45:05:da:3e: cc:01:7a:d2:b6:06:b3:ad:5c:b2:1a:e2:7c:3b:fd: 26:b1:db:39:9d:ba:19:d4:c4:4f:80:a4:6f:5d:b0: aa:a6:c9:c2:09:79:09:68:70:06:e5:74:51:47:d5: 28:1a:40:7f:df:95:74:4b:ce:b3:b8:78:bf:43:ea: 81:ea:a3:b7:9c:c5:0f:f8:a0:c0:13:4e:6c:1b:b4: f9:28:c1:f9:21:91:4e:73:91:8c:f2:f2:b7:52:77: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FA:53:E4:5B:23:4B:BD:D8:3B:C5:E8:D1:41:43:B0:35:34:4B:AF X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:96:44:94:71:8d:58:35:bb:ba:a5:64:a0:80:9d:03:94:87: a5:b1:a2:8f:57:7b:da:83:6c:67:6c:b6:d2:8b:37:54:43:56: 04:79:8f:41:6d:0e:6d:72:d8:34:54:5c:fd:77:5b:01:df:3c: e7:09:7a:e3:33:38:6e:82:b5:fd:5b:49:5a:9f:c6:47:99:ea: 82:b1:06:cd:c9:36:0a:6f:91:e1:cd:e9:e9:ad:d7:22:8f:f3: b3:4a:fa:a6:f4:82:be:e5:31:b1:2b:45:eb:e5:5f:25:be:ee: a2:02:12:e0:15:f9:0e:b9:a3:62:5f:51:49:47:fa:f3:a5:1c: 00:56:8b:fa:67:e4:6a:b1:7d:11:da:3b:95:a3:bf:17:2a:93: 83:7b:4e:ae:b8:16:62:5a:a0:67:08:dd:6f:7d:27:ab:93:ee: dd:3f:10:34:03:25:cc:c4:4a:de:7a:65:a4:bc:fc:b1:69:dc: 21:b4:7d:2c:54:8b:7d:8f:92:a8:fb:ce:3a:8a:cf:9f:fe:af: 24:89:d4:0d:f5:a7:3f:c2:57:17:71:83:0e:f8:4c:46:cb:8e: 69:80:1b:82:c9:68:24:c7:9b:bb:20:84:3b:30:6a:b8:8e:38: 31:fa:d4:0d:15:a7:56:bf:27:17:e6:03:ae:6c:f0:99:80:de: 73:96:64:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUwNDI1MDUwOTA3WhcNMjUwNTAyMDUwOTA3WjAYMRYwFAYD VQQDEw02ODBiMThmNC0yMWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3M5DFQGGdt5ICmGtlNg7ek8wRxrdV2vnXqOW6ZkMluvqU+khza16blpYedhO 754aLNa4BshpmhHVKDyg32oEmBb1hN5hjq+rO7tvT1GpTVzXqYk1EdsDCXjqHL82 32bzJ7bHuC0mJcYtQUE6zBBUfCosmn6ud5nJTBo0NyXwHp+owlRPlqjqJjWkuJpZ Gi0QiCiPiBulyv4pCqVdsEeHo0UF2j7MAXrStgazrVyyGuJ8O/0msds5nboZ1MRP gKRvXbCqpsnCCXkJaHAG5XRRR9UoGkB/35V0S86zuHi/Q+qB6qO3nMUP+KDAE05s G7T5KMH5IZFOc5GM8vK3UnfGZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn6U+Rb I0u92DvF6NFBQ7A1NEuvMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCelkSUcY1YNbu6pWSggJ0DlIelsaKPV3vag2xnbLbSizdUQ1YEeY9B bQ5tctg0VFz9d1sB3zznCXrjMzhugrX9W0lan8ZHmeqCsQbNyTYKb5Hhzenprdci j/OzSvqm9IK+5TGxK0Xr5V8lvu6iAhLgFfkOuaNiX1FJR/rzpRwAVov6Z+RqsX0R 2juVo78XKpODe06uuBZiWqBnCN1vfSerk+7dPxA0AyXMxEreemWkvPyxadwhtH0s VIt9j5Ko+846is+f/q8kidQN9ac/wlcXcYMO+ExGy45pgBuCyWgkx5u7IIQ7MGq4 jjgx+tQNFadWvycX5gOubPCZgN5zlmQk -----END CERTIFICATE-----Generated at Sat Apr 26 22:49:24 2025 by rpki-client