$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json) Hash identifier: ZmaeufLt670ChYym1ApxH1Fq3TJ1v7rVmh/zn7d7fio= Subject key identifier: 01:39:BA:86:F9:26:01:26:9F:3D:60:B4:BF:21:F0:22:DE:13:A0:B3 Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft Manifest number: 0147 Signing time: Fri 25 Apr 2025 03:22:00 +0000 Manifest this update: Fri 25 Apr 2025 03:22:00 +0000 Manifest next update: Fri 02 May 2025 03:22:00 +0000 Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: UIr697rcurxY2LeSDG85rTQIbvnianGwygf/c0qDuwQ=) 2: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: 749u4lopn9W/FVK2H662IjT0Y70cK7ANdEZnlQh0KN8=) 3: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: JpEflAmkAjQw8fDsB0P7evpxNWtbBcByQzIhr/Rv/Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E Validity Not Before: Apr 25 03:22:00 2025 GMT Not After : May 2 03:22:00 2025 GMT Subject: CN=680affd8-d9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:c4:e0:8a:25:f6:2c:f7:b9:83:a9:1a:64: 9d:d7:ca:2e:12:95:f1:0d:64:c6:8d:5c:55:fc:02: ba:2b:92:58:9d:a4:60:cb:72:e2:00:21:aa:4f:91: 2c:6e:b1:51:d7:cb:80:ea:5a:ff:9a:6c:c5:53:df: fe:f3:c2:69:b6:4c:e1:b3:50:a3:5a:d6:dd:e5:ef: f8:dd:b5:52:08:b5:f2:64:01:5e:d7:05:87:d1:0f: 86:b1:30:e7:4f:a8:54:c4:52:71:09:1b:31:1a:de: b8:98:ef:ef:60:8e:f8:16:ee:27:78:1c:45:66:e3: 6d:2d:6c:61:a4:10:4a:d4:29:d5:e9:cb:bb:17:19: 1b:e6:77:a7:42:f9:a1:49:05:db:a6:16:1f:80:ac: 7f:2d:99:f4:3e:f2:25:67:f1:11:01:b5:7e:4a:89: 7d:dc:e2:46:b3:06:3b:5d:b2:76:f1:79:bb:9c:db: 13:a4:42:c0:9a:bb:43:a8:8a:8c:a8:9f:a9:be:08: 3d:f7:f3:86:97:14:e5:b3:c3:87:10:94:f5:19:89: bc:69:e7:d8:b6:c1:db:10:ee:f7:79:7f:a3:3d:26: a5:78:5e:f7:79:3c:88:62:99:19:44:a6:bc:62:e7: 91:8d:24:9a:56:2a:94:4b:71:a1:e3:31:5a:ef:fb: c0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:39:BA:86:F9:26:01:26:9F:3D:60:B4:BF:21:F0:22:DE:13:A0:B3 X509v3 Authority Key Identifier: keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:48:34:bc:94:f8:19:f8:db:19:e2:3a:e2:65:b5:93:4d:06: ca:70:ef:7c:ac:e5:e3:fb:1e:8d:30:85:20:37:5a:cd:21:5e: e9:c0:2b:c2:ca:3e:59:75:6b:1e:1f:21:30:f5:67:6c:05:7c: 14:4b:4a:e1:a2:be:4f:92:fd:cc:cf:21:9a:cc:b6:64:c4:45: 47:af:0f:43:95:db:0d:74:a6:b2:94:95:bf:44:25:c0:46:bc: 6c:71:d2:76:ae:18:4f:8a:8f:b7:89:eb:8b:6c:ce:04:b1:17: df:50:26:3d:00:80:1b:fc:2e:5c:f9:03:67:c4:c1:5a:1d:56: 75:01:89:cb:a3:e9:f7:34:26:e3:7c:b2:91:fa:0a:4f:61:b3: 93:4d:77:c4:cd:bd:ec:ba:c6:db:37:eb:95:aa:75:73:c4:13: 85:5f:5b:c5:39:cf:c6:9b:23:4b:bb:11:17:86:e8:66:b0:fe: bd:67:34:2d:7f:22:03:09:37:be:55:85:04:1b:02:4e:d0:65: 42:b0:8a:f6:09:ab:30:db:78:ec:d4:49:66:07:3d:10:7f:f1: f3:d9:a8:08:55:20:63:2e:b3:50:a7:d0:1f:82:d9:0b:2d:88: 9b:1a:bb:57:a8:4d:d0:cc:88:7b:d3:aa:39:94:f9:ee:fe:2b: 6f:29:e3:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI2NDQxMTAvBgNVBAUTKEY4ODFEOTREN0EyNjlBRjY4ODQ4M0E2NTFEMzczOTE4 RTc4NjUwMUUwHhcNMjUwNDI1MDMyMjAwWhcNMjUwNTAyMDMyMjAwWjAYMRYwFAYD VQQDEw02ODBhZmZkOC1kOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIrE4Iol9iz3uYOpGmSd18ouEpXxDWTGjVxV/AK6K5JYnaRgy3LiACGqT5Es brFR18uA6lr/mmzFU9/+88Jptkzhs1CjWtbd5e/43bVSCLXyZAFe1wWH0Q+GsTDn T6hUxFJxCRsxGt64mO/vYI74Fu4neBxFZuNtLWxhpBBK1CnV6cu7Fxkb5nenQvmh SQXbphYfgKx/LZn0PvIlZ/ERAbV+Sol93OJGswY7XbJ28Xm7nNsTpELAmrtDqIqM qJ+pvgg99/OGlxTls8OHEJT1GYm8aefYtsHbEO73eX+jPSaleF73eTyIYpkZRKa8 YueRjSSaViqUS3Gh4zFa7/vASQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAE5uob5 JgEmnz1gtL8h8CLeE6CzMB8GA1UdIwQYMBaAFPiB2U16Jpr2iEg6ZR03ORjnhlAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjY0NC9CRjEzMUQzNDJE MDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12YUlTRHBsSFRjNUdPZUdV QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JSFpUWG9tbXZhSVNEcGxIVGM1R09lR1VCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjY0NC9CRjEzMUQzNDJEMDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12 YUlTRHBsSFRjNUdPZUdVQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7SDS8lPgZ+NsZ4jriZbWTTQbKcO98rOXj+x6NMIUgN1rNIV7pwCvC yj5ZdWseHyEw9WdsBXwUS0rhor5Pkv3MzyGazLZkxEVHrw9DldsNdKaylJW/RCXA RrxscdJ2rhhPio+3ieuLbM4EsRffUCY9AIAb/C5c+QNnxMFaHVZ1AYnLo+n3NCbj fLKR+gpPYbOTTXfEzb3susbbN+uVqnVzxBOFX1vFOc/GmyNLuxEXhuhmsP69ZzQt fyIDCTe+VYUEGwJO0GVCsIr2Casw23js1ElmBz0Qf/Hz2agIVSBjLrNQp9AfgtkL LYibGrtXqE3QzIh706o5lPnu/itvKePI -----END CERTIFICATE-----Generated at Sat Apr 26 05:21:42 2025 by rpki-client