$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: 6BeVvRhXbYvhan3ybFHCfYXGN99dk6AqMt7V30ODt0Q= Subject key identifier: BD:BD:04:B9:23:88:29:F8:84:1D:A2:66:84:EA:CF:64:0E:D3:79:C7 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 165F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 164B Signing time: Thu 24 Apr 2025 16:43:56 +0000 Manifest this update: Thu 24 Apr 2025 16:43:56 +0000 Manifest next update: Thu 01 May 2025 16:43:56 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: nVCjieOdzXAJXBYcumqGnhuld0YrmG+Q14GdV5P+1cE=) 2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: irCyzZt8lLVT2O/nBYFOPs0nEEY6FDn9ohpC+rSN6lg=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: UF4UGi4YvKSRTlKCNcjEh8f4bqwvLQuk9xLcKAJKTWQ=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: slzLXwHdalwSZSG2cdS37Tf6mGAWnLHG4M+IywxJpUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5727 (0x165f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Apr 24 16:43:56 2025 GMT Not After : May 1 16:43:56 2025 GMT Subject: CN=680a6a4c-9557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:87:fc:4a:6d:ba:71:ad:59:20:92:1e:05: 32:b6:b5:cf:bb:ff:ad:96:c0:d7:25:04:12:56:a4: 90:40:21:24:a9:1b:ba:8c:4c:79:0e:cd:c1:55:f0: 86:a6:64:27:a0:6a:5d:6d:6e:4b:63:5b:5c:7d:2b: e1:5c:3a:de:16:c8:3a:e6:a3:13:08:02:5a:1c:f3: 1d:2f:d6:49:39:f9:25:75:90:13:c3:1a:95:7a:43: 93:1f:52:25:2b:f0:46:b7:14:37:4b:77:d9:82:38: 30:c0:6a:28:7b:ee:57:71:40:f0:24:dd:d8:9f:b9: a9:58:31:67:64:59:50:39:fd:4e:90:bf:a9:bd:b8: 4c:7c:d5:d9:ef:c1:0f:51:e6:9b:22:2d:e7:fd:6b: 38:7a:3b:42:b2:79:dc:96:e7:2c:0f:0b:a4:33:d9: 9a:82:2f:98:28:18:89:09:eb:e3:14:0d:8c:08:3a: ab:69:9e:7a:ab:09:fc:b0:85:bd:05:ab:38:17:f5: d2:45:2e:f6:c5:f0:65:7f:a6:d1:3c:d8:27:75:c5: 83:a6:a7:c0:5b:45:12:d0:63:a8:fe:a3:f4:03:e1: 21:be:22:a7:46:c4:d5:a8:a3:a5:27:fa:3e:8b:d7: 85:bc:bb:77:f3:a6:52:21:5d:2b:9a:da:53:7f:c0: 22:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BD:04:B9:23:88:29:F8:84:1D:A2:66:84:EA:CF:64:0E:D3:79:C7 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b8:61:ea:6b:79:e9:7d:1d:47:fe:39:a7:83:8c:64:2d:65: 67:35:e7:0a:4c:fd:51:11:1d:46:7b:ef:a3:fa:53:f5:29:04: 1c:60:66:8f:b8:c2:54:3b:c3:0d:b8:1a:af:57:79:50:ae:ff: b4:bd:f4:e3:58:65:15:c4:de:4f:ad:7c:fb:fd:e3:76:40:fe: 97:a2:92:42:24:e7:a5:39:76:87:4e:7c:7b:b2:cf:3a:f1:ce: ee:ce:4c:2c:df:ea:51:b5:40:5d:ec:75:0a:ea:6f:84:b6:4d: e2:23:14:d2:28:70:8e:a8:a2:8b:70:6e:53:35:a3:3e:e8:c0: dd:1f:af:cd:de:be:c7:18:a0:bb:cb:5c:82:85:be:fd:cc:e2: 15:88:49:ac:68:ca:7e:0a:33:ad:51:25:1d:99:e3:c8:8c:14: f2:83:1f:c0:5f:a2:92:11:eb:09:bf:55:96:2c:26:2f:b8:6d: b7:0f:4c:3a:1e:66:9c:8c:cd:c8:3d:d5:aa:f4:38:57:6d:4f: 4e:a6:d6:25:9c:12:28:83:2c:bb:54:a1:6d:e0:8e:85:7c:90: 9d:db:38:82:97:ed:9f:da:d8:39:d3:85:58:36:0a:8d:ba:7c: 09:ed:f7:b4:55:47:e6:e4:49:5d:08:a0:e0:78:6d:58:d1:1c: 19:f8:46:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjUwNDI0MTY0MzU2WhcNMjUwNTAxMTY0MzU2WjAYMRYwFAYD VQQDEw02ODBhNmE0Yy05NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9GH/EptunGtWSCSHgUytrXPu/+tlsDXJQQSVqSQQCEkqRu6jEx5Ds3BVfCG pmQnoGpdbW5LY1tcfSvhXDreFsg65qMTCAJaHPMdL9ZJOfkldZATwxqVekOTH1Il K/BGtxQ3S3fZgjgwwGooe+5XcUDwJN3Yn7mpWDFnZFlQOf1OkL+pvbhMfNXZ78EP UeabIi3n/Ws4ejtCsnnclucsDwukM9magi+YKBiJCevjFA2MCDqraZ56qwn8sIW9 Bas4F/XSRS72xfBlf6bRPNgndcWDpqfAW0US0GOo/qP0A+EhviKnRsTVqKOlJ/o+ i9eFvLt386ZSIV0rmtpTf8AiaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL29BLkj iCn4hB2iZoTqz2QO03nHMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQuGHqa3npfR1H/jmng4xkLWVnNecKTP1RER1Ge++j+lP1KQQcYGaP uMJUO8MNuBqvV3lQrv+0vfTjWGUVxN5PrXz7/eN2QP6XopJCJOelOXaHTnx7ss86 8c7uzkws3+pRtUBd7HUK6m+Etk3iIxTSKHCOqKKLcG5TNaM+6MDdH6/N3r7HGKC7 y1yChb79zOIViEmsaMp+CjOtUSUdmePIjBTygx/AX6KSEesJv1WWLCYvuG23D0w6 HmacjM3IPdWq9DhXbU9OptYlnBIogyy7VKFt4I6FfJCd2ziCl+2f2tg504VYNgqN unwJ7fe0VUfm5EldCKDgeG1Y0RwZ+EYI -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:34 2025 by rpki-client