$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: Xh9LnRFQU/5WqwDA3KTD+lTZQYgJ23vfQsiXcahr/EA= Subject key identifier: 2C:D5:D4:7B:87:BB:09:32:37:6C:91:78:B3:AC:A0:19:80:22:D0:41 Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: 80 Signing time: Fri 25 Apr 2025 05:39:20 +0000 Manifest this update: Fri 25 Apr 2025 05:39:20 +0000 Manifest next update: Fri 02 May 2025 05:39:20 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: g9zW4/SnykM5BNia3kuk6wDtPLcPcYSovyUBza+sdkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Apr 25 05:39:20 2025 GMT Not After : May 2 05:39:20 2025 GMT Subject: CN=680b2008-8cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ab:a3:4c:e3:92:37:a9:7a:c0:03:8b:29:76: 1c:4e:23:c8:ac:93:cc:ad:38:bd:e3:11:a4:2a:be: 5b:54:50:ac:d0:7c:fc:67:cc:40:eb:9c:27:d6:f0: 76:13:a5:9e:20:dd:9d:04:9d:4c:76:c2:95:70:bb: e0:d4:91:60:44:5e:df:2e:34:1b:a6:72:bd:94:92: 9e:a4:ac:52:bc:e5:0c:fa:f1:e4:b6:d1:73:bd:f5: 9d:8a:1d:04:ec:8c:42:54:bf:bf:b6:8c:53:26:d5: 03:7a:66:93:1d:64:2c:4c:e2:88:aa:f6:10:03:e4: 19:48:ee:ba:9d:19:66:78:be:3a:3f:56:85:b9:4d: ec:2c:92:5a:6f:41:df:04:fc:d7:c5:a9:2d:e0:46: 40:99:1b:0c:17:eb:6d:74:88:9a:8f:b6:68:99:96: 01:e9:40:3b:7a:21:dd:80:70:e0:ce:6c:8e:6a:24: 35:2e:01:41:57:57:7e:a2:7d:a6:f8:cd:50:d4:68: 37:76:6b:ee:af:c2:fb:75:4d:ce:e9:5f:a0:9d:02: bf:a7:30:7a:01:c9:fb:10:7a:f3:93:75:0a:ab:8c: 2a:1e:ff:fc:7a:24:2e:0f:bf:ec:f3:83:5c:a6:18: 6b:98:7c:b1:9a:15:8c:8d:23:aa:6f:65:bf:4a:f2: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D5:D4:7B:87:BB:09:32:37:6C:91:78:B3:AC:A0:19:80:22:D0:41 X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:be:66:08:1d:61:41:96:68:c8:a1:2a:92:73:ea:ff:ec:1c: ac:7b:3f:73:1c:4d:5c:a4:1f:2a:47:69:68:68:86:7a:b5:1f: f4:62:44:ee:2b:b2:6f:32:8e:26:7f:d1:4f:2a:20:49:d2:0c: 28:d8:79:ac:3a:1e:62:30:2d:73:80:c8:79:2b:3b:92:b4:7a: e9:d6:9e:ff:77:fb:01:62:50:97:a9:56:d3:19:f4:41:43:99: 4e:cc:ea:25:cb:6e:cd:7a:92:ea:fd:dd:91:f1:88:10:7b:6a: 3c:58:ec:0b:70:3f:45:54:48:c9:4e:ad:21:e1:b5:8f:b8:74: 8a:57:a7:2b:56:6d:27:9a:7e:bd:08:1d:8a:ac:87:20:24:33: 54:19:4d:ad:c6:f2:74:ed:59:39:83:4a:ed:e4:37:53:fb:83: 30:e2:49:a6:08:94:e6:5a:de:9a:cf:48:5a:35:71:25:fe:0c: 3f:12:01:ed:d9:ff:c8:6b:e4:2b:f4:ba:e1:da:f4:03:ea:d2: d9:a7:44:9f:9f:ff:e8:62:37:de:df:da:0d:1d:ef:41:aa:a1: 11:d0:a0:52:15:fa:c1:df:75:71:3a:6b:52:d5:a4:d2:9c:09: bc:de:e2:34:c5:71:0a:22:ec:20:e1:e5:84:30:86:56:54:88: a2:0b:3e:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjUwNDI1MDUzOTIwWhcNMjUwNTAyMDUzOTIwWjAYMRYwFAYD VQQDEw02ODBiMjAwOC04Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KujTOOSN6l6wAOLKXYcTiPIrJPMrTi94xGkKr5bVFCs0Hz8Z8xA65wn1vB2 E6WeIN2dBJ1MdsKVcLvg1JFgRF7fLjQbpnK9lJKepKxSvOUM+vHkttFzvfWdih0E 7IxCVL+/toxTJtUDemaTHWQsTOKIqvYQA+QZSO66nRlmeL46P1aFuU3sLJJab0Hf BPzXxakt4EZAmRsMF+ttdIiaj7ZomZYB6UA7eiHdgHDgzmyOaiQ1LgFBV1d+on2m +M1Q1Gg3dmvur8L7dU3O6V+gnQK/pzB6Acn7EHrzk3UKq4wqHv/8eiQuD7/s84Nc phhrmHyxmhWMjSOqb2W/SvJe3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzV1HuH uwkyN2yReLOsoBmAItBBMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYvmYIHWFBlmjIoSqSc+r/7Bysez9zHE1cpB8qR2loaIZ6tR/0YkTu K7JvMo4mf9FPKiBJ0gwo2HmsOh5iMC1zgMh5KzuStHrp1p7/d/sBYlCXqVbTGfRB Q5lOzOoly27NepLq/d2R8YgQe2o8WOwLcD9FVEjJTq0h4bWPuHSKV6crVm0nmn69 CB2KrIcgJDNUGU2txvJ07Vk5g0rt5DdT+4Mw4kmmCJTmWt6az0haNXEl/gw/EgHt 2f/Ia+Qr9Lrh2vQD6tLZp0Sfn//oYjfe39oNHe9BqqER0KBSFfrB33VxOmtS1aTS nAm83uI0xXEKIuwg4eWEMIZWVIiiCz5u -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:45 2025 by rpki-client