$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: ToCEVAqHOnwCNaFJY5kj4rgwyxWPCMv34VHwW0osIyk= Subject key identifier: C2:01:C9:B1:B8:CF:EB:2D:EC:79:BB:0F:66:85:B0:63:63:5E:39:94 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 09CD Signing time: Thu 24 Apr 2025 19:54:52 +0000 Manifest this update: Thu 24 Apr 2025 19:54:51 +0000 Manifest next update: Thu 01 May 2025 19:54:51 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: YYf9v7PtBixnjTGUI8kiN4irfy9MyOX4dhfR8RcioH0=) 2: 794C43721A5F11F080409056C4F9AE02.roa (hash: tliF6bTq6KTU3ampYuLl3Y31z/FfmmETEltl1u+bSdc=) 3: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=) 4: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w=) 5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: 5GewRvUgDB6rcXNpXbxI+RsMmEZ6AmWtSegm+so4e0M=) 6: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: dXngOtAcFhvArc3Tgv9HMRYfy3lpLyOKuQ2Q99Bv4cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Apr 24 19:54:51 2025 GMT Not After : May 1 19:54:51 2025 GMT Subject: CN=680a970c-cb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:d6:fe:d8:4a:d2:9c:4c:73:55:bc:a3:1b: 46:ff:20:30:42:10:cd:6f:c6:31:c2:4a:aa:9b:07: f6:df:01:1a:c5:8e:11:cd:d7:0f:31:34:e6:87:73: a2:bc:77:c9:b2:f6:04:80:49:0c:4e:d8:f0:c1:5a: 4e:8c:95:bd:d0:1f:75:1f:69:e0:f5:3f:c5:62:52: bf:de:04:5f:49:29:f9:aa:4d:80:04:67:f4:d5:38: ff:a1:e3:66:c7:b7:16:6f:bf:40:06:21:08:5c:75: f8:87:a7:f0:3d:05:62:ca:61:66:be:7a:5c:0b:ca: a4:5c:78:c2:3d:8c:c8:01:01:33:48:8c:24:0d:67: 5e:86:9c:2b:bf:94:b7:8d:d0:84:34:ec:94:f8:63: 11:a2:40:03:88:b9:1a:02:7a:2d:60:c7:a0:af:04: f2:48:a0:a9:7f:06:6a:fb:ec:0e:5f:83:11:07:1a: fe:ed:d6:70:10:29:86:b8:dd:97:fe:82:f0:89:18: 10:a1:09:f1:b6:55:58:e1:ef:ce:4d:b2:29:f7:e3: 39:63:25:61:04:4e:71:b5:7d:79:d2:29:a3:36:84: e3:67:ac:b7:f7:90:78:2f:6d:3c:9f:39:db:29:39: 88:0f:82:c6:8d:65:7c:71:c8:af:01:be:6c:8f:2b: 44:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:01:C9:B1:B8:CF:EB:2D:EC:79:BB:0F:66:85:B0:63:63:5E:39:94 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:dc:4b:63:1a:07:73:6c:c4:b9:97:3a:f9:5a:d3:cd:0c:ea: a9:af:de:0e:aa:67:32:31:ef:fa:dd:5b:f3:b1:1e:1c:47:3a: 8a:ff:30:18:d2:a6:5f:db:d7:fb:2f:7b:35:4a:20:3e:10:d7: 6f:52:1f:7b:d1:34:ad:c0:c5:66:09:1d:82:a3:88:7f:b4:e8: 90:0b:37:87:82:ec:47:f0:b5:ef:b8:b7:84:30:ac:ed:b7:fb: b2:0b:b2:91:5c:24:55:6e:07:f6:ab:50:7b:ec:b5:25:94:34: cf:2c:fc:1a:89:c9:e7:7d:53:6d:e4:5f:de:c0:c9:88:71:7b: 40:6e:4b:5c:91:3d:10:a3:ed:8f:3f:ff:d1:a5:f0:95:6f:66: b9:7a:c0:8b:b5:0b:a8:9d:16:49:fd:cd:ce:80:69:64:32:4f: be:c8:52:ef:6d:1e:0a:d5:67:82:db:6d:89:c9:1e:5e:60:70: 30:40:61:58:02:94:fd:fc:bf:cc:32:da:9e:83:e5:e4:82:26: ff:21:25:d9:ac:5c:5f:de:83:53:71:12:3e:57:06:53:39:8f: 18:38:9e:2f:a4:56:02:a1:22:1a:7a:df:dd:bd:cb:8d:e1:bc: c5:bc:f9:1b:7e:26:40:f2:25:17:eb:30:cd:10:49:85:1a:84: fe:43:a2:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUwNDI0MTk1NDUxWhcNMjUwNTAxMTk1NDUxWjAYMRYwFAYD VQQDEw02ODBhOTcwYy1jYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVfW/thK0pxMc1W8oxtG/yAwQhDNb8Yxwkqqmwf23wEaxY4RzdcPMTTmh3Oi vHfJsvYEgEkMTtjwwVpOjJW90B91H2ng9T/FYlK/3gRfSSn5qk2ABGf01Tj/oeNm x7cWb79ABiEIXHX4h6fwPQViymFmvnpcC8qkXHjCPYzIAQEzSIwkDWdehpwrv5S3 jdCENOyU+GMRokADiLkaAnotYMegrwTySKCpfwZq++wOX4MRBxr+7dZwECmGuN2X /oLwiRgQoQnxtlVY4e/OTbIp9+M5YyVhBE5xtX150imjNoTjZ6y395B4L208nznb KTmID4LGjWV8ccivAb5sjytEswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIBybG4 z+st7Hm7D2aFsGNjXjmUMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb3EtjGgdzbMS5lzr5WtPNDOqpr94OqmcyMe/63VvzsR4cRzqK/zAY 0qZf29f7L3s1SiA+ENdvUh970TStwMVmCR2Co4h/tOiQCzeHguxH8LXvuLeEMKzt t/uyC7KRXCRVbgf2q1B77LUllDTPLPwaicnnfVNt5F/ewMmIcXtAbktckT0Qo+2P P//RpfCVb2a5esCLtQuonRZJ/c3OgGlkMk++yFLvbR4K1WeC222JyR5eYHAwQGFY ApT9/L/MMtqeg+Xkgib/ISXZrFxf3oNTcRI+VwZTOY8YOJ4vpFYCoSIaet/dvcuN 4bzFvPkbfiZA8iUX6zDNEEmFGoT+Q6Ja -----END CERTIFICATE-----Generated at Sat Apr 26 12:26:31 2025 by rpki-client