$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json) Hash identifier: HdoyGFIgearApSBKKKrqmQN8piUxz+WaeYmGby4UF3U= Subject key identifier: 8E:03:2A:5A:CA:A3:0C:E2:C0:FD:DB:65:01:D6:1C:2D:AF:57:73:1F Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Certificate serial: 1005 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft Manifest number: 0FFB Signing time: Thu 24 Apr 2025 17:26:55 +0000 Manifest this update: Thu 24 Apr 2025 17:26:55 +0000 Manifest next update: Thu 01 May 2025 17:26:55 +0000 Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: aH0GDVQSjUKsdOMSXdaZUuonLlwC4BFPzQpj0X6vIT0=) 2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: Mc3Q9wmukgUIJT3q9J5EygK6/IHcoyR/RZQ0Eut8nLU=) 3: 608836D046B111E98B793856C4F9AE02.roa (hash: rltN2xhTkn/8LBf4ssPkcwToahSO3m8NAPpsxdmLbos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4101 (0x1005) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Validity Not Before: Apr 24 17:26:55 2025 GMT Not After : May 1 17:26:55 2025 GMT Subject: CN=680a745f-236f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9d:63:c4:0f:af:a0:42:ed:c0:a9:d9:48:b1: 65:e6:1b:a9:dd:cf:99:3b:66:27:3d:97:f1:c2:3a: a0:27:28:74:d1:3f:1e:8d:a6:ae:87:3a:b6:d6:30: 91:89:8a:d0:98:1b:ed:47:29:27:62:ed:f4:e9:77: 58:96:af:46:7e:2b:a4:65:9b:fd:de:45:0c:be:9b: 0f:8e:ed:f7:4b:18:eb:87:03:13:9c:02:e9:24:25: 6b:71:74:17:8e:34:d7:9d:4c:3b:b1:9f:9f:54:57: 9a:75:04:e2:38:e1:69:9d:7b:69:54:c0:01:dc:f5: d8:98:58:13:dc:5f:40:2d:9d:51:2e:d6:9a:14:f0: ba:84:b5:f5:98:88:dd:d3:85:ba:39:48:18:db:ab: 4f:c1:2f:22:e0:38:70:f9:23:83:f4:b5:c9:e7:87: 75:f6:76:93:f2:f6:12:5d:08:c8:48:c8:41:f9:01: 45:fe:eb:bb:78:08:8d:88:bb:f8:76:f2:86:2a:a5: b3:62:d1:03:b3:02:c9:cf:14:d6:aa:fa:34:e0:cd: b4:be:fe:fd:b5:3a:3f:2c:87:8f:a7:b7:16:0c:af: e9:ec:e1:28:44:ba:e9:1a:48:85:5c:f5:26:88:cc: 22:7d:36:40:1d:f7:ee:fd:c1:7b:d1:a2:94:b9:fd: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:03:2A:5A:CA:A3:0C:E2:C0:FD:DB:65:01:D6:1C:2D:AF:57:73:1F X509v3 Authority Key Identifier: keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e9:8b:65:d2:a4:ed:5d:ae:d1:ec:f9:62:56:32:d3:21:ce: 84:a0:aa:10:41:6d:c0:a3:79:b3:9b:4d:cc:4b:79:87:ba:04: 45:7f:22:b0:d3:14:73:7a:53:59:8d:f5:e2:a7:f5:fe:e0:95: 97:db:da:32:55:e8:ef:ed:b8:2a:a1:c8:82:a6:0e:f4:66:d6: 1c:f1:a7:76:22:93:a4:55:06:46:f6:a5:db:9d:5c:0d:95:82: 0f:cb:ea:e1:2e:a6:fc:c1:17:8c:a4:52:01:3f:57:23:0b:f6: 26:79:72:56:bc:1d:b8:7e:3e:0c:dc:40:7f:79:70:48:6c:d7: e3:ef:95:c1:4b:75:bc:3f:7a:9c:50:1d:91:20:a7:d7:1f:38: 54:da:77:56:42:9e:78:ea:9d:04:40:d5:df:c5:60:51:cf:f8: 67:fa:1c:8a:8c:8f:02:bc:f1:55:06:fa:ea:44:38:29:f0:c5: fe:6f:b5:f1:1c:d8:09:76:47:1d:02:aa:c7:bd:33:8c:a3:38: 60:40:fb:71:f3:7e:ff:26:8e:0c:54:d2:f8:3f:86:36:d2:13: b2:0a:b9:a4:99:e4:52:3b:d2:03:1f:36:af:98:88:79:4a:8c: ba:13:79:5a:11:ae:63:a7:e6:28:9d:94:3d:9c:11:e9:3f:03: 72:a9:65:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKDIyM0JFMTk4OTJFNkU2Q0I0MDZFNUZBOTk1NkREQkNF QTk1Q0JCNDYwHhcNMjUwNDI0MTcyNjU1WhcNMjUwNTAxMTcyNjU1WjAYMRYwFAYD VQQDEw02ODBhNzQ1Zi0yMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5p1jxA+voELtwKnZSLFl5hup3c+ZO2YnPZfxwjqgJyh00T8ejaauhzq21jCR iYrQmBvtRyknYu306XdYlq9GfiukZZv93kUMvpsPju33SxjrhwMTnALpJCVrcXQX jjTXnUw7sZ+fVFeadQTiOOFpnXtpVMAB3PXYmFgT3F9ALZ1RLtaaFPC6hLX1mIjd 04W6OUgY26tPwS8i4Dhw+SOD9LXJ54d19naT8vYSXQjISMhB+QFF/uu7eAiNiLv4 dvKGKqWzYtEDswLJzxTWqvo04M20vv79tTo/LIePp7cWDK/p7OEoRLrpGkiFXPUm iMwifTZAHffu/cF70aKUuf3a/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4DKlrK owziwP3bZQHWHC2vV3MfMB8GA1UdIwQYMBaAFCI74ZiS5ubLQG5fqZVt286pXLtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9CNkE5RjI2MDQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVzdEFibC1wbFczYnpxbGN1 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lqdmhtSkxtNXN0QWJsLXBsVzNienFsY3UwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9CNkE5RjI2MDQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVz dEFibC1wbFczYnpxbGN1MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg6Ytl0qTtXa7R7PliVjLTIc6EoKoQQW3Ao3mzm03MS3mHugRFfyKw 0xRzelNZjfXip/X+4JWX29oyVejv7bgqociCpg70ZtYc8ad2IpOkVQZG9qXbnVwN lYIPy+rhLqb8wReMpFIBP1cjC/YmeXJWvB24fj4M3EB/eXBIbNfj75XBS3W8P3qc UB2RIKfXHzhU2ndWQp546p0EQNXfxWBRz/hn+hyKjI8CvPFVBvrqRDgp8MX+b7Xx HNgJdkcdAqrHvTOMozhgQPtx837/Jo4MVNL4P4Y20hOyCrmkmeRSO9IDHzavmIh5 Soy6E3laEa5jp+YonZQ9nBHpPwNyqWVf -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:29 2025 by rpki-client