$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json) Hash identifier: bebxr+4KKZN9h0ExgpYq0VF7j4QACf3vkLLzntM/iyQ= Subject key identifier: 98:0A:C8:23:48:AF:EF:39:E3:EF:09:4E:41:32:96:3C:E9:CE:4C:B7 Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft Manifest number: 0131 Signing time: Fri 13 Jun 2025 03:30:08 +0000 Manifest this update: Fri 13 Jun 2025 03:30:07 +0000 Manifest next update: Fri 20 Jun 2025 03:30:07 +0000 Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: WfKmkcbA6Bj/YCid/cDp1QU1DZra05V2da4UxWmALhs=) 2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Validity Not Before: Jun 13 03:30:07 2025 GMT Not After : Jun 20 03:30:07 2025 GMT Subject: CN=684b9b3f-ed90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:05:8e:d3:24:e9:83:e5:3c:3e:aa:d7:11: 22:f3:1d:83:dc:aa:00:d3:b2:d6:a4:e1:07:f1:e3: a2:19:4c:b7:a9:9b:67:02:ec:52:38:e0:3b:c5:d4: ba:46:5e:c3:3b:10:f8:9d:ba:fa:2d:71:18:28:85: 50:66:37:a5:9e:00:b0:1b:d9:29:23:69:5e:cd:3e: ab:be:4c:f4:0f:cd:03:4f:be:20:91:2a:c7:8f:db: 09:80:e5:39:f2:91:f2:7f:0e:9b:cc:d6:dc:6f:c4: 01:91:d8:89:33:3b:f1:cc:33:ff:10:a0:6e:ca:a8: 2a:86:4e:78:1b:31:13:dc:81:28:b8:19:5a:e0:6b: b2:d8:6d:ac:3e:9f:1d:2d:d4:a8:53:1f:73:d6:57: 24:1d:c7:b9:3d:0b:51:ff:ab:b1:ec:93:71:37:b8: 2d:0d:3a:f8:a7:92:c9:73:2d:f1:b6:d7:bb:2e:80: c2:36:4c:7e:07:ad:2a:5e:d5:01:1b:22:47:40:06: 09:54:12:83:67:0a:d2:2a:a8:fc:d7:d2:bb:bd:a2: 5e:bc:eb:6d:91:da:08:ac:0a:58:80:d6:74:ea:7a: 95:6f:cb:d5:f7:67:22:34:0c:1a:84:98:25:6c:ac: 9f:f2:d4:59:e8:90:d6:96:10:7a:6e:29:9b:37:a2: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0A:C8:23:48:AF:EF:39:E3:EF:09:4E:41:32:96:3C:E9:CE:4C:B7 X509v3 Authority Key Identifier: keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b2:f9:48:7b:bc:9b:42:02:a9:f6:80:88:24:f9:df:71:13: 0a:a9:ce:4a:68:3d:7c:00:72:7b:e1:e2:07:3a:23:c4:67:49: 98:cb:59:3e:61:56:69:d4:6b:33:c7:7e:12:73:c0:34:82:1b: 88:66:f4:1e:51:d9:f6:36:a3:a0:ff:24:a5:7a:3b:2d:3b:3a: cf:5b:0c:39:5d:0d:d5:1c:29:c5:0d:ee:2e:ac:4d:9a:fd:ed: 7b:1b:a3:23:0d:42:a8:09:03:21:6e:bd:ce:95:ce:25:9d:14: 1e:97:f2:8e:f4:d1:80:04:97:9a:55:89:70:09:ae:61:8e:a4: 9c:83:7a:0b:6b:49:ea:64:bb:8a:1e:83:5c:bb:f0:f1:5d:30: e4:dc:54:b0:75:45:cf:98:f5:09:b6:a3:8b:2a:3e:71:0c:16: b0:c4:2b:d4:46:c1:5d:8e:f8:56:99:b5:20:bf:70:a0:e6:98: 22:69:65:ef:ed:1d:49:f5:f9:73:1c:64:71:7f:52:0e:ec:2a: dc:da:0e:4c:55:cf:a3:d2:54:60:f9:40:e9:e7:60:6d:d4:16: 74:ec:69:17:33:44:70:f0:db:ac:17:cd:cd:63:47:c6:b0:8c: b8:45:d9:78:f2:bc:e0:1b:a5:27:a8:d1:3b:cc:50:42:3d:86: 32:3b:fb:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU5QTQxMTAvBgNVBAUTKDIwQkQzRjdGOTk4RUQ0M0Q1RkM0Rjg2MjlERDBDMTg4 RUM3RERBRTAwHhcNMjUwNjEzMDMzMDA3WhcNMjUwNjIwMDMzMDA3WjAYMRYwFAYD VQQDEw02ODRiOWIzZi1lZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxm4FjtMk6YPlPD6q1xEi8x2D3KoA07LWpOEH8eOiGUy3qZtnAuxSOOA7xdS6 Rl7DOxD4nbr6LXEYKIVQZjelngCwG9kpI2lezT6rvkz0D80DT74gkSrHj9sJgOU5 8pHyfw6bzNbcb8QBkdiJMzvxzDP/EKBuyqgqhk54GzET3IEouBla4Guy2G2sPp8d LdSoUx9z1lckHce5PQtR/6ux7JNxN7gtDTr4p5LJcy3xtte7LoDCNkx+B60qXtUB GyJHQAYJVBKDZwrSKqj819K7vaJevOttkdoIrApYgNZ06nqVb8vV92ciNAwahJgl bKyf8tRZ6JDWlhB6bimbN6JawQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgKyCNI r+854+8JTkEyljzpzky3MB8GA1UdIwQYMBaAFCC9P3+ZjtQ9X8T4Yp3QwYjsfdrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTlBNC8wRDVEQzUyNDcz MDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFEMWZ4UGhpbmREQmlPeDky dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lMMF9mNW1PMUQxZnhQaGluZERCaU94OTJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTlBNC8wRDVEQzUyNDczMDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFE MWZ4UGhpbmREQmlPeDkydUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZsvlIe7ybQgKp9oCIJPnfcRMKqc5KaD18AHJ74eIHOiPEZ0mYy1k+ YVZp1Gszx34Sc8A0ghuIZvQeUdn2NqOg/ySlejstOzrPWww5XQ3VHCnFDe4urE2a /e17G6MjDUKoCQMhbr3Olc4lnRQel/KO9NGABJeaVYlwCa5hjqScg3oLa0nqZLuK HoNcu/DxXTDk3FSwdUXPmPUJtqOLKj5xDBawxCvURsFdjvhWmbUgv3Cg5pgiaWXv 7R1J9flzHGRxf1IO7Crc2g5MVc+j0lRg+UDp52Bt1BZ07GkXM0Rw8NusF83NY0fG sIy4Rdl48rzgG6UnqNE7zFBCPYYyO/uY -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:10 2025 by rpki-client