$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json) Hash identifier: /Ae0P573tIRR/73Zax8L6NwaCDJ4CdGQQcDl+c8W3RM= Subject key identifier: 32:30:96:10:77:57:FF:B8:18:72:22:D2:F5:F8:58:F2:92:E6:1F:C2 Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft Manifest number: 011A Signing time: Sun 27 Apr 2025 03:42:57 +0000 Manifest this update: Sun 27 Apr 2025 03:42:56 +0000 Manifest next update: Sun 04 May 2025 03:42:56 +0000 Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: +2zVHF6UiOV7ALI+BnrCfkGM970eWPa5VsBIQIJgRVI=) 2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 03:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Validity Not Before: Apr 27 03:42:56 2025 GMT Not After : May 4 03:42:56 2025 GMT Subject: CN=680da7c1-f473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3e:3a:1a:fe:f4:9f:47:63:39:73:d7:95:eb: 8b:c7:38:7b:b6:89:1c:ab:92:cc:09:33:34:93:73: 9c:e3:98:5d:4b:41:0d:76:ba:51:f4:c6:a4:ea:10: b1:be:50:53:81:bb:f3:f1:a0:5a:a7:80:c3:21:0e: 89:14:d6:0c:d1:e0:5b:94:2b:2e:80:24:3b:5d:6c: 8d:7a:a4:56:05:23:61:60:f0:64:45:1e:ab:6e:90: 60:24:6f:56:cb:fe:8b:4d:6b:68:91:75:f2:f9:25: 15:3f:eb:20:9c:10:6c:2b:53:0c:dc:c0:24:94:51: 8c:9c:81:cd:a4:4e:ec:d1:ae:52:12:09:30:01:fe: 1c:69:46:85:2c:af:b3:86:d3:cb:4a:28:0d:50:a3: 50:f0:c7:69:c1:bc:3d:ac:39:7d:6d:4b:73:0a:4b: 82:9a:3e:11:d7:c8:34:2a:e7:c6:04:69:ec:f6:85: ab:cf:10:e2:2b:5d:93:93:9a:6e:52:3f:5a:4d:65: bc:22:06:ba:01:90:c2:a9:54:fa:63:ba:2d:af:d9: fb:3f:56:48:f4:1e:03:d9:1f:fd:30:5d:0e:14:df: 7a:a8:12:f8:1b:ab:6a:f7:69:6a:45:89:77:b9:eb: 2e:69:30:fc:65:d4:23:32:f4:7c:a6:c8:d2:02:3c: ca:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:30:96:10:77:57:FF:B8:18:72:22:D2:F5:F8:58:F2:92:E6:1F:C2 X509v3 Authority Key Identifier: keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:49:6e:41:c5:29:7e:cf:35:53:d9:bb:ba:a0:f7:55:a6:33: 64:b4:75:ba:db:e6:f9:ff:57:92:9b:0b:2e:9d:75:d2:70:ca: 10:dc:4c:c7:d2:a4:2a:2f:56:c5:4d:c3:f2:1b:5e:63:f6:08: ee:2d:83:8b:c3:f4:6a:5d:bf:26:a3:29:6e:2c:1c:ac:71:c0: d7:d9:7d:4d:37:d5:4e:a2:b2:94:8a:28:86:2d:11:58:06:80: 78:d9:a4:c9:29:a1:ad:44:a6:05:0e:9c:26:55:9c:24:0b:b1: f3:5c:66:d0:09:93:92:27:1c:c4:9b:41:a4:fb:ba:6a:a2:47: e6:7d:b3:24:62:78:ab:a4:ae:58:36:1f:da:22:39:0e:2a:99: 75:bd:90:64:46:91:24:b7:75:b9:52:25:2d:bc:ae:45:42:83: 38:07:06:f8:6e:53:ba:a0:46:4a:d2:8f:8b:cf:1f:19:48:66: b1:56:d7:22:22:76:34:b9:c4:ee:89:f1:b8:3e:0d:23:19:9a: 9b:eb:62:48:72:2b:f5:8e:eb:dd:d9:3d:41:da:4e:0a:62:e8: 6f:12:03:e6:8f:01:f6:8d:c0:63:47:aa:5f:c6:78:73:ce:2e: 86:a6:d2:ef:99:ea:94:a1:64:ca:31:4d:fa:cc:0e:3d:09:ee: ac:0b:65:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU5QTQxMTAvBgNVBAUTKDIwQkQzRjdGOTk4RUQ0M0Q1RkM0Rjg2MjlERDBDMTg4 RUM3RERBRTAwHhcNMjUwNDI3MDM0MjU2WhcNMjUwNTA0MDM0MjU2WjAYMRYwFAYD VQQDEw02ODBkYTdjMS1mNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4T46Gv70n0djOXPXleuLxzh7tokcq5LMCTM0k3Oc45hdS0ENdrpR9Mak6hCx vlBTgbvz8aBap4DDIQ6JFNYM0eBblCsugCQ7XWyNeqRWBSNhYPBkRR6rbpBgJG9W y/6LTWtokXXy+SUVP+sgnBBsK1MM3MAklFGMnIHNpE7s0a5SEgkwAf4caUaFLK+z htPLSigNUKNQ8Mdpwbw9rDl9bUtzCkuCmj4R18g0KufGBGns9oWrzxDiK12Tk5pu Uj9aTWW8Iga6AZDCqVT6Y7otr9n7P1ZI9B4D2R/9MF0OFN96qBL4G6tq92lqRYl3 uesuaTD8ZdQjMvR8psjSAjzKjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIwlhB3 V/+4GHIi0vX4WPKS5h/CMB8GA1UdIwQYMBaAFCC9P3+ZjtQ9X8T4Yp3QwYjsfdrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTlBNC8wRDVEQzUyNDcz MDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFEMWZ4UGhpbmREQmlPeDky dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lMMF9mNW1PMUQxZnhQaGluZERCaU94OTJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTlBNC8wRDVEQzUyNDczMDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFE MWZ4UGhpbmREQmlPeDkydUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkSW5BxSl+zzVT2bu6oPdVpjNktHW62+b5/1eSmwsunXXScMoQ3EzH 0qQqL1bFTcPyG15j9gjuLYOLw/RqXb8moyluLBysccDX2X1NN9VOorKUiiiGLRFY BoB42aTJKaGtRKYFDpwmVZwkC7HzXGbQCZOSJxzEm0Gk+7pqokfmfbMkYnirpK5Y Nh/aIjkOKpl1vZBkRpEkt3W5UiUtvK5FQoM4Bwb4blO6oEZK0o+Lzx8ZSGaxVtci InY0ucTuifG4Pg0jGZqb62JIciv1juvd2T1B2k4KYuhvEgPmjwH2jcBjR6pfxnhz zi6GptLvmeqUoWTKMU36zA49Ce6sC2Xn -----END CERTIFICATE-----Generated at Tue Apr 29 01:19:56 2025 by rpki-client