$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: iF11ZMEBRvOXnPikrxuwUHUQJuAUvOLkUVyfX7Hytbc= Subject key identifier: AE:03:A0:8F:DA:AD:29:54:1F:B0:F0:4B:43:7C:E6:E5:01:D3:1E:59 Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 011C Signing time: Fri 25 Apr 2025 04:04:30 +0000 Manifest this update: Fri 25 Apr 2025 04:04:29 +0000 Manifest next update: Fri 02 May 2025 04:04:29 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: SicMgas5oyjgcKDP8UwmwXOc55zV8OxDqgoUQ+HS3JU=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Apr 25 04:04:29 2025 GMT Not After : May 2 04:04:29 2025 GMT Subject: CN=680b09ce-6a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:18:4f:23:c3:ce:6a:a8:c5:50:d7:77:f6: 72:5b:a4:24:40:3e:cf:73:99:bf:a5:03:ed:e1:15: 1f:cf:c6:af:c1:2d:f3:c3:16:e9:95:df:6e:ba:95: 8e:7e:a9:a3:f2:e0:fb:b5:e3:97:ac:7f:58:8d:88: d8:14:a4:df:6e:70:9f:09:99:cf:07:b5:c9:e0:da: 49:1a:91:4d:a7:ce:6e:de:61:32:95:ae:16:43:d3: 87:5c:4a:5c:93:05:13:4a:69:97:c1:1a:f0:7a:18: 6e:d2:4c:2b:1d:ab:fb:6b:43:4f:1d:3d:26:cd:41: b2:2d:13:33:6c:e7:b6:b5:a3:cc:1c:d0:4f:4d:b6: 2c:9e:07:fb:89:78:6e:cf:c0:e9:64:fd:f9:88:3e: 58:3f:38:26:3f:66:9a:5a:b5:18:82:6a:16:ba:65: cb:0c:7c:4f:e9:a2:7b:0b:05:ca:8d:aa:0d:52:c9: 6f:eb:ea:fc:6f:0c:3c:0b:92:63:62:38:2f:c2:24: 7d:9a:0e:e2:41:eb:bf:35:b4:fb:49:d9:1a:55:4c: 5b:35:f5:c5:72:65:16:b5:fa:86:31:97:2a:67:79: df:75:96:2e:a5:2b:5a:71:e5:4f:38:55:e5:d6:c7: 06:1b:dd:ee:12:5c:0f:2d:cb:3e:52:de:e8:95:80: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:03:A0:8F:DA:AD:29:54:1F:B0:F0:4B:43:7C:E6:E5:01:D3:1E:59 X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:08:df:b7:e6:f7:03:7e:fb:c5:52:9a:d3:7e:61:64:6b:b9: 1c:48:09:93:4d:71:55:92:4b:59:73:21:94:99:46:04:14:69: 09:30:f3:15:8c:d9:d1:3f:fb:99:10:d7:38:02:61:5d:33:22: 58:50:35:05:96:78:8b:8f:c0:25:63:fb:8f:01:1d:a6:4f:66: 0e:c5:75:5a:64:3c:00:f3:e1:9c:da:65:8b:80:ab:f4:b3:fc: 66:bd:12:0e:ce:8e:3a:c2:20:10:bf:35:0e:03:ea:9d:4d:5f: 73:e7:1c:01:35:14:5d:ce:e4:ab:c6:64:d5:b2:4f:de:30:5d: 8c:43:98:89:4f:5c:37:57:4b:8d:c9:23:57:27:41:c1:a1:2c: 78:d4:6a:2e:1e:8b:c0:dd:36:57:6a:5a:6e:cb:47:06:b6:95: 72:c6:81:b3:0b:ae:ac:cc:49:85:54:69:47:17:57:a4:1d:52: 55:42:02:2f:ea:e3:7d:08:dd:22:31:84:aa:b9:95:ae:69:02: c4:57:ea:09:4c:0c:db:48:1c:74:13:cd:21:b2:95:8a:89:2e: ed:83:e8:d1:bf:81:0e:79:1c:cd:46:9f:7e:45:3f:5e:4a:12: 10:c4:62:9b:39:c0:fb:94:b3:f1:2b:6e:95:49:ac:81:62:4e: d9:f6:af:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUwNDI1MDQwNDI5WhcNMjUwNTAyMDQwNDI5WjAYMRYwFAYD VQQDEw02ODBiMDljZS02YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPEYTyPDzmqoxVDXd/ZyW6QkQD7Pc5m/pQPt4RUfz8avwS3zwxbpld9uupWO fqmj8uD7teOXrH9YjYjYFKTfbnCfCZnPB7XJ4NpJGpFNp85u3mEyla4WQ9OHXEpc kwUTSmmXwRrwehhu0kwrHav7a0NPHT0mzUGyLRMzbOe2taPMHNBPTbYsngf7iXhu z8DpZP35iD5YPzgmP2aaWrUYgmoWumXLDHxP6aJ7CwXKjaoNUslv6+r8bww8C5Jj YjgvwiR9mg7iQeu/NbT7SdkaVUxbNfXFcmUWtfqGMZcqZ3nfdZYupStaceVPOFXl 1scGG93uElwPLcs+Ut7olYBHCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4DoI/a rSlUH7DwS0N85uUB0x5ZMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+CN+35vcDfvvFUprTfmFka7kcSAmTTXFVkktZcyGUmUYEFGkJMPMV jNnRP/uZENc4AmFdMyJYUDUFlniLj8AlY/uPAR2mT2YOxXVaZDwA8+Gc2mWLgKv0 s/xmvRIOzo46wiAQvzUOA+qdTV9z5xwBNRRdzuSrxmTVsk/eMF2MQ5iJT1w3V0uN ySNXJ0HBoSx41GouHovA3TZXalpuy0cGtpVyxoGzC66szEmFVGlHF1ekHVJVQgIv 6uN9CN0iMYSquZWuaQLEV+oJTAzbSBx0E80hspWKiS7tg+jRv4EOeRzNRp9+RT9e ShIQxGKbOcD7lLPxK26VSayBYk7Z9q+g -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:43 2025 by rpki-client