$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: nACcgr8/dXqJ8BIUzbL0KlMJG9WrNxShy41LpCCroQM= Subject key identifier: A0:57:DC:C9:A5:59:8A:CF:A1:26:8B:95:A1:0D:36:9A:77:33:48:5C Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: FA Signing time: Fri 25 Apr 2025 04:24:44 +0000 Manifest this update: Fri 25 Apr 2025 04:24:44 +0000 Manifest next update: Fri 02 May 2025 04:24:44 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: pOvSsN7Bui07xEfU61QlfLeYyOMAMyZtY4fnqhnUKOw=) 2: 87662556555511EF88D9F680C4F9AE02.roa (hash: k8ciaOJiovKzhjLhsMW8Olbo59H12ftecdkV4UavoKg=) 3: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: BGxl2SOPQW6C/i2r2VN80go3aEYSETpmK67AkebR/E4=) 4: D7FEF354562111EFA7B3F00AC4F9AE02.roa (hash: Z74c44o/GimXrdeWvw94wRAl3MPTrcV7W0A3AuI0ILk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Apr 25 04:24:44 2025 GMT Not After : May 2 04:24:44 2025 GMT Subject: CN=680b0e8c-fb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:f5:6d:a1:d6:fd:ad:06:87:2a:2d:a6:bb: fb:53:0e:dd:58:70:7f:58:0c:9c:25:fe:ef:5d:e5: 87:e2:4e:d7:d0:55:b3:a6:5c:52:34:e8:96:bf:e7: 02:bd:f0:93:8e:2f:b6:85:1e:f0:a9:b3:bd:12:a8: 95:cc:6d:f3:8a:0d:a5:17:f3:b4:61:24:4f:bc:26: 91:d9:c1:a3:92:59:93:2c:84:7a:74:8c:97:07:2c: 3b:69:e9:c5:0a:18:94:94:90:e4:6e:84:f6:86:28: 62:24:83:f7:43:2f:5e:2e:e7:e7:dc:76:b1:8a:23: f8:3e:13:5f:12:ee:48:3b:6c:88:a9:ab:4b:7e:39: 17:d7:7d:d6:0f:d9:5d:92:f0:26:c9:17:c8:9d:99: 6d:8f:99:20:62:4b:21:4e:bd:82:8e:39:72:fe:ae: f7:b6:ff:f0:54:36:c8:c4:f1:63:b1:f8:87:77:4f: 70:84:90:b4:9a:fc:ed:cb:03:e4:c1:6e:1a:e5:4a: 6d:74:83:c2:fc:71:16:18:6f:fa:2e:af:a7:0f:ee: 06:17:26:be:ae:d9:a1:ae:19:b4:72:ac:44:a3:b9: fb:11:05:ac:10:74:5b:60:08:3c:ac:cd:a8:5f:a0: 82:a1:6e:d0:f7:7e:d4:5f:01:8f:ca:cf:a6:0c:8c: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:57:DC:C9:A5:59:8A:CF:A1:26:8B:95:A1:0D:36:9A:77:33:48:5C X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:25:0c:54:85:a6:9e:95:68:79:1e:f9:79:46:97:b2:9e:e0: 93:1f:93:b1:19:8a:01:cc:ce:1e:dd:3b:4f:74:d7:7c:b5:42: b3:40:12:bd:45:f5:91:0c:35:8d:db:6c:a6:fe:e4:60:9e:45: e5:6d:58:73:cf:bd:b1:64:3d:b0:fd:3a:c0:0f:df:9c:13:31: d4:41:f9:e1:15:e5:a8:f2:12:23:7c:12:30:e2:92:7a:83:1f: ca:c7:6b:b1:19:5e:7b:83:28:34:c6:eb:e8:84:84:f1:dd:be: f4:e4:88:e0:bf:3a:34:6d:d2:46:6c:44:59:97:72:de:43:4c: c6:b3:78:83:c1:85:06:68:ac:0b:d9:d3:31:db:a0:ce:8b:44: 7e:d9:cf:c0:2e:c0:c6:0c:f1:b9:cc:84:d6:1e:a8:3e:b2:6d: 87:c3:1f:b7:1d:79:47:a8:e5:71:c7:8c:71:13:64:cc:b3:bd: df:8e:77:bc:cc:1f:27:44:77:64:d7:f3:03:30:af:66:cc:10: 94:ed:30:eb:3f:c2:05:3f:00:b7:52:80:3c:3c:a2:16:23:b1: 4e:7c:87:9f:e1:ce:6d:6f:70:d7:8c:2c:f3:44:00:e8:62:01: ad:eb:98:40:23:46:18:7a:a4:0d:6c:58:1b:0f:21:4b:54:ff: 6a:14:96:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjUwNDI1MDQyNDQ0WhcNMjUwNTAyMDQyNDQ0WjAYMRYwFAYD VQQDEw02ODBiMGU4Yy1mYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaH1baHW/a0Ghyotprv7Uw7dWHB/WAycJf7vXeWH4k7X0FWzplxSNOiWv+cC vfCTji+2hR7wqbO9EqiVzG3zig2lF/O0YSRPvCaR2cGjklmTLIR6dIyXByw7aenF ChiUlJDkboT2hihiJIP3Qy9eLufn3HaxiiP4PhNfEu5IO2yIqatLfjkX133WD9ld kvAmyRfInZltj5kgYkshTr2Cjjly/q73tv/wVDbIxPFjsfiHd09whJC0mvztywPk wW4a5UptdIPC/HEWGG/6Lq+nD+4GFya+rtmhrhm0cqxEo7n7EQWsEHRbYAg8rM2o X6CCoW7Q937UXwGPys+mDIxJjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBX3Mml WYrPoSaLlaENNpp3M0hcMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOJQxUhaaelWh5Hvl5RpeynuCTH5OxGYoBzM4e3TtPdNd8tUKzQBK9 RfWRDDWN22ym/uRgnkXlbVhzz72xZD2w/TrAD9+cEzHUQfnhFeWo8hIjfBIw4pJ6 gx/Kx2uxGV57gyg0xuvohITx3b705Ijgvzo0bdJGbERZl3LeQ0zGs3iDwYUGaKwL 2dMx26DOi0R+2c/ALsDGDPG5zITWHqg+sm2Hwx+3HXlHqOVxx4xxE2TMs73fjne8 zB8nRHdk1/MDMK9mzBCU7TDrP8IFPwC3UoA8PKIWI7FOfIef4c5tb3DXjCzzRADo YgGt65hAI0YYeqQNbFgbDyFLVP9qFJbL -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:07 2025 by rpki-client