$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft File: IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json) Hash identifier: icIz+gJcux0IfuQOlVQ8Gt7flrL0pfBxQwxgSl/CrcU= Subject key identifier: 4D:24:D7:52:D1:4B:8D:CB:78:1E:EE:DA:6B:E4:B2:9C:77:AF:AD:F4 Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft Manifest number: 0179 Signing time: Fri 25 Apr 2025 02:53:25 +0000 Manifest this update: Fri 25 Apr 2025 02:53:25 +0000 Manifest next update: Fri 02 May 2025 02:53:25 +0000 Files and hashes: 1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: ESdkFSUSwXalaOIpPg80NZiQ8cauSKUaVNYJIov2EgM=) 2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: KHyj1otfkf2S5YApB/OtC5OI1QkNCQ8X27Eo+XCQipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: Apr 25 02:53:25 2025 GMT Not After : May 2 02:53:25 2025 GMT Subject: CN=680af925-5bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:08:a9:17:2a:24:7e:3d:00:b9:8a:7c:6d:1c: 3c:74:cd:5b:f4:0f:82:ac:66:06:37:e2:07:b3:30: 88:64:b3:11:cf:6a:7b:d4:c5:58:6a:87:83:a5:31: 73:34:12:af:1b:5f:55:3f:cf:f7:d2:b9:6f:36:f9: 00:5d:ed:ed:02:58:51:64:92:c9:c2:b3:04:f6:c5: 2b:71:9d:8e:86:c3:3c:ef:4b:d2:97:87:35:33:f3: da:2a:37:25:7b:92:cb:d3:00:90:a2:69:74:c6:78: 1f:34:3e:bd:46:dc:c1:0c:7e:e5:26:a5:9f:da:4d: 9c:07:d3:f1:5b:35:a7:a8:d4:e6:1c:d6:e3:4a:1a: 2a:e2:a9:bb:9a:0a:0f:74:8c:eb:54:8a:af:10:4f: 85:97:f0:e7:93:72:1e:86:db:d1:7f:25:7c:b5:ef: 3c:ba:87:77:7e:ae:9a:92:a2:d6:e2:4e:f7:92:f3: e5:7e:a6:ad:d0:f8:92:19:b1:f1:59:3c:51:0d:68: c5:f4:49:ac:ff:73:98:e7:7d:f6:34:4f:b5:14:72: c2:ba:88:e5:97:18:f1:01:ba:b9:c9:09:52:24:69: 49:71:74:51:99:70:2d:fb:a4:00:60:26:69:32:6e: 7d:c8:b2:71:f3:c8:b0:5c:ff:e8:b0:78:3c:4b:89: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:24:D7:52:D1:4B:8D:CB:78:1E:EE:DA:6B:E4:B2:9C:77:AF:AD:F4 X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d0:06:8d:2a:4a:65:24:6a:86:69:e2:97:73:b5:59:ce:70: 63:e6:57:15:f7:11:c6:28:46:19:9a:aa:6e:cc:95:32:46:12: 8a:a3:b5:42:d6:3b:94:a2:ac:9d:f8:fa:24:2d:0c:c9:29:55: 71:22:eb:d0:98:52:c5:9f:1e:87:97:19:8d:80:43:25:f2:0d: 90:a3:ce:22:12:5a:96:da:2e:1f:73:4a:4e:66:c2:8c:c9:b3: 61:9d:4a:31:72:73:2f:2c:74:35:a8:3c:37:45:d9:95:0c:ba: e8:04:5a:cb:f7:a7:21:90:97:8d:09:3c:86:9a:e1:f5:90:11: b9:7e:cc:29:3a:91:e6:cb:7f:1b:e2:db:3a:85:6b:92:bb:d4: eb:ae:a7:4a:4f:ad:ee:16:b6:78:0d:b2:87:5a:24:ac:e2:1b: 89:18:25:2d:0f:c4:d4:4b:1a:0f:c6:86:7a:01:ab:a1:17:7c: af:11:f2:d4:b4:fa:71:01:42:c9:0c:e9:70:96:d0:90:90:80: f0:12:ab:04:ae:0c:c0:0b:9d:80:58:7f:db:c4:05:89:a3:d7: d1:32:28:13:9c:4f:8a:78:ba:d4:1c:f1:5f:32:df:c9:65:93: f6:4a:4a:28:a4:9d:27:fd:9b:65:b4:6e:a9:73:1c:ad:cb:b4: 48:2b:53:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjUwNDI1MDI1MzI1WhcNMjUwNTAyMDI1MzI1WjAYMRYwFAYD VQQDEw02ODBhZjkyNS01YmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwipFyokfj0AuYp8bRw8dM1b9A+CrGYGN+IHszCIZLMRz2p71MVYaoeDpTFz NBKvG19VP8/30rlvNvkAXe3tAlhRZJLJwrME9sUrcZ2OhsM870vSl4c1M/PaKjcl e5LL0wCQoml0xngfND69RtzBDH7lJqWf2k2cB9PxWzWnqNTmHNbjShoq4qm7mgoP dIzrVIqvEE+Fl/Dnk3IehtvRfyV8te88uod3fq6akqLW4k73kvPlfqat0PiSGbHx WTxRDWjF9Ems/3OY5332NE+1FHLCuojllxjxAbq5yQlSJGlJcXRRmXAt+6QAYCZp Mm59yLJx88iwXP/osHg8S4lnAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0k11LR S43LeB7u2mvkspx3r630MB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Nzk0RC9DMkNDRTFEQ0U0MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3Vmct Tm9mTjdMX0JQcGxCQWExQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr0AaNKkplJGqGaeKXc7VZznBj5lcV9xHGKEYZmqpuzJUyRhKKo7VC 1juUoqyd+PokLQzJKVVxIuvQmFLFnx6HlxmNgEMl8g2Qo84iElqW2i4fc0pOZsKM ybNhnUoxcnMvLHQ1qDw3RdmVDLroBFrL96chkJeNCTyGmuH1kBG5fswpOpHmy38b 4ts6hWuSu9TrrqdKT63uFrZ4DbKHWiSs4huJGCUtD8TUSxoPxoZ6AauhF3yvEfLU tPpxAULJDOlwltCQkIDwEqsErgzAC52AWH/bxAWJo9fRMigTnE+KeLrUHPFfMt/J ZZP2SkoopJ0n/ZtltG6pcxyty7RIK1O4 -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:50 2025 by rpki-client