$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft File: ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft (raw, json) Hash identifier: LQvZOBfbvC5omhD0i0g6k8867nUtPjkX6bH+eWpBAyA= Subject key identifier: 0F:0E:A8:47:8E:BF:67:58:46:C8:75:35:31:3F:34:7D:D9:B1:0E:79 Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft Manifest number: 01A5 Signing time: Sun 11 May 2025 02:13:39 +0000 Manifest this update: Sun 11 May 2025 02:13:38 +0000 Manifest next update: Sun 18 May 2025 02:13:38 +0000 Files and hashes: 1: ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl (hash: x6qVgawSGK9AZsaHz1fcamqc6dOwy8LahO3A3meKM6I=) 2: E816DFFAA90111ED867DA161C4F9AE02.roa (hash: J+hbcg1f000uZywitLiVEmVwojqXye5u/Ee0tXQliec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A828, serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Validity Not Before: May 11 02:13:38 2025 GMT Not After : May 18 02:13:38 2025 GMT Subject: CN=682007d3-6a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:83:61:c3:25:1d:94:cf:a5:49:63:12:ff: 1a:63:3f:a4:3a:14:f7:32:d0:bf:3a:04:c1:80:8d: b1:01:28:73:ca:c3:74:92:43:ee:c3:de:fe:a8:e7: 41:69:fb:21:73:f9:02:ad:12:d7:c9:1b:19:ee:ad: c6:b4:8b:ff:e7:36:2c:61:67:92:d7:68:a8:94:49: b2:f7:7a:8c:b9:62:ec:f5:eb:e5:3a:1a:ec:b5:12: fd:8f:ce:9d:f0:66:ec:fa:44:fd:c9:8f:2d:dd:03: 24:e5:db:86:0d:de:2b:fa:4a:93:0a:77:1c:68:30: 3d:8f:45:ea:4d:71:1b:86:5d:46:31:c3:cd:f2:9d: 00:25:ab:28:9b:93:63:da:82:e1:eb:6d:d5:44:66: 89:b0:e4:49:a9:f3:bd:54:6d:3e:52:f5:50:62:27: 78:44:e8:28:3a:5b:ed:0c:96:a8:02:49:86:b5:ae: 0f:71:8e:37:4c:48:e1:27:63:58:e4:62:39:60:30: 7e:9f:7c:bd:17:c5:55:db:3b:b0:65:9d:b4:d8:27: 44:7b:07:9e:cb:3e:b2:e6:16:17:27:7f:34:b9:dd: c1:8e:c7:27:c7:f6:ce:0e:fb:95:42:2e:f0:62:99: 7d:5a:47:fc:2a:4f:4a:05:f0:da:04:f1:75:11:34: a9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0E:A8:47:8E:BF:67:58:46:C8:75:35:31:3F:34:7D:D9:B1:0E:79 X509v3 Authority Key Identifier: keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ee:e3:2d:2c:8d:60:7e:42:ec:21:4e:38:1a:c0:dc:3b:df: e2:94:89:c9:11:d7:3e:79:1d:a7:7d:16:0d:d8:59:b5:fc:b5: 17:5e:ba:e3:f1:f6:b7:73:65:6a:f8:ac:4b:69:0c:53:03:21: 34:6d:6f:f4:34:3c:a6:9e:9b:37:af:32:0d:3e:0b:3d:81:90: ea:0c:4d:4e:43:3c:bd:6d:b8:85:cd:c4:c7:6a:b2:a2:7d:0f: 15:b8:49:f3:e2:19:19:a5:e6:5a:4f:39:b5:a4:dc:f4:30:08: 0f:3e:f8:2c:a1:b5:e9:44:d7:6d:e3:e8:97:14:44:44:df:0e: bb:69:30:9c:12:06:44:8e:a3:b8:8e:6a:25:d1:e8:f7:4e:12: 19:f0:26:84:18:4d:11:8e:8e:87:b1:a6:88:9c:aa:43:31:cc: ee:23:0d:d3:a9:fd:1f:fe:04:f3:ea:0a:c4:00:8f:98:6e:5d: fe:c2:70:8d:bb:19:5e:4a:a7:65:55:23:f1:a5:c5:14:7f:52: c4:30:bc:ea:5c:0f:69:ba:09:fe:ac:f0:4b:a7:70:71:4a:26: a8:07:5e:a5:3e:84:2e:de:66:b6:71:da:97:29:60:bf:f0:82: a1:1f:9a:9d:e7:d7:a8:72:fc:d9:e8:8d:fa:5c:4f:df:0b:a9: 00:bb:ff:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE4MjgxMTAvBgNVBAUTKDIyNjAzRDZBMzNGMDZFMEE5RDEwRkJCMUVEOUUxRDM3 NDkyNDcwMDEwHhcNMjUwNTExMDIxMzM4WhcNMjUwNTE4MDIxMzM4WjAYMRYwFAYD VQQDEw02ODIwMDdkMy02YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw6DYcMlHZTPpUljEv8aYz+kOhT3MtC/OgTBgI2xAShzysN0kkPuw97+qOdB afshc/kCrRLXyRsZ7q3GtIv/5zYsYWeS12iolEmy93qMuWLs9evlOhrstRL9j86d 8Gbs+kT9yY8t3QMk5duGDd4r+kqTCnccaDA9j0XqTXEbhl1GMcPN8p0AJasom5Nj 2oLh623VRGaJsORJqfO9VG0+UvVQYid4ROgoOlvtDJaoAkmGta4PcY43TEjhJ2NY 5GI5YDB+n3y9F8VV2zuwZZ202CdEeweeyz6y5hYXJ380ud3Bjscnx/bODvuVQi7w Ypl9Wkf8Kk9KBfDaBPF1ETSp1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8OqEeO v2dYRsh1NTE/NH3ZsQ55MB8GA1UdIwQYMBaAFCJgPWoz8G4KnRD7se2eHTdJJHAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTgyOC9EREY5MDA1QUE4 RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2JncWRFUHV4N1o0ZE4wa2tj QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ltQTlhalB3YmdxZEVQdXg3WjRkTjBra2NBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTgyOC9EREY5MDA1QUE4RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2Jn cWRFUHV4N1o0ZE4wa2tjQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB7uMtLI1gfkLsIU44GsDcO9/ilInJEdc+eR2nfRYN2Fm1/LUXXrrj 8fa3c2Vq+KxLaQxTAyE0bW/0NDymnps3rzINPgs9gZDqDE1OQzy9bbiFzcTHarKi fQ8VuEnz4hkZpeZaTzm1pNz0MAgPPvgsobXpRNdt4+iXFERE3w67aTCcEgZEjqO4 jmol0ej3ThIZ8CaEGE0Rjo6HsaaInKpDMczuIw3Tqf0f/gTz6grEAI+Ybl3+wnCN uxleSqdlVSPxpcUUf1LEMLzqXA9pugn+rPBLp3BxSiaoB16lPoQu3ma2cdqXKWC/ 8IKhH5qd59eocvzZ6I36XE/fC6kAu/+c -----END CERTIFICATE-----Generated at Sun May 11 19:07:38 2025 by rpki-client