$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: ib6l60jpNwvEBTsjctlg/QaVZEA/xFTihriT53ZzNew= Subject key identifier: 74:45:DF:4B:68:0E:29:B1:33:EA:7C:0C:1F:9D:AB:C9:DD:A2:51:9F Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0C5D Signing time: Mon 12 May 2025 18:11:48 +0000 Manifest this update: Mon 12 May 2025 18:11:48 +0000 Manifest next update: Mon 19 May 2025 18:11:48 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: XWRZHnTlacJ6Fuk6trFj/RHx9FwChJnwoZXHT44hcvk=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: jSwMcFszO57ienV1VmhbXd49FtQGNQErTQsLI54ATCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: May 12 18:11:48 2025 GMT Not After : May 19 18:11:48 2025 GMT Subject: CN=682239e4-5ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:a4:1f:81:4d:79:7b:55:6b:66:d5:ee:25: ec:29:81:46:ad:72:11:54:be:ba:e0:08:80:77:9f: 9a:fd:53:c7:21:9b:8e:6c:e9:b1:c7:06:4c:8d:14: 05:1a:c6:d2:b7:cd:88:3f:07:94:e1:59:c7:3b:5f: 77:a3:f3:d5:43:d8:5b:e7:b9:f0:d2:ab:ae:e9:ba: 73:28:55:2a:ab:b9:c7:00:66:55:c9:4f:ca:9d:c5: ef:13:b9:b9:c8:7e:90:db:b5:c9:c9:5f:65:76:34: e1:34:fe:75:9c:34:4e:2a:a8:aa:46:b7:ec:3b:67: e0:15:c0:fc:be:aa:7c:a3:21:4b:7f:d3:5a:bf:45: 64:26:ae:fb:b1:dc:99:e8:39:1f:91:1f:ce:3c:9d: b7:a7:e1:2a:e6:d1:e5:a8:1d:8b:08:81:87:91:21: 29:ca:fd:14:9e:2c:62:39:b7:b8:6d:26:2a:95:5d: 97:9a:71:b0:05:fa:bb:78:ad:2a:b7:ba:f6:b6:b7: b4:89:9f:61:3f:fc:b3:21:6d:32:5f:18:7b:c0:f6: 1c:92:38:b6:70:33:13:a3:e8:3c:c6:3f:04:a4:8d: a3:f5:bc:69:65:34:af:ef:9e:0a:04:91:97:ce:5f: 18:b7:a9:41:b5:b5:0b:08:35:37:dc:e6:da:3b:0a: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:DF:4B:68:0E:29:B1:33:EA:7C:0C:1F:9D:AB:C9:DD:A2:51:9F X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:60:b1:21:81:3e:79:10:bd:6b:38:0e:4f:e6:8d:34:f1:0f: 25:11:09:c2:2f:55:a1:1c:76:87:c7:46:94:07:9e:e8:89:9a: 86:0a:6a:ff:c3:a0:87:26:3b:0f:0f:f4:df:e6:1e:eb:21:a8: 0c:72:5c:83:98:82:71:7d:19:a6:ac:04:a3:93:10:e5:9d:df: 0e:42:57:f2:89:ef:aa:aa:79:f0:d7:fa:30:3c:89:61:82:65: 49:45:eb:05:40:95:fe:f6:46:e7:5b:68:a7:43:6c:36:20:cc: 8b:b9:ba:ca:bb:20:e2:30:a2:68:80:34:7a:cd:ea:5a:87:c3: 34:3b:7f:6f:4f:59:5f:f1:42:c7:d4:45:56:bd:50:52:e0:be: 4d:83:64:f5:b7:26:48:e9:b7:7c:2e:61:5d:da:40:6d:5a:39: 22:ca:fc:85:12:f9:52:57:96:f6:12:bc:ce:42:2b:83:c1:3c: 6f:5a:e8:d6:03:73:cb:9e:81:be:38:b4:d3:87:1a:68:3e:ca: da:cb:73:13:6f:2a:b3:79:72:24:5f:a9:3e:5a:4c:63:da:84: ba:a0:88:c9:d6:d1:1d:09:b2:97:b0:28:e7:cd:02:11:98:01: 90:b0:ad:a8:48:4c:4d:a2:d1:0b:85:33:4b:02:61:70:c0:8e: 25:bc:18:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjUwNTEyMTgxMTQ4WhcNMjUwNTE5MTgxMTQ4WjAYMRYwFAYD VQQDEw02ODIyMzllNC01ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oukH4FNeXtVa2bV7iXsKYFGrXIRVL664AiAd5+a/VPHIZuObOmxxwZMjRQF GsbSt82IPweU4VnHO193o/PVQ9hb57nw0quu6bpzKFUqq7nHAGZVyU/KncXvE7m5 yH6Q27XJyV9ldjThNP51nDROKqiqRrfsO2fgFcD8vqp8oyFLf9Nav0VkJq77sdyZ 6DkfkR/OPJ23p+Eq5tHlqB2LCIGHkSEpyv0UnixiObe4bSYqlV2XmnGwBfq7eK0q t7r2tre0iZ9hP/yzIW0yXxh7wPYckji2cDMTo+g8xj8EpI2j9bxpZTSv754KBJGX zl8Yt6lBtbULCDU33ObaOwrf5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRF30to DimxM+p8DB+dq8ndolGfMB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzYLEhgT55EL1rOA5P5o008Q8lEQnCL1WhHHaHx0aUB57oiZqGCmr/ w6CHJjsPD/Tf5h7rIagMclyDmIJxfRmmrASjkxDlnd8OQlfyie+qqnnw1/owPIlh gmVJResFQJX+9kbnW2inQ2w2IMyLubrKuyDiMKJogDR6zepah8M0O39vT1lf8ULH 1EVWvVBS4L5Ng2T1tyZI6bd8LmFd2kBtWjkiyvyFEvlSV5b2ErzOQiuDwTxvWujW A3PLnoG+OLTThxpoPsray3MTbyqzeXIkX6k+Wkxj2oS6oIjJ1tEdCbKXsCjnzQIR mAGQsK2oSExNotELhTNLAmFwwI4lvBgo -----END CERTIFICATE-----Generated at Tue May 13 23:10:16 2025 by rpki-client