$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft File: I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json) Hash identifier: QKYCPssQ2cR/GHrcwkw6oFmTv1C8F8yCG492GQB3VPE= Subject key identifier: A9:C4:E4:7F:CF:7D:01:13:19:50:3C:C9:37:BC:1B:86:33:89:8D:09 Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2 Certificate issuer: /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft Manifest number: 05B7 Signing time: Sun 04 May 2025 22:47:07 +0000 Manifest this update: Sun 04 May 2025 22:47:07 +0000 Manifest next update: Sun 11 May 2025 22:47:07 +0000 Files and hashes: 1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: aVbcRF33BM9ZCjrwoHPAEIm4PKx0mfdV4AO9XrpCs2E=) 2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: dCkT6bEicYFMQep7850krPGfdcTTuO3WSPylF2CQFFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2 Validity Not Before: May 4 22:47:07 2025 GMT Not After : May 11 22:47:07 2025 GMT Subject: CN=6817ee6b-d237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:c6:76:71:58:16:ae:d8:41:22:b4:a2:26: 19:52:43:68:ea:ce:60:71:94:1b:d1:9f:c9:89:64: 9e:34:bd:a7:51:d3:a6:69:01:19:04:8a:d7:5f:6a: b1:5b:dd:b0:b0:3e:85:fc:4c:2a:5b:59:77:99:34: 75:9b:4b:9d:f6:c5:ed:1c:18:5c:4a:21:14:cd:41: 0b:6f:7c:e7:2c:8b:58:a8:12:07:2d:1d:ff:76:fe: 1a:35:9f:c8:87:5c:26:d9:a0:0e:2d:34:09:51:e5: 09:81:ce:1e:75:0a:68:b4:2e:e7:e4:d5:e9:30:d7: 77:34:58:9c:e8:d4:22:70:10:ae:49:51:65:ae:a0: 10:56:e0:aa:8b:1b:c6:e2:b5:4e:76:fd:ab:8d:7b: 41:a1:c0:02:3a:36:e4:8c:e1:4f:fb:c1:26:cd:9f: 77:77:f5:71:6b:c0:58:15:79:8d:62:bf:fb:97:00: 38:6e:c3:31:c6:fe:3e:5f:2a:bf:04:33:fd:89:e3: ae:e3:7f:6b:40:ce:66:f4:e1:1f:24:f8:ea:2a:0f: 9e:29:27:dd:95:5f:a5:97:0a:d5:5a:b9:a7:2c:57: de:d2:e0:de:aa:3e:52:57:0a:2e:fa:1f:a6:90:ef: 41:84:5d:ab:35:49:c3:0f:81:b0:80:70:76:f0:a2: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C4:E4:7F:CF:7D:01:13:19:50:3C:C9:37:BC:1B:86:33:89:8D:09 X509v3 Authority Key Identifier: keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:7b:56:b9:b5:50:1f:0b:02:59:3b:d4:2d:23:fa:53:03:1d: 3b:20:f5:93:3e:30:34:6b:08:f8:58:49:dd:aa:a8:1c:52:33: 70:e1:f8:ac:48:b9:7d:ad:47:e2:76:3a:b2:5a:5e:3f:56:53: 5b:c7:b1:4a:48:19:2b:fc:f8:3a:14:a6:c1:cf:88:55:23:45: d5:4b:bb:28:62:f8:28:62:00:35:c9:16:e8:80:3b:ad:c5:68: 44:cb:e1:bd:72:ad:ca:80:4f:f8:47:3f:59:c2:13:32:a7:f4: 25:92:23:74:46:6b:6d:1c:44:5a:32:c3:56:2d:f2:da:9a:c8: da:90:53:de:6c:98:d4:a8:51:31:ab:70:ef:e8:a7:eb:fa:45: d9:e6:79:77:ee:21:e5:46:1e:86:76:3a:37:ba:72:87:f5:d4: a2:2d:00:62:7e:12:96:28:13:2f:4b:6b:e1:27:8e:19:3b:23: 21:4b:c5:d4:54:01:cb:12:bc:e2:9e:93:18:ea:84:e4:b5:65: 54:a2:8c:93:b0:5b:7c:31:e5:5a:9a:db:2e:1c:6a:73:d7:e2: ea:d4:39:0c:e3:c4:f1:b8:24:28:73:27:5e:4a:c9:3a:65:82: a3:5f:c3:ef:d8:48:9c:da:03:07:12:a6:57:19:cf:d0:49:1d: 85:1a:81:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEExMTAvBgNVBAUTKDIzREIzMzIzREQyQ0Q3OUMzNzM4NTgxRDQyRjRBQjBG NDk4ODM0QzIwHhcNMjUwNTA0MjI0NzA3WhcNMjUwNTExMjI0NzA3WjAYMRYwFAYD VQQDEw02ODE3ZWU2Yi1kMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu03GdnFYFq7YQSK0oiYZUkNo6s5gcZQb0Z/JiWSeNL2nUdOmaQEZBIrXX2qx W92wsD6F/EwqW1l3mTR1m0ud9sXtHBhcSiEUzUELb3znLItYqBIHLR3/dv4aNZ/I h1wm2aAOLTQJUeUJgc4edQpotC7n5NXpMNd3NFic6NQicBCuSVFlrqAQVuCqixvG 4rVOdv2rjXtBocACOjbkjOFP+8EmzZ93d/Vxa8BYFXmNYr/7lwA4bsMxxv4+Xyq/ BDP9ieOu439rQM5m9OEfJPjqKg+eKSfdlV+llwrVWrmnLFfe0uDeqj5SVwou+h+m kO9BhF2rNUnDD4GwgHB28KJooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnE5H/P fQETGVA8yTe8G4YziY0JMB8GA1UdIwQYMBaAFCPbMyPdLNecNzhYHUL0qw9JiDTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4QS8yQTM1NjZBOEMy QTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1dzNPRmdkUXZTckQwbUlO TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5c3pJOTBzMTV3M09GZ2RRdlNyRDBtSU5NSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzI4QS8yQTM1NjZBOEMyQTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1 dzNPRmdkUXZTckQwbUlOTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1e1a5tVAfCwJZO9QtI/pTAx07IPWTPjA0awj4WEndqqgcUjNw4fis SLl9rUfidjqyWl4/VlNbx7FKSBkr/Pg6FKbBz4hVI0XVS7soYvgoYgA1yRbogDut xWhEy+G9cq3KgE/4Rz9ZwhMyp/QlkiN0RmttHERaMsNWLfLamsjakFPebJjUqFEx q3Dv6Kfr+kXZ5nl37iHlRh6Gdjo3unKH9dSiLQBifhKWKBMvS2vhJ44ZOyMhS8XU VAHLErzinpMY6oTktWVUooyTsFt8MeVamtsuHGpz1+Lq1DkM48TxuCQocydeSsk6 ZYKjX8Pv2Eic2gMHEqZXGc/QSR2FGoGg -----END CERTIFICATE-----Generated at Mon May 5 01:54:34 2025 by rpki-client