$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: kdu+vGJm/Xp1Gc8VTgS2YaYDrBCi5PpcoiMPYHrV8aY= Subject key identifier: BA:E9:BD:41:D9:6D:C3:71:22:2B:F5:F5:84:E1:1E:80:FB:8E:49:B2 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 104E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 104A Signing time: Mon 12 May 2025 17:19:46 +0000 Manifest this update: Mon 12 May 2025 17:19:46 +0000 Manifest next update: Mon 19 May 2025 17:19:46 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: zWl3coodCR69maAa7ZxF9MN+XiV/CnhnDAv1TZGp7EM=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: ICClcvVBKcFuPdfdFfNgviyTAzomOOoPWyOYhtZ5b7Q=) 3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: H1dTpSfdD/QgGNFcXeYoqv9nvsCcB8MXgkClUdfFMB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4174 (0x104e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: May 12 17:19:46 2025 GMT Not After : May 19 17:19:46 2025 GMT Subject: CN=68222db2-5265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:af:df:cd:a9:f3:00:94:bb:b8:bb:fc:a4: 2a:0e:7c:cc:64:80:04:ba:ca:ae:d5:a5:66:ec:15: 53:18:e8:b9:d5:e1:c5:18:43:d2:48:6d:e8:9e:dc: 86:72:4f:37:32:69:4e:72:91:43:40:6f:eb:32:8d: dc:c9:59:f5:19:fe:d3:d2:25:29:b3:4d:78:3d:d0: 2d:12:a3:7c:e1:f7:fd:11:7c:bf:44:66:29:ed:6f: 48:7f:b0:db:dd:8b:9b:71:69:a3:79:bc:4f:72:cc: 0a:9c:84:7e:3e:5a:59:b2:8e:74:51:04:b1:bd:f3: 95:63:86:c9:15:e3:87:4b:f7:88:b9:65:40:40:76: 25:b3:54:fe:1b:c1:6c:9b:54:94:cd:05:37:d5:31: f0:de:e1:1b:17:1e:58:8f:f7:46:e4:46:b4:90:46: 94:b8:14:68:d3:08:dd:53:24:14:ce:8b:0c:b8:b2: 87:34:5f:b4:10:61:69:2c:03:bf:82:01:cb:c4:d0: 50:cd:0f:3c:eb:d7:f7:79:d4:f7:c6:c6:29:f6:ce: a6:d4:7d:f6:d2:0a:5d:bb:84:88:cb:4e:83:72:b7: a5:5c:ab:42:f4:18:af:0e:72:da:7e:b5:69:06:fd: 9c:d9:bc:f1:1f:e2:f1:6d:1f:fd:60:a1:c1:2c:85: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E9:BD:41:D9:6D:C3:71:22:2B:F5:F5:84:E1:1E:80:FB:8E:49:B2 X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e7:51:25:8b:40:f3:20:7f:37:51:71:91:ce:dc:7b:86:cd: 87:3e:62:67:6e:fe:94:fb:e4:72:3e:57:d2:bf:a6:a4:d7:14: 86:5a:4d:4f:e5:a5:f5:73:ef:05:06:3f:13:7e:c7:72:b1:ea: c9:48:f3:4b:38:fa:e6:c1:42:1e:dc:43:ff:76:ac:d5:c8:f6: 42:f2:33:e6:85:15:71:43:af:d2:82:42:70:8f:4e:1d:c4:ac: b6:c0:4d:e1:90:cd:df:23:ed:6c:fa:21:26:e7:8a:8c:b1:89: c3:a4:8f:5e:4e:1f:5e:a9:0e:e7:da:1a:28:40:c0:cf:ae:62: b4:31:47:b8:aa:ca:cc:08:9e:2b:3d:bc:78:6f:2e:d1:6a:3c: c2:e3:1e:43:bd:45:56:f6:1f:08:61:7c:7b:41:74:f6:74:66: 3c:41:0f:59:4d:a3:9a:c1:3d:63:23:ed:26:cd:3c:d3:da:f4: 00:57:f5:36:36:6f:80:fe:70:70:fa:53:11:d2:13:d7:99:5c: 70:c3:a4:f8:08:27:29:0b:90:fb:22:d4:e1:b2:98:1e:c0:08: b2:8b:06:4a:7c:3b:68:a2:d1:d6:24:e6:56:19:1e:d5:ee:19: ff:90:90:49:63:9a:fc:67:36:3f:d3:ea:50:98:c4:33:17:92: a5:d2:2c:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjUwNTEyMTcxOTQ2WhcNMjUwNTE5MTcxOTQ2WjAYMRYwFAYD VQQDEw02ODIyMmRiMi01MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtESv382p8wCUu7i7/KQqDnzMZIAEusqu1aVm7BVTGOi51eHFGEPSSG3ontyG ck83MmlOcpFDQG/rMo3cyVn1Gf7T0iUps014PdAtEqN84ff9EXy/RGYp7W9If7Db 3YubcWmjebxPcswKnIR+PlpZso50UQSxvfOVY4bJFeOHS/eIuWVAQHYls1T+G8Fs m1SUzQU31THw3uEbFx5Yj/dG5Ea0kEaUuBRo0wjdUyQUzosMuLKHNF+0EGFpLAO/ ggHLxNBQzQ8869f3edT3xsYp9s6m1H320gpdu4SIy06DcrelXKtC9BivDnLafrVp Bv2c2bzxH+LxbR/9YKHBLIV2cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrpvUHZ bcNxIiv19YThHoD7jkmyMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM51Eli0DzIH83UXGRztx7hs2HPmJnbv6U++RyPlfSv6ak1xSGWk1P 5aX1c+8FBj8TfsdyserJSPNLOPrmwUIe3EP/dqzVyPZC8jPmhRVxQ6/SgkJwj04d xKy2wE3hkM3fI+1s+iEm54qMsYnDpI9eTh9eqQ7n2hooQMDPrmK0MUe4qsrMCJ4r Pbx4by7RajzC4x5DvUVW9h8IYXx7QXT2dGY8QQ9ZTaOawT1jI+0mzTzT2vQAV/U2 Nm+A/nBw+lMR0hPXmVxww6T4CCcpC5D7ItThspgewAiyiwZKfDtootHWJOZWGR7V 7hn/kJBJY5r8ZzY/0+pQmMQzF5Kl0iy2 -----END CERTIFICATE-----Generated at Wed May 14 04:38:02 2025 by rpki-client