$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: Gi1fJD9qgRHPfGvpAs6wryfOtKOSQ9yGlbeCYsn9L5w= Subject key identifier: 76:D3:A8:8E:96:0A:3C:10:08:57:65:4E:8D:55:00:1A:6D:65:07:F0 Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 01FC Signing time: Tue 13 May 2025 01:52:13 +0000 Manifest this update: Tue 13 May 2025 01:52:13 +0000 Manifest next update: Tue 20 May 2025 01:52:13 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: 4YEaXP7a2i7Vwe3LjvX8WxC++ChBmTZZfIHzkyQ4wKQ=) 2: 99D6D8089BF111ED8043AD1FC4F9AE02.roa (hash: RN89+S1mBA7UPdGt6AqckCvGseRU/f6VRbIgO417GXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: May 13 01:52:13 2025 GMT Not After : May 20 01:52:13 2025 GMT Subject: CN=6822a5cd-4552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:37:32:21:ef:93:16:bc:f5:d2:c2:02:bf: c7:20:41:31:6d:b4:16:b5:0b:22:77:e7:0e:c4:91: b0:c3:8f:51:d6:12:47:b5:b3:5b:65:3c:24:54:48: 66:a0:45:7c:de:11:fb:47:92:c6:ae:be:b1:62:ed: a1:5a:94:e6:1d:3c:fa:86:71:0b:b8:13:03:44:9b: 3a:8f:20:ea:9b:fd:35:c2:1f:e3:c9:a2:bc:ce:b4: 24:8c:13:3a:e7:84:4f:75:a2:7c:f1:81:34:65:93: 9a:a1:2c:7e:3c:97:36:e6:1c:8b:03:1d:d4:03:d0: dd:d8:49:2b:5c:ad:f1:07:b3:e3:23:1a:a7:59:fa: 33:2a:31:41:60:57:6d:cc:ae:4a:9a:d7:98:a0:cc: f1:bd:d0:16:11:b4:4b:83:37:13:4c:3f:d0:76:40: 82:34:d7:3f:3c:dc:4f:82:47:01:cc:7a:4f:7a:ed: 96:da:8f:d9:98:96:e2:d9:b1:61:5e:eb:3e:99:d3: d7:a2:4c:c6:42:21:4f:ae:85:6c:58:a9:03:23:e5: 46:52:39:27:e3:13:71:47:65:e4:a8:2f:11:06:8a: 74:75:2c:16:af:39:16:6b:38:a7:35:4b:a9:d5:29: 5c:76:bb:93:c1:72:dc:f3:b4:12:c9:98:99:1d:6c: 9b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D3:A8:8E:96:0A:3C:10:08:57:65:4E:8D:55:00:1A:6D:65:07:F0 X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:38:21:ef:8d:f2:aa:5f:60:2d:c3:55:ff:9d:40:cb:fc:97: 87:a7:3c:bd:45:d8:7d:91:ab:28:7b:d3:20:cf:d6:e3:4a:ee: 37:f8:8f:86:cb:6f:de:62:1a:35:dc:cf:a9:2d:fe:b4:97:30: a3:e8:67:b9:b4:8c:f8:a7:49:85:de:80:c0:c3:df:89:6b:ef: f7:af:a9:40:85:eb:52:fa:07:7c:55:57:37:90:67:5e:9d:0d: b4:80:a1:f0:4b:d1:9a:d6:aa:e4:62:76:28:5f:d6:fa:3b:eb: 64:38:e3:33:37:15:2c:1b:83:2c:09:b0:47:19:82:52:7c:27: 00:07:d5:40:70:a5:59:93:38:07:45:f8:7a:55:5d:04:d6:e0: 82:f4:46:12:73:ed:03:48:aa:b4:9a:79:e9:0e:11:07:86:0f: 9c:ad:e8:a9:f4:96:97:2c:f5:ed:32:4f:f9:d2:95:fc:b5:40: 45:dd:87:52:9c:f9:cd:57:b9:16:2c:02:93:b4:1c:8c:e7:c7: 21:2f:2b:d6:0d:97:67:62:92:8b:6f:5b:1a:33:66:c5:45:76: 7c:a4:4b:81:73:8f:19:00:6a:9e:9f:b4:64:38:b0:5d:21:d1: c0:e4:9e:e9:3e:2b:61:1d:25:22:b1:b6:4f:38:bb:a2:d7:f1: f0:91:20:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjUwNTEzMDE1MjEzWhcNMjUwNTIwMDE1MjEzWjAYMRYwFAYD VQQDEw02ODIyYTVjZC00NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK03MiHvkxa89dLCAr/HIEExbbQWtQsid+cOxJGww49R1hJHtbNbZTwkVEhm oEV83hH7R5LGrr6xYu2hWpTmHTz6hnELuBMDRJs6jyDqm/01wh/jyaK8zrQkjBM6 54RPdaJ88YE0ZZOaoSx+PJc25hyLAx3UA9Dd2EkrXK3xB7PjIxqnWfozKjFBYFdt zK5KmteYoMzxvdAWEbRLgzcTTD/QdkCCNNc/PNxPgkcBzHpPeu2W2o/ZmJbi2bFh Xus+mdPXokzGQiFProVsWKkDI+VGUjkn4xNxR2XkqC8RBop0dSwWrzkWazinNUup 1SlcdruTwXLc87QSyZiZHWyboQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbTqI6W CjwQCFdlTo1VABptZQfwMB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIOCHvjfKqX2Atw1X/nUDL/JeHpzy9Rdh9kasoe9Mgz9bjSu43+I+G y2/eYho13M+pLf60lzCj6Ge5tIz4p0mF3oDAw9+Ja+/3r6lAhetS+gd8VVc3kGde nQ20gKHwS9Ga1qrkYnYoX9b6O+tkOOMzNxUsG4MsCbBHGYJSfCcAB9VAcKVZkzgH Rfh6VV0E1uCC9EYSc+0DSKq0mnnpDhEHhg+creip9JaXLPXtMk/50pX8tUBF3YdS nPnNV7kWLAKTtByM58chLyvWDZdnYpKLb1saM2bFRXZ8pEuBc48ZAGqen7RkOLBd IdHA5J7pPithHSUisbZPOLui1/HwkSAm -----END CERTIFICATE-----Generated at Tue May 13 15:40:29 2025 by rpki-client