$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft File: ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json) Hash identifier: xFSfBmNl+1sueFoomnveGDpVwwxjOBDZXZUntETzhgc= Subject key identifier: B2:FD:6B:15:52:98:4D:05:A3:32:7A:E2:77:0B:74:E8:97:EF:39:13 Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Certificate serial: 04FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft Manifest number: 04F4 Signing time: Mon 12 May 2025 23:30:32 +0000 Manifest this update: Mon 12 May 2025 23:30:32 +0000 Manifest next update: Mon 19 May 2025 23:30:32 +0000 Files and hashes: 1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: uKsGZLabY4LJ5zxKKnIMnTFrxvqi0aNOXYOJJKomrN0=) 2: AC7FAD34756D11EF8E0AC450C4F9AE02.roa (hash: Zm4qbPETvWslp8RznHoUL+bcAgC3x8SPRlNir3l6sYs=) 3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: IKJkF5tTVOAg9Gcj+RMqJavUI1QmsLflBy8eIb93AAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1 Validity Not Before: May 12 23:30:32 2025 GMT Not After : May 19 23:30:32 2025 GMT Subject: CN=68228498-3037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:ac:cf:92:71:98:f3:a8:aa:1d:cd:1f:cd: 07:5f:4d:fb:f8:e1:65:23:d8:0f:71:69:26:19:b3: 83:81:c0:a9:c6:f7:f3:a9:d1:da:76:74:8d:4b:82: e4:55:05:89:1b:6b:08:ed:12:de:7b:69:91:db:94: e1:f1:4a:7f:ff:60:62:25:bc:c8:60:6b:58:e1:90: 1d:c6:6b:70:0a:ab:b7:d0:d7:9e:3c:ec:2d:0e:ba: 30:0a:e9:45:7b:76:30:f3:f8:e1:10:a7:e8:0e:c2: d5:15:7f:40:9e:9f:51:19:98:02:39:73:17:c8:fc: f2:92:c3:dd:0e:fe:14:48:1b:a7:35:96:37:b8:df: 23:70:24:29:5c:4f:ec:6b:13:55:4e:d0:a4:f9:ef: 5d:2f:1a:35:95:3d:98:0f:12:82:21:92:77:71:51: 04:f5:5c:ce:98:df:78:e7:db:2a:0e:3f:9a:d9:2a: 61:2d:48:fb:63:d8:dc:69:66:43:3b:b9:61:95:1c: 6b:69:0a:24:52:ae:d6:af:3e:9e:15:16:4c:b8:77: f5:ea:c6:2c:ee:33:4d:b0:9f:d6:26:d6:77:cb:50: 02:42:43:7d:a6:f4:99:42:67:8f:0a:ce:57:44:1b: 71:65:4f:3e:5d:43:65:72:e7:34:f5:6c:c4:91:74: df:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FD:6B:15:52:98:4D:05:A3:32:7A:E2:77:0B:74:E8:97:EF:39:13 X509v3 Authority Key Identifier: keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:fb:db:9f:3d:06:e3:1e:11:15:4e:fa:6c:0d:3b:eb:90:a6: 2d:89:13:54:21:75:2d:6e:28:2d:a5:0a:7c:8d:84:43:05:12: 56:08:8a:41:0e:36:96:e6:e5:0a:c5:f1:77:09:6a:8c:39:d9: e7:4e:7b:f7:ae:48:96:5d:d5:7d:23:e3:20:66:7c:db:f4:d9: 5c:d5:4e:ed:5d:03:d7:b2:8e:c6:7d:85:92:5d:4b:e4:d0:47: 3b:dd:15:a4:d1:4a:2b:e8:1c:cf:47:72:02:e2:1b:f8:29:74: 9b:2b:a1:22:bf:8d:88:d6:6a:d4:43:28:7b:79:7a:60:97:1b: 5e:d5:90:e6:d5:6d:87:22:cf:87:1e:74:d1:c6:b4:ce:1f:76: cb:73:ea:cd:24:6c:da:66:7e:f9:04:44:43:cb:86:14:4f:de: cb:c4:05:72:8c:9e:6c:c5:8f:54:aa:39:6a:4a:11:bb:31:46: 9d:d8:0a:44:7d:d2:bc:1e:b7:19:77:15:f0:32:a6:77:59:45: 07:08:58:fc:46:ae:4c:7b:09:ea:be:a4:79:12:7d:ea:54:7a: d1:5a:2a:6a:e7:20:c7:18:fa:23:f2:ad:a3:b4:26:02:d7:bc: 8d:7c:08:5c:26:7c:1c:47:15:e8:17:42:2b:08:91:6a:48:be: bf:40:8d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5 QTUzOUFDRTEwHhcNMjUwNTEyMjMzMDMyWhcNMjUwNTE5MjMzMDMyWjAYMRYwFAYD VQQDEw02ODIyODQ5OC0zMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvesz5JxmPOoqh3NH80HX037+OFlI9gPcWkmGbODgcCpxvfzqdHadnSNS4Lk VQWJG2sI7RLee2mR25Th8Up//2BiJbzIYGtY4ZAdxmtwCqu30NeePOwtDrowCulF e3Yw8/jhEKfoDsLVFX9Anp9RGZgCOXMXyPzyksPdDv4USBunNZY3uN8jcCQpXE/s axNVTtCk+e9dLxo1lT2YDxKCIZJ3cVEE9VzOmN9459sqDj+a2SphLUj7Y9jcaWZD O7lhlRxraQokUq7Wrz6eFRZMuHf16sYs7jNNsJ/WJtZ3y1ACQkN9pvSZQmePCs5X RBtxZU8+XUNlcuc09WzEkXTfwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLL9axVS mE0FozJ64ncLdOiX7zkTMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx+9ufPQbjHhEVTvpsDTvrkKYtiRNUIXUtbigtpQp8jYRDBRJWCIpB DjaW5uUKxfF3CWqMOdnnTnv3rkiWXdV9I+MgZnzb9Nlc1U7tXQPXso7GfYWSXUvk 0Ec73RWk0Uor6BzPR3IC4hv4KXSbK6Eiv42I1mrUQyh7eXpglxte1ZDm1W2HIs+H HnTRxrTOH3bLc+rNJGzaZn75BERDy4YUT97LxAVyjJ5sxY9UqjlqShG7MUad2ApE fdK8HrcZdxXwMqZ3WUUHCFj8Rq5MewnqvqR5En3qVHrRWipq5yDHGPoj8q2jtCYC 17yNfAhcJnwcRxXoF0IrCJFqSL6/QI1a -----END CERTIFICATE-----Generated at Tue May 13 05:54:42 2025 by rpki-client