$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: M+vItp4XpRRV0cCDyUH0ZYGUa+PpEyGzKiGa2zEv9nY= Subject key identifier: A8:F7:5B:D7:CC:CB:4C:9D:26:D0:81:35:E8:D6:FD:FF:D2:2A:8E:2C Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 0101 Signing time: Thu 15 May 2025 04:34:53 +0000 Manifest this update: Thu 15 May 2025 04:34:53 +0000 Manifest next update: Thu 22 May 2025 04:34:53 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: /Lvu4RvjetgcAwPDMZxCGhtPy4mZAuYZ+7y+NZmtT5g=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: kortXzDV3z8yqdb7hUTvSq2L5JWGq27VKKVJ2FtpSxc=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: rRm+rUr3qcN16z/Oqf9uTNEkdYMxgFxb6sxz/dypYvc=) 4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: 5gm1wj46SXJPZC1pKKhppvpQZgvvcitCu8i+WN1ATKA=) 5: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: O9tYO6kupKQU9ptuAQl06h/ZNlTFKl9W/lRHr1Y6j4E=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: vihfleeETh6RhPkPr9fPr5Gym7kQ9gHXsPSD/cQHxVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: May 15 04:34:53 2025 GMT Not After : May 22 04:34:53 2025 GMT Subject: CN=68256eed-4434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6d:50:e9:7b:80:49:07:f7:25:cd:31:77:2a: f0:23:95:9d:73:77:ba:a6:38:25:47:9b:01:c2:62: 10:ed:09:06:cf:d7:6a:9b:82:fe:a0:35:12:74:15: 67:ee:c9:e6:ea:3d:45:be:46:9f:59:97:88:0e:a9: c7:95:54:30:c2:9e:60:45:c1:22:76:ce:cd:a6:45: ab:d2:30:7a:09:70:12:0d:20:c1:b1:39:25:2d:2f: e1:b7:a4:f3:2e:aa:64:f1:6e:98:d7:a3:95:98:97: 71:66:86:a1:f5:65:dc:08:3e:9b:01:3d:72:c5:3f: b4:f4:e6:05:dc:d7:60:eb:e8:da:01:f4:68:e4:ef: a7:95:27:f3:c5:bd:7d:a6:04:60:4f:ec:75:1f:a4: f1:e1:fe:00:f6:cd:b0:df:68:64:6f:bd:82:70:fb: 54:a3:7f:8b:2a:c7:70:be:53:ff:30:23:98:3f:a0: f6:a7:8e:60:cc:1f:77:92:7a:59:a0:90:ac:4f:55: 3f:f0:be:71:77:44:93:a4:4b:fe:c7:3e:06:c8:6d: 3a:ce:2d:42:9d:5f:ce:61:e5:c0:70:b9:95:35:ab: 74:a9:f7:b1:c3:d3:de:9b:91:3b:fb:87:f5:06:f6: 45:d0:a3:75:17:72:b8:06:89:22:d9:2c:bb:dd:d0: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F7:5B:D7:CC:CB:4C:9D:26:D0:81:35:E8:D6:FD:FF:D2:2A:8E:2C X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:cb:0c:7f:c5:1c:13:ef:6b:67:a0:f2:c7:e2:07:00:3e:a1: b1:b8:45:71:67:a5:4d:d0:f5:39:60:ef:14:b6:4b:4b:71:43: a4:e4:55:01:c3:f9:89:99:80:ee:b4:bf:73:52:58:24:72:c9: 7f:83:e8:7f:3f:cc:19:ec:20:9c:ad:c7:60:07:46:c3:6e:a4: a6:e5:f3:6d:3a:d6:e4:4e:3b:79:5e:3e:f6:ea:cc:4b:8b:91: 73:21:27:ad:e8:c7:21:17:e9:79:dc:43:db:d2:22:a2:7f:ab: 0b:01:aa:92:05:6e:7c:34:9e:4f:e2:9a:dc:63:e9:90:bd:d5: 5b:c8:84:f4:4b:89:92:a7:92:92:df:53:1e:8e:5a:40:41:01: 98:37:31:88:54:d7:3c:a6:ff:ef:1d:d0:9f:45:d6:61:23:38: 7f:13:8a:03:17:ee:04:25:76:27:4f:53:72:56:8d:d0:f2:05: 5f:ca:78:10:7a:57:27:f5:ef:92:0e:af:ec:80:4d:e0:9c:54: 94:6d:4d:96:9a:1a:32:5a:85:01:87:89:01:33:2a:d9:40:ce: 7f:9b:ca:dc:08:0a:b0:33:cb:6e:78:7d:7d:cb:64:3b:9e:7b: 9e:95:fd:bf:07:43:61:44:19:ff:1f:45:57:8a:ed:46:42:26: 91:e7:56:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUwNTE1MDQzNDUzWhcNMjUwNTIyMDQzNDUzWjAYMRYwFAYD VQQDEw02ODI1NmVlZC00NDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA421Q6XuASQf3Jc0xdyrwI5Wdc3e6pjglR5sBwmIQ7QkGz9dqm4L+oDUSdBVn 7snm6j1FvkafWZeIDqnHlVQwwp5gRcEids7NpkWr0jB6CXASDSDBsTklLS/ht6Tz Lqpk8W6Y16OVmJdxZoah9WXcCD6bAT1yxT+09OYF3Ndg6+jaAfRo5O+nlSfzxb19 pgRgT+x1H6Tx4f4A9s2w32hkb72CcPtUo3+LKsdwvlP/MCOYP6D2p45gzB93knpZ oJCsT1U/8L5xd0STpEv+xz4GyG06zi1CnV/OYeXAcLmVNat0qfexw9Pem5E7+4f1 BvZF0KN1F3K4Boki2Sy73dDpfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj3W9fM y0ydJtCBNejW/f/SKo4sMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiywx/xRwT72tnoPLH4gcAPqGxuEVxZ6VN0PU5YO8UtktLcUOk5FUB w/mJmYDutL9zUlgkcsl/g+h/P8wZ7CCcrcdgB0bDbqSm5fNtOtbkTjt5Xj726sxL i5FzISet6MchF+l53EPb0iKif6sLAaqSBW58NJ5P4prcY+mQvdVbyIT0S4mSp5KS 31MejlpAQQGYNzGIVNc8pv/vHdCfRdZhIzh/E4oDF+4EJXYnT1NyVo3Q8gVfyngQ elcn9e+SDq/sgE3gnFSUbU2WmhoyWoUBh4kBMyrZQM5/m8rcCAqwM8tueH19y2Q7 nnuelf2/B0NhRBn/H0VXiu1GQiaR51Yv -----END CERTIFICATE-----Generated at Fri May 16 09:24:45 2025 by rpki-client