$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft File: iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json) Hash identifier: mODigL3OISQHuDf51jkjoIk4vKqeU1dLKlEkwi94k5Y= Subject key identifier: DC:0A:C2:58:AC:F0:71:E4:CA:6B:FB:77:3C:4C:68:61:B5:57:69:5B Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9 Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9 Certificate serial: 1075 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft Manifest number: 1064 Signing time: Wed 14 May 2025 17:29:27 +0000 Manifest this update: Wed 14 May 2025 17:29:26 +0000 Manifest next update: Wed 21 May 2025 17:29:26 +0000 Files and hashes: 1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: XGOtXvDtnHiTCe8HqftUZcBQ+7vZ4NVDl8qaI1JYXkk=) 2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: Xi30fjCwdu1ys1ihQmxOl+2PGZkizPRtJAwU5and9os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4213 (0x1075) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9 Validity Not Before: May 14 17:29:26 2025 GMT Not After : May 21 17:29:26 2025 GMT Subject: CN=6824d2f6-799c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:18:d7:ee:02:9e:c2:a7:5d:25:5b:0b:97: 98:77:59:22:12:b5:bf:a2:12:23:4d:06:c9:af:0d: 75:0b:37:2d:c5:6a:5a:86:36:5c:91:f9:79:15:2c: ba:f3:f0:1e:36:b8:10:c5:88:7e:e5:1a:85:15:bf: d2:ba:8a:c7:86:3a:be:eb:6c:e0:cd:8f:b4:57:82: a5:72:e7:e9:f2:4b:01:ee:60:c0:85:55:fd:e1:c2: 05:90:3a:85:4e:e1:32:ff:31:23:28:c1:bc:65:c6: 47:af:ec:fb:09:56:49:ff:e9:13:ee:63:b4:1a:bb: c5:82:13:04:1b:c8:fb:55:cc:03:58:a1:3e:fb:92: cb:98:ff:a7:ac:ed:95:5a:2c:69:7a:b5:cb:5b:34: d2:9f:bb:0b:66:49:a1:c5:17:f7:17:77:d1:26:56: 0d:3e:57:5f:4a:19:7e:21:8c:21:01:eb:d7:c8:b7: 12:d7:d9:b5:5d:c9:26:ce:6b:40:c0:06:66:bd:a7: fc:84:7b:88:57:ce:13:d8:8b:11:a0:2b:ac:40:de: 70:b4:e1:65:ef:eb:2e:35:5c:4e:b5:5b:37:15:84: a5:a9:c5:1f:1d:05:35:db:1c:19:aa:80:2c:a1:6c: c1:c2:bd:92:e9:b8:b2:d5:98:0a:95:69:8d:62:fb: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0A:C2:58:AC:F0:71:E4:CA:6B:FB:77:3C:4C:68:61:B5:57:69:5B X509v3 Authority Key Identifier: keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f2:be:4b:23:77:22:fe:e1:56:13:28:f5:af:1a:4f:45:75: 2d:5c:43:a5:2c:6c:63:61:77:c9:5b:a9:67:b0:22:ea:a7:2b: 55:c4:26:67:88:f7:7c:0e:10:15:32:2d:c3:d2:9f:e4:fa:fd: 6c:33:3a:db:96:18:ae:70:eb:c1:95:d0:3d:25:2f:e2:fc:14: 81:40:48:1e:92:27:bc:5b:cb:c1:28:eb:26:a9:2f:73:b2:f8: ba:ec:f2:a8:4d:c0:35:9f:d1:f6:18:4b:be:11:5e:b9:fa:a4: bc:7c:a7:08:3c:f6:e8:de:37:01:49:53:45:12:d2:00:ee:22: e0:f9:93:0b:a6:6d:e6:63:b9:7e:41:7b:75:1d:e1:ed:33:33: 20:20:66:11:16:2e:61:76:3a:17:62:da:04:d5:73:70:6f:d2: 15:50:73:26:d6:06:df:a8:54:4b:fe:23:11:e2:3e:f2:04:46: 3e:45:74:5b:de:33:4e:a4:d4:90:1a:76:44:56:d4:d4:46:f7: 4a:a0:1f:b8:e3:02:bb:79:72:e0:ba:6a:6d:a2:c5:a2:8b:be: 11:69:15:f9:d3:46:f8:3e:1a:af:4a:68:df:7a:ca:0f:bb:4a: f8:54:e1:90:47:58:af:bb:d3:0d:1b:13:a3:3a:d3:97:44:e6: 64:6b:84:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0RTIxMTAvBgNVBAUTKDg4MDc3Nzg2RDY2NTIzQUQ1OTk4RDYzRjY5N0FGNDJG MDM5QzJBQTkwHhcNMjUwNTE0MTcyOTI2WhcNMjUwNTIxMTcyOTI2WjAYMRYwFAYD VQQDEw02ODI0ZDJmNi03OTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt08Y1+4CnsKnXSVbC5eYd1kiErW/ohIjTQbJrw11CzctxWpahjZckfl5FSy6 8/AeNrgQxYh+5RqFFb/SuorHhjq+62zgzY+0V4Klcufp8ksB7mDAhVX94cIFkDqF TuEy/zEjKMG8ZcZHr+z7CVZJ/+kT7mO0GrvFghMEG8j7VcwDWKE++5LLmP+nrO2V WixperXLWzTSn7sLZkmhxRf3F3fRJlYNPldfShl+IYwhAevXyLcS19m1XckmzmtA wAZmvaf8hHuIV84T2IsRoCusQN5wtOFl7+suNVxOtVs3FYSlqcUfHQU12xwZqoAs oWzBwr2S6biy1ZgKlWmNYvuYaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwKwlis 8HHkymv7dzxMaGG1V2lbMB8GA1UdIwQYMBaAFIgHd4bWZSOtWZjWP2l69C8DnCqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRFMi9CMjU2QjAzMDM0 RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2MVptTllfYVhyMEx3T2NL cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBZDNodFpsSTYxWm1OWV9hWHIwTHdPY0txay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRFMi9CMjU2QjAzMDM0RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2 MVptTllfYVhyMEx3T2NLcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe8r5LI3ci/uFWEyj1rxpPRXUtXEOlLGxjYXfJW6lnsCLqpytVxCZn iPd8DhAVMi3D0p/k+v1sMzrblhiucOvBldA9JS/i/BSBQEgekie8W8vBKOsmqS9z svi67PKoTcA1n9H2GEu+EV65+qS8fKcIPPbo3jcBSVNFEtIA7iLg+ZMLpm3mY7l+ QXt1HeHtMzMgIGYRFi5hdjoXYtoE1XNwb9IVUHMm1gbfqFRL/iMR4j7yBEY+RXRb 3jNOpNSQGnZEVtTURvdKoB+44wK7eXLgumptosWii74RaRX500b4PhqvSmjfesoP u0r4VOGQR1ivu9MNGxOjOtOXROZka4T7 -----END CERTIFICATE-----Generated at Fri May 16 19:26:01 2025 by rpki-client