$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json) Hash identifier: Ac87/kt65jgz3VTPTZm4a+bS/OOP4dw+fx8AtMCeBnI= Subject key identifier: 58:3A:37:FD:DC:9D:1E:66:5D:4B:34:73:55:03:CE:F9:83:7D:34:CC Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft Manifest number: 87 Signing time: Tue 13 May 2025 05:51:00 +0000 Manifest this update: Tue 13 May 2025 05:50:59 +0000 Manifest next update: Tue 20 May 2025 05:50:59 +0000 Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: I2m2Chp1Qs7o8Mj7wrMdhAj0RZUU7i5eMqD15894aB8=) 2: 10435EE8740511EF93658977C4F9AE02.roa (hash: xmMmx42YHDQ1ahK54oeYt43Mx+x7gEXdRkvJnhnT9V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Validity Not Before: May 13 05:50:59 2025 GMT Not After : May 20 05:50:59 2025 GMT Subject: CN=6822ddc4-9849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1d:ac:5b:f6:b8:a9:87:11:68:c2:e7:01:08: 91:75:71:c3:06:5c:0b:fe:d8:08:a2:63:28:36:ca: 70:bc:fe:6b:39:53:be:04:e0:de:d8:00:a9:be:4f: e7:bf:03:66:cf:e1:38:63:95:d4:24:1e:a9:91:59: a6:bc:d5:ca:1a:1d:83:98:f5:2d:0a:29:78:d7:ee: 5f:20:6e:60:11:3c:cb:4d:e9:ee:d0:8b:be:a5:b5: 6d:b2:f4:17:ad:e0:38:6c:4e:79:b8:32:83:05:ed: c6:3f:5e:3a:67:5a:37:a3:d4:e2:d3:75:bf:3f:3e: af:a8:43:eb:45:e8:65:c2:34:af:b0:cd:6b:ce:66: 0b:c2:68:b7:45:f1:a2:68:5c:ce:1a:31:a4:ec:a3: bd:58:04:94:9e:a8:06:17:d6:c9:4a:f8:48:c5:69: 2b:b3:11:eb:fa:88:c4:d5:ae:45:27:fe:1f:92:36: 2f:91:08:56:f8:d0:e0:56:66:b4:b4:fe:0f:03:9e: 88:46:4c:61:ae:c0:89:c4:ed:d0:e3:69:d9:f1:ff: 42:81:6f:ce:e8:3f:f2:51:dc:59:ee:e8:77:2b:fc: 65:83:a7:99:69:8c:8a:11:0c:42:65:26:c8:d8:0b: 44:15:80:02:cb:8c:56:db:ed:e0:9e:69:b9:df:03: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:37:FD:DC:9D:1E:66:5D:4B:34:73:55:03:CE:F9:83:7D:34:CC X509v3 Authority Key Identifier: keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:98:f4:5f:92:b2:05:17:71:54:6c:c0:ba:5b:fc:1a:2c:6c: eb:e4:7d:f8:ca:b4:93:d0:43:d6:e1:10:81:e7:74:a8:74:57: 78:a6:23:62:2f:2b:2c:a2:49:51:1e:bb:84:a9:09:a6:a9:bf: cb:36:1b:51:78:90:be:b0:50:46:c6:e5:e0:17:38:ba:61:36: b7:b9:e1:ac:e3:2f:d1:6f:61:2d:11:54:18:39:04:01:db:c1: f3:35:14:64:65:cd:47:2d:ad:fd:d2:48:00:f3:a4:2c:fd:05: 0f:81:ae:c6:ef:bb:4e:c0:cf:dd:c4:00:7b:29:8a:f3:27:9b: f2:f1:3c:71:73:56:b7:88:ce:2a:af:15:e9:fc:2b:1f:35:94: 81:ab:1a:a9:b8:02:d7:49:0f:8c:da:dd:a6:de:99:c5:b5:8d: 5b:35:af:32:3f:cd:16:c7:f6:c3:99:61:9b:76:2c:b3:61:b6: 88:f6:46:75:ad:aa:20:5f:20:95:76:fd:22:68:94:ed:11:31: 40:02:6e:c7:25:91:96:c6:2f:66:20:28:86:ec:ba:5d:63:e2: d3:b9:b1:e5:a0:b8:13:33:ef:bb:02:6d:ae:e3:df:b9:88:07: 64:fe:3c:d9:44:fc:db:0e:5f:59:f4:59:c2:a3:a0:d3:bc:08: 7d:62:8f:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDg4N0UxMTA3QTgzRjExNzRGRjdFM0U3ODA4ODhEQjU3 MjNCNzkyNUIwHhcNMjUwNTEzMDU1MDU5WhcNMjUwNTIwMDU1MDU5WjAYMRYwFAYD VQQDEw02ODIyZGRjNC05ODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3h2sW/a4qYcRaMLnAQiRdXHDBlwL/tgIomMoNspwvP5rOVO+BODe2ACpvk/n vwNmz+E4Y5XUJB6pkVmmvNXKGh2DmPUtCil41+5fIG5gETzLTenu0Iu+pbVtsvQX reA4bE55uDKDBe3GP146Z1o3o9Ti03W/Pz6vqEPrRehlwjSvsM1rzmYLwmi3RfGi aFzOGjGk7KO9WASUnqgGF9bJSvhIxWkrsxHr+ojE1a5FJ/4fkjYvkQhW+NDgVma0 tP4PA56IRkxhrsCJxO3Q42nZ8f9CgW/O6D/yUdxZ7uh3K/xlg6eZaYyKEQxCZSbI 2AtEFYACy4xW2+3gnmm53wP0SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFg6N/3c nR5mXUs0c1UDzvmDfTTMMB8GA1UdIwQYMBaAFIh+EQeoPxF0/34+eAiI21cjt5Jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9DNzM5QkFFRTZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VYVF9majU0Q0lqYlZ5TzNr bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lINFJCNmdfRVhUX2ZqNTRDSWpiVnlPM2tscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9DNzM5QkFFRTZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VY VF9majU0Q0lqYlZ5TzNrbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnmPRfkrIFF3FUbMC6W/waLGzr5H34yrST0EPW4RCB53SodFd4piNi LyssoklRHruEqQmmqb/LNhtReJC+sFBGxuXgFzi6YTa3ueGs4y/Rb2EtEVQYOQQB 28HzNRRkZc1HLa390kgA86Qs/QUPga7G77tOwM/dxAB7KYrzJ5vy8Txxc1a3iM4q rxXp/CsfNZSBqxqpuALXSQ+M2t2m3pnFtY1bNa8yP80Wx/bDmWGbdiyzYbaI9kZ1 raogXyCVdv0iaJTtETFAAm7HJZGWxi9mICiG7LpdY+LTubHloLgTM++7Am2u49+5 iAdk/jzZRPzbDl9Z9FnCo6DTvAh9Yo+B -----END CERTIFICATE-----Generated at Tue May 13 11:49:01 2025 by rpki-client