$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: ckJav0ViA+7YfOrAbUnxcPrXU0klkk5VbeSFltqKPtA= Subject key identifier: 0A:10:7D:A4:14:0F:6E:92:E3:D6:ED:7C:83:96:54:B8:BA:6C:5A:53 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 44 Signing time: Sun 11 May 2025 06:08:57 +0000 Manifest this update: Sun 11 May 2025 06:08:57 +0000 Manifest next update: Sun 18 May 2025 06:08:57 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: PtUvGmTM/fD7d6FM6zOSi4q8o81TJ28BqKkGGEjiX20=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: May 11 06:08:57 2025 GMT Not After : May 18 06:08:57 2025 GMT Subject: CN=68203ef9-96a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:47:44:cf:06:20:33:33:7a:43:ef:dc:46: 7b:82:4c:ec:89:c5:4b:ab:85:13:21:7c:62:86:78: 5f:82:63:bf:a9:71:3f:ec:e1:4f:df:08:e8:fc:d0: 90:70:41:6b:a4:2d:3e:cf:34:66:54:b9:bb:ce:91: 4c:fc:80:2e:ce:39:4d:90:d9:3f:fd:e7:60:af:e8: 7b:91:9a:14:4e:cd:40:78:c3:7a:c8:30:20:a4:df: 0e:e6:27:aa:e8:30:eb:3d:d6:2b:e9:37:ef:0d:0e: cb:0d:95:15:a5:00:52:27:cb:ba:87:06:28:56:78: 88:a8:e2:77:83:85:e2:bf:b5:38:ec:66:06:29:12: 1a:3c:e0:73:fb:ee:0c:21:ed:f2:f5:3a:7a:58:cb: 9c:ac:97:65:04:5c:dd:97:2d:82:13:d1:f8:b0:53: 22:38:6f:3b:de:4b:b9:c9:53:b7:53:22:a6:1b:fa: 34:a9:d0:10:ee:ee:1e:52:25:ed:1b:a8:57:65:95: 6b:31:34:c6:bb:fa:a5:a2:e5:0e:f9:1b:0a:92:f3: e0:41:05:22:07:18:d0:a4:03:f9:b3:08:83:ca:51: 80:72:af:7e:c1:2e:fa:41:40:ec:d2:54:34:7f:49: a1:d8:29:bd:63:29:95:67:2f:e6:28:44:39:ba:e1: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:10:7D:A4:14:0F:6E:92:E3:D6:ED:7C:83:96:54:B8:BA:6C:5A:53 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1d:43:5c:16:39:60:6e:da:d4:25:94:3e:aa:d2:e5:d9:3a: 66:65:32:dc:29:a8:49:dd:0a:ab:f7:5c:2d:d7:0d:10:ec:44: 06:99:64:3e:36:07:78:54:c5:92:0a:2b:9b:ff:40:00:2d:19: 11:59:b8:c4:b3:63:33:69:39:32:44:d8:a7:a4:d1:77:f6:cd: a6:3a:df:a4:fd:cb:fb:99:5c:50:cf:7a:50:26:2e:4e:9b:ed: f9:bd:57:e7:e3:80:bd:ad:b0:ba:90:16:6f:29:0b:fd:a1:c8: 17:f1:18:ba:c3:e0:09:3c:c3:eb:68:83:7d:fd:c5:f5:d8:90: 57:96:25:d5:15:e7:6c:7e:10:71:1c:f8:70:f7:79:c1:a1:91: 79:7e:40:67:c4:df:2c:a3:27:5d:e5:e0:ee:7f:94:ae:96:96: cc:76:ab:b0:3b:4c:e7:d7:bc:86:7d:d0:c1:4e:dd:c8:d3:73: 58:80:a5:83:e2:8b:9e:b4:fb:19:a5:3e:fa:7f:6e:97:2f:ae: 5f:aa:e4:29:bf:e1:04:a0:ad:5a:77:d4:b0:5d:29:29:ea:6c: 38:d1:df:9f:7e:f7:5d:47:48:20:9c:e5:ad:b1:a4:84:27:9d: 5d:e0:8b:34:ce:c0:bf:c2:eb:7e:61:cd:4e:92:ab:09:f2:1f: 43:4e:3a:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoOEIzNDcxQjkwQjdBNUJDNzZDRTNGQzA5QUNBQzg5MjhF QjREODE3OTAeFw0yNTA1MTEwNjA4NTdaFw0yNTA1MTgwNjA4NTdaMBgxFjAUBgNV BAMTDTY4MjAzZWY5LTk2YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM00dEzwYgMzN6Q+/cRnuCTOyJxUurhRMhfGKGeF+CY7+pcT/s4U/fCOj80JBw QWukLT7PNGZUubvOkUz8gC7OOU2Q2T/952Cv6HuRmhROzUB4w3rIMCCk3w7mJ6ro MOs91ivpN+8NDssNlRWlAFIny7qHBihWeIio4neDheK/tTjsZgYpEho84HP77gwh 7fL1OnpYy5ysl2UEXN2XLYIT0fiwUyI4bzveS7nJU7dTIqYb+jSp0BDu7h5SJe0b qFdllWsxNMa7+qWi5Q75GwqS8+BBBSIHGNCkA/mzCIPKUYByr37BLvpBQOzSVDR/ SaHYKb1jKZVnL+YoRDm64WUTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUChB9pBQP bpLj1u18g5ZUuLpsWlMwHwYDVR0jBBgwFoAUizRxuQt6W8ds4/wJrKyJKOtNgXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0Q1M0UxQjZFQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXpSeHVRdDZXOGRzNF93SnJLeUpLT3ROZ1hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 ODU0L0Q1M0UxQjZFQ0IyMzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2Vzhk czRfd0pyS3lKS090TmdYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4dQ1wWOWBu2tQllD6q0uXZOmZlMtwpqEndCqv3XC3XDRDsRAaZZD42 B3hUxZIKK5v/QAAtGRFZuMSzYzNpOTJE2Kek0Xf2zaY636T9y/uZXFDPelAmLk6b 7fm9V+fjgL2tsLqQFm8pC/2hyBfxGLrD4Ak8w+tog339xfXYkFeWJdUV52x+EHEc +HD3ecGhkXl+QGfE3yyjJ13l4O5/lK6Wlsx2q7A7TOfXvIZ90MFO3cjTc1iApYPi i560+xmlPvp/bpcvrl+q5Cm/4QSgrVp31LBdKSnqbDjR359+911HSCCc5a2xpIQn nV3gizTOwL/C635hzU6SqwnyH0NOOss= -----END CERTIFICATE-----Generated at Mon May 12 13:35:22 2025 by rpki-client