$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json) Hash identifier: oTm7UGrfZ27uov+qu9QarvvANJMBDdv/0D7/McLRrH8= Subject key identifier: DF:9A:29:CE:6C:C8:DD:FD:C2:8A:C5:B4:65:39:B2:4A:D3:AD:6C:F5 Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Certificate serial: 0712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft Manifest number: 070B Signing time: Sat 10 May 2025 21:32:48 +0000 Manifest this update: Sat 10 May 2025 21:32:47 +0000 Manifest next update: Sat 17 May 2025 21:32:47 +0000 Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: Aj7aI3sybbcC8xLopaXmDex1knzYFEzHRKbwqCqwDtU=) 2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: cX9Jr6xc2q7kpQ4bV2j0kItAk4ZpyW8j6vKTdZBHzDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Validity Not Before: May 10 21:32:47 2025 GMT Not After : May 17 21:32:47 2025 GMT Subject: CN=681fc600-14a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:62:7e:9b:fc:85:5c:00:87:81:3e:70:08: fe:85:bc:90:3f:0b:42:28:c5:91:44:83:57:f6:92: e0:80:bc:3a:63:c5:d7:9d:20:3b:1d:ec:61:c3:68: 32:d9:40:73:06:b6:08:7e:80:40:1a:34:a8:08:05: 65:ef:5b:7f:7e:ee:3e:90:04:15:51:be:12:e6:77: b1:73:f5:15:c9:2c:bd:e7:e4:4e:de:5e:77:e0:a7: 7b:7c:ea:32:b8:dd:c1:72:7e:99:dc:7a:e6:13:c1: a3:92:1b:fc:2a:87:33:06:50:6c:f8:80:0c:ae:9a: 67:3e:f0:3e:6a:e6:81:2e:a6:3e:1b:18:f3:a4:6a: c0:2b:2d:a4:e6:52:56:be:a1:e0:9f:1f:a1:27:9a: 22:84:ea:8f:c1:40:0c:72:f8:c5:9e:e4:0a:a1:03: e8:e5:89:3c:ff:04:cf:e1:83:b4:9b:f3:3e:7b:24: b7:2d:c2:b5:5b:14:ce:24:25:71:d7:db:4a:15:bb: 08:08:9b:4e:16:32:e8:8a:f1:d5:24:51:c4:80:a0: c8:8c:81:16:4e:e2:cf:24:f2:e9:ef:c5:cd:99:76: 8f:24:23:b1:97:51:40:f7:b6:1e:11:9a:27:bd:0c: c0:15:aa:bd:f6:f0:11:a0:43:c9:07:24:7e:68:fd: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9A:29:CE:6C:C8:DD:FD:C2:8A:C5:B4:65:39:B2:4A:D3:AD:6C:F5 X509v3 Authority Key Identifier: keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:79:7e:67:bb:31:15:ab:65:2d:d9:4c:5e:a6:8e:a1:f8:ee: 69:e7:da:de:d0:e4:be:ae:a7:ca:14:7a:86:49:04:88:93:15: 1a:74:67:21:2b:6f:f7:d1:a0:c2:cc:2c:92:73:0d:b1:b6:b0: 6e:ca:e4:08:99:71:08:fd:b0:0c:14:64:36:27:6b:47:9a:f9: f5:d4:59:53:61:b9:ea:10:3b:a7:b5:77:3d:80:bd:39:f0:d2: d4:88:b1:d1:2e:26:5e:0a:4d:5e:e9:97:de:9f:67:f6:83:4c: 7b:71:97:43:83:62:f0:b6:0f:93:d0:18:b1:6b:0d:10:83:84: 39:e9:77:2b:90:53:ca:72:df:c4:ef:01:c1:c1:5f:db:c4:71: 8e:18:93:40:dc:d4:8c:87:e3:d8:ed:f7:f9:d2:44:04:98:1b: 39:4d:09:91:d0:7c:38:5d:49:2a:d0:a7:5c:c0:10:eb:8f:c2: db:52:95:6a:c8:99:26:d5:c9:b7:82:7b:97:80:68:10:76:b3: 97:8f:e2:06:d0:a1:81:51:d5:6c:d6:6c:78:4c:42:e7:7f:38: 2c:2b:4f:53:7f:4c:44:08:66:9e:05:a5:0f:bf:6f:5d:9b:5d: 9b:7e:6b:91:e6:21:af:e2:06:2c:a5:dd:ef:8a:5f:36:aa:e1: 72:bd:96:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1 MkIxN0I2QkIwHhcNMjUwNTEwMjEzMjQ3WhcNMjUwNTE3MjEzMjQ3WjAYMRYwFAYD VQQDEw02ODFmYzYwMC0xNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvldifpv8hVwAh4E+cAj+hbyQPwtCKMWRRINX9pLggLw6Y8XXnSA7Hexhw2gy 2UBzBrYIfoBAGjSoCAVl71t/fu4+kAQVUb4S5nexc/UVySy95+RO3l534Kd7fOoy uN3Bcn6Z3HrmE8Gjkhv8KoczBlBs+IAMrppnPvA+auaBLqY+GxjzpGrAKy2k5lJW vqHgnx+hJ5oihOqPwUAMcvjFnuQKoQPo5Yk8/wTP4YO0m/M+eyS3LcK1WxTOJCVx 19tKFbsICJtOFjLoivHVJFHEgKDIjIEWTuLPJPLp78XNmXaPJCOxl1FA97YeEZon vQzAFaq99vARoEPJByR+aP3UcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+aKc5s yN39worFtGU5skrTrWz1MB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu ak0wMWtPQzBTY3RTc1h0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEeX5nuzEVq2Ut2Uxepo6h+O5p59re0OS+rqfKFHqGSQSIkxUadGch K2/30aDCzCyScw2xtrBuyuQImXEI/bAMFGQ2J2tHmvn11FlTYbnqEDuntXc9gL05 8NLUiLHRLiZeCk1e6Zfen2f2g0x7cZdDg2Lwtg+T0Bixaw0Qg4Q56XcrkFPKct/E 7wHBwV/bxHGOGJNA3NSMh+PY7ff50kQEmBs5TQmR0Hw4XUkq0KdcwBDrj8LbUpVq yJkm1cm3gnuXgGgQdrOXj+IG0KGBUdVs1mx4TELnfzgsK09Tf0xECGaeBaUPv29d m12bfmuR5iGv4gYspd3vil82quFyvZZy -----END CERTIFICATE-----Generated at Mon May 12 12:43:37 2025 by rpki-client