$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft File: ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json) Hash identifier: UgSqlnZ4kjMMjHRiyHHl+wGa1sfEqMakWgY8ZB7vBWw= Subject key identifier: 6E:4C:54:50:AD:25:45:39:76:0E:08:D4:5E:E6:3F:E9:B9:33:C5:BA Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft Manifest number: 65 Signing time: Tue 13 May 2025 06:13:45 +0000 Manifest this update: Tue 13 May 2025 06:13:44 +0000 Manifest next update: Tue 20 May 2025 06:13:44 +0000 Files and hashes: 1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: 1ZPqaDf5uLWAiBEgAzRDxGXCxHRuVv3cmtn6piLna04=) 2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676 Validity Not Before: May 13 06:13:44 2025 GMT Not After : May 20 06:13:44 2025 GMT Subject: CN=6822e319-9e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:ad:36:40:c1:5f:d4:e5:64:7d:17:77:7b: 0b:1b:29:b1:d7:cd:75:3a:f5:cb:23:54:78:f6:95: f6:94:af:85:aa:19:da:a1:5a:89:d1:3d:41:e9:28: b5:ba:66:8e:ac:51:3f:78:68:24:f2:9f:97:70:6c: da:b7:61:e3:e7:3e:9e:01:2c:91:e1:0b:23:e5:2d: 77:ab:36:2e:0e:e1:c1:a2:03:f9:41:41:de:b2:17: 3f:de:60:2e:a8:b4:f9:1f:ac:c2:32:c2:0e:3d:d4: 46:6d:71:75:fa:d8:0e:4e:f0:24:6f:53:e7:55:49: a9:18:b4:ad:14:26:95:26:35:6a:f1:80:d1:29:9e: 0e:62:ed:bf:e9:82:33:88:8f:5a:aa:4a:90:c4:58: 74:f8:92:f7:de:10:64:ec:24:58:bb:36:42:73:a5: 96:ce:0b:59:bf:2c:b1:8c:04:ca:9f:10:7a:a6:68: 42:b3:96:6b:7a:5c:c5:ea:aa:27:e5:5d:71:dc:e7: 1c:c9:1a:16:bc:27:86:c2:f5:d7:e6:c7:4b:76:4e: 3b:b6:e8:c7:0a:af:47:ad:cb:84:9f:9c:0e:e9:c5: 00:c4:f1:f2:43:38:c1:33:0d:85:94:79:45:3b:0d: ff:64:f5:ae:e0:b8:36:69:0c:df:5f:4f:6a:fb:82: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4C:54:50:AD:25:45:39:76:0E:08:D4:5E:E6:3F:E9:B9:33:C5:BA X509v3 Authority Key Identifier: keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:b5:f8:75:66:79:4b:c9:c7:f7:99:49:0d:68:ca:53:37:fc: a3:48:23:75:b5:1a:b4:d1:40:df:23:62:2a:ff:35:8a:bf:1e: 3d:6c:3b:71:e8:45:e5:fa:22:c4:50:ce:3d:4f:a5:41:fb:01: 4e:05:c6:1d:5b:1b:a8:93:7d:93:aa:4f:f0:12:bd:07:ac:94: 0b:96:8c:83:77:f5:92:e2:32:31:24:e8:85:e0:62:ec:e4:78: 4e:5d:6b:03:83:e9:af:1c:3f:e0:90:92:60:dd:b2:d8:09:f6: 21:de:95:49:69:26:55:f4:24:3d:d2:07:2d:b8:a1:7d:e0:b4: 28:07:99:9e:71:6e:14:07:d7:a5:d0:d7:37:21:17:65:a5:4c: c9:aa:fa:72:82:83:cc:c6:2a:30:12:00:23:f7:b1:4f:56:50: 2a:ad:5f:f2:c2:39:18:65:b2:29:1d:21:5e:7e:62:cc:62:0e: 3d:81:e0:b1:6f:e4:fe:2f:10:de:fd:c6:7b:85:34:64:29:db: af:f6:58:43:8d:6f:2f:32:83:86:e8:70:a1:78:37:61:db:77: 04:10:9e:6e:a6:45:ea:95:9c:d3:73:ff:94:b0:87:20:6f:85: 72:86:42:6d:ae:de:d6:34:a3:b7:84:9f:ae:d2:8b:10:67:ad: 2e:a3:ed:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RUE0NjExMC8GA1UEBRMoOEIxNTQ0MEFFMjI2Qzk5MEZDOUU1NTkxNUZFOEM5NTA5 QkNCNjY3NjAeFw0yNTA1MTMwNjEzNDRaFw0yNTA1MjAwNjEzNDRaMBgxFjAUBgNV BAMTDTY4MjJlMzE5LTllOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPQa02QMFf1OVkfRd3ewsbKbHXzXU69csjVHj2lfaUr4WqGdqhWonRPUHpKLW6 Zo6sUT94aCTyn5dwbNq3YePnPp4BLJHhCyPlLXerNi4O4cGiA/lBQd6yFz/eYC6o tPkfrMIywg491EZtcXX62A5O8CRvU+dVSakYtK0UJpUmNWrxgNEpng5i7b/pgjOI j1qqSpDEWHT4kvfeEGTsJFi7NkJzpZbOC1m/LLGMBMqfEHqmaEKzlmt6XMXqqifl XXHc5xzJGha8J4bC9dfmx0t2Tju26McKr0ety4SfnA7pxQDE8fJDOMEzDYWUeUU7 Df9k9a7guDZpDN9fT2r7gitfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbkxUUK0l RTl2DgjUXuY/6bkzxbowHwYDVR0jBBgwFoAUixVECuImyZD8nlWRX+jJUJvLZnYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTQ2L0Q0MzcxMTEyOUMx MTExRUY5MkZCQTk3Q0M0RjlBRTAyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXhWRUN1SW15WkQ4bmxXUlgtakpVSnZMWm5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF QTQ2L0Q0MzcxMTEyOUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL2l4VkVDdUlteVpE OG5sV1JYLWpKVUp2TFpuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAm1+HVmeUvJx/eZSQ1oylM3/KNII3W1GrTRQN8jYir/NYq/Hj1sO3Ho ReX6IsRQzj1PpUH7AU4Fxh1bG6iTfZOqT/ASvQeslAuWjIN39ZLiMjEk6IXgYuzk eE5dawOD6a8cP+CQkmDdstgJ9iHelUlpJlX0JD3SBy24oX3gtCgHmZ5xbhQH16XQ 1zchF2WlTMmq+nKCg8zGKjASACP3sU9WUCqtX/LCORhlsikdIV5+YsxiDj2B4LFv 5P4vEN79xnuFNGQp26/2WEONby8yg4bocKF4N2HbdwQQnm6mReqVnNNz/5SwhyBv hXKGQm2u3tY0o7eEn67SixBnrS6j7TU= -----END CERTIFICATE-----Generated at Wed May 14 01:17:14 2025 by rpki-client