$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json) Hash identifier: sB37mwGfmQ3mvK1+/Ffa/AyECcDsk6UVAJ2EMRDq4LY= Subject key identifier: 80:E8:FD:99:59:39:8F:43:DD:8B:70:BC:D6:F9:3F:C0:80:40:33:EF Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft Manifest number: CD Signing time: Sat 17 May 2025 05:16:19 +0000 Manifest this update: Sat 17 May 2025 05:16:19 +0000 Manifest next update: Sat 24 May 2025 05:16:19 +0000 Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: Apm81YukeXRYCicQtQiwweN2ZTO9v1owlj2IL1KY0Ws=) 2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 0tr4K36tCLfkZ4nhSjqeW9dVetaArPPfGAxuclpW9yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Validity Not Before: May 17 05:16:19 2025 GMT Not After : May 24 05:16:19 2025 GMT Subject: CN=68281ba3-542a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:83:21:b3:a1:2c:9e:65:51:d7:9e:67:66: 8f:87:7e:43:fc:3c:e8:09:68:90:f7:45:fb:27:72: 5a:3c:cb:67:9e:c5:4c:7f:b5:87:a0:8d:c5:92:e8: f6:ab:e6:d7:c3:9c:38:22:06:fb:a5:e7:c9:83:ca: d5:60:11:df:18:ee:11:5e:db:fc:39:70:fd:1c:4b: 0f:76:e6:9d:d8:4b:f3:bf:f2:d5:da:28:1e:af:87: 73:05:e3:3b:e5:bc:2d:5e:3a:f0:96:66:40:4a:c8: c7:c7:f3:8a:3d:6b:1c:74:00:91:c3:43:10:7e:83: cb:e2:d8:ec:c8:6b:4d:40:3e:fc:88:5d:23:71:cc: 3d:8b:07:e0:99:1b:c2:4a:e7:8a:96:ac:52:0d:d4: 59:2d:0a:b8:6f:4d:2e:51:e2:81:37:a8:35:00:d2: 90:c3:3c:a9:50:d0:88:f3:25:56:a2:c8:5c:2b:63: 66:ca:59:8d:81:ac:15:ec:c4:5e:32:b6:eb:c8:76: d6:de:8e:5b:b7:2d:6c:02:07:d9:75:3a:7f:c8:fe: 47:7b:44:9b:b2:56:ea:53:3e:54:fe:b4:29:4d:a2: d4:fb:da:20:6a:91:fd:d9:8a:3f:6d:5f:6a:6d:30: e9:a4:11:45:ae:cc:9e:cc:dc:3c:d3:b8:40:1e:29: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E8:FD:99:59:39:8F:43:DD:8B:70:BC:D6:F9:3F:C0:80:40:33:EF X509v3 Authority Key Identifier: keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:59:fc:8c:35:9b:17:6f:be:14:37:56:d6:10:04:08:d4:93: 43:1a:9e:88:79:04:e4:1b:47:22:b5:32:ec:c2:50:b7:27:48: 53:f9:16:2d:3e:7a:a9:72:65:28:38:43:9d:d4:11:fd:f9:6a: 8f:48:6f:d0:1b:15:5b:e1:1e:91:7e:af:cb:ea:ea:f8:dd:f0: 0e:dd:b1:f3:46:b1:7d:99:25:93:21:e1:76:07:6a:76:80:77: b0:01:b2:c2:13:9c:33:1d:bd:90:91:59:36:c9:73:11:90:45: 65:90:e9:4b:26:62:cc:87:60:95:4b:1e:45:92:29:a9:17:1c: 6c:e4:d4:8d:7c:dd:6a:c0:a6:b0:98:69:6e:9f:de:71:47:9a: d0:c0:a5:52:23:19:aa:5f:c6:c6:a5:3f:5e:83:91:47:19:ef: 21:18:4a:d3:f7:ba:2a:37:d5:04:cc:ab:01:82:3b:e3:f7:38: 78:f6:1a:ef:71:fd:ac:a9:87:59:26:1e:4f:3f:c9:86:6e:0f: 73:fc:45:30:f5:c2:79:57:ca:68:31:9b:f2:a9:2d:1c:99:fb: 9d:a2:98:2e:68:df:da:80:28:2f:eb:0e:cc:ee:3a:8f:59:46: 52:3d:79:3c:1f:e8:87:87:25:2e:b9:ed:50:ee:23:7c:77:19: 52:69:2e:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDhBMjgyRDFDOEY5MEMzMEQ2NTlFNkQ4QzBCOUJFNDIy MUMyNTMxOUMwHhcNMjUwNTE3MDUxNjE5WhcNMjUwNTI0MDUxNjE5WjAYMRYwFAYD VQQDEw02ODI4MWJhMy01NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIWDIbOhLJ5lUdeeZ2aPh35D/DzoCWiQ90X7J3JaPMtnnsVMf7WHoI3Fkuj2 q+bXw5w4Igb7pefJg8rVYBHfGO4RXtv8OXD9HEsPduad2Evzv/LV2iger4dzBeM7 5bwtXjrwlmZASsjHx/OKPWscdACRw0MQfoPL4tjsyGtNQD78iF0jccw9iwfgmRvC SueKlqxSDdRZLQq4b00uUeKBN6g1ANKQwzypUNCI8yVWoshcK2NmylmNgawV7MRe MrbryHbW3o5bty1sAgfZdTp/yP5He0SbslbqUz5U/rQpTaLU+9ogapH92Yo/bV9q bTDppBFFrsyezNw807hAHimapwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDo/ZlZ OY9D3YtwvNb5P8CAQDPvMB8GA1UdIwQYMBaAFIooLRyPkMMNZZ5tjAub5CIcJTGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80NUJDRkMzMEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3MWxubTJNQzV2a0lod2xN WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80NUJDRkMzMEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3 MWxubTJNQzV2a0lod2xNWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPWfyMNZsXb74UN1bWEAQI1JNDGp6IeQTkG0citTLswlC3J0hT+RYt PnqpcmUoOEOd1BH9+WqPSG/QGxVb4R6Rfq/L6ur43fAO3bHzRrF9mSWTIeF2B2p2 gHewAbLCE5wzHb2QkVk2yXMRkEVlkOlLJmLMh2CVSx5FkimpFxxs5NSNfN1qwKaw mGlun95xR5rQwKVSIxmqX8bGpT9eg5FHGe8hGErT97oqN9UEzKsBgjvj9zh49hrv cf2sqYdZJh5PP8mGbg9z/EUw9cJ5V8poMZvyqS0cmfudopguaN/agCgv6w7M7jqP WUZSPXk8H+iHhyUuue1Q7iN8dxlSaS4w -----END CERTIFICATE-----Generated at Sun May 18 01:09:50 2025 by rpki-client