$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: YXuuLOjTz97ZcQl75VnbC8/tuqmSLjpQrioUZnZDuMU= Subject key identifier: EF:7E:06:78:F4:AD:88:8B:93:DC:8F:AC:FB:DB:AB:7A:C4:A9:81:C0 Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: 59 Signing time: Tue 13 May 2025 06:22:41 +0000 Manifest this update: Tue 13 May 2025 06:22:41 +0000 Manifest next update: Tue 20 May 2025 06:22:41 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: RqPcHfISmw/g1zzpYGOgCkRCRZ3B9rhXQhiQgRChOeE=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: ykJZ1vokWQVQModznO57DFIfns9B6rl6axv/cLKTInk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: May 13 06:22:41 2025 GMT Not After : May 20 06:22:41 2025 GMT Subject: CN=6822e531-9242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:f7:c9:42:b8:5e:1b:f6:02:1d:18:a6:57: 87:4c:66:9a:e3:e0:70:62:07:cc:20:24:3e:51:fc: 8a:c5:32:ca:0b:89:71:64:29:19:0f:36:93:03:c8: 47:b2:b9:4e:1a:6e:87:72:7f:7b:e6:ee:57:d1:31: 10:b3:c7:ce:81:c9:e0:57:4c:64:bc:46:45:3e:da: ba:a8:cf:66:95:c2:61:a0:58:89:2c:4d:4c:f8:6b: 1f:0d:d5:9d:64:f5:22:73:68:b3:81:87:e0:3b:10: de:36:ca:44:36:80:b2:db:e0:25:ac:37:59:f4:f2: 78:ca:8a:ac:a6:9d:d7:68:4b:52:ce:da:cf:62:75: 70:04:5e:07:29:1b:20:33:cc:56:ff:36:29:7f:29: 45:25:67:71:e6:a2:bf:70:ac:43:29:73:6a:49:8f: 85:82:22:6c:e8:b6:88:c5:05:f8:3f:3d:6c:6c:60: c9:12:df:0a:47:d9:41:eb:08:9b:8d:ab:2b:8e:69: 1d:4d:dd:34:30:b2:0f:3b:7b:1a:94:a4:9d:fa:bd: bb:d6:f2:cf:55:ed:00:2f:f2:b2:ed:44:a2:03:25: 14:ae:28:f4:36:bd:aa:78:e0:c9:23:09:1b:d5:86: 9b:ea:ae:e1:b3:be:1a:a4:b7:b4:be:1e:f6:12:e4: 44:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7E:06:78:F4:AD:88:8B:93:DC:8F:AC:FB:DB:AB:7A:C4:A9:81:C0 X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fe:bf:67:e9:27:bb:3a:70:5e:c5:d5:61:d7:5e:05:c4:e5: e9:00:9d:42:12:62:2e:92:d2:87:18:f1:83:4a:65:4c:7c:14: b1:8e:7d:84:d7:81:df:87:94:9f:2c:43:10:81:09:0c:d1:bc: cd:47:2a:d3:fe:fd:04:29:6f:e7:dd:4e:b7:0c:6b:c4:c4:26: 8e:e9:5e:b1:3d:0b:2a:cb:ec:fd:e4:cb:d9:4e:58:22:d5:ac: 0b:b3:56:fd:bd:2e:d8:51:6a:71:25:2e:bb:e7:5c:c8:a7:3e: 91:35:fc:bc:61:9a:84:41:48:46:f7:07:c4:81:b8:34:c1:7a: d7:09:74:8c:d1:24:0a:3d:9b:97:9f:6d:89:72:14:61:44:51: d0:4a:83:de:bd:3c:b6:a6:22:19:0b:2d:58:3b:e5:71:aa:df: 7f:15:16:d6:29:a3:e7:aa:bf:7b:34:34:0d:84:81:7d:44:6e: 9a:ac:e2:b1:57:ed:f5:54:c6:59:bb:b0:7f:89:d5:1b:eb:7d: 9a:a5:5e:09:9f:cc:4e:5a:c4:af:ca:6c:29:37:0e:93:f1:10: 4a:0d:28:f1:9a:4d:dd:92:2b:b3:3b:88:d8:1a:c4:38:bd:50: 6f:fa:6d:b3:06:7b:76:49:82:2a:8c:09:34:5d:64:cd:02:be: 44:18:e6:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUIzNzExMC8GA1UEBRMoOEE4MEZFOEEwRDIzQkMzMEM2NjRBNzdBQTA4RUQ5MEUx OUI1OTFEQzAeFw0yNTA1MTMwNjIyNDFaFw0yNTA1MjAwNjIyNDFaMBgxFjAUBgNV BAMTDTY4MjJlNTMxLTkyNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA2vfJQrheG/YCHRimV4dMZprj4HBiB8wgJD5R/IrFMsoLiXFkKRkPNpMDyEey uU4abodyf3vm7lfRMRCzx86ByeBXTGS8RkU+2rqoz2aVwmGgWIksTUz4ax8N1Z1k 9SJzaLOBh+A7EN42ykQ2gLLb4CWsN1n08njKiqymnddoS1LO2s9idXAEXgcpGyAz zFb/Nil/KUUlZ3Hmor9wrEMpc2pJj4WCImzotojFBfg/PWxsYMkS3wpH2UHrCJuN qyuOaR1N3TQwsg87exqUpJ36vbvW8s9V7QAv8rLtRKIDJRSuKPQ2vap44MkjCRvV hpvqruGzvhqkt7S+HvYS5ESpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU734GePSt iIuT3I+s+9uresSpgcAwHwYDVR0jBBgwFoAUioD+ig0jvDDGZKd6oI7ZDhm1kdww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQjM3LzUzMkEyRTBBQUJC QzExRUZCM0Q5Q0U2RUM0RjlBRTAyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaW9ELWlnMGp2RERHWktkNm9JN1pEaG0xa2R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QjM3LzUzMkEyRTBBQUJCQzExRUZCM0Q5Q0U2RUM0RjlBRTAyL2lvRC1pZzBqdkRE R1pLZDZvSTdaRGhtMWtkdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJf+v2fpJ7s6cF7F1WHXXgXE5ekAnUISYi6S0ocY8YNKZUx8FLGOfYTX gd+HlJ8sQxCBCQzRvM1HKtP+/QQpb+fdTrcMa8TEJo7pXrE9CyrL7P3ky9lOWCLV rAuzVv29LthRanElLrvnXMinPpE1/LxhmoRBSEb3B8SBuDTBetcJdIzRJAo9m5ef bYlyFGFEUdBKg969PLamIhkLLVg75XGq338VFtYpo+eqv3s0NA2EgX1Ebpqs4rFX 7fVUxlm7sH+J1RvrfZqlXgmfzE5axK/KbCk3DpPxEEoNKPGaTd2SK7M7iNgaxDi9 UG/6bbMGe3ZJgiqMCTRdZM0CvkQY5hw= -----END CERTIFICATE-----Generated at Wed May 14 01:10:01 2025 by rpki-client