$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft File: InkscMmJR76K9PSj51Wu3nlZ0ng.mft (raw, json) Hash identifier: t4GmBO12ox/xZ/lkftwQuEdap1a7D/IbwoyX4iHoFtc= Subject key identifier: 78:82:84:70:97:8E:3F:96:79:2A:D0:F2:4D:AB:9C:D6:67:55:73:41 Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 Certificate issuer: /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278 Certificate serial: 0FA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft Manifest number: 0FA1 Signing time: Mon 12 May 2025 17:26:39 +0000 Manifest this update: Mon 12 May 2025 17:26:39 +0000 Manifest next update: Mon 19 May 2025 17:26:39 +0000 Files and hashes: 1: InkscMmJR76K9PSj51Wu3nlZ0ng.crl (hash: 42MkJhpiMz6G81JOsYWrnGGTpcwttrxsLIi44AxxE2E=) 2: C3417AA6593611E98E4C8C44C4F9AE02.roa (hash: ad8PcZtJmJ5GZCdh7kUo1sT5x0A8F5SEGBdl18QkFxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166708, serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278 Validity Not Before: May 12 17:26:39 2025 GMT Not After : May 19 17:26:39 2025 GMT Subject: CN=68222f4f-659f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:5f:4b:06:21:07:ac:89:8c:59:dd:35:3b: e8:d8:b6:6d:7f:78:43:36:03:71:27:64:08:09:7e: 45:56:78:a8:42:68:f6:82:12:b8:e2:c3:15:cf:58: 5c:7b:3c:1c:42:99:d7:b5:12:d7:b0:95:db:1c:5c: 92:03:4a:e9:3e:87:81:a1:ca:08:b2:79:b8:c2:38: 0e:d4:12:73:df:3d:50:f7:d5:af:be:2f:90:c0:d3: f8:08:6c:c4:af:be:66:c6:30:ca:67:fb:70:6d:fd: 93:d2:02:bf:d0:4f:dc:b6:33:fc:9e:37:3d:ce:07: 5b:e6:23:c5:7b:a6:a9:24:a7:08:9e:2a:6e:74:2c: 80:90:ee:a4:64:56:b6:12:e5:66:40:42:0b:3c:6e: a7:9e:5e:e4:36:79:29:cb:21:78:95:5b:ea:6d:5a: 44:a2:97:c6:03:27:f7:b2:30:b4:d1:64:06:da:bc: ff:71:6b:95:92:04:a3:00:ab:7c:85:92:bf:52:fd: e2:36:2f:fa:56:2c:56:46:b4:56:dc:4d:69:e8:17: 02:c6:72:12:b5:9f:17:31:64:71:d7:75:19:50:ef: d5:f3:15:7b:13:4a:13:eb:14:37:c6:72:e1:05:ce: 65:05:dc:8c:28:a7:6e:a9:c7:be:4e:37:39:e9:61: fd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:82:84:70:97:8E:3F:96:79:2A:D0:F2:4D:AB:9C:D6:67:55:73:41 X509v3 Authority Key Identifier: keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:ea:9d:75:64:3a:35:66:83:74:36:c7:13:ae:7c:94:d6:9e: b6:b8:97:d1:e4:01:59:a8:81:c1:c4:69:6c:f0:af:cd:df:b7: 79:f6:f2:54:09:4e:1f:e0:58:a4:7b:42:54:92:b0:a4:64:67: cb:dc:62:0c:ec:b1:83:22:aa:1d:b1:02:ba:e1:34:5e:7f:4a: b4:5f:cb:90:55:c0:4d:62:6d:34:d5:65:b2:f2:50:29:fb:d4: 02:ac:75:62:0b:f1:e4:65:77:cc:f1:37:45:32:b0:c3:b5:60: bb:f2:90:12:f8:b7:bb:8b:02:f0:5b:e0:5d:99:28:a0:e2:4c: e3:c5:ce:b5:6a:c7:80:d9:30:39:6c:99:38:b3:34:80:79:89: d0:63:fb:a8:9a:91:dc:f5:54:7f:77:a1:38:3c:70:e7:5c:ca: 95:52:ee:28:6b:e9:5c:e7:17:f1:fc:e4:10:13:41:e1:02:e2: 7e:3e:cc:8b:69:a0:0b:97:1e:f9:df:dd:14:82:95:dd:fe:38: 50:e9:e5:fb:df:1e:85:ab:46:06:71:a3:fd:af:81:1a:41:bd: f9:8c:23:95:e0:bf:8e:ba:ef:07:5d:fc:2c:14:46:44:1c:d2: 38:21:61:3b:34:59:ee:3b:31:a9:94:8b:61:be:cc:5c:66:0a: d5:91:76:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY3MDgxMTAvBgNVBAUTKDIyNzkyQzcwQzk4OTQ3QkU4QUY0RjRBM0U3NTVBRURF Nzk1OUQyNzgwHhcNMjUwNTEyMTcyNjM5WhcNMjUwNTE5MTcyNjM5WjAYMRYwFAYD VQQDEw02ODIyMmY0Zi02NTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNFfSwYhB6yJjFndNTvo2LZtf3hDNgNxJ2QICX5FVnioQmj2ghK44sMVz1hc ezwcQpnXtRLXsJXbHFySA0rpPoeBocoIsnm4wjgO1BJz3z1Q99Wvvi+QwNP4CGzE r75mxjDKZ/twbf2T0gK/0E/ctjP8njc9zgdb5iPFe6apJKcInipudCyAkO6kZFa2 EuVmQEILPG6nnl7kNnkpyyF4lVvqbVpEopfGAyf3sjC00WQG2rz/cWuVkgSjAKt8 hZK/Uv3iNi/6VixWRrRW3E1p6BcCxnIStZ8XMWRx13UZUO/V8xV7E0oT6xQ3xnLh Bc5lBdyMKKduqce+Tjc56WH9hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiChHCX jj+WeSrQ8k2rnNZnVXNBMB8GA1UdIwQYMBaAFCJ5LHDJiUe+ivT0o+dVrt55WdJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjcwOC9GQTUyNkI1MDU5 MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3Nks5UFNqNTFXdTNubFow bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lua3NjTW1KUjc2SzlQU2o1MVd1M25sWjBuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjcwOC9GQTUyNkI1MDU5MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3 Nks5UFNqNTFXdTNubFowbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC36p11ZDo1ZoN0NscTrnyU1p62uJfR5AFZqIHBxGls8K/N37d59vJU CU4f4Fike0JUkrCkZGfL3GIM7LGDIqodsQK64TRef0q0X8uQVcBNYm001WWy8lAp +9QCrHViC/HkZXfM8TdFMrDDtWC78pAS+Le7iwLwW+BdmSig4kzjxc61aseA2TA5 bJk4szSAeYnQY/uompHc9VR/d6E4PHDnXMqVUu4oa+lc5xfx/OQQE0HhAuJ+PsyL aaALlx75390UgpXd/jhQ6eX73x6Fq0YGcaP9r4EaQb35jCOV4L+Ouu8HXfwsFEZE HNI4IWE7NFnuOzGplIthvsxcZgrVkXY5 -----END CERTIFICATE-----Generated at Tue May 13 22:48:43 2025 by rpki-client