$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: BsWuHs2K5n29R1kpsZhcMPUhcII14Qm+ZKHLB4gNw34= Subject key identifier: CD:74:41:36:92:CC:45:AD:35:40:97:DA:61:A1:58:90:BD:B7:3B:00 Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 131D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 12C4 Signing time: Mon 12 May 2025 17:02:51 +0000 Manifest this update: Mon 12 May 2025 17:02:51 +0000 Manifest next update: Mon 19 May 2025 17:02:51 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: iwXKXewbyEZeamheZqvyTCDd/CvCRvBa6nd2nifJtNE=) 2: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: MpSwwr6a+AIoc+TObg4xTyGo2LybXSMxQRZJjtl6eX0=) 3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: P8l1FNXOYT7PgZwkM5WwT5I4kFXlU2g1aMiRVrxecW0=) 4: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: fuwDNiZ3+QLVhkbit4ZnZ+4J6WBC2B0ArdJyFk12B18=) 5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: gCSPbOmfN88YObA69zovcSPPL1AYU9CNWO0gKhcOASM=) 6: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: CQoH7dF+prokYvHDbMofZqTT8CWUOmwoH8dvQkA7+eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4893 (0x131d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: May 12 17:02:51 2025 GMT Not After : May 19 17:02:51 2025 GMT Subject: CN=682229bb-afe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:0e:ea:d2:d6:ab:7e:b0:b4:cb:c1:1b:d8: 98:1e:45:bd:fe:a8:95:ed:f0:50:6c:4b:de:44:21: eb:de:3d:ae:b3:b1:90:f7:99:51:cf:00:40:de:82: 83:d4:e0:95:5e:e8:54:7d:d0:6a:16:d0:bb:43:70: 2b:a2:4e:6d:33:96:97:c8:3b:18:d2:d8:6b:bf:b2: 9c:ce:41:79:b6:0b:dc:99:55:97:6c:3c:ae:e7:02: c9:78:81:d7:3b:6c:49:c0:1a:38:3d:13:c6:c3:24: 1d:e3:dc:bb:c0:e5:36:ff:40:e6:d7:b4:f7:67:bb: d0:36:1f:fc:7a:9a:64:41:61:e5:a3:33:c1:d3:cc: 26:34:cf:b3:40:87:5a:ac:3c:88:11:59:0c:df:00: ab:74:2f:f3:9b:13:62:66:9f:8b:be:69:73:82:0d: 46:0e:8a:8d:c0:bf:64:ea:0f:5c:81:d9:b2:4f:d4: 0b:8c:7d:03:d1:36:68:ed:23:14:9d:b1:57:b1:57: 02:18:c6:38:67:8c:7b:73:99:05:df:73:ce:55:3f: dc:5f:f1:df:c0:e6:31:33:48:87:98:c2:2e:9b:94: 13:8d:30:af:59:a8:88:56:6e:5a:7c:c8:ac:43:cf: a8:a0:14:98:b6:49:5e:bd:a4:61:98:11:5c:80:d2: 58:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:41:36:92:CC:45:AD:35:40:97:DA:61:A1:58:90:BD:B7:3B:00 X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a3:b7:f9:21:dd:dd:bc:56:7b:69:0e:6a:b2:5a:19:3e:a9: c5:4b:a7:88:15:b6:e1:d3:34:ab:1f:12:4e:12:66:d7:61:12: b1:95:d5:ba:ea:30:03:6c:dc:9c:8a:29:1f:bc:91:21:39:3f: bb:93:59:5d:f3:4c:47:ba:fd:84:3f:ad:5c:23:c1:e3:9c:69: ce:ae:ac:fc:e5:a9:77:87:48:da:14:a6:2c:95:53:8f:22:4e: af:7a:d7:59:c3:ef:5f:45:33:ea:fb:75:79:0d:a0:85:e6:68: a7:11:e2:1a:90:98:f5:8f:e8:60:e5:ee:a2:0d:84:6d:02:3a: 72:b6:2a:52:78:07:a0:4e:90:3e:2f:a0:0d:c2:2e:12:93:7b: f3:58:7a:c6:1f:11:dc:06:09:ef:08:74:f1:d6:45:23:3d:8e: 27:de:d8:63:89:3f:88:12:d3:40:c2:37:2b:89:7b:94:5c:05: 0f:c4:8d:e7:db:e7:e2:81:56:05:f2:d0:04:13:65:81:e9:10: 28:73:39:53:1a:b2:71:15:a6:63:1e:25:19:8a:ae:78:21:8c: 16:01:58:07:32:54:10:f2:ad:98:56:8b:0a:43:87:13:02:45: b7:d3:bc:e5:f0:4a:98:20:9f:20:9d:7f:7f:9a:27:c0:8b:06: dc:d4:3e:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUwNTEyMTcwMjUxWhcNMjUwNTE5MTcwMjUxWjAYMRYwFAYD VQQDEw02ODIyMjliYi1hZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA124O6tLWq36wtMvBG9iYHkW9/qiV7fBQbEveRCHr3j2us7GQ95lRzwBA3oKD 1OCVXuhUfdBqFtC7Q3Arok5tM5aXyDsY0thrv7KczkF5tgvcmVWXbDyu5wLJeIHX O2xJwBo4PRPGwyQd49y7wOU2/0Dm17T3Z7vQNh/8eppkQWHlozPB08wmNM+zQIda rDyIEVkM3wCrdC/zmxNiZp+Lvmlzgg1GDoqNwL9k6g9cgdmyT9QLjH0D0TZo7SMU nbFXsVcCGMY4Z4x7c5kF33POVT/cX/HfwOYxM0iHmMIum5QTjTCvWaiIVm5afMis Q8+ooBSYtklevaRhmBFcgNJYPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM10QTaS zEWtNUCX2mGhWJC9tzsAMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIo7f5Id3dvFZ7aQ5qsloZPqnFS6eIFbbh0zSrHxJOEmbXYRKxldW6 6jADbNyciikfvJEhOT+7k1ld80xHuv2EP61cI8HjnGnOrqz85al3h0jaFKYslVOP Ik6vetdZw+9fRTPq+3V5DaCF5minEeIakJj1j+hg5e6iDYRtAjpytipSeAegTpA+ L6ANwi4Sk3vzWHrGHxHcBgnvCHTx1kUjPY4n3thjiT+IEtNAwjcriXuUXAUPxI3n 2+figVYF8tAEE2WB6RAoczlTGrJxFaZjHiUZiq54IYwWAVgHMlQQ8q2YVosKQ4cT AkW307zl8EqYIJ8gnX9/mifAiwbc1D4u -----END CERTIFICATE-----Generated at Mon May 12 19:44:16 2025 by rpki-client