$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: qTSo1eWDcz9AZhmS710H9B+Ui8RBkooc/v8z+fjMTc0= Subject key identifier: 4C:67:08:7B:D0:5B:A4:CA:B4:A6:92:36:5A:83:E1:23:F2:58:73:15 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0C26 Signing time: Wed 14 May 2025 18:42:08 +0000 Manifest this update: Wed 14 May 2025 18:42:08 +0000 Manifest next update: Wed 21 May 2025 18:42:08 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: cIhjaU0fzsmPhh/Sb+lC8ivh05KfhozRPKjgj7ALPg8=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: jTKb6UqoxVKwoNueFvf3BZWhxggm3hq3OfDJsuiV3HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: May 14 18:42:08 2025 GMT Not After : May 21 18:42:08 2025 GMT Subject: CN=6824e400-67fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:a6:49:1f:cd:58:9f:67:65:e2:a9:c2:c9: a8:47:a9:9f:3e:50:bf:4b:3b:ac:d1:4f:40:6e:8a: 74:37:c2:46:36:e0:5e:3c:ce:8f:0d:d9:bc:a7:50: f6:d6:f6:36:2d:5d:b0:ea:c6:c2:c9:b9:7f:df:90: d1:5c:54:79:82:72:77:9f:e9:75:03:07:71:31:e5: 3f:10:fb:1a:72:81:f7:e0:4b:a3:5e:70:ef:b9:37: 38:48:9c:ba:ee:02:19:72:e2:72:2e:b1:0c:d5:c6: e4:31:78:1e:39:87:c1:44:45:76:ee:d0:b2:76:9d: 0e:ac:21:1a:e8:a9:f7:9f:58:66:0c:fb:76:9b:69: 98:75:54:a2:06:09:50:41:49:29:0e:6a:ce:2e:0f: d1:cf:88:69:64:7c:dd:98:a1:ad:87:58:8a:33:ec: 17:ba:54:fc:3f:76:37:9d:9c:61:70:62:7a:9f:31: c2:dd:26:d0:5e:4e:52:9d:c0:9d:af:23:23:d4:17: 3a:8e:39:98:3c:57:80:58:4e:ff:6c:00:09:e4:62: 8d:c6:f4:9b:a5:c1:fe:9d:4a:60:df:7c:aa:35:4e: 43:ed:55:10:af:ef:07:9b:f7:52:c0:a3:d1:07:40: 9b:0a:66:c7:ed:69:f0:8e:00:53:09:f2:69:e2:14: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:67:08:7B:D0:5B:A4:CA:B4:A6:92:36:5A:83:E1:23:F2:58:73:15 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:26:3d:e5:e2:2b:66:dc:7d:e1:47:df:73:bb:e9:95:b8:66: 3e:6e:7e:ef:aa:3e:0a:dc:e4:06:c5:7f:eb:3d:7e:69:88:09: cc:9b:e2:e3:2b:2b:d4:5e:45:95:2b:cb:08:8d:02:25:ec:9a: f2:0a:1e:12:2d:55:d6:49:06:e7:33:1c:4c:ad:90:26:67:20: bf:0e:66:b6:6c:e5:4e:2b:45:3d:a5:d6:bd:9a:0b:0b:22:d6: 94:45:fb:df:c9:cf:71:8f:ad:5f:d9:7e:61:36:05:f3:55:21: ea:93:d0:d1:88:0b:fd:4c:2f:99:f0:e1:77:af:d4:03:ef:ce: a2:e3:8a:e2:c6:f0:5f:1c:e3:60:c1:87:ef:f5:ab:bd:25:4a: 5a:9b:2d:02:46:93:9e:6f:31:5a:10:2a:5a:eb:95:a7:9e:e8: ba:51:ec:e9:a1:53:c1:59:d2:3c:44:78:03:02:46:16:2f:c7: e9:e7:88:2d:9c:61:c9:1f:5a:11:3a:61:2c:2c:32:ab:d9:0c: 23:cd:19:68:bc:a8:77:d1:6b:7c:9f:3a:ea:6b:dd:00:98:c8: 59:e0:d7:6a:9a:6e:63:7d:e2:89:61:54:f0:22:48:b7:d9:a0: ce:4a:f4:6e:df:d2:ef:0b:15:27:0b:cc:7e:11:66:a9:ac:7e: f8:c0:e0:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjUwNTE0MTg0MjA4WhcNMjUwNTIxMTg0MjA4WjAYMRYwFAYD VQQDEw02ODI0ZTQwMC02N2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhmmSR/NWJ9nZeKpwsmoR6mfPlC/Szus0U9Abop0N8JGNuBePM6PDdm8p1D2 1vY2LV2w6sbCybl/35DRXFR5gnJ3n+l1AwdxMeU/EPsacoH34EujXnDvuTc4SJy6 7gIZcuJyLrEM1cbkMXgeOYfBREV27tCydp0OrCEa6Kn3n1hmDPt2m2mYdVSiBglQ QUkpDmrOLg/Rz4hpZHzdmKGth1iKM+wXulT8P3Y3nZxhcGJ6nzHC3SbQXk5SncCd ryMj1Bc6jjmYPFeAWE7/bAAJ5GKNxvSbpcH+nUpg33yqNU5D7VUQr+8Hm/dSwKPR B0CbCmbH7WnwjgBTCfJp4hQZswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExnCHvQ W6TKtKaSNlqD4SPyWHMVMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRJj3l4itm3H3hR99zu+mVuGY+bn7vqj4K3OQGxX/rPX5piAnMm+Lj KyvUXkWVK8sIjQIl7JryCh4SLVXWSQbnMxxMrZAmZyC/Dma2bOVOK0U9pda9mgsL ItaURfvfyc9xj61f2X5hNgXzVSHqk9DRiAv9TC+Z8OF3r9QD786i44rixvBfHONg wYfv9au9JUpamy0CRpOebzFaECpa65Wnnui6UezpoVPBWdI8RHgDAkYWL8fp54gt nGHJH1oROmEsLDKr2QwjzRlovKh30Wt8nzrqa90AmMhZ4Ndqmm5jfeKJYVTwIki3 2aDOSvRu39LvCxUnC8x+EWaprH74wOBm -----END CERTIFICATE-----Generated at Thu May 15 03:36:36 2025 by rpki-client