$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: tviHT7KU3J9On7Ptcs8mMrmJYSKw0aPJI4ebEXd8HIw= Subject key identifier: 12:94:7C:C4:F3:C5:1A:1A:32:AF:48:06:DD:C4:43:A1:F7:21:D1:83 Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: AF Signing time: Sun 11 May 2025 04:49:23 +0000 Manifest this update: Sun 11 May 2025 04:49:22 +0000 Manifest next update: Sun 18 May 2025 04:49:22 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: odlucbBf+BJXefxyVL++DLkeUylM86da3eyBoHLLSg8=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: UxAygpfGpi/7LbfgcrDHteILaaTojTUKGBKpExRn4ds=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: tT0U7je/lStzl+Gd03/CVrFPBnBeNuZUlfzB9Ibn9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: May 11 04:49:22 2025 GMT Not After : May 18 04:49:22 2025 GMT Subject: CN=68202c53-e4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:98:cb:43:21:52:1e:dc:ff:a2:cb:d3:bd: 47:cb:29:20:c2:c0:9d:9f:ae:d4:25:2c:99:a5:ed: d5:05:8c:9c:dd:33:df:20:ce:6e:ba:05:f2:85:bc: d2:f6:fb:db:29:d8:fd:40:e9:4e:4d:1f:a6:87:49: be:ee:b2:b6:92:2a:5c:2e:f3:c8:45:33:a7:d3:f5: 6a:aa:c7:81:9a:2d:b8:90:58:c5:e1:bf:ee:ba:fe: 5f:e6:d9:d3:84:07:86:67:25:f5:5a:14:09:a9:02: 6f:67:da:5c:43:a2:0c:e3:0b:a0:17:28:13:a6:dc: 3a:d6:b2:74:29:c4:af:84:c3:85:64:c2:bb:82:20: c2:99:87:25:c6:c2:c4:e8:88:3d:a5:e8:e9:40:1c: 58:0a:0e:0b:f6:b2:23:e6:51:a8:d4:0e:8d:81:b8: 3f:ff:32:ae:46:87:c1:73:e4:e5:c3:a7:6a:9e:41: bf:b1:7f:bd:db:56:c9:39:63:29:23:9a:68:c0:91: 7b:47:cd:71:d1:92:63:a8:2e:73:74:87:e4:8d:89: 43:d4:cd:23:71:fc:2c:6d:ae:2a:91:95:61:9f:99: be:5d:c3:93:d5:97:aa:0f:87:8a:63:8b:67:fa:95: 12:c8:e2:00:e1:18:84:22:a8:d1:c4:ce:9b:f0:1b: 62:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:94:7C:C4:F3:C5:1A:1A:32:AF:48:06:DD:C4:43:A1:F7:21:D1:83 X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c5:2e:01:d0:42:a5:13:ba:1a:48:f5:ff:ae:8e:8e:5b:8e: ff:5b:24:22:5d:65:b2:ae:2e:d9:fd:b6:a0:42:a4:1c:ef:35: 98:fe:1d:d4:60:01:65:02:d5:0b:fe:32:1c:ba:f9:99:a8:af: f3:83:f9:5a:09:72:a7:c1:cb:a9:20:65:3b:ab:a7:3c:c2:5a: 46:35:5c:dd:d1:d8:c6:4a:4e:d5:90:09:9a:7a:9c:7b:c6:13: 50:1c:c8:41:72:eb:d4:fa:53:b1:78:4e:6e:d2:ed:51:67:4c: 3c:66:24:b4:28:9f:95:a3:96:4f:13:0f:7b:27:ef:de:46:b4: 2f:4c:19:de:81:f0:79:d5:a9:4c:c8:b3:f0:22:2d:77:bf:b1: 84:05:93:19:57:56:0d:59:03:23:92:0c:32:9f:f5:bb:84:56: a8:ac:fd:2b:de:9f:63:5c:ec:ae:67:48:b8:72:d1:72:3f:75: 46:db:7d:00:b3:50:1c:73:b1:11:1f:5f:ab:31:8d:7b:c6:d7: 17:cf:f7:3a:f8:69:d9:30:7e:da:52:5d:a5:69:d0:5b:d4:d4: e9:3f:41:63:5e:9e:c6:0e:e7:b3:a4:59:e3:28:05:ad:cb:36: 9b:0f:a0:1b:2c:9b:cf:8f:e7:dc:69:c2:5e:a1:af:6e:15:91: b3:72:fc:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUwNTExMDQ0OTIyWhcNMjUwNTE4MDQ0OTIyWjAYMRYwFAYD VQQDEw02ODIwMmM1My1lNGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6yYy0MhUh7c/6LL071HyykgwsCdn67UJSyZpe3VBYyc3TPfIM5uugXyhbzS 9vvbKdj9QOlOTR+mh0m+7rK2kipcLvPIRTOn0/VqqseBmi24kFjF4b/uuv5f5tnT hAeGZyX1WhQJqQJvZ9pcQ6IM4wugFygTptw61rJ0KcSvhMOFZMK7giDCmYclxsLE 6Ig9pejpQBxYCg4L9rIj5lGo1A6Ngbg//zKuRofBc+Tlw6dqnkG/sX+921bJOWMp I5powJF7R81x0ZJjqC5zdIfkjYlD1M0jcfwsba4qkZVhn5m+XcOT1ZeqD4eKY4tn +pUSyOIA4RiEIqjRxM6b8BtiswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKUfMTz xRoaMq9IBt3EQ6H3IdGDMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9xS4B0EKlE7oaSPX/ro6OW47/WyQiXWWyri7Z/bagQqQc7zWY/h3U YAFlAtUL/jIcuvmZqK/zg/laCXKnwcupIGU7q6c8wlpGNVzd0djGSk7VkAmaepx7 xhNQHMhBcuvU+lOxeE5u0u1RZ0w8ZiS0KJ+Vo5ZPEw97J+/eRrQvTBnegfB51alM yLPwIi13v7GEBZMZV1YNWQMjkgwyn/W7hFaorP0r3p9jXOyuZ0i4ctFyP3VG230A s1Acc7ERH1+rMY17xtcXz/c6+GnZMH7aUl2ladBb1NTpP0FjXp7GDuezpFnjKAWt yzabD6AbLJvPj+fcacJeoa9uFZGzcvwx -----END CERTIFICATE-----Generated at Sun May 11 07:36:27 2025 by rpki-client