$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: OjjLKx68Fy98aTe4uU+iF8m7brtIQ1wAZADN5YQ8pm8= Subject key identifier: 0A:B2:81:0A:4D:01:09:81:B6:1A:72:D1:DE:2B:DE:0C:95:A1:B0:FF Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 25F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 256B Signing time: Sun 04 May 2025 15:41:08 +0000 Manifest this update: Sun 04 May 2025 15:41:07 +0000 Manifest next update: Sun 11 May 2025 15:41:07 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: DwlSIuyT8+zBP03VWPyTN25GeKOldp3C7PwbPRGUYV0=) 2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: ezRu4Wadjp9NH7xvxUm1SslQ6GZ7jqHMcsIlTCHPxl0=) 3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: sPjEV8NdOTwFwPMcdQnUOL5yo6ytt7upFB96AA18yK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9720 (0x25f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: May 4 15:41:07 2025 GMT Not After : May 11 15:41:07 2025 GMT Subject: CN=68178a93-8430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:06:5a:c6:a5:d2:cb:99:80:b6:11:b9:57: 60:10:dd:fa:c9:31:39:f5:01:15:f2:6c:3a:5c:cd: 63:22:bd:16:fe:76:0f:66:c2:6b:eb:75:63:36:52: 2b:d4:1b:2f:74:e1:d3:f2:e0:07:22:d3:86:5c:ae: bf:f3:77:f3:c7:6b:ef:ab:9d:91:e1:f8:f2:9d:16: 51:9b:7f:9e:9d:74:3b:19:db:11:ed:77:e3:2f:81: a3:12:f5:66:d3:50:da:94:09:46:2c:02:40:1e:3d: b2:88:fe:fa:d6:88:6d:21:b7:2c:37:61:bd:d4:05: 48:84:df:fd:1f:7e:49:d5:25:32:0f:be:0e:17:4a: 98:50:f6:05:fd:bf:70:75:4b:f1:9e:23:92:32:52: 62:1c:d5:e4:0e:b4:98:85:64:a9:66:42:99:fe:25: 27:96:7d:9c:15:f7:f3:e5:e6:95:1c:4b:59:11:38: 06:0f:9d:87:a3:7f:be:b5:f3:3e:b5:54:ca:29:79: 72:e0:c4:c7:e6:95:ac:60:e5:14:ee:5e:e2:93:36: 6b:14:19:77:5e:5e:f2:59:66:3f:8d:10:bb:45:db: af:a2:8e:3a:7a:df:67:75:f5:5b:52:4a:82:4e:98: 15:2a:5a:4f:8b:a3:1f:1d:9d:12:1b:6a:63:bc:6c: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B2:81:0A:4D:01:09:81:B6:1A:72:D1:DE:2B:DE:0C:95:A1:B0:FF X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3d:4d:2a:51:7c:46:80:c8:ea:74:57:01:f4:b9:6c:45:64: 5b:20:66:8e:61:dd:b4:91:31:57:82:69:1b:ce:7c:08:39:a9: 9a:fa:21:69:26:06:4c:f0:1a:ae:42:c1:a4:4f:c0:03:73:c1: c8:28:8e:4f:bf:45:92:a2:22:b0:b0:5f:b6:6b:9e:e0:af:05: f1:20:01:ba:39:52:12:a7:88:32:64:e0:26:70:a4:38:c3:c7: 5f:4d:87:0e:d2:21:4a:67:8f:12:82:eb:bd:70:9d:b0:54:79: 8e:47:0e:b5:26:5e:71:62:34:74:2b:bb:b4:00:a6:58:d4:3b: c3:a5:eb:1b:66:39:18:c2:b4:3d:ad:e9:0a:7a:65:b3:c2:2b: 08:97:c7:62:a7:fb:a1:06:9a:4e:32:0b:a3:e7:14:ce:c3:c8: 57:ec:5e:c0:f9:8d:ba:03:a3:b4:7c:f6:dd:0a:88:d9:d7:3e: 39:35:6a:62:f3:4b:0e:7f:c6:d3:63:0d:9d:6c:a7:fb:bc:42: 2d:5c:cc:59:45:d2:fe:9e:cc:9f:2c:d8:7d:1a:98:6d:9f:2e: 2e:9c:83:9c:c9:85:de:97:ac:40:10:f5:4e:99:da:2f:73:05: 41:8c:8f:d0:63:78:ad:57:fc:2f:7c:e6:a5:3c:77:6b:d2:db: b1:2c:bc:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjUwNTA0MTU0MTA3WhcNMjUwNTExMTU0MTA3WjAYMRYwFAYD VQQDEw02ODE3OGE5My04NDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynEGWsal0suZgLYRuVdgEN36yTE59QEV8mw6XM1jIr0W/nYPZsJr63VjNlIr 1BsvdOHT8uAHItOGXK6/83fzx2vvq52R4fjynRZRm3+enXQ7GdsR7XfjL4GjEvVm 01DalAlGLAJAHj2yiP761ohtIbcsN2G91AVIhN/9H35J1SUyD74OF0qYUPYF/b9w dUvxniOSMlJiHNXkDrSYhWSpZkKZ/iUnln2cFffz5eaVHEtZETgGD52Ho3++tfM+ tVTKKXly4MTH5pWsYOUU7l7ikzZrFBl3Xl7yWWY/jRC7Rduvoo46et9ndfVbUkqC TpgVKlpPi6MfHZ0SG2pjvGzmawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqygQpN AQmBthpy0d4r3gyVobD/MB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWPU0qUXxGgMjqdFcB9LlsRWRbIGaOYd20kTFXgmkbznwIOama+iFp JgZM8BquQsGkT8ADc8HIKI5Pv0WSoiKwsF+2a57grwXxIAG6OVISp4gyZOAmcKQ4 w8dfTYcO0iFKZ48Sguu9cJ2wVHmORw61Jl5xYjR0K7u0AKZY1DvDpesbZjkYwrQ9 rekKemWzwisIl8dip/uhBppOMguj5xTOw8hX7F7A+Y26A6O0fPbdCojZ1z45NWpi 80sOf8bTYw2dbKf7vEItXMxZRdL+nsyfLNh9Gphtny4unIOcyYXel6xAEPVOmdov cwVBjI/QY3itV/wvfOalPHdr0tuxLLxS -----END CERTIFICATE-----Generated at Mon May 5 03:07:40 2025 by rpki-client