$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: 3pAsl0uQjBVLsSJQpa7RVtpmnB41V7Rm/WVLuhVlRFI= Subject key identifier: 1B:A0:27:CA:C8:43:FE:9D:BD:73:EA:E2:09:55:8A:57:93:87:93:9E Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: 8A Signing time: Thu 15 May 2025 05:49:22 +0000 Manifest this update: Thu 15 May 2025 05:49:22 +0000 Manifest next update: Thu 22 May 2025 05:49:22 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: pMX6KEIxihCAPV60Rx8UoJjoXB8mdEXrEcvtTR80rjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: May 15 05:49:22 2025 GMT Not After : May 22 05:49:22 2025 GMT Subject: CN=68258062-f172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f1:56:cc:6c:8c:31:bb:28:1a:d4:b1:15:98: 80:3d:65:91:84:61:40:46:ae:e4:44:48:13:ad:e7: 39:89:9c:04:a6:39:69:98:0b:f5:b6:69:a0:12:eb: fc:bd:4d:b6:97:18:c0:32:22:38:e5:c0:84:65:f5: 27:74:c1:89:79:48:71:ec:df:5b:70:4f:fd:89:90: 1e:8f:f2:c1:5c:43:63:f5:aa:3b:7d:88:cf:0b:96: 65:5f:d0:99:3d:d8:31:6e:c2:48:9d:0b:d9:20:4d: 6d:ae:f0:1b:2b:dd:aa:e2:64:d2:9e:f9:7a:b0:59: 3b:75:ad:27:cf:fb:83:3c:07:04:37:28:6c:fb:39: bc:80:b3:06:75:a0:54:09:15:a2:7b:d4:d7:ec:13: 6d:44:06:72:49:76:d2:fe:dc:44:74:f5:26:3b:f9: da:4b:d0:3a:47:a2:51:eb:54:5f:97:12:f0:56:c5: 1a:f7:47:d5:f6:10:54:ab:df:c7:8a:b7:ef:1d:39: 26:23:57:91:b0:9e:d0:99:e8:0a:e7:c7:0a:48:86: 61:22:12:b8:13:8d:f8:0b:86:d9:3c:3e:bf:28:87: d2:9d:c3:ab:5a:4f:ff:b9:9a:58:c2:04:b9:65:e8: 61:63:7f:d3:1a:4e:e4:cf:58:e3:e7:c1:d5:7c:cc: 45:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A0:27:CA:C8:43:FE:9D:BD:73:EA:E2:09:55:8A:57:93:87:93:9E X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b0:4e:83:28:e2:f0:2b:60:ca:2a:19:6d:b9:79:8e:98:a7: b2:e4:88:2d:50:6e:04:b1:b1:29:52:bb:14:2c:44:9d:34:8e: 50:bb:47:35:73:6f:ba:0f:07:92:15:38:0c:e2:31:dd:c3:3d: f0:f2:7c:74:fc:49:e4:51:bd:62:6e:b1:9f:3c:71:40:6a:5e: ae:73:07:c3:1a:76:f4:31:2e:cc:c8:94:6a:9d:24:9d:20:5a: 04:35:a1:1c:2f:2c:fb:7e:68:c1:c4:fe:ff:03:e9:f3:7f:32: 05:95:2e:e0:af:72:d8:9b:03:89:96:7b:7c:bd:93:ea:ca:f8: 08:5d:f5:e3:98:65:ee:4e:ec:b2:bf:e8:72:0c:d3:37:b7:80: c0:0b:6e:a5:3a:03:0b:73:76:e3:69:aa:25:fa:32:4f:a2:c3: 2e:ef:39:d5:da:0a:a6:e5:53:61:ee:c6:e1:07:21:82:5f:be: ce:1f:63:ab:0b:87:cb:af:a6:c9:46:34:da:dc:b2:ef:3f:36: 6d:54:50:98:02:66:c7:d7:38:2c:f6:13:4e:d7:93:63:3d:13: 62:29:d2:70:9a:f3:ff:66:f2:df:27:1a:d9:86:a6:91:30:58: a6:c0:b8:06:8c:81:db:96:ea:52:01:d9:ab:af:cf:6b:b9:68: 4c:e1:31:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjUwNTE1MDU0OTIyWhcNMjUwNTIyMDU0OTIyWjAYMRYwFAYD VQQDEw02ODI1ODA2Mi1mMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fFWzGyMMbsoGtSxFZiAPWWRhGFARq7kREgTrec5iZwEpjlpmAv1tmmgEuv8 vU22lxjAMiI45cCEZfUndMGJeUhx7N9bcE/9iZAej/LBXENj9ao7fYjPC5ZlX9CZ PdgxbsJInQvZIE1trvAbK92q4mTSnvl6sFk7da0nz/uDPAcENyhs+zm8gLMGdaBU CRWie9TX7BNtRAZySXbS/txEdPUmO/naS9A6R6JR61RflxLwVsUa90fV9hBUq9/H irfvHTkmI1eRsJ7QmegK58cKSIZhIhK4E434C4bZPD6/KIfSncOrWk//uZpYwgS5 ZehhY3/TGk7kz1jj58HVfMxFcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBugJ8rI Q/6dvXPq4glVileTh5OeMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNsE6DKOLwK2DKKhltuXmOmKey5IgtUG4EsbEpUrsULESdNI5Qu0c1 c2+6DweSFTgM4jHdwz3w8nx0/EnkUb1ibrGfPHFAal6ucwfDGnb0MS7MyJRqnSSd IFoENaEcLyz7fmjBxP7/A+nzfzIFlS7gr3LYmwOJlnt8vZPqyvgIXfXjmGXuTuyy v+hyDNM3t4DAC26lOgMLc3bjaaol+jJPosMu7znV2gqm5VNh7sbhByGCX77OH2Or C4fLr6bJRjTa3LLvPzZtVFCYAmbH1zgs9hNO15NjPRNiKdJwmvP/ZvLfJxrZhqaR MFimwLgGjIHblupSAdmrr89ruWhM4TH4 -----END CERTIFICATE-----Generated at Fri May 16 11:50:40 2025 by rpki-client