$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json) Hash identifier: sri62ZtWxKJzPjZoF8X9NxFhDHBeAnLUJ0cV9M8ZUG4= Subject key identifier: 67:DA:7D:49:68:4C:93:E1:0B:15:AB:2B:3B:0A:66:85:6E:DE:40:F2 Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Certificate serial: 1013 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft Manifest number: 1007 Signing time: Wed 14 May 2025 17:33:59 +0000 Manifest this update: Wed 14 May 2025 17:33:59 +0000 Manifest next update: Wed 21 May 2025 17:33:59 +0000 Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: YMa5FTZQKYTRwq6QGYr5t80QoSbz/NnI5LMhgAPYU2A=) 2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: SSjTjiJw3UBo/Mme4Kl37l1zxjxnCDkxVmhI1OR3EOw=) 3: 608836D046B111E98B793856C4F9AE02.roa (hash: Ls4h/fmzmMgVY9fuRoj+7ux+D5fYwsPV37oBSFEiAic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4115 (0x1013) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Validity Not Before: May 14 17:33:59 2025 GMT Not After : May 21 17:33:59 2025 GMT Subject: CN=6824d407-845b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:15:fa:3b:2a:81:cd:81:65:d2:8e:33:96: 35:0b:4b:c4:35:c0:b4:5d:14:d8:22:f6:f2:45:4e: e2:01:20:24:cb:64:79:e3:d1:f8:a6:64:3a:22:40: 40:b0:5b:7f:36:73:c9:d3:b6:22:29:85:c2:31:09: fe:2f:fa:8f:ec:73:3d:e8:10:e3:fa:a8:77:12:4e: 9a:53:4e:18:c6:8c:6b:fe:25:fc:18:6c:e4:2c:44: d0:a5:d4:f2:52:58:b0:1e:52:67:aa:f5:f6:26:d9: a5:4d:e9:07:66:67:b0:63:e2:2d:6b:7d:2d:dc:e3: 02:9f:da:f9:e2:f9:49:62:20:4c:6e:fd:84:b4:cd: 39:82:85:2d:ba:6f:bc:22:c3:c7:86:d9:d1:5d:c8: 7f:c6:a8:7c:bb:7d:a3:49:09:18:32:5e:85:e7:96: 06:cd:2c:44:93:a9:a1:50:b8:0c:1a:0f:5f:94:d8: 7b:7f:f4:1e:33:4e:8c:91:77:7f:35:12:ba:ad:e2: 95:c7:7f:c4:5e:3d:c1:2e:12:a4:70:98:22:e7:49: 27:3c:46:ca:71:4e:2d:53:50:d0:a7:4b:94:6e:36: 32:4f:6f:d2:f9:fb:d4:48:1d:11:a1:38:b3:5e:a9: 28:51:a8:fb:4c:e4:e2:70:a7:db:f9:32:9f:74:17: 9b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DA:7D:49:68:4C:93:E1:0B:15:AB:2B:3B:0A:66:85:6E:DE:40:F2 X509v3 Authority Key Identifier: keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:79:59:0e:02:f5:50:23:7e:f1:a2:d0:12:11:c8:2c:15:ee: 88:a7:cc:5b:82:26:98:7f:4b:5d:e3:6b:d0:92:90:d3:70:a8: 76:22:f6:d1:d8:3e:21:a3:be:17:06:02:f9:8a:21:2c:d8:dc: 70:d0:a6:ab:5d:9f:d5:23:3d:54:4e:4a:d2:0f:d7:6a:6a:27: 42:92:87:ec:e6:92:47:35:0f:82:4f:37:e9:c4:ee:a9:38:0b: 82:36:47:00:8d:9a:b4:66:95:ba:4d:45:4f:c4:94:6b:95:79: e1:a6:8c:22:17:13:b1:17:77:76:dd:05:48:b9:6b:b5:0c:77: 70:6e:d7:21:9a:e6:cb:0c:4e:cb:6a:cb:e1:ed:fa:91:e6:eb: 22:6e:dc:74:e1:5d:20:68:bc:06:14:85:92:74:38:3c:4c:d1: cc:0a:69:6b:e4:24:cb:33:28:da:75:20:7d:ae:95:cf:87:ec: 2f:27:fc:d5:08:6d:34:ec:6e:f7:4e:67:60:2c:d3:c2:ae:13: 89:02:09:6c:c9:5c:6c:c2:2d:6c:98:2d:6e:f2:1c:69:e2:16: d0:2a:ae:96:d8:d0:11:82:f2:cc:87:8a:27:27:d5:f1:d6:dd: 01:13:fc:41:d4:a7:db:05:d7:07:83:d4:5c:21:29:a1:df:e1: 6a:1a:d7:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKDIyM0JFMTk4OTJFNkU2Q0I0MDZFNUZBOTk1NkREQkNF QTk1Q0JCNDYwHhcNMjUwNTE0MTczMzU5WhcNMjUwNTIxMTczMzU5WjAYMRYwFAYD VQQDEw02ODI0ZDQwNy04NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjEV+jsqgc2BZdKOM5Y1C0vENcC0XRTYIvbyRU7iASAky2R549H4pmQ6IkBA sFt/NnPJ07YiKYXCMQn+L/qP7HM96BDj+qh3Ek6aU04Yxoxr/iX8GGzkLETQpdTy UliwHlJnqvX2JtmlTekHZmewY+Ita30t3OMCn9r54vlJYiBMbv2EtM05goUtum+8 IsPHhtnRXch/xqh8u32jSQkYMl6F55YGzSxEk6mhULgMGg9flNh7f/QeM06MkXd/ NRK6reKVx3/EXj3BLhKkcJgi50knPEbKcU4tU1DQp0uUbjYyT2/S+fvUSB0RoTiz XqkoUaj7TOTicKfb+TKfdBebUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfafUlo TJPhCxWrKzsKZoVu3kDyMB8GA1UdIwQYMBaAFCI74ZiS5ubLQG5fqZVt286pXLtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9CNkE5RjI2MDQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVzdEFibC1wbFczYnpxbGN1 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lqdmhtSkxtNXN0QWJsLXBsVzNienFsY3UwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9CNkE5RjI2MDQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVz dEFibC1wbFczYnpxbGN1MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqeVkOAvVQI37xotASEcgsFe6Ip8xbgiaYf0td42vQkpDTcKh2IvbR 2D4ho74XBgL5iiEs2Nxw0KarXZ/VIz1UTkrSD9dqaidCkofs5pJHNQ+CTzfpxO6p OAuCNkcAjZq0ZpW6TUVPxJRrlXnhpowiFxOxF3d23QVIuWu1DHdwbtchmubLDE7L asvh7fqR5usibtx04V0gaLwGFIWSdDg8TNHMCmlr5CTLMyjadSB9rpXPh+wvJ/zV CG007G73TmdgLNPCrhOJAglsyVxswi1smC1u8hxp4hbQKq6W2NARgvLMh4onJ9Xx 1t0BE/xB1KfbBdcHg9RcISmh3+FqGtdf -----END CERTIFICATE-----Generated at Fri May 16 12:42:23 2025 by rpki-client