$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json) Hash identifier: RHNyvcWZytEmmI8J10rfZJAFrAUseXfVTxfxD4monpQ= Subject key identifier: 50:99:A4:EC:62:78:BA:64:80:22:05:19:CC:0B:7F:D8:7A:B1:AA:CE Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft Manifest number: 0121 Signing time: Sun 11 May 2025 03:34:41 +0000 Manifest this update: Sun 11 May 2025 03:34:41 +0000 Manifest next update: Sun 18 May 2025 03:34:41 +0000 Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: hg8KuJTcfJflIjo3uBJ9oeoNORc7zC+55I4Mi2S3OIQ=) 2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Validity Not Before: May 11 03:34:41 2025 GMT Not After : May 18 03:34:41 2025 GMT Subject: CN=68201ad1-a421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:f9:83:d0:0f:fc:6b:e2:a1:d9:1c:e2:5d: e5:91:24:e6:74:99:f2:2f:80:e2:d5:9e:b3:d7:6a: a5:b9:17:12:dd:c2:52:7d:1b:39:f8:91:f7:8f:c0: 2b:ed:9d:4c:ff:50:b2:4f:c4:8a:50:c2:5c:ba:b7: 3b:0c:7c:91:05:8c:bc:fb:f1:79:ac:c4:fa:85:50: 78:c6:93:0e:57:0a:87:27:46:3f:cc:df:7d:c8:0a: 49:1d:64:5b:bb:02:2c:f9:15:9b:45:d7:a6:32:ad: d3:36:10:48:71:2a:9d:e3:d9:9a:5e:45:62:08:65: 72:19:0e:ba:1c:c3:bd:6a:06:a7:c3:39:b7:b3:ed: d0:37:1f:2e:b8:41:06:47:8d:5c:ae:4f:9f:39:6b: e5:29:fc:39:e4:b7:77:f0:51:56:38:f7:ac:71:75: bd:d9:23:8e:8c:6c:1a:74:bf:02:b8:52:b6:73:7a: 67:43:3d:fb:13:d2:97:7b:25:b4:71:21:d1:b6:63: f0:b7:b5:15:db:cf:6d:f1:ec:16:f7:43:74:68:bd: 54:d3:e6:66:b7:f3:9f:a4:24:79:47:d5:83:4f:98: 39:1f:44:c5:4e:72:4d:14:b8:80:39:66:92:c4:2c: e9:f7:12:a7:23:98:bb:c0:85:af:39:6d:28:b5:fd: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:99:A4:EC:62:78:BA:64:80:22:05:19:CC:0B:7F:D8:7A:B1:AA:CE X509v3 Authority Key Identifier: keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8d:e5:75:20:44:90:41:d1:47:20:92:1c:c3:7e:0f:0b:2a: f0:68:90:7f:31:5c:0b:63:84:25:2c:9b:3b:44:3f:ca:26:96: fd:00:54:a8:ea:fc:67:92:ec:84:9b:c2:fd:c5:80:8d:d5:95: b1:b5:8e:0b:66:42:4e:6e:3e:eb:5d:0a:51:de:44:b9:6c:6e: 96:1e:51:d0:e0:e8:b9:17:db:6a:cb:b4:33:98:a0:79:07:54: 72:95:9f:6f:96:bf:fa:38:7c:a2:56:35:7f:66:25:30:79:9b: f4:c2:51:9f:43:a1:e3:14:29:11:b8:6b:b8:11:c3:aa:9e:e8: d1:a2:25:1a:c5:34:75:78:24:1b:d8:cd:dc:6d:88:1d:b5:1b: 6a:30:87:2f:c7:db:e4:de:5f:9b:74:66:4f:14:5c:2b:d6:6a: f7:42:fe:4b:b2:6b:35:37:c7:73:4b:97:70:fe:4c:da:19:3a: e3:7b:d4:77:92:0e:87:c1:2b:fb:c7:ed:fc:76:ae:21:a4:9e: 7b:8e:a6:fc:86:9a:53:fc:b4:65:82:8f:f2:87:c7:3b:00:3b: b3:e4:5c:6f:ec:bc:79:67:e9:80:ad:a4:d0:e3:81:da:33:64: 4f:4e:08:ec:50:40:8b:d9:23:d2:4e:b8:88:d4:9a:a2:5c:11: 39:70:86:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU5QTQxMTAvBgNVBAUTKDIwQkQzRjdGOTk4RUQ0M0Q1RkM0Rjg2MjlERDBDMTg4 RUM3RERBRTAwHhcNMjUwNTExMDMzNDQxWhcNMjUwNTE4MDMzNDQxWjAYMRYwFAYD VQQDEw02ODIwMWFkMS1hNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSL5g9AP/Gviodkc4l3lkSTmdJnyL4Di1Z6z12qluRcS3cJSfRs5+JH3j8Ar 7Z1M/1CyT8SKUMJcurc7DHyRBYy8+/F5rMT6hVB4xpMOVwqHJ0Y/zN99yApJHWRb uwIs+RWbRdemMq3TNhBIcSqd49maXkViCGVyGQ66HMO9aganwzm3s+3QNx8uuEEG R41crk+fOWvlKfw55Ld38FFWOPescXW92SOOjGwadL8CuFK2c3pnQz37E9KXeyW0 cSHRtmPwt7UV289t8ewW90N0aL1U0+Zmt/OfpCR5R9WDT5g5H0TFTnJNFLiAOWaS xCzp9xKnI5i7wIWvOW0otf3ZGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCZpOxi eLpkgCIFGcwLf9h6sarOMB8GA1UdIwQYMBaAFCC9P3+ZjtQ9X8T4Yp3QwYjsfdrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTlBNC8wRDVEQzUyNDcz MDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFEMWZ4UGhpbmREQmlPeDky dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lMMF9mNW1PMUQxZnhQaGluZERCaU94OTJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTlBNC8wRDVEQzUyNDczMDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFE MWZ4UGhpbmREQmlPeDkydUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBjeV1IESQQdFHIJIcw34PCyrwaJB/MVwLY4QlLJs7RD/KJpb9AFSo 6vxnkuyEm8L9xYCN1ZWxtY4LZkJObj7rXQpR3kS5bG6WHlHQ4Oi5F9tqy7QzmKB5 B1RylZ9vlr/6OHyiVjV/ZiUweZv0wlGfQ6HjFCkRuGu4EcOqnujRoiUaxTR1eCQb 2M3cbYgdtRtqMIcvx9vk3l+bdGZPFFwr1mr3Qv5Lsms1N8dzS5dw/kzaGTrje9R3 kg6HwSv7x+38dq4hpJ57jqb8hppT/LRlgo/yh8c7ADuz5Fxv7Lx5Z+mAraTQ44Ha M2RPTgjsUECL2SPSTriI1JqiXBE5cIZr -----END CERTIFICATE-----Generated at Sun May 11 06:23:44 2025 by rpki-client