$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft File: iaMdROlPHMJ4ULusFsAsIKqznOU.mft (raw, json) Hash identifier: uSE7DnXBcLMu9Ci8P9Yz1REBb8TS0eO8o5X7Q7p6ZAU= Subject key identifier: 6C:22:DC:EF:F0:46:AB:D6:CF:40:1D:DA:D2:72:FA:D5:A5:6D:8B:A6 Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Certificate serial: 0AB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft Manifest number: 0AA9 Signing time: Sat 10 May 2025 19:17:06 +0000 Manifest this update: Sat 10 May 2025 19:17:06 +0000 Manifest next update: Sat 17 May 2025 19:17:06 +0000 Files and hashes: 1: iaMdROlPHMJ4ULusFsAsIKqznOU.crl (hash: jTWRWKHKYv3Y7exPbOTDtYvyTnhoK39BjUMNfkVsbMA=) 2: 9AE4F7EC53A211EA8D26BD0CC4F9AE02.roa (hash: jqqBqCZOKu2qIALXNmkWZIy2E6GEnPXSik4fgBrMrDA=) 3: F392CF9E53A311EAB1641213C4F9AE02.roa (hash: lxeOojn+XYimi3V1BZ9O9tBljDRntCvGVjoxX3VG+x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2745 (0xab9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5 Validity Not Before: May 10 19:17:06 2025 GMT Not After : May 17 19:17:06 2025 GMT Subject: CN=681fa632-7b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:e4:25:2c:e7:d1:2d:69:d2:70:da:49:04: 66:9a:3b:8d:ff:54:3d:60:c6:da:99:f5:d6:cf:08: ba:b9:12:37:0b:f8:0a:6e:38:ce:bd:72:c9:44:8b: 2c:ae:47:0d:23:95:ed:21:e8:b9:e0:8b:9f:ec:a6: 23:cb:34:7f:a6:9d:6f:e5:6e:b4:09:6b:2a:c4:05: 70:a5:63:f1:74:6c:6d:66:f5:8a:ae:b8:2f:b1:07: 26:c5:09:79:c3:0f:2e:f0:f3:92:c0:a2:0b:d1:2a: af:97:85:75:6a:90:a5:9b:12:cb:db:e6:9e:ea:f2: cf:54:b2:c9:0b:74:22:ec:13:1f:1f:14:27:95:5f: 50:24:0c:f5:d2:e7:35:57:ae:16:73:9d:d2:62:11: c6:70:d4:d4:50:17:f0:1e:09:77:73:3f:8a:65:cf: 34:c1:0d:bf:b6:f3:b2:41:45:d1:63:33:cd:64:54: cc:22:fd:fc:c0:e4:48:a4:38:ba:5b:b7:73:dd:7d: 33:81:b5:fe:9a:41:9e:99:93:c6:ad:3a:66:b9:c1: d6:1f:8f:75:23:b2:0c:55:93:09:fb:e6:6d:6a:31: 10:cb:e5:ce:55:1b:6b:fd:f8:67:71:b5:66:3f:3f: 8c:1f:80:75:8e:93:10:a0:83:1a:61:c3:95:30:47: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:22:DC:EF:F0:46:AB:D6:CF:40:1D:DA:D2:72:FA:D5:A5:6D:8B:A6 X509v3 Authority Key Identifier: keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:7b:f0:75:cf:14:61:8f:31:f7:d0:8a:ed:3a:ce:fb:fd:cc: aa:4c:d0:03:8b:31:b4:df:29:e4:a9:e7:b0:d2:b2:d3:1e:a4: b4:61:ce:d9:dc:b4:50:7f:9d:c0:48:5c:22:57:50:7f:b7:24: 6c:61:e3:91:46:23:8c:cc:74:2a:6b:58:a4:5a:14:c8:c3:95: c5:57:45:79:ef:3e:bb:eb:68:36:31:9c:7a:78:08:4e:3a:e8: 8b:be:21:36:a5:27:f5:ad:8f:f4:fc:90:75:26:4e:1a:44:5f: 22:7c:30:b8:7a:30:b5:af:58:e2:b5:42:97:34:c6:71:e6:87: 52:25:ce:82:a8:71:4c:de:cc:7b:3f:1a:7b:13:99:fd:c2:e8: 93:3e:40:f7:5f:09:bb:90:67:e3:c7:61:22:be:13:ed:22:a8: 88:9f:39:77:80:f1:6b:ce:f3:a5:e5:58:05:62:e7:4b:83:ae: 8b:1c:b4:b2:70:7d:80:a6:74:2c:05:c2:0d:e9:a8:a6:94:2d: 6d:0d:66:7f:a1:c1:d6:0a:40:34:94:9a:bf:f6:cb:b9:d9:90: 65:6a:e5:b6:95:a3:3b:26:64:21:86:e4:50:5d:be:3e:17:9e: 23:ad:05:7a:ef:12:b7:57:7e:a3:e7:e1:66:d4:b4:92:bd:1f: fb:71:36:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGNzMxMTAvBgNVBAUTKDg5QTMxRDQ0RTk0RjFDQzI3ODUwQkJBQzE2QzAyQzIw QUFCMzlDRTUwHhcNMjUwNTEwMTkxNzA2WhcNMjUwNTE3MTkxNzA2WjAYMRYwFAYD VQQDEw02ODFmYTYzMi03YjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuObkJSzn0S1p0nDaSQRmmjuN/1Q9YMbamfXWzwi6uRI3C/gKbjjOvXLJRIss rkcNI5XtIei54Iuf7KYjyzR/pp1v5W60CWsqxAVwpWPxdGxtZvWKrrgvsQcmxQl5 ww8u8POSwKIL0Sqvl4V1apClmxLL2+ae6vLPVLLJC3Qi7BMfHxQnlV9QJAz10uc1 V64Wc53SYhHGcNTUUBfwHgl3cz+KZc80wQ2/tvOyQUXRYzPNZFTMIv38wORIpDi6 W7dz3X0zgbX+mkGemZPGrTpmucHWH491I7IMVZMJ++ZtajEQy+XOVRtr/fhncbVm Pz+MH4B1jpMQoIMaYcOVMEdNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwi3O/w RqvWz0Ad2tJy+tWlbYumMB8GA1UdIwQYMBaAFImjHUTpTxzCeFC7rBbALCCqs5zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3My9BMjk3MDdGNjUz QTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhNSjRVTHVzRnNBc0lLcXpu T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhTWRST2xQSE1KNFVMdXNGc0FzSUtxem5PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3My9BMjk3MDdGNjUzQTExMUVBQUVFRUJFMEJDNEY5QUUwMi9pYU1kUk9sUEhN SjRVTHVzRnNBc0lLcXpuT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDe/B1zxRhjzH30IrtOs77/cyqTNADizG03ynkqeew0rLTHqS0Yc7Z 3LRQf53ASFwiV1B/tyRsYeORRiOMzHQqa1ikWhTIw5XFV0V57z6762g2MZx6eAhO OuiLviE2pSf1rY/0/JB1Jk4aRF8ifDC4ejC1r1jitUKXNMZx5odSJc6CqHFM3sx7 Pxp7E5n9wuiTPkD3Xwm7kGfjx2EivhPtIqiInzl3gPFrzvOl5VgFYudLg66LHLSy cH2ApnQsBcIN6aimlC1tDWZ/ocHWCkA0lJq/9su52ZBlauW2laM7JmQhhuRQXb4+ F54jrQV67xK3V36j5+Fm1LSSvR/7cTaI -----END CERTIFICATE-----Generated at Mon May 12 19:53:09 2025 by rpki-client