$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: a5PRAOglbduTE2fKmfBboRIjZ5zpS84ssFHE5Y1g/8Q= Subject key identifier: 07:BD:B7:5A:A4:78:71:78:90:26:2D:0E:B1:FA:83:1A:DA:73:C0:07 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 0462 Signing time: Mon 12 May 2025 23:56:59 +0000 Manifest this update: Mon 12 May 2025 23:56:59 +0000 Manifest next update: Mon 19 May 2025 23:56:59 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: IEdasdel9u5tLYAh42BzjypE5H1G11E68s3kwA02jYg=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qTXBNw7mfhaErKZnovnNFuD402t8u0aLC3Cx70bCvCg=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: 6iwr6VYb5feSdMcufjsCe6jPARf4GSvhQnloLGq2csk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: May 12 23:56:59 2025 GMT Not After : May 19 23:56:59 2025 GMT Subject: CN=68228acb-abeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:3f:3a:54:82:dd:f1:fa:bd:9d:2c:87:e1: fe:6b:17:cf:db:9d:6e:78:8e:e6:97:49:c5:17:0a: d7:98:5f:65:bc:11:3d:09:91:a5:d9:27:99:a4:29: 8e:d8:46:f6:39:5f:0b:d0:be:72:c5:a6:88:92:19: dc:c7:5b:e2:d5:a8:f1:25:da:8e:1f:1d:8a:4b:e5: bc:90:4b:7b:8f:52:94:7f:2d:9c:07:da:57:43:13: 36:5d:18:47:be:c1:4e:f9:cb:4e:87:d0:91:2f:46: ea:a9:51:a4:aa:c7:14:2e:77:82:50:87:2e:bc:a2: ab:1c:59:38:d7:b0:55:0e:54:16:bb:da:c1:6a:56: 70:fb:48:47:6c:28:8f:f8:02:64:dc:2f:2b:7e:ea: f5:e7:ac:e9:78:92:9f:38:6c:7d:84:5b:62:51:ee: 15:bd:63:21:cb:c9:c2:78:92:ad:88:cc:9c:2e:99: b4:23:3e:51:f4:54:42:a0:fb:18:fd:83:2d:83:8c: 1f:19:4d:f4:78:9e:a7:e4:2e:82:81:bb:80:fc:31: bd:d0:27:73:48:0f:ab:51:50:95:40:d5:85:5b:0e: 0b:ec:93:ab:6a:82:df:f3:0d:f7:48:13:38:07:f1: f9:c6:7a:c4:b3:29:b5:6c:fb:1d:f5:1c:b1:68:39: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:B7:5A:A4:78:71:78:90:26:2D:0E:B1:FA:83:1A:DA:73:C0:07 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e2:c2:2a:cc:e8:e7:c4:40:2f:d1:68:fc:4a:39:d6:fe:15: 63:d1:3a:e4:26:a5:67:37:a7:be:e9:3a:72:5b:1f:7e:ab:39: a3:95:04:b8:63:a1:be:6a:9d:2a:3a:da:58:4a:2c:85:6e:c3: 9d:bd:bb:07:d5:cc:58:97:32:0d:74:5b:eb:f8:d3:93:81:51: 68:8d:b8:27:cd:ed:3c:1d:c3:df:51:2b:ca:03:7c:9d:a8:8e: 45:3e:b4:80:81:ca:3b:93:a0:e5:5e:ab:d8:da:59:e7:31:ac: f9:86:60:95:46:41:81:89:1b:2b:16:52:a5:26:1b:35:8e:2b: c1:1b:c9:e1:c1:0a:8d:aa:f7:36:98:f8:87:5a:d4:a7:57:bd: 6a:15:62:55:de:77:e0:b5:6b:84:4c:86:a9:5e:86:05:15:2d: fd:6c:a2:7b:ee:1d:84:88:45:b8:76:88:eb:8b:73:8a:b5:e9: 28:40:50:60:ce:8d:f5:d9:cf:85:6f:d1:8d:63:76:aa:b1:4b: 2a:d3:7d:3b:8c:bd:63:a7:e9:22:7c:ef:9f:01:d4:75:a6:97: f7:35:ee:d6:a1:25:d4:e1:3b:81:d6:a4:2e:a2:b6:e3:bf:37: e5:97:41:27:5b:91:94:6e:f4:2e:15:46:9c:7f:71:30:4e:f4: fc:85:ab:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUwNTEyMjM1NjU5WhcNMjUwNTE5MjM1NjU5WjAYMRYwFAYD VQQDEw02ODIyOGFjYi1hYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjU/OlSC3fH6vZ0sh+H+axfP251ueI7ml0nFFwrXmF9lvBE9CZGl2SeZpCmO 2Eb2OV8L0L5yxaaIkhncx1vi1ajxJdqOHx2KS+W8kEt7j1KUfy2cB9pXQxM2XRhH vsFO+ctOh9CRL0bqqVGkqscULneCUIcuvKKrHFk417BVDlQWu9rBalZw+0hHbCiP +AJk3C8rfur156zpeJKfOGx9hFtiUe4VvWMhy8nCeJKtiMycLpm0Iz5R9FRCoPsY /YMtg4wfGU30eJ6n5C6CgbuA/DG90CdzSA+rUVCVQNWFWw4L7JOraoLf8w33SBM4 B/H5xnrEsym1bPsd9RyxaDmJNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAe9t1qk eHF4kCYtDrH6gxrac8AHMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt4sIqzOjnxEAv0Wj8SjnW/hVj0TrkJqVnN6e+6TpyWx9+qzmjlQS4 Y6G+ap0qOtpYSiyFbsOdvbsH1cxYlzINdFvr+NOTgVFojbgnze08HcPfUSvKA3yd qI5FPrSAgco7k6DlXqvY2lnnMaz5hmCVRkGBiRsrFlKlJhs1jivBG8nhwQqNqvc2 mPiHWtSnV71qFWJV3nfgtWuETIapXoYFFS39bKJ77h2EiEW4dojri3OKtekoQFBg zo312c+Fb9GNY3aqsUsq0307jL1jp+kifO+fAdR1ppf3Ne7WoSXU4TuB1qQuorbj vzfll0EnW5GUbvQuFUacf3EwTvT8hatC -----END CERTIFICATE-----Generated at Tue May 13 12:08:27 2025 by rpki-client