$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft File: iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json) Hash identifier: uAGeIWRjHuu01lLIf/UpXN5iDEBtfX34xueWsQ8XNNw= Subject key identifier: 50:B0:99:B5:43:0B:A3:C2:C8:3D:99:F2:C5:AD:3E:9B:D0:17:70:C1 Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93 Certificate issuer: /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft Manifest number: 0116 Signing time: Thu 15 May 2025 04:13:08 +0000 Manifest this update: Thu 15 May 2025 04:13:07 +0000 Manifest next update: Thu 22 May 2025 04:13:07 +0000 Files and hashes: 1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: EWq7KegkDina0/BRtmYtwe2TsZvLyYtdE+stE9TBxEw=) 2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: 2pLBfFEzGVtLv2cMeVGOzUnHFe1Jg/DT2E9SEr2vDd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993 Validity Not Before: May 15 04:13:07 2025 GMT Not After : May 22 04:13:07 2025 GMT Subject: CN=682569d3-5663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:0f:88:3d:ef:13:92:8d:34:8e:7e:65:7c: 74:5c:8e:7d:93:bb:df:ad:2a:de:c1:9d:2d:12:b0: 02:53:fc:3b:a7:8e:89:80:f1:e0:2f:8a:22:a9:f2: e6:60:45:85:9d:f7:54:cc:bf:13:11:ba:d8:41:08: 16:d3:82:95:d0:33:0a:86:9d:a7:e3:8d:6e:3a:01: 51:e4:3f:00:31:f9:fe:ad:22:55:74:95:57:07:a0: 4d:76:99:23:19:5c:cd:4f:91:72:48:ca:73:80:bb: db:50:c6:ab:d3:92:07:2c:47:de:ab:12:22:ce:22: 83:7f:9b:10:d6:fa:01:16:f2:9d:31:94:5a:d1:92: 61:0c:85:83:af:0c:16:8f:55:a3:e6:a7:9c:26:2f: 9a:c6:e3:0f:7e:7a:79:e5:d8:4a:c5:09:57:95:1b: c8:39:b9:de:0b:ca:b8:20:4a:e9:35:e6:e9:17:db: d9:f2:04:2f:2d:d5:3e:51:d4:02:0c:e1:56:49:1d: 06:62:c4:67:ff:31:3d:e9:f6:87:6d:ea:77:8f:42: 7a:56:3b:40:64:63:65:40:cd:f7:9e:f7:2f:cc:a4: 38:92:6a:af:15:14:cc:fb:6a:20:1c:ce:d1:76:bf: 55:23:58:18:c1:b3:7a:f0:f0:a6:9e:d0:8a:4d:8d: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B0:99:B5:43:0B:A3:C2:C8:3D:99:F2:C5:AD:3E:9B:D0:17:70:C1 X509v3 Authority Key Identifier: keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:34:bd:0e:db:53:0c:bf:cc:0c:c9:6e:48:4e:6f:fa:96:eb: e1:bc:21:26:7a:57:85:ab:58:e1:c4:48:26:f5:0d:bb:49:85: 6c:55:45:e8:10:75:03:1f:32:5d:24:cf:42:ba:0a:6e:bf:68: 2f:d2:dc:d0:ee:a2:e6:01:18:35:ff:3e:79:8d:20:47:ca:fa: 76:2d:99:bf:67:ee:ff:76:c6:54:53:7a:4b:6b:c4:00:bd:ad: 36:37:04:93:15:17:8b:eb:a1:e0:89:ae:99:61:8f:5f:55:42: f4:14:7c:4e:e9:aa:f9:c4:c8:ad:33:1b:72:8d:cd:ba:e3:e1: e8:f8:08:e8:38:4d:b8:12:06:a4:a5:1e:fd:a0:66:c4:d0:35: 2a:e0:55:d9:e5:58:de:1d:1c:69:3d:46:a8:8a:d7:86:cb:58: ba:58:e2:29:45:a3:39:79:e9:ab:a3:58:04:82:eb:b8:f3:02: 38:ec:a1:72:d2:15:0b:62:85:ca:5c:a1:8c:ee:46:ec:fe:f6: 60:22:59:c7:36:a5:d5:c8:ed:e9:0f:dc:36:43:15:09:05:69: 28:d5:ed:60:39:6c:bf:be:f1:80:c8:dc:17:11:c3:a1:4d:08: 2b:ca:b3:fe:a6:84:4e:ab:22:fd:41:c4:95:20:cc:4c:04:69: 84:4e:c5:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyMUQxMTAvBgNVBAUTKDg4QzE1NDREN0U2N0JDRDkxRDQ4REY1RDExRkNEMTAy MUY4NTM5OTMwHhcNMjUwNTE1MDQxMzA3WhcNMjUwNTIyMDQxMzA3WjAYMRYwFAYD VQQDEw02ODI1NjlkMy01NjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7EPiD3vE5KNNI5+ZXx0XI59k7vfrSrewZ0tErACU/w7p46JgPHgL4oiqfLm YEWFnfdUzL8TEbrYQQgW04KV0DMKhp2n441uOgFR5D8AMfn+rSJVdJVXB6BNdpkj GVzNT5FySMpzgLvbUMar05IHLEfeqxIiziKDf5sQ1voBFvKdMZRa0ZJhDIWDrwwW j1Wj5qecJi+axuMPfnp55dhKxQlXlRvIObneC8q4IErpNebpF9vZ8gQvLdU+UdQC DOFWSR0GYsRn/zE96faHbep3j0J6VjtAZGNlQM33nvcvzKQ4kmqvFRTM+2ogHM7R dr9VI1gYwbN68PCmntCKTY2Y3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCwmbVD C6PCyD2Z8sWtPpvQF3DBMB8GA1UdIwQYMBaAFIjBVE1+Z7zZHUjfXRH80QIfhTmT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODIxRC9CMkEwNzRFRTg5 QjExMUVFOTg2Q0E2NUNDNEY5QUUwMi9pTUZVVFg1bnZOa2RTTjlkRWZ6UkFoLUZP Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lNRlVUWDVudk5rZFNOOWRFZnpSQWgtRk9aTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODIxRC9CMkEwNzRFRTg5QjExMUVFOTg2Q0E2NUNDNEY5QUUwMi9pTUZVVFg1bnZO a2RTTjlkRWZ6UkFoLUZPWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArNL0O21MMv8wMyW5ITm/6luvhvCEmeleFq1jhxEgm9Q27SYVsVUXo EHUDHzJdJM9Cugpuv2gv0tzQ7qLmARg1/z55jSBHyvp2LZm/Z+7/dsZUU3pLa8QA va02NwSTFReL66Hgia6ZYY9fVUL0FHxO6ar5xMitMxtyjc264+Ho+AjoOE24Egak pR79oGbE0DUq4FXZ5VjeHRxpPUaoiteGy1i6WOIpRaM5eemro1gEguu48wI47KFy 0hULYoXKXKGM7kbs/vZgIlnHNqXVyO3pD9w2QxUJBWko1e1gOWy/vvGAyNwXEcOh TQgryrP+poROqyL9QcSVIMxMBGmETsUk -----END CERTIFICATE-----Generated at Thu May 15 09:15:45 2025 by rpki-client