$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft File: -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json) Hash identifier: upOGxXr6LzERNE2vXZBKGei8TH5PeLrWxt1HOk/FMdI= Subject key identifier: F2:84:4B:3A:2D:4B:8E:56:A7:D4:2E:F0:C3:57:B4:D9:89:BE:E7:92 Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B Certificate issuer: /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft Manifest number: 7B Signing time: Tue 13 May 2025 06:00:40 +0000 Manifest this update: Tue 13 May 2025 06:00:39 +0000 Manifest next update: Tue 20 May 2025 06:00:39 +0000 Files and hashes: 1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: VmI4k1gCP4Q9294/LoucqwGBBbDtZfN3w81YEusE4Xg=) 2: C276060084F011EF9D52F573C4F9AE02.roa (hash: /tD3m0UAwlMwH5KNwcamave93IXNHxAGbXTHUSH9zMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Validity Not Before: May 13 06:00:39 2025 GMT Not After : May 20 06:00:39 2025 GMT Subject: CN=6822e008-ab2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:16:ad:40:4a:a4:36:67:80:82:45:01:31: dc:be:dd:bb:fd:f1:d9:e7:94:5b:f0:f2:dd:6e:eb: 31:ee:66:e6:b2:e9:24:8d:ee:95:0c:dd:6e:09:d1: 49:ac:db:77:a9:93:16:ab:94:99:c2:f9:73:bb:07: 49:d8:de:5e:d1:02:09:20:e0:ea:3e:ee:9c:c9:38: 38:89:d4:41:83:3f:bd:2a:74:c5:c2:48:24:11:dd: f9:a9:41:0c:24:8b:e4:cb:fa:9b:55:c0:58:31:3b: be:e6:f2:6c:2c:87:a5:32:a6:3a:1c:d1:6d:0b:64: d2:e1:b6:b0:51:09:b5:e5:33:e7:5c:3c:71:5b:68: 28:ce:01:48:d3:73:6f:68:cb:6c:d1:c6:81:07:fe: d5:ce:86:8d:89:01:3b:f2:05:b6:fe:a7:92:99:a6: 63:dc:9a:9e:d0:e1:70:63:79:93:3f:13:e6:d5:e3: 09:89:1e:25:02:52:99:39:7f:ad:9e:f8:8c:50:35: 1f:b3:72:7b:62:2f:70:20:32:7c:6f:cd:64:28:b7: 5e:42:5e:71:33:fb:9a:35:4c:b8:16:88:94:99:55: d5:e2:43:f6:70:2d:da:30:b7:51:c0:ec:fe:18:8e: bd:2f:8c:f3:e2:0c:a9:2c:06:e1:e2:3d:c9:36:65: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:84:4B:3A:2D:4B:8E:56:A7:D4:2E:F0:C3:57:B4:D9:89:BE:E7:92 X509v3 Authority Key Identifier: keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d6:3c:be:c0:57:fe:8c:ce:36:d8:6e:84:19:db:5e:2a:de: 3d:de:7e:23:ed:3a:eb:52:c8:5d:e7:bb:93:4d:70:ad:bb:5e: 13:b5:4b:bc:c9:53:5a:1d:ee:d8:80:cb:f5:f3:0c:26:0f:9f: 55:b9:87:2a:17:8f:01:1c:69:4a:7e:de:e7:36:51:2a:c1:67: 5c:65:6f:f9:15:75:74:d4:f0:1e:df:f8:7c:b7:30:81:f4:38: 54:8c:e1:1e:12:33:86:7e:7c:28:f9:c7:c7:ca:00:21:aa:50: 09:13:9b:bf:d7:01:eb:76:c9:d0:1b:09:06:cc:c0:31:95:9a: 22:7c:23:7d:89:52:23:fe:f6:99:f1:e3:df:db:78:23:0b:c2: 86:80:d6:9e:ce:52:67:dc:f9:31:f2:64:74:e5:ec:d8:34:83: c8:d7:85:75:1d:3f:35:4a:62:46:d5:35:fe:24:ad:11:27:01: ee:a0:05:3d:ed:06:83:40:a4:f4:2e:33:2a:dc:25:29:8e:e4: 72:32:8b:5a:9f:4c:ab:d7:eb:95:35:dd:db:40:96:6e:c2:73: 02:7e:8c:68:ec:2f:08:ab:d1:5c:8a:d2:03:30:ba:05:56:cb: 46:90:48:80:fe:b0:b9:2d:c6:7d:c5:5c:64:3a:35:ee:39:02: b1:54:b7:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1MjUxMTAvBgNVBAUTKEZCRkY4OEFERTk5MzY2ODlCMzI0MTQ1QkZFNjNCNzRE NTdBQUFDMEIwHhcNMjUwNTEzMDYwMDM5WhcNMjUwNTIwMDYwMDM5WjAYMRYwFAYD VQQDEw02ODIyZTAwOC1hYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EgWrUBKpDZngIJFATHcvt27/fHZ55Rb8PLdbusx7mbmsukkje6VDN1uCdFJ rNt3qZMWq5SZwvlzuwdJ2N5e0QIJIODqPu6cyTg4idRBgz+9KnTFwkgkEd35qUEM JIvky/qbVcBYMTu+5vJsLIelMqY6HNFtC2TS4bawUQm15TPnXDxxW2gozgFI03Nv aMts0caBB/7VzoaNiQE78gW2/qeSmaZj3Jqe0OFwY3mTPxPm1eMJiR4lAlKZOX+t nviMUDUfs3J7Yi9wIDJ8b81kKLdeQl5xM/uaNUy4FoiUmVXV4kP2cC3aMLdRwOz+ GI69L4zz4gypLAbh4j3JNmXzOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKESzot S45Wp9Qu8MNXtNmJvueSMB8GA1UdIwQYMBaAFPv/iK3pk2aJsyQUW/5jt01XqqwL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FQTAyMzQxQzg0 RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpvbXpKQlJiX21PM1RWZXFy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1fLUlyZW1UWm9tekpCUmJfbU8zVFZlcXJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUyNS9FQTAyMzQxQzg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpv bXpKQlJiX21PM1RWZXFyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB51jy+wFf+jM422G6EGdteKt493n4j7TrrUshd57uTTXCtu14TtUu8 yVNaHe7YgMv18wwmD59VuYcqF48BHGlKft7nNlEqwWdcZW/5FXV01PAe3/h8tzCB 9DhUjOEeEjOGfnwo+cfHygAhqlAJE5u/1wHrdsnQGwkGzMAxlZoifCN9iVIj/vaZ 8ePf23gjC8KGgNaezlJn3Pkx8mR05ezYNIPI14V1HT81SmJG1TX+JK0RJwHuoAU9 7QaDQKT0LjMq3CUpjuRyMotan0yr1+uVNd3bQJZuwnMCfoxo7C8Iq9FcitIDMLoF VstGkEiA/rC5LcZ9xVxkOjXuOQKxVLcV -----END CERTIFICATE-----Generated at Wed May 14 16:19:31 2025 by rpki-client