$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft File: ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json) Hash identifier: NQjuCBbvGgTaJGV/62YvuSPD6x2FcJ+hauU3bOQBbjk= Subject key identifier: 48:99:8F:C0:A6:13:F6:BF:55:8D:DF:89:92:FB:72:7E:9E:85:88:E8 Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 Certificate issuer: /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft Manifest number: 024D Signing time: Fri 11 Apr 2025 01:48:06 +0000 Manifest this update: Fri 11 Apr 2025 01:48:05 +0000 Manifest next update: Fri 18 Apr 2025 01:48:05 +0000 Files and hashes: 1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: l/jYmsVozYzabyCZBgPZsZda8bCXgK6v93o93OjVcFg=) 2: A1FA613614AF11ED8CE9335EC4F9AE02.roa (hash: FA1bepThm+QVvw1q0u8zzYFpqsnzknERutF0jYbh+Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 01:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91183D4, serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Validity Not Before: Apr 11 01:48:05 2025 GMT Not After : Apr 18 01:48:05 2025 GMT Subject: CN=67f874d5-6ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:a1:9e:49:b9:52:9b:d0:4c:d2:ac:38:a6: a1:19:33:e0:8c:43:3c:9e:e0:2a:e8:d3:91:5b:bc: 56:05:e4:9d:54:b7:6f:42:ef:7f:41:6e:cf:30:17: cd:30:4c:8f:c4:dd:cc:87:a6:9e:50:72:13:6b:8f: d7:d4:3f:9e:64:79:1f:3c:e1:8e:d3:9a:50:bb:06: d8:b9:80:7f:09:04:b9:5a:31:9b:eb:e0:85:27:43: 03:57:7d:e5:50:12:44:3b:07:81:dd:0d:cf:45:99: 7b:5d:c6:f0:56:36:df:49:72:30:64:e5:81:a4:7a: e9:9e:6b:8c:e8:b2:ba:dd:e3:1f:b7:0f:1c:e2:cd: 26:ea:19:df:52:6f:d4:a2:ef:5c:cf:e6:fe:dc:89: 4f:06:8a:be:ce:d6:40:32:4b:f9:19:31:87:4f:b9: 67:f9:43:01:0a:db:af:99:ef:10:38:0e:42:4e:e2: 51:09:85:a3:63:af:7b:53:4e:04:81:c2:89:83:b5: 3f:b3:78:a4:34:f1:27:72:06:cd:36:00:1e:ef:05: cd:d3:d1:e4:6d:06:38:6c:7e:dc:12:ed:50:33:d4: 81:4f:a4:63:b7:83:fd:37:9f:de:a7:da:c7:94:a8: 4e:4c:0e:f8:66:25:c2:ae:66:71:62:ab:f9:22:7d: c3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:99:8F:C0:A6:13:F6:BF:55:8D:DF:89:92:FB:72:7E:9E:85:88:E8 X509v3 Authority Key Identifier: keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:7c:cb:a2:12:64:ad:d5:1a:8e:88:6d:47:cf:a2:2c:43:10: 2b:8e:cc:70:ba:4b:47:82:5e:95:05:80:52:57:7b:a3:c6:0c: a8:b4:2b:1c:0b:52:9b:75:57:d0:cc:de:da:9d:25:9a:3f:0f: 73:19:15:69:d6:9c:3d:9b:a4:8b:87:b5:78:b8:20:b7:85:d6: 27:bb:d2:4a:88:20:1b:3b:95:2d:8d:5d:d7:57:c4:76:89:03: f0:43:ec:f5:e1:6a:74:c0:cc:c7:a5:76:24:63:44:ea:bb:4f: be:dd:ef:55:71:c4:6b:7a:76:72:73:09:c4:51:4e:38:0b:22: 2d:fb:21:fa:0a:b6:31:db:b6:a0:99:40:5f:55:22:dd:b0:1c: e3:39:95:6e:70:48:9a:2a:5d:11:43:21:b8:80:fa:0d:9e:5a: 06:57:c9:db:80:87:a8:67:2f:38:50:fc:7e:aa:0e:96:cb:02: da:f2:59:6d:76:3b:a7:dd:47:6d:d0:b6:36:40:b9:be:9b:17: d0:db:ad:fd:d7:85:c3:7c:82:95:36:c6:27:72:e8:bd:70:a4: 0f:71:a0:02:1f:85:73:e9:0c:e5:be:1d:79:59:43:18:4d:2c: 93:1e:0b:a1:26:5c:7f:3b:f3:61:54:e0:38:3c:f0:61:20:5f: f0:73:e2:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzRDQxMTAvBgNVBAUTKDhBMzM5MTk1RTJDRTI5NzVCNUY3ODk5QTNEMDJDRTYy RUY5MUJGMzkwHhcNMjUwNDExMDE0ODA1WhcNMjUwNDE4MDE0ODA1WjAYMRYwFAYD VQQDEw02N2Y4NzRkNS02ZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyyhnkm5UpvQTNKsOKahGTPgjEM8nuAq6NORW7xWBeSdVLdvQu9/QW7PMBfN MEyPxN3Mh6aeUHITa4/X1D+eZHkfPOGO05pQuwbYuYB/CQS5WjGb6+CFJ0MDV33l UBJEOweB3Q3PRZl7XcbwVjbfSXIwZOWBpHrpnmuM6LK63eMftw8c4s0m6hnfUm/U ou9cz+b+3IlPBoq+ztZAMkv5GTGHT7ln+UMBCtuvme8QOA5CTuJRCYWjY697U04E gcKJg7U/s3ikNPEncgbNNgAe7wXN09HkbQY4bH7cEu1QM9SBT6Rjt4P9N5/ep9rH lKhOTA74ZiXCrmZxYqv5In3D+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiZj8Cm E/a/VY3fiZL7cn6ehYjoMB8GA1UdIwQYMBaAFIozkZXizil1tfeJmj0CzmLvkb85 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODNENC9GNkJFODY5NjE0 QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tYVzE5NG1hUFFMT1l1LVJ2 emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqT1JsZUxPS1hXMTk0bWFQUUxPWXUtUnZ6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODNENC9GNkJFODY5NjE0QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tY VzE5NG1hUFFMT1l1LVJ2emsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCifMuiEmSt1RqOiG1Hz6IsQxArjsxwuktHgl6VBYBSV3ujxgyotCsc C1KbdVfQzN7anSWaPw9zGRVp1pw9m6SLh7V4uCC3hdYnu9JKiCAbO5UtjV3XV8R2 iQPwQ+z14Wp0wMzHpXYkY0Tqu0++3e9VccRrenZycwnEUU44CyIt+yH6CrYx27ag mUBfVSLdsBzjOZVucEiaKl0RQyG4gPoNnloGV8nbgIeoZy84UPx+qg6WywLa8llt djun3Udt0LY2QLm+mxfQ263914XDfIKVNsYncui9cKQPcaACH4Vz6Qzlvh15WUMY TSyTHguhJlx/O/NhVOA4PPBhIF/wc+IN -----END CERTIFICATE-----Generated at Sat Apr 12 19:09:43 2025 by rpki-client