$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json) Hash identifier: Udk4QoMLTufnZeGwi4Iq97mKsFBYXwmydPA8KWSFLr8= Subject key identifier: 8D:C4:AE:3A:FB:7F:89:BE:F8:22:64:42:EA:BF:52:04:74:17:E1:B9 Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 031A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft Manifest number: 0313 Signing time: Sat 05 Apr 2025 01:19:09 +0000 Manifest this update: Sat 05 Apr 2025 01:19:08 +0000 Manifest next update: Sat 12 Apr 2025 01:19:08 +0000 Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: kQJQm2gCB5Zt+u9tOl1dQm8BYk+DxKnXWjkKwi7/gZQ=) 2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: BWjw8ZzgxeIsXktsSggwFqoGIGBV9RKmqBd6UmUawiw=) 3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: w5wAGuBp2YZuw7r2gpx/dOhrAuPlBh9HGiqoIoNxrIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E Validity Not Before: Apr 5 01:19:08 2025 GMT Not After : Apr 12 01:19:08 2025 GMT Subject: CN=67f0850d-5062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:cc:a2:67:02:83:c5:30:b8:ac:88:cc:da: cb:5c:78:75:af:2c:ef:0e:7b:38:d2:18:90:60:5b: 3b:04:60:e7:ca:cb:f9:27:48:f2:b9:ff:c1:ea:b7: f5:39:fa:65:3f:fb:38:06:3f:8f:1b:01:75:30:ff: fd:71:2a:cd:42:38:12:9c:6b:4e:85:ac:eb:69:ac: 32:98:9f:aa:e6:27:84:d5:5a:f3:25:65:86:14:dd: 4f:d3:98:ec:9e:9b:6b:78:ff:44:ee:18:ce:a4:03: 2f:1a:3b:e8:15:ab:c4:a8:3b:68:8e:2b:c4:d9:bb: fd:a8:5f:77:5a:4f:4d:bc:30:39:13:c6:2f:ad:4b: df:31:02:8c:b3:90:6b:aa:39:93:37:49:de:6d:70: de:53:e9:c1:5d:0d:91:30:5e:cc:32:bb:f9:e2:80: 08:97:cb:4b:1f:ae:7d:96:31:e4:90:2f:0a:cc:d0: 20:7e:4e:55:6d:2b:51:5b:3a:4d:f5:59:eb:b4:a4: f8:e3:85:50:9b:fe:01:25:79:1a:3c:23:a8:92:8b: 50:a8:a6:8d:2c:f8:03:76:fa:25:f1:90:f1:1c:5e: 43:49:e5:40:97:06:7e:4a:48:dd:d4:18:77:85:12: d0:ac:70:30:ee:5a:e5:98:56:3a:59:69:b5:20:43: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C4:AE:3A:FB:7F:89:BE:F8:22:64:42:EA:BF:52:04:74:17:E1:B9 X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:09:b8:ec:08:c4:d0:90:36:04:96:c5:ad:a2:13:9c:dc:7d: a8:12:e7:e9:c7:0d:64:33:90:ed:6a:ca:63:88:d2:f6:ac:55: 33:17:ab:89:1f:52:15:c4:2e:33:f5:f5:b7:87:e9:e3:b3:33: 97:99:6e:0c:a0:c6:cf:5f:b2:99:39:26:78:d5:77:ed:4a:ee: 9c:03:d8:07:2b:e7:18:d2:00:ee:59:d1:18:89:4a:5f:25:0e: 4c:6b:fe:c7:25:99:15:a9:31:90:67:bb:0f:18:16:da:1c:a6: f4:ed:93:6c:2f:f4:4d:69:f5:d0:85:ce:e2:a5:cd:fd:a5:de: 5b:0c:1c:37:69:03:9f:dc:ff:e6:4f:22:ed:e1:e2:2d:1b:e0: f9:b0:c9:fd:8b:8d:03:c1:97:7b:68:b5:98:84:17:89:e7:54: 92:21:0f:c0:31:93:5c:3c:f1:e7:cf:85:7f:d5:ff:23:2b:b3: 94:71:da:b1:10:a7:e4:aa:e6:c5:ec:bb:81:93:de:e5:f9:33: 96:c3:76:06:8e:a9:84:d2:68:88:35:91:b3:b4:fa:96:ce:63: 5e:9d:a5:27:67:cf:76:ec:27:76:98:7f:36:01:2d:e1:b2:19: d2:36:ac:42:13:a7:41:c8:6f:a7:28:1a:1b:c8:33:5d:ff:6a: 33:d2:d2:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjUwNDA1MDExOTA4WhcNMjUwNDEyMDExOTA4WjAYMRYwFAYD VQQDEw02N2YwODUwZC01MDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthTMomcCg8UwuKyIzNrLXHh1ryzvDns40hiQYFs7BGDnysv5J0jyuf/B6rf1 OfplP/s4Bj+PGwF1MP/9cSrNQjgSnGtOhazraawymJ+q5ieE1VrzJWWGFN1P05js nptreP9E7hjOpAMvGjvoFavEqDtojivE2bv9qF93Wk9NvDA5E8YvrUvfMQKMs5Br qjmTN0nebXDeU+nBXQ2RMF7MMrv54oAIl8tLH659ljHkkC8KzNAgfk5VbStRWzpN 9VnrtKT444VQm/4BJXkaPCOokotQqKaNLPgDdvol8ZDxHF5DSeVAlwZ+Skjd1Bh3 hRLQrHAw7lrlmFY6WWm1IEPtgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3Erjr7 f4m++CJkQuq/UgR0F+G5MB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsCbjsCMTQkDYElsWtohOc3H2oEufpxw1kM5DtaspjiNL2rFUzF6uJ H1IVxC4z9fW3h+njszOXmW4MoMbPX7KZOSZ41XftSu6cA9gHK+cY0gDuWdEYiUpf JQ5Ma/7HJZkVqTGQZ7sPGBbaHKb07ZNsL/RNafXQhc7ipc39pd5bDBw3aQOf3P/m TyLt4eItG+D5sMn9i40DwZd7aLWYhBeJ51SSIQ/AMZNcPPHnz4V/1f8jK7OUcdqx EKfkqubF7LuBk97l+TOWw3YGjqmE0miINZGztPqWzmNenaUnZ8927Cd2mH82AS3h shnSNqxCE6dByG+nKBobyDNd/2oz0tIO -----END CERTIFICATE-----Generated at Sat Apr 5 05:29:44 2025 by rpki-client