$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: qrL2oLPi3MX3CC/o/b0iFC/mFJuZvqjkeEmSh4nJS18= Subject key identifier: 4F:BF:FA:F1:C9:C8:2C:49:15:90:ED:57:26:22:E2:A7:7B:2E:1B:CE Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0C51 Signing time: Fri 18 Apr 2025 18:27:15 +0000 Manifest this update: Fri 18 Apr 2025 18:27:15 +0000 Manifest next update: Fri 25 Apr 2025 18:27:15 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: HMj6uCG+jS5y/0xB0YLL9OKQkMvzTTAMSi3oszaWaFY=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: jSwMcFszO57ienV1VmhbXd49FtQGNQErTQsLI54ATCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Apr 18 18:27:15 2025 GMT Not After : Apr 25 18:27:15 2025 GMT Subject: CN=68029983-ad83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:6b:9c:04:57:78:14:88:75:96:55:ec:94: 00:57:62:7f:06:01:4d:1a:06:0b:a6:c7:c5:c0:30: 29:1e:fe:e8:5e:b2:cc:f2:04:9f:06:02:65:7f:24: 65:97:f3:29:d3:b8:e7:29:66:f0:94:d8:b3:a9:31: 7a:63:c7:9d:1d:82:10:83:cf:b2:98:55:0b:3d:02: 47:0a:93:4c:c5:a1:51:8d:91:2a:be:4f:30:84:d7: 53:a3:5f:c6:b5:a8:b1:a8:19:95:bb:e5:a6:83:7d: 4f:13:15:10:19:d7:79:66:70:28:e6:df:74:17:9e: 97:05:a5:4f:ad:2b:17:f4:84:c0:ca:ef:74:37:2d: c7:29:19:e1:7f:dc:ed:7d:30:78:d4:8d:48:b5:d0: b6:db:83:c9:87:16:d5:0d:8b:57:a7:ca:31:e5:b6: 36:7a:39:d9:0f:eb:76:29:cc:1d:48:79:5c:2f:09: 8f:87:44:87:c0:e8:11:e7:57:94:98:32:b7:bd:fc: ec:a6:13:e3:ba:64:20:ae:a1:25:9a:ac:7a:6a:eb: 0d:4a:7a:de:11:e1:23:8c:63:2d:7e:71:8c:59:d8: ab:28:72:ce:22:b6:af:7b:01:19:a1:1e:ce:45:a7: 1f:ef:54:80:11:c0:d0:7e:dd:a8:7f:7b:59:6d:dc: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BF:FA:F1:C9:C8:2C:49:15:90:ED:57:26:22:E2:A7:7B:2E:1B:CE X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:43:b2:01:70:b1:65:b4:d7:42:1c:35:c8:f5:42:94:2c:5f: 5c:63:d5:b2:61:ef:27:ac:aa:cc:54:31:a5:fa:73:7d:2f:c5: a2:6c:ee:40:ec:0f:82:14:41:8e:5c:96:c3:ce:97:d2:10:04: c4:0f:5f:22:62:2c:ff:3a:7d:77:87:43:2d:03:c1:6f:ac:ef: 53:90:5f:03:e7:91:db:85:46:40:00:1d:b7:f7:83:9e:50:03: 73:8b:00:a7:b7:7a:08:d3:fa:4f:a5:cf:5e:5a:43:b2:5e:37: 32:ab:21:08:43:0e:3d:11:38:9c:e8:12:04:ff:f7:b7:2d:40: 08:de:04:a6:57:cb:fc:fc:c5:a0:69:1d:d7:3d:9b:b5:d4:3e: dd:0b:92:1b:5d:27:cc:2e:1b:ad:d3:f0:67:f2:78:1a:61:5d: d9:91:3b:8f:37:10:7a:f1:49:75:20:b4:0b:e9:67:e2:c4:76: 45:5e:21:4c:9a:02:58:1a:1a:62:23:69:71:1e:1f:8a:09:fa: 2e:18:a8:eb:eb:41:85:0f:f0:88:4c:ab:e3:3d:f3:e1:00:ff: 6f:6a:64:a7:43:41:1b:8b:da:41:e8:01:da:b8:72:23:6e:96: 02:f7:9a:57:4f:37:2d:ad:ae:4a:8e:58:fe:a9:81:eb:db:7b: 96:01:56:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjUwNDE4MTgyNzE1WhcNMjUwNDI1MTgyNzE1WjAYMRYwFAYD VQQDEw02ODAyOTk4My1hZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ltrnARXeBSIdZZV7JQAV2J/BgFNGgYLpsfFwDApHv7oXrLM8gSfBgJlfyRl l/Mp07jnKWbwlNizqTF6Y8edHYIQg8+ymFULPQJHCpNMxaFRjZEqvk8whNdTo1/G taixqBmVu+Wmg31PExUQGdd5ZnAo5t90F56XBaVPrSsX9ITAyu90Ny3HKRnhf9zt fTB41I1ItdC224PJhxbVDYtXp8ox5bY2ejnZD+t2KcwdSHlcLwmPh0SHwOgR51eU mDK3vfzsphPjumQgrqElmqx6ausNSnreEeEjjGMtfnGMWdirKHLOIravewEZoR7O Racf71SAEcDQft2of3tZbdwYcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+/+vHJ yCxJFZDtVyYi4qd7LhvOMB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQ7IBcLFltNdCHDXI9UKULF9cY9WyYe8nrKrMVDGl+nN9L8WibO5A 7A+CFEGOXJbDzpfSEATED18iYiz/On13h0MtA8FvrO9TkF8D55HbhUZAAB2394Oe UANziwCnt3oI0/pPpc9eWkOyXjcyqyEIQw49ETic6BIE//e3LUAI3gSmV8v8/MWg aR3XPZu11D7dC5IbXSfMLhut0/Bn8ngaYV3ZkTuPNxB68Ul1ILQL6WfixHZFXiFM mgJYGhpiI2lxHh+KCfouGKjr60GFD/CITKvjPfPhAP9vamSnQ0Ebi9pB6AHauHIj bpYC95pXTzctra5Kjlj+qYHr23uWAVZ0 -----END CERTIFICATE-----Generated at Sat Apr 19 07:23:26 2025 by rpki-client