$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: NjUDeLIbI5l5nmszMzzmBc1J/pg0LPBNtFc7K+ufNDA= Subject key identifier: 74:63:3F:34:60:2C:19:64:22:E6:CE:3A:9D:0D:8B:09:98:FF:F9:49 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 0499 Signing time: Sun 20 Apr 2025 23:37:23 +0000 Manifest this update: Sun 20 Apr 2025 23:37:23 +0000 Manifest next update: Sun 27 Apr 2025 23:37:23 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: asBdq6oeVdUPkxCfGeibXzjozWxHovqrcjQVHZfR5Bo=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: CU8ZA4/4TdlPTUdktMFTY7GCuwd/QCyrxC7+CMDATDo=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: yUQWHT36J9pLE1kpKGBgRzyjB4VNhd4/HCHR7qeOtAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 23:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Apr 20 23:37:23 2025 GMT Not After : Apr 27 23:37:23 2025 GMT Subject: CN=68058533-2c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:3e:00:c5:3a:24:e7:25:04:a0:dc:c2:84: 48:3d:b2:23:17:28:1e:6e:25:f2:7e:64:2e:2e:f2: f1:4d:92:6b:d5:d9:a4:7e:4e:27:f6:07:12:37:c6: 3b:b3:16:9e:86:4c:60:c4:82:5b:54:50:67:b5:3e: c7:8c:ec:88:cd:59:62:ec:3c:e3:25:1b:6b:d8:fa: a3:f9:5f:2a:89:14:0c:ff:97:b5:43:01:3d:db:f5: 69:25:82:f5:19:a4:ae:fb:33:34:af:bd:76:1f:30: 64:3a:c7:12:40:8b:69:86:31:92:c0:c5:4c:7d:a8: 03:24:39:31:f4:26:41:b8:65:ab:5a:a2:17:74:5b: 6c:03:f4:72:02:76:7b:98:5a:87:52:02:bd:93:fc: 17:58:98:eb:94:76:8f:01:e4:5d:bf:b0:96:f9:37: 0e:6d:0b:d4:33:ac:8e:13:2c:9b:29:59:7e:82:1f: ec:1e:25:c8:5f:53:68:00:6e:52:14:4b:d2:95:bf: d6:04:de:3e:78:1c:59:b9:3e:3a:33:72:82:1d:d2: c9:5b:28:7d:4e:5b:84:37:74:1f:39:8c:4e:e8:10: 9c:b3:ce:12:56:e5:bc:fb:78:12:22:93:c9:44:97: ed:1f:ac:ce:65:1d:58:a3:24:8e:88:f4:0f:99:d6: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:63:3F:34:60:2C:19:64:22:E6:CE:3A:9D:0D:8B:09:98:FF:F9:49 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d9:97:1b:7a:49:a6:90:22:01:fa:1d:c9:94:d8:97:c4:34: 67:cf:20:11:ec:7d:32:01:82:79:cd:6b:8e:f9:3a:5b:7e:39: be:3e:f9:4b:0f:9c:2d:cc:30:fc:9d:cf:cd:d7:0b:96:4a:a1: 9b:de:9b:c0:da:4c:9a:ce:7f:af:12:43:9d:54:8f:b4:59:95: 84:f3:cd:b2:00:84:95:c0:25:af:65:23:33:cf:a1:5d:53:bf: 60:c4:5d:a9:e4:8c:88:56:bd:4d:2d:44:27:90:ef:ee:50:c0: af:51:db:39:1b:d1:95:c7:1b:8e:ad:56:8c:6b:9d:95:ba:70: 52:0b:29:af:5e:ed:22:65:f1:35:d9:38:ab:86:11:be:f6:fa: 00:c3:9e:03:6c:6c:7b:07:2e:52:c3:27:44:f7:2b:e2:53:11: e2:07:cb:c2:f3:cb:fe:e5:fb:45:3c:6b:8f:af:ce:40:65:12: 5f:ea:47:86:20:6d:6a:4f:58:eb:4b:73:a9:76:de:1c:cc:77: a7:a2:b0:c2:1d:c5:cd:25:2d:5b:9c:16:39:df:e3:3b:b5:d7: 28:ff:8c:62:6e:d7:e1:ae:4a:c1:99:b4:a6:63:b6:b3:49:ac: fe:2f:81:b8:bb:60:bf:8e:9e:a7:d1:a8:46:8f:e4:03:0d:d0: 95:e3:e1:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjUwNDIwMjMzNzIzWhcNMjUwNDI3MjMzNzIzWjAYMRYwFAYD VQQDEw02ODA1ODUzMy0yYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM8+AMU6JOclBKDcwoRIPbIjFygebiXyfmQuLvLxTZJr1dmkfk4n9gcSN8Y7 sxaehkxgxIJbVFBntT7HjOyIzVli7DzjJRtr2Pqj+V8qiRQM/5e1QwE92/VpJYL1 GaSu+zM0r712HzBkOscSQItphjGSwMVMfagDJDkx9CZBuGWrWqIXdFtsA/RyAnZ7 mFqHUgK9k/wXWJjrlHaPAeRdv7CW+TcObQvUM6yOEyybKVl+gh/sHiXIX1NoAG5S FEvSlb/WBN4+eBxZuT46M3KCHdLJWyh9TluEN3QfOYxO6BCcs84SVuW8+3gSIpPJ RJftH6zOZR1YoySOiPQPmdbETQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRjPzRg LBlkIubOOp0NiwmY//lJMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb2ZcbekmmkCIB+h3JlNiXxDRnzyAR7H0yAYJ5zWuO+Tpbfjm+PvlL D5wtzDD8nc/N1wuWSqGb3pvA2kyazn+vEkOdVI+0WZWE882yAISVwCWvZSMzz6Fd U79gxF2p5IyIVr1NLUQnkO/uUMCvUds5G9GVxxuOrVaMa52VunBSCymvXu0iZfE1 2TirhhG+9voAw54DbGx7By5SwydE9yviUxHiB8vC88v+5ftFPGuPr85AZRJf6keG IG1qT1jrS3Opdt4czHenorDCHcXNJS1bnBY53+M7tdco/4xibtfhrkrBmbSmY7az Saz+L4G4u2C/jp6n0ahGj+QDDdCV4+Fv -----END CERTIFICATE-----Generated at Tue Apr 22 16:48:29 2025 by rpki-client