$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: p2j2RNErbphE66eckPlcGiqc5Qr/cTsyBUrRRHhkC9A= Subject key identifier: B2:D8:74:EA:B9:C2:D8:78:0C:8F:C5:6B:F5:04:C1:3D:0D:8D:55:81 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0C1A Signing time: Sun 20 Apr 2025 18:25:13 +0000 Manifest this update: Sun 20 Apr 2025 18:25:13 +0000 Manifest next update: Sun 27 Apr 2025 18:25:13 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: /e1Ss25NshXmsWV9Pm06fxxUtQ6KnwgEFNPw6Z442QM=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: jTKb6UqoxVKwoNueFvf3BZWhxggm3hq3OfDJsuiV3HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Apr 20 18:25:13 2025 GMT Not After : Apr 27 18:25:13 2025 GMT Subject: CN=68053c09-0a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:f4:21:01:04:93:c4:92:b4:d4:5a:33:f2: 7e:75:c2:ab:db:d1:eb:3c:70:8c:20:9f:fb:e0:90: 3a:be:31:3c:fe:47:44:6c:ea:fe:5f:f8:41:59:e2: a9:50:b3:b7:75:93:ec:ce:8c:87:ad:ba:8b:2d:eb: 0d:08:47:ef:52:cb:77:bc:e7:d9:28:75:a7:7b:04: fd:26:51:2d:7b:df:6f:8d:a0:1c:46:15:c3:1a:2b: 57:ee:c8:e5:6c:40:e3:e4:69:7f:df:dd:b7:9c:9a: 71:b1:1a:0d:66:53:1b:3f:4f:d7:bc:ca:f2:12:e4: 43:14:63:5b:e6:ce:e8:b9:2e:ec:5b:a7:b5:4f:f6: 35:a2:a0:77:8b:71:51:a6:3f:25:68:90:46:e5:85: fb:59:b6:f4:6f:28:31:7b:64:06:bd:6d:70:9f:28: 92:f6:14:1d:a4:cb:73:55:ce:84:64:e8:07:06:02: 54:61:1b:66:a4:77:b0:e7:04:c5:2f:0d:51:22:0c: 31:9e:42:15:59:4f:89:73:08:73:33:1b:b5:5c:e6: 54:69:42:af:c5:48:64:c6:27:e2:59:ff:e0:90:dd: 27:89:17:13:a7:31:f8:cc:3f:09:0a:1a:92:1a:8b: d8:52:dc:c0:85:71:67:5a:b5:48:59:44:74:b2:05: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D8:74:EA:B9:C2:D8:78:0C:8F:C5:6B:F5:04:C1:3D:0D:8D:55:81 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b2:cf:b2:65:29:07:b9:55:49:a5:f3:1d:76:3e:dd:19:4b: b2:c0:5c:83:61:a3:a0:84:88:3e:2c:42:a9:16:9b:dc:09:a1: 19:f7:6f:d7:3e:e7:a6:83:36:39:7c:04:f5:c0:db:a9:ae:78: 19:3d:c5:e0:e5:d0:8c:a4:36:42:1c:76:f4:73:01:15:f1:27: 1c:31:45:21:ba:f9:10:9b:bf:48:66:64:ca:96:a2:87:5d:16: 8c:77:55:fc:27:4e:08:48:30:f7:b3:d2:7e:5e:6b:9a:d1:20: f9:b9:da:8e:09:40:99:23:a4:f2:a4:09:52:e8:d7:52:df:f5: 1b:ca:13:b9:1a:db:0b:70:f5:67:6d:dc:c3:f5:6f:1c:5a:6c: e2:7b:23:c4:2e:f6:da:af:7b:4f:78:e0:e4:25:b1:e8:f7:d4: ec:c4:a5:1d:ff:e8:20:4b:08:fd:85:ec:0f:87:5b:a6:f9:2b: cc:53:f6:0d:01:7c:21:12:61:d2:0b:ef:db:49:fa:d2:a8:65: 31:1d:06:93:04:44:c3:eb:ff:3b:c2:af:6c:40:85:da:40:6a: f3:90:a7:87:62:d4:e7:fb:b4:5d:d2:08:5c:5f:07:b4:92:83: 65:84:37:61:4e:c6:c5:5f:7f:98:5e:ea:62:79:8c:fa:36:4d: 64:b5:64:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjUwNDIwMTgyNTEzWhcNMjUwNDI3MTgyNTEzWjAYMRYwFAYD VQQDEw02ODA1M2MwOS0wYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ/0IQEEk8SStNRaM/J+dcKr29HrPHCMIJ/74JA6vjE8/kdEbOr+X/hBWeKp ULO3dZPszoyHrbqLLesNCEfvUst3vOfZKHWnewT9JlEte99vjaAcRhXDGitX7sjl bEDj5Gl/3923nJpxsRoNZlMbP0/XvMryEuRDFGNb5s7ouS7sW6e1T/Y1oqB3i3FR pj8laJBG5YX7Wbb0bygxe2QGvW1wnyiS9hQdpMtzVc6EZOgHBgJUYRtmpHew5wTF Lw1RIgwxnkIVWU+JcwhzMxu1XOZUaUKvxUhkxifiWf/gkN0niRcTpzH4zD8JChqS GovYUtzAhXFnWrVIWUR0sgWyIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLYdOq5 wth4DI/Fa/UEwT0NjVWBMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsss+yZSkHuVVJpfMddj7dGUuywFyDYaOghIg+LEKpFpvcCaEZ92/X PuemgzY5fAT1wNuprngZPcXg5dCMpDZCHHb0cwEV8SccMUUhuvkQm79IZmTKlqKH XRaMd1X8J04ISDD3s9J+Xmua0SD5udqOCUCZI6TypAlS6NdS3/UbyhO5GtsLcPVn bdzD9W8cWmzieyPELvbar3tPeODkJbHo99TsxKUd/+ggSwj9hewPh1um+SvMU/YN AXwhEmHSC+/bSfrSqGUxHQaTBETD6/87wq9sQIXaQGrzkKeHYtTn+7Rd0ghcXwe0 koNlhDdhTsbFX3+YXupieYz6Nk1ktWSf -----END CERTIFICATE-----Generated at Tue Apr 22 05:43:27 2025 by rpki-client