$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: +VshMTXRZ/WUJhzlYwpT+LoIUuXeZFWT+g+Wt3NdXTk= Subject key identifier: 70:58:FC:94:14:CE:C6:F5:62:87:F8:A4:46:21:4A:3A:6E:53:E6:C6 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: 4A Signing time: Sat 05 Apr 2025 06:37:27 +0000 Manifest this update: Sat 05 Apr 2025 06:37:26 +0000 Manifest next update: Sat 12 Apr 2025 06:37:26 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: /9E0pAYmExQk4XSqxwjjnREyUCHUSr9HOqFpwu4ZeuQ=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0 Validity Not Before: Apr 5 06:37:26 2025 GMT Not After : Apr 12 06:37:26 2025 GMT Subject: CN=67f0cfa7-9798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:78:03:85:e5:d9:e5:35:2b:15:f0:aa:e2: f3:be:01:0e:5d:88:f2:cf:62:1c:ce:07:6a:9c:75: 3e:7f:44:9b:64:04:ab:6c:72:c0:fa:b4:48:d3:fc: c5:3a:61:6a:4e:61:35:6c:c3:05:23:c8:65:68:00: 06:5a:9e:9e:c7:d7:d6:9b:79:4f:94:ab:04:cd:3f: 31:d0:ba:6d:72:96:ae:11:0a:99:b6:e7:c4:60:58: 7a:b8:22:40:98:8c:b6:54:5e:92:a0:17:59:b8:4a: e9:38:c5:8e:c7:0e:29:74:7b:53:42:a4:ef:c8:3c: a3:e2:06:0e:86:db:48:5c:ef:07:fe:11:3c:65:d7: e9:7e:6a:93:7c:bb:01:38:a7:a4:8b:a3:40:ef:cd: 26:c3:31:a9:0a:21:13:05:ee:94:58:74:68:8f:47: 91:a7:35:50:e3:42:66:9b:66:53:ee:76:65:1c:4b: 0d:0b:2c:c3:3d:5f:5c:40:c7:1d:d7:be:3b:a9:5f: 5e:3d:18:67:2e:92:38:0e:31:e1:06:e8:ef:95:f4: 0f:0d:05:1d:8a:e2:29:19:c1:3b:10:d8:8d:b8:6b: 3b:ad:03:b8:9f:3f:6f:a2:f4:0f:6b:ca:44:46:82: a4:e1:bd:2a:d5:3f:eb:11:0a:b2:f9:bc:95:8e:32: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:58:FC:94:14:CE:C6:F5:62:87:F8:A4:46:21:4A:3A:6E:53:E6:C6 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:b1:9f:45:ed:61:90:62:c6:46:42:b6:e9:3b:e6:4f:1a:e7: 15:67:83:37:a5:4a:54:cd:de:8d:ee:2c:19:a3:5f:13:2a:b9: 67:d8:2d:9e:d1:4b:ca:69:f3:d1:f5:86:f2:25:4c:5a:f4:63: 1b:cb:b4:38:8e:1e:40:01:00:e4:06:9d:2e:40:26:0a:ad:6c: 38:01:21:5c:f7:aa:2f:39:1a:4e:f1:b8:0d:c3:04:3c:aa:c6: 86:c5:64:03:3f:a0:80:4a:33:23:e5:fb:b1:3c:b7:30:6c:3c: 1b:df:62:bd:c8:96:ea:db:9e:ba:34:46:8f:17:55:9d:78:5e: 3a:fe:ff:a3:1a:a3:b5:53:b7:a7:3a:4e:4e:9c:f8:24:2c:08: bf:8d:c0:25:06:3a:92:0c:b9:8d:ee:86:14:15:fc:b5:b9:91: bc:06:2f:34:3d:0e:b5:10:c7:04:f5:97:6c:00:49:ca:c1:6b: 53:cd:da:95:c6:fe:03:2b:11:18:82:2b:19:cc:59:69:8b:81: 4a:de:cb:1a:e1:8f:aa:52:04:81:05:7f:c9:33:2a:18:e6:5e: b8:94:f8:1c:d2:01:ca:88:aa:25:29:9b:17:42:ec:cb:c4:ec: a4:e4:8b:52:55:b5:c0:14:61:14:97:f5:4b:85:bb:f9:25:80: 28:e2:b9:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUJGMDExMC8GA1UEBRMoMjFDRkNFODFEODc1RDVDRjhGNTk2QURCRkNDMzYwMTk2 MUM0NDFFNzAeFw0yNTA0MDUwNjM3MjZaFw0yNTA0MTIwNjM3MjZaMBgxFjAUBgNV BAMTDTY3ZjBjZmE3LTk3OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHQngDheXZ5TUrFfCq4vO+AQ5diPLPYhzOB2qcdT5/RJtkBKtscsD6tEjT/MU6 YWpOYTVswwUjyGVoAAZanp7H19abeU+UqwTNPzHQum1ylq4RCpm258RgWHq4IkCY jLZUXpKgF1m4Suk4xY7HDil0e1NCpO/IPKPiBg6G20hc7wf+ETxl1+l+apN8uwE4 p6SLo0DvzSbDMakKIRMF7pRYdGiPR5GnNVDjQmabZlPudmUcSw0LLMM9X1xAxx3X vjupX149GGcukjgOMeEG6O+V9A8NBR2K4ikZwTsQ2I24azutA7ifP2+i9A9rykRG gqThvSrVP+sRCrL5vJWOMhvxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcFj8lBTO xvVih/ikRiFKOm5T5sYwHwYDVR0jBBgwFoAUIc/Ogdh11c+PWWrb/MNgGWHEQecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwLzlGNTkxRThFQTQx NTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWNfT2dkaDExYy1QV1dyYl9NTmdHV0hFUWVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QkYwLzlGNTkxRThFQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyL0ljX09nZGgxMWMt UFdXcmJfTU5nR1dIRVFlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALOxn0XtYZBixkZCtuk75k8a5xVngzelSlTN3o3uLBmjXxMquWfYLZ7R S8pp89H1hvIlTFr0YxvLtDiOHkABAOQGnS5AJgqtbDgBIVz3qi85Gk7xuA3DBDyq xobFZAM/oIBKMyPl+7E8tzBsPBvfYr3Ilurbnro0Ro8XVZ14Xjr+/6Mao7VTt6c6 Tk6c+CQsCL+NwCUGOpIMuY3uhhQV/LW5kbwGLzQ9DrUQxwT1l2wAScrBa1PN2pXG /gMrERiCKxnMWWmLgUreyxrhj6pSBIEFf8kzKhjmXriU+BzSAcqIqiUpmxdC7MvE 7KTki1JVtcAUYRSX9UuFu/klgCjiuV8= -----END CERTIFICATE-----Generated at Sat Apr 5 22:05:27 2025 by rpki-client