$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft File: iaGX0JdonG6zOGepzIrM1_s2Tok.mft (raw, json) Hash identifier: FAoU30KO+rZdMXlIUnQpU+yf/LH/dwu1CHiz87k/JMw= Subject key identifier: C5:B1:61:06:4D:54:9C:BF:F8:0D:BE:7F:C7:48:C9:5C:07:5D:A7:37 Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft Manifest number: 0420 Signing time: Sat 05 Apr 2025 00:31:38 +0000 Manifest this update: Sat 05 Apr 2025 00:31:38 +0000 Manifest next update: Sat 12 Apr 2025 00:31:38 +0000 Files and hashes: 1: iaGX0JdonG6zOGepzIrM1_s2Tok.crl (hash: Pjh9H156cIYle3J5o7HBVpvraqO+9gQ1D0VDxTG9EBU=) 2: E82DE3C290AB11ECAB81252FC4F9AE02.roa (hash: bae2h1fyx3Q2HMMVl8xXKrMMVZUAe0Q5kTd+Vb0nl2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917991B Validity Not Before: Apr 5 00:31:38 2025 GMT Not After : Apr 12 00:31:38 2025 GMT Subject: CN=67f079ea-9b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:5e:3e:ea:fe:64:73:72:b6:1b:58:3f:e8: f5:65:52:dc:e1:c5:75:8f:d9:ab:0c:30:4c:72:d5: 7b:03:55:8d:0d:ca:89:15:43:26:26:2e:ba:fe:83: ec:86:37:ac:12:6a:d0:a2:b8:5a:b3:c1:a6:ee:2c: 15:c7:9e:31:a2:0b:d5:b3:03:70:71:50:3c:0b:11: 84:44:af:9c:b9:3d:d7:5b:d3:4a:7b:a1:8f:61:0f: 22:d4:69:d5:26:d9:ac:a9:73:4b:91:90:5b:26:be: ef:e5:3a:5a:6b:48:1e:4b:62:d6:f1:6c:d1:85:ed: 3f:de:7d:96:72:c9:70:a8:78:b3:c9:73:79:f3:f6: 04:33:b9:cc:56:f8:06:87:20:d2:5f:d7:95:d5:db: ee:cf:4c:5e:b6:a1:74:54:1e:5f:11:d8:e3:e7:2f: 1e:d8:c2:0f:61:f1:02:5d:23:11:5a:c8:24:3c:eb: 3d:c9:ae:63:40:59:33:07:16:da:92:77:b3:83:62: bb:92:1d:3e:1f:fe:03:f4:58:1d:e5:e9:c6:63:b3: 1a:cd:79:79:4d:c1:dc:e2:bd:d0:89:a2:1c:0b:6c: b6:70:12:1a:e8:a1:ed:c0:fc:a1:78:e1:80:16:bf: c3:d9:48:b4:74:bd:9d:47:a3:92:9d:ec:c0:39:dc: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B1:61:06:4D:54:9C:BF:F8:0D:BE:7F:C7:48:C9:5C:07:5D:A7:37 X509v3 Authority Key Identifier: keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:68:7a:19:c8:be:86:c2:20:1a:df:cf:0a:60:19:ea:7d:7a: 49:96:43:6d:d5:36:a0:06:3f:f2:0b:b4:05:5f:74:47:e0:c2: 89:d2:10:d6:05:12:4e:f2:ab:1f:44:e4:6b:a7:0c:b1:1c:60: e7:96:8d:b6:d5:42:bb:f6:db:f3:03:b2:a9:a1:61:f2:f6:63: a4:21:e3:08:01:7c:c1:29:40:8b:39:f2:d1:18:42:28:b6:84: 3b:f3:b3:0d:45:5e:fa:21:14:73:96:43:58:4f:12:ec:58:c2: 31:f2:cf:17:6c:1f:a8:9e:5b:d8:c6:99:39:48:32:6b:8a:45: be:fc:91:b9:89:ff:ac:fb:88:01:7f:6a:02:e2:56:4e:18:a2: fd:34:13:0b:69:cc:5d:0a:68:79:03:79:8d:db:e8:79:d2:4d: bd:4d:1a:d7:51:db:df:d5:2f:46:c7:9c:1f:4d:1f:a9:65:98: fb:92:7d:6b:23:96:3b:e2:7a:14:3c:4f:ca:11:8c:0b:d3:6c: 2f:23:3b:47:b8:b6:19:b8:bf:06:72:af:7e:db:ec:db:b7:11: fe:ed:0f:24:f5:09:c7:2c:ec:39:63:2b:94:7c:e4:f6:ec:f1: fd:f2:ca:b6:9d:a3:9c:5c:92:65:a6:ec:cd:da:ab:eb:43:c6: d5:ac:53:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5MUIxMTAvBgNVBAUTKDg5QTE5N0QwOTc2ODlDNkVCMzM4NjdBOUNDOEFDQ0Q3 RkIzNjRFODkwHhcNMjUwNDA1MDAzMTM4WhcNMjUwNDEyMDAzMTM4WjAYMRYwFAYD VQQDEw02N2YwNzllYS05YjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg9ePur+ZHNythtYP+j1ZVLc4cV1j9mrDDBMctV7A1WNDcqJFUMmJi66/oPs hjesEmrQorhas8Gm7iwVx54xogvVswNwcVA8CxGERK+cuT3XW9NKe6GPYQ8i1GnV JtmsqXNLkZBbJr7v5Tpaa0geS2LW8WzRhe0/3n2WcslwqHizyXN58/YEM7nMVvgG hyDSX9eV1dvuz0xetqF0VB5fEdjj5y8e2MIPYfECXSMRWsgkPOs9ya5jQFkzBxba knezg2K7kh0+H/4D9Fgd5enGY7MazXl5TcHc4r3QiaIcC2y2cBIa6KHtwPyheOGA Fr/D2Ui0dL2dR6OSnezAOdzmLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWxYQZN VJy/+A2+f8dIyVwHXac3MB8GA1UdIwQYMBaAFImhl9CXaJxuszhnqcyKzNf7Nk6J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTkxQi83RDBDMzdEMDYw NDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25HNnpPR2VweklyTTFfczJU b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhR1gwSmRvbkc2ek9HZXB6SXJNMV9zMlRvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTkxQi83RDBDMzdEMDYwNDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25H NnpPR2VweklyTTFfczJUb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4aHoZyL6GwiAa388KYBnqfXpJlkNt1TagBj/yC7QFX3RH4MKJ0hDW BRJO8qsfRORrpwyxHGDnlo221UK79tvzA7KpoWHy9mOkIeMIAXzBKUCLOfLRGEIo toQ787MNRV76IRRzlkNYTxLsWMIx8s8XbB+onlvYxpk5SDJrikW+/JG5if+s+4gB f2oC4lZOGKL9NBMLacxdCmh5A3mN2+h50k29TRrXUdvf1S9Gx5wfTR+pZZj7kn1r I5Y74noUPE/KEYwL02wvIztHuLYZuL8Gcq9+2+zbtxH+7Q8k9QnHLOw5YyuUfOT2 7PH98sq2naOcXJJlpuzN2qvrQ8bVrFPo -----END CERTIFICATE-----Generated at Sun Apr 6 20:44:14 2025 by rpki-client