$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json) Hash identifier: DmWSnDMTSf0SYpQ7oTka2fgT4NOU8eQX+SLoLyzhvjs= Subject key identifier: A0:FC:E6:FD:2D:BD:18:C0:19:5C:92:3C:98:55:9B:D1:63:81:58:E5 Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft Manifest number: 013D Signing time: Sat 05 Apr 2025 03:44:51 +0000 Manifest this update: Sat 05 Apr 2025 03:44:50 +0000 Manifest next update: Sat 12 Apr 2025 03:44:50 +0000 Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: LTCfhe4n2LtUwZ0s8Y7J6d/VkZZ0OC5kbiC/CzGGOhg=) 2: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: 749u4lopn9W/FVK2H662IjT0Y70cK7ANdEZnlQh0KN8=) 3: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: JpEflAmkAjQw8fDsB0P7evpxNWtbBcByQzIhr/Rv/Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182644 Validity Not Before: Apr 5 03:44:50 2025 GMT Not After : Apr 12 03:44:50 2025 GMT Subject: CN=67f0a733-60b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a6:9d:ad:4a:f6:fc:3a:b5:1a:5f:30:2d:d2: 72:de:f4:79:8b:6e:64:ac:a0:a7:b8:6d:05:1c:83: 0f:9c:85:7b:ec:79:a9:7e:ea:3f:81:85:cd:c8:ba: 37:95:4b:0f:8c:06:62:20:5a:66:94:0b:4d:31:92: 65:28:1c:ac:ce:41:f4:eb:eb:c2:6e:6f:20:94:17: 19:13:c8:54:0b:cc:ac:7a:0e:cd:48:e9:0d:02:42: fa:94:44:9a:29:61:7d:80:35:9b:d3:9e:cf:12:41: 49:62:d3:74:2c:62:da:67:a0:7e:02:02:a2:e9:04: 52:dc:c5:f9:ea:56:05:9f:fd:64:55:f8:dc:27:0a: 51:5a:fa:44:c8:ea:53:0c:ec:bb:f7:e3:e0:31:8d: f5:b5:b6:aa:30:2b:37:9e:20:d6:a4:da:72:b0:fa: 57:89:33:58:91:20:97:b0:db:9b:05:1c:7c:f6:8a: 40:76:c2:ef:9b:ad:23:ca:6d:33:00:1f:b9:f3:37: 84:f5:a9:9b:2b:e4:f8:3f:c9:f0:26:b7:3b:7c:66: 28:1a:9a:cd:f3:63:c7:d8:7e:04:4e:db:ad:87:8b: ee:14:42:1f:a1:e1:60:da:1b:39:1c:40:a8:50:86: 80:ba:9d:62:07:07:44:e4:f8:d3:55:ae:37:58:49: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FC:E6:FD:2D:BD:18:C0:19:5C:92:3C:98:55:9B:D1:63:81:58:E5 X509v3 Authority Key Identifier: keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:68:d5:87:03:bd:73:11:a5:30:a2:f5:f2:78:7a:e9:67:e5: 37:55:34:80:07:77:7b:3f:10:df:5d:c4:d7:3b:7a:d4:e8:29: c7:ff:83:68:cb:ad:19:cf:0d:8e:38:62:11:63:39:66:77:15: 3e:98:95:4a:49:ab:64:dc:57:5b:e8:4e:29:9c:91:83:d6:67: 42:c3:a6:36:16:b0:a7:7d:f9:5f:49:29:8c:21:e1:2d:5d:8d: 1b:24:7d:38:26:53:89:d3:4c:f3:3b:95:fc:75:7f:1c:24:45: d5:56:c2:0a:da:34:69:7d:eb:61:5c:6b:76:82:83:53:98:cd: 92:63:50:7f:6e:3e:5f:24:ad:aa:5b:48:6f:62:a5:1b:56:7b: 3c:4a:0b:bb:c6:ea:77:4b:5a:19:70:ce:e6:fe:13:dc:3c:2a: 80:3f:73:e2:54:b7:4a:26:f1:15:3d:2c:d9:7a:37:11:db:c2: a7:9c:ae:63:83:82:ef:a4:68:42:bd:3d:a0:c8:d6:fb:a8:34: 2c:a7:28:0e:d9:d6:ae:f9:58:3b:d3:b6:22:a8:cb:0d:31:a0: 06:b8:28:d7:f9:a2:3e:ca:ce:80:fe:7d:c1:95:ec:8e:5e:7e: a0:17:ec:e3:d5:ff:c9:27:ed:46:9d:9d:6d:b8:82:7e:a7:7d: f1:e9:e7:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI2NDQxMTAvBgNVBAUTKEY4ODFEOTREN0EyNjlBRjY4ODQ4M0E2NTFEMzczOTE4 RTc4NjUwMUUwHhcNMjUwNDA1MDM0NDUwWhcNMjUwNDEyMDM0NDUwWjAYMRYwFAYD VQQDEw02N2YwYTczMy02MGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qadrUr2/Dq1Gl8wLdJy3vR5i25krKCnuG0FHIMPnIV77Hmpfuo/gYXNyLo3 lUsPjAZiIFpmlAtNMZJlKByszkH06+vCbm8glBcZE8hUC8yseg7NSOkNAkL6lESa KWF9gDWb057PEkFJYtN0LGLaZ6B+AgKi6QRS3MX56lYFn/1kVfjcJwpRWvpEyOpT DOy79+PgMY31tbaqMCs3niDWpNpysPpXiTNYkSCXsNubBRx89opAdsLvm60jym0z AB+58zeE9ambK+T4P8nwJrc7fGYoGprN82PH2H4ETtuth4vuFEIfoeFg2hs5HECo UIaAup1iBwdE5PjTVa43WElq5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKD85v0t vRjAGVySPJhVm9FjgVjlMB8GA1UdIwQYMBaAFPiB2U16Jpr2iEg6ZR03ORjnhlAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjY0NC9CRjEzMUQzNDJE MDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12YUlTRHBsSFRjNUdPZUdV QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JSFpUWG9tbXZhSVNEcGxIVGM1R09lR1VCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjY0NC9CRjEzMUQzNDJEMDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12 YUlTRHBsSFRjNUdPZUdVQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsaNWHA71zEaUwovXyeHrpZ+U3VTSAB3d7PxDfXcTXO3rU6CnH/4No y60Zzw2OOGIRYzlmdxU+mJVKSatk3Fdb6E4pnJGD1mdCw6Y2FrCnfflfSSmMIeEt XY0bJH04JlOJ00zzO5X8dX8cJEXVVsIK2jRpfethXGt2goNTmM2SY1B/bj5fJK2q W0hvYqUbVns8Sgu7xup3S1oZcM7m/hPcPCqAP3PiVLdKJvEVPSzZejcR28KnnK5j g4LvpGhCvT2gyNb7qDQspygO2dau+Vg707YiqMsNMaAGuCjX+aI+ys6A/n3BleyO Xn6gF+zj1f/JJ+1GnZ1tuIJ+p33x6efy -----END CERTIFICATE-----Generated at Mon Apr 7 04:27:32 2025 by rpki-client