$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft File: IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json) Hash identifier: uF3UjJ92uuxtHI+17E6cN0rWX/UgpASZCziQvxrEICc= Subject key identifier: FD:89:B6:5D:B9:D8:81:33:7E:59:EB:85:96:71:5B:52:33:20:51:63 Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7 Certificate issuer: /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft Manifest number: 01D0 Signing time: Thu 17 Apr 2025 01:51:59 +0000 Manifest this update: Thu 17 Apr 2025 01:51:59 +0000 Manifest next update: Thu 24 Apr 2025 01:51:59 +0000 Files and hashes: 1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: lX10MGoDZIOAVkncsDIt1OstaJl8wa2lL2+9Gf6vo1E=) 2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: lr+IV3E8IbLUZRr7dcIaxmNZ6ecPXYlRygnmNCQ86Iw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 01:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190226, serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7 Validity Not Before: Apr 17 01:51:59 2025 GMT Not After : Apr 24 01:51:59 2025 GMT Subject: CN=68005ebf-471e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:16:d7:1f:98:39:a3:a4:39:0a:39:7e:9f:93: b0:f4:00:67:a3:a3:73:d1:35:f4:df:5f:2d:eb:9f: f2:2a:cf:a9:b0:7c:2e:fa:3a:12:fd:87:80:a4:b4: 6d:fc:8b:31:e3:1c:65:47:22:b5:bc:17:76:ea:46: 7f:44:5b:ba:02:1c:f8:55:41:26:1b:31:d1:cf:77: 84:78:69:17:ff:b3:54:05:0e:31:fe:2f:45:7b:d1: 8c:28:2f:61:ae:35:28:f9:c1:92:b5:b6:f5:5b:d4: 84:6c:97:75:fb:07:69:2f:4c:54:08:4e:35:46:ba: 2b:fe:85:89:20:61:6b:d3:25:61:d3:de:06:d5:6a: a5:97:51:9f:f2:e3:84:ed:79:2c:bf:85:c7:14:0c: 77:ba:0d:01:37:c6:35:9a:b5:54:e7:e1:29:33:6b: d6:c7:41:05:95:c1:ac:7e:c7:8c:22:81:c1:93:fd: 9d:c9:42:41:da:35:bc:57:1d:00:0b:1a:cb:10:aa: b0:0a:fe:39:26:2c:89:9b:4f:44:42:44:a6:d8:74: 0e:e9:69:6a:e2:48:dd:b6:ae:79:cc:d3:c8:cf:20: 9c:29:29:40:da:22:db:08:f9:bd:ce:4f:1b:22:ad: ad:12:8f:f4:3d:81:21:a2:bd:03:a0:47:ee:de:cc: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:89:B6:5D:B9:D8:81:33:7E:59:EB:85:96:71:5B:52:33:20:51:63 X509v3 Authority Key Identifier: keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:fd:a8:18:ca:c5:c1:52:fe:2b:38:96:5e:9b:e3:4f:a5:6b: ee:bf:9e:c9:26:f5:be:9e:89:de:e6:09:dd:bf:d2:7e:64:9c: 5c:6e:2c:8e:ba:39:49:5b:77:3d:67:fe:80:08:65:fa:b2:71: d1:5b:3c:14:1d:5c:60:a4:54:5e:ac:51:32:72:85:0c:d4:f5: bd:05:0f:f5:fb:76:76:06:37:92:77:39:71:2a:e8:40:14:ae: 42:b2:ad:fe:38:c7:64:2f:97:76:62:32:a0:b5:fd:40:84:5e: db:e1:bc:1e:e9:eb:b4:7d:85:c8:6f:99:92:88:d5:3a:69:79: 71:e8:ce:32:aa:8a:cb:a5:58:ee:15:4a:2f:12:b4:00:08:f8: 8b:a2:b8:cb:63:79:1c:0d:2e:dc:b9:97:67:72:d1:b8:b5:0b: c5:d9:33:3f:d7:8f:fb:e8:cf:01:65:37:f7:f2:52:40:be:59: 31:64:d0:63:8b:9f:87:fb:fd:64:5b:42:74:30:f4:84:94:37: 9f:78:53:d1:8e:ea:5e:41:cc:45:9a:13:d4:53:ce:48:4f:bb: e9:71:43:6f:43:65:c7:dc:cb:0d:70:b6:4d:7d:fd:71:18:27: d5:ad:59:96:81:23:8b:0b:36:51:1a:8e:b3:59:2d:e8:0f:92: 24:fa:ff:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAyMjYxMTAvBgNVBAUTKDIyMDUxRTcxRkVEMDFCQkU1QjlDRDYyNDQ3NjBDRTZF OTAzMDdBRjcwHhcNMjUwNDE3MDE1MTU5WhcNMjUwNDI0MDE1MTU5WjAYMRYwFAYD VQQDEw02ODAwNWViZi00NzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9hbXH5g5o6Q5Cjl+n5Ow9ABno6Nz0TX0318t65/yKs+psHwu+joS/YeApLRt /Isx4xxlRyK1vBd26kZ/RFu6Ahz4VUEmGzHRz3eEeGkX/7NUBQ4x/i9Fe9GMKC9h rjUo+cGStbb1W9SEbJd1+wdpL0xUCE41Rror/oWJIGFr0yVh094G1Wqll1Gf8uOE 7Xksv4XHFAx3ug0BN8Y1mrVU5+EpM2vWx0EFlcGsfseMIoHBk/2dyUJB2jW8Vx0A CxrLEKqwCv45JiyJm09EQkSm2HQO6Wlq4kjdtq55zNPIzyCcKSlA2iLbCPm9zk8b Iq2tEo/0PYEhor0DoEfu3sxZUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2Jtl25 2IEzflnrhZZxW1IzIFFjMB8GA1UdIwQYMBaAFCIFHnH+0Bu+W5zWJEdgzm6QMHr3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDIyNi9CNThFQkEzMDU1 QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3NWJuTllrUjJET2JwQXdl dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lnVWVjZjdRRzc1Ym5OWWtSMkRPYnBBd2V2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDIyNi9CNThFQkEzMDU1QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3 NWJuTllrUjJET2JwQXdldmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo/agYysXBUv4rOJZem+NPpWvuv57JJvW+none5gndv9J+ZJxcbiyO ujlJW3c9Z/6ACGX6snHRWzwUHVxgpFRerFEycoUM1PW9BQ/1+3Z2BjeSdzlxKuhA FK5Csq3+OMdkL5d2YjKgtf1AhF7b4bwe6eu0fYXIb5mSiNU6aXlx6M4yqorLpVju FUovErQACPiLorjLY3kcDS7cuZdnctG4tQvF2TM/14/76M8BZTf38lJAvlkxZNBj i5+H+/1kW0J0MPSElDefeFPRjupeQcxFmhPUU85IT7vpcUNvQ2XH3MsNcLZNff1x GCfVrVmWgSOLCzZRGo6zWS3oD5Ik+v8w -----END CERTIFICATE-----Generated at Fri Apr 18 17:12:13 2025 by rpki-client