$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: WvDrPO6jsN1pJOi7U0MNiJ7sjf9d6S5S79jsb7avdfw= Subject key identifier: 50:55:AE:62:5B:B4:27:C5:5C:7B:0E:53:67:C6:FD:12:BF:A4:8D:4A Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 010E Signing time: Sat 29 Mar 2025 04:33:53 +0000 Manifest this update: Sat 29 Mar 2025 04:33:53 +0000 Manifest next update: Sat 05 Apr 2025 04:33:53 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: wfLUF4eFVXdFbBFfg2oPhwM+z599qsK00HTt3FcQSwQ=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67 Validity Not Before: Mar 29 04:33:53 2025 GMT Not After : Apr 5 04:33:53 2025 GMT Subject: CN=67e77831-11de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:a3:8b:cc:e0:f4:de:49:d0:bd:2a:18:df: a8:00:ca:66:f7:f1:83:ee:7f:74:d7:24:fd:88:11: 65:94:4f:31:c2:06:aa:14:d5:90:93:22:61:bc:53: aa:d3:2e:1d:b2:f0:27:5b:d8:b1:d7:b9:13:dc:bd: dd:c3:fa:51:45:96:a6:ba:c4:55:6c:3b:1f:27:b2: d1:f1:8d:ca:39:0e:79:52:ff:22:46:6c:4f:c9:36: 6c:b6:ad:79:22:e1:aa:b3:7c:e6:df:bb:65:6a:a3: ff:78:bf:85:31:cb:9e:f4:cb:d5:2c:a0:c4:71:bb: f1:0b:31:ad:c6:6a:b2:83:0f:86:37:90:f8:ed:c6: 6c:72:89:b7:fa:1e:bb:1e:a0:2a:76:92:19:98:91: f1:a2:4d:d8:de:42:2f:d1:24:ba:f7:70:2a:1f:f8: 39:91:df:55:19:90:c5:02:34:c7:c5:48:84:60:a3: 52:c5:b1:50:e8:87:c4:2f:4a:e7:76:87:6a:f4:96: 95:ec:fb:ac:a7:72:61:a0:74:1c:64:7e:1f:da:41: d7:81:ac:2d:c7:dd:0c:ca:c8:44:66:3d:5d:f9:49: f0:03:4b:e5:82:43:4f:09:5d:ca:a2:23:03:2d:a2: 07:f4:d9:d8:f2:23:77:1a:78:25:53:e9:7d:cc:03: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:55:AE:62:5B:B4:27:C5:5C:7B:0E:53:67:C6:FD:12:BF:A4:8D:4A X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:21:80:fe:4f:0c:6f:3d:dd:ba:a6:9a:e4:15:24:2f:e4:0c: eb:80:95:ca:a2:04:f9:39:86:e5:0f:3c:cb:74:98:dd:40:1a: 2e:00:38:31:b4:92:6e:12:6f:0e:4d:aa:80:af:8f:3e:4f:d4: e8:4a:25:fc:35:10:b3:c8:e3:16:57:e8:69:b8:43:cc:c3:4d: e8:d0:7e:46:16:69:d3:4c:8f:a7:bc:5f:4d:97:8d:96:4c:a6: 78:c0:04:55:19:71:a4:39:37:70:4d:7d:18:8d:0b:64:93:3d: 06:a7:1a:a5:14:f2:78:ba:e2:c4:9f:d9:05:ba:f2:26:40:54: a3:12:b1:ef:db:b3:60:ea:58:70:d2:b7:f5:05:b6:86:2e:8c: 4c:f1:73:69:a2:35:18:a7:5e:37:96:17:3e:20:2f:eb:55:14: 47:5b:13:8d:2e:99:70:5c:f3:15:c9:41:c9:d4:60:3b:c4:d7: fa:00:f9:1c:98:1c:38:6d:f6:09:09:25:52:2f:da:01:15:f2: c3:7a:0f:42:e5:0a:4c:f6:d3:a1:83:25:b5:80:ec:bc:aa:73: 4f:27:27:66:ce:fc:bb:46:9f:9c:06:a2:ea:3f:75:92:ac:de: 45:da:54:8a:5d:e6:0e:f4:e1:ef:f9:09:1e:57:9d:d5:58:27: c2:6f:e9:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUwMzI5MDQzMzUzWhcNMjUwNDA1MDQzMzUzWjAYMRYwFAYD VQQDEw02N2U3NzgzMS0xMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe6ji8zg9N5J0L0qGN+oAMpm9/GD7n901yT9iBFllE8xwgaqFNWQkyJhvFOq 0y4dsvAnW9ix17kT3L3dw/pRRZamusRVbDsfJ7LR8Y3KOQ55Uv8iRmxPyTZstq15 IuGqs3zm37tlaqP/eL+FMcue9MvVLKDEcbvxCzGtxmqygw+GN5D47cZscom3+h67 HqAqdpIZmJHxok3Y3kIv0SS693AqH/g5kd9VGZDFAjTHxUiEYKNSxbFQ6IfEL0rn dodq9JaV7Pusp3JhoHQcZH4f2kHXgawtx90MyshEZj1d+UnwA0vlgkNPCV3KoiMD LaIH9NnY8iN3GnglU+l9zANMlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBVrmJb tCfFXHsOU2fG/RK/pI1KMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuIYD+TwxvPd26pprkFSQv5AzrgJXKogT5OYblDzzLdJjdQBouADgx tJJuEm8OTaqAr48+T9ToSiX8NRCzyOMWV+hpuEPMw03o0H5GFmnTTI+nvF9Nl42W TKZ4wARVGXGkOTdwTX0YjQtkkz0GpxqlFPJ4uuLEn9kFuvImQFSjErHv27Ng6lhw 0rf1BbaGLoxM8XNpojUYp143lhc+IC/rVRRHWxONLplwXPMVyUHJ1GA7xNf6APkc mBw4bfYJCSVSL9oBFfLDeg9C5QpM9tOhgyW1gOy8qnNPJydmzvy7Rp+cBqLqP3WS rN5F2lSKXeYO9OHv+QkeV53VWCfCb+mE -----END CERTIFICATE-----Generated at Fri Apr 4 18:29:17 2025 by rpki-client