$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft File: IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json) Hash identifier: jyyBxZHSKo5+p4b5rv1VybVEM7mSnFvEE69wP4wj1dI= Subject key identifier: 4A:45:E8:6D:26:13:19:46:55:F9:56:FC:B0:74:E1:19:22:53:1E:AC Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft Manifest number: 016D Signing time: Sat 05 Apr 2025 03:16:18 +0000 Manifest this update: Sat 05 Apr 2025 03:16:18 +0000 Manifest next update: Sat 12 Apr 2025 03:16:18 +0000 Files and hashes: 1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: qGGoJ2Y/7lRV/HSl4M6/45xR6Bw2VQB2T+o3yG2uHgU=) 2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: jk8Sbeajd8SP8xYcpO63DjvkE7irofgCOLMPl17DXJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D Validity Not Before: Apr 5 03:16:18 2025 GMT Not After : Apr 12 03:16:18 2025 GMT Subject: CN=67f0a082-560d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:9d:f8:46:32:3d:e9:3b:29:b7:48:26:64: e3:c1:7b:db:21:26:35:60:ea:fb:bc:cb:8a:5a:82: 38:5e:90:77:83:10:4c:cc:b9:08:70:79:bd:9a:9c: 24:53:2e:12:c1:16:1d:77:c7:7b:27:8a:f6:e5:0b: 0b:44:68:73:70:31:00:73:6e:bd:2b:f7:7f:b8:10: 17:fa:7a:75:06:96:1b:5b:36:3a:40:47:5b:54:8f: 6d:28:93:ca:5a:c6:de:63:ef:a0:f2:a2:89:33:04: c3:36:2d:59:71:dd:fc:4d:de:e1:6e:9c:fd:18:f0: c9:ce:42:2a:01:95:7e:62:6e:17:0a:e5:f1:3e:98: eb:ec:58:1a:35:8b:73:c0:66:d9:54:d0:4d:16:cf: 70:72:4b:02:3b:67:d0:83:2e:a5:f3:d2:9e:60:9c: 4a:b0:2b:3c:90:df:4b:41:48:29:94:4c:0d:73:d7: 0a:9b:b3:25:11:18:a2:ec:3c:4d:84:5a:60:39:2d: c5:8f:80:ca:67:30:6a:fd:81:4f:14:4b:76:bb:06: e4:5a:60:e5:2f:37:9b:22:82:94:3f:25:36:db:e6: 4e:e5:77:77:a8:18:62:db:4a:ca:73:d6:a2:08:85: fb:5f:83:3a:8d:c9:8a:c9:24:03:c2:6f:96:f9:5e: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:45:E8:6D:26:13:19:46:55:F9:56:FC:B0:74:E1:19:22:53:1E:AC X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:55:6d:46:ca:0b:78:b3:46:4f:d0:90:c1:b3:49:fa:87:a9: a1:03:5b:09:49:50:d2:54:e3:87:f8:e5:1a:9e:da:20:52:9a: c4:39:f8:21:a8:76:88:ff:15:af:c0:07:39:9d:56:88:9d:4b: 69:7b:62:1c:e2:ac:9c:51:6b:54:88:3f:0b:79:e6:e0:4c:9e: af:71:21:cd:14:05:52:b4:f4:e6:e4:59:32:6f:0d:ba:be:32: 9f:6f:f9:45:f9:41:4c:ac:6a:c3:47:67:df:c2:4e:dc:6d:2b: 2a:bd:e1:45:f6:15:3e:0d:99:b9:24:22:41:6c:59:9b:b3:4c: 01:06:3e:a7:59:a7:a4:6f:56:bf:35:45:62:b0:e7:65:53:dd: 9c:c5:ea:28:f8:e6:47:3a:a9:82:34:fc:b9:99:ce:ce:3b:5b: 69:dd:f4:c5:23:5e:89:72:62:b8:c5:74:fb:d1:9d:73:88:c6: d7:27:0c:fe:87:86:7a:b9:68:ce:f1:31:59:b6:7e:87:44:70: 2f:3f:a5:3b:0f:37:d8:14:2f:0f:75:0a:7f:37:fc:5e:0f:76: c1:c1:9f:f1:63:14:9f:44:e9:68:de:2e:50:c2:9d:21:b7:17: 03:0b:10:e8:46:eb:f8:5b:80:b0:fd:c0:69:d3:9d:85:8f:5b: 0c:0c:ad:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjUwNDA1MDMxNjE4WhcNMjUwNDEyMDMxNjE4WjAYMRYwFAYD VQQDEw02N2YwYTA4Mi01NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxCd+EYyPek7KbdIJmTjwXvbISY1YOr7vMuKWoI4XpB3gxBMzLkIcHm9mpwk Uy4SwRYdd8d7J4r25QsLRGhzcDEAc269K/d/uBAX+np1BpYbWzY6QEdbVI9tKJPK WsbeY++g8qKJMwTDNi1Zcd38Td7hbpz9GPDJzkIqAZV+Ym4XCuXxPpjr7FgaNYtz wGbZVNBNFs9wcksCO2fQgy6l89KeYJxKsCs8kN9LQUgplEwNc9cKm7MlERii7DxN hFpgOS3Fj4DKZzBq/YFPFEt2uwbkWmDlLzebIoKUPyU22+ZO5Xd3qBhi20rKc9ai CIX7X4M6jcmKySQDwm+W+V4hlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpF6G0m ExlGVflW/LB04RkiUx6sMB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Nzk0RC9DMkNDRTFEQ0U0MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3Vmct Tm9mTjdMX0JQcGxCQWExQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLVW1Gygt4s0ZP0JDBs0n6h6mhA1sJSVDSVOOH+OUantogUprEOfgh qHaI/xWvwAc5nVaInUtpe2Ic4qycUWtUiD8LeebgTJ6vcSHNFAVStPTm5Fkybw26 vjKfb/lF+UFMrGrDR2ffwk7cbSsqveFF9hU+DZm5JCJBbFmbs0wBBj6nWaekb1a/ NUVisOdlU92cxeoo+OZHOqmCNPy5mc7OO1tp3fTFI16JcmK4xXT70Z1ziMbXJwz+ h4Z6uWjO8TFZtn6HRHAvP6U7DzfYFC8PdQp/N/xeD3bBwZ/xYxSfROlo3i5Qwp0h txcDCxDoRuv4W4Cw/cBp052Fj1sMDK3I -----END CERTIFICATE-----Generated at Sun Apr 6 17:57:45 2025 by rpki-client