$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json) Hash identifier: nL4EfbcCbfa6F002ckUxNaUV4kt7nZBbXNVnBOoAXbo= Subject key identifier: E5:18:E9:AF:ED:DC:16:90:63:73:25:81:75:D6:7A:32:E5:A1:DB:BB Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D Certificate serial: 096F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft Manifest number: 0966 Signing time: Fri 04 Apr 2025 20:21:52 +0000 Manifest this update: Fri 04 Apr 2025 20:21:51 +0000 Manifest next update: Fri 11 Apr 2025 20:21:51 +0000 Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: IQVCydCLuUWSg05FHboItFqQOjW6RXHL8h9wJr18T4Q=) 2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: pd0z6Py0ljyQXcBSw2555Qfaeo+rQ0qMyZ2LLvuE2Pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2415 (0x96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3CA Validity Not Before: Apr 4 20:21:51 2025 GMT Not After : Apr 11 20:21:51 2025 GMT Subject: CN=67f03f60-d8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:09:8f:ca:e5:38:c1:00:c4:0e:b6:35:78:f0: 88:7e:98:7e:1f:0d:31:54:96:52:f3:ff:f1:33:e1: db:ff:bd:0e:5a:ce:0c:51:0d:1b:5b:a0:cb:6a:fc: a8:c2:f8:86:08:5d:ad:30:78:89:e9:79:15:43:cb: 0b:26:99:b0:b4:7f:5c:5f:81:2a:5d:04:7d:1b:61: c5:a5:cf:fb:e7:e5:fd:d5:fc:ee:e9:60:0e:cc:f0: c2:5b:02:19:93:62:30:89:51:17:12:78:61:00:2d: 59:3d:4b:ca:18:e8:e3:35:77:42:83:08:f2:40:01: bf:90:80:91:ea:ca:58:b1:7a:97:14:48:74:e2:3e: 4f:8d:6e:64:1e:75:d6:71:d4:a7:03:8c:c5:ef:4f: 8f:d7:67:b9:b4:44:9b:bd:89:ca:a9:61:b3:37:98: 69:0e:60:89:cf:e0:d1:b6:44:d7:ab:2c:22:2f:cc: 61:4c:b6:65:dd:09:f4:5a:f3:20:79:f9:aa:ae:56: d6:d4:e0:df:28:9c:ac:1e:00:94:51:7f:c7:cb:1f: 96:5d:13:f9:a6:08:fd:ea:1d:46:6c:82:3c:ca:db: 67:12:5d:1d:66:71:ed:37:d8:df:4c:db:16:21:4a: 35:c0:c7:b7:ec:99:59:67:33:d2:6f:db:fe:a1:58: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:18:E9:AF:ED:DC:16:90:63:73:25:81:75:D6:7A:32:E5:A1:DB:BB X509v3 Authority Key Identifier: keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:4b:d4:06:b9:14:38:04:8a:78:97:5e:64:31:6c:c8:8a: 65:a9:c2:ee:51:be:43:3a:43:2e:94:45:a8:6c:c0:50:30:88: 6d:f8:1e:7e:fb:99:3d:b0:d4:1b:6f:42:7e:fd:cd:e7:ab:48: c4:00:48:14:5b:fb:50:a7:48:cb:9d:ac:58:99:2e:64:19:99: 66:c1:4a:a1:c7:11:c3:0c:2a:5c:67:f0:1c:68:c7:c4:da:c4: 7f:32:aa:2e:a8:61:31:36:16:75:5c:43:fc:6e:b0:c3:b0:5d: 5f:91:82:74:71:8c:33:10:f3:41:62:7e:84:c7:a1:2c:01:f1: 2c:b1:e5:09:f4:63:a1:9e:dd:a4:f9:14:11:8b:22:51:35:8a: 7b:3d:fd:03:b8:a8:75:cb:35:2c:8a:ee:bb:dc:6d:7b:52:28: db:6d:65:f6:6b:bb:63:b1:1c:89:3a:5a:7e:7d:31:cd:b6:aa: c4:9c:ae:13:fb:ee:fa:a0:21:69:55:ad:8e:2a:15:29:db:73: bf:98:f5:dc:8f:c0:c0:ad:7e:06:8e:fe:03:2a:e8:0f:ab:4f: d3:ff:d5:58:65:5c:c1:50:e0:ab:82:ad:b8:7e:60:b8:29:d7: a7:f2:35:9f:a0:be:da:4e:fa:c2:ae:30:57:53:76:f0:a3:59: 7b:49:59:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw Qzk0RTExN0QwHhcNMjUwNDA0MjAyMTUxWhcNMjUwNDExMjAyMTUxWjAYMRYwFAYD VQQDEw02N2YwM2Y2MC1kOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QmPyuU4wQDEDrY1ePCIfph+Hw0xVJZS8//xM+Hb/70OWs4MUQ0bW6DLavyo wviGCF2tMHiJ6XkVQ8sLJpmwtH9cX4EqXQR9G2HFpc/75+X91fzu6WAOzPDCWwIZ k2IwiVEXEnhhAC1ZPUvKGOjjNXdCgwjyQAG/kICR6spYsXqXFEh04j5PjW5kHnXW cdSnA4zF70+P12e5tESbvYnKqWGzN5hpDmCJz+DRtkTXqywiL8xhTLZl3Qn0WvMg efmqrlbW1ODfKJysHgCUUX/Hyx+WXRP5pgj96h1GbII8yttnEl0dZnHtN9jfTNsW IUo1wMe37JlZZzPSb9v+oVgozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUY6a/t 3BaQY3MlgXXWejLlodu7MB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNDQS81N0QyMzgwMjhGQTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1 ajhhNFl3bnRWek1NbE9FWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1fkvUBrkUOASKeJdeZDFsyIplqcLuUb5DOkMulEWobMBQMIht+B5+ +5k9sNQbb0J+/c3nq0jEAEgUW/tQp0jLnaxYmS5kGZlmwUqhxxHDDCpcZ/AcaMfE 2sR/MqouqGExNhZ1XEP8brDDsF1fkYJ0cYwzEPNBYn6Ex6EsAfEsseUJ9GOhnt2k +RQRiyJRNYp7Pf0DuKh1yzUsiu673G17UijbbWX2a7tjsRyJOlp+fTHNtqrEnK4T ++76oCFpVa2OKhUp23O/mPXcj8DArX4Gjv4DKugPq0/T/9VYZVzBUOCrgq24fmC4 Kden8jWfoL7aTvrCrjBXU3bwo1l7SVkm -----END CERTIFICATE-----Generated at Sat Apr 5 15:20:25 2025 by rpki-client