$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft File: Ilh8wstvNRBjeD-xz9pm5E4uysE.mft (raw, json) Hash identifier: 6MYxhgF1ooSU+H3QtIKUnoQs+xkqh8AaHvHVl7cmmzw= Subject key identifier: 44:6A:E2:57:1C:06:1C:13:85:B9:0D:F7:B9:F8:02:29:0D:00:2E:69 Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 Certificate issuer: /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft Manifest number: 14 Signing time: Sat 31 May 2025 07:33:50 +0000 Manifest this update: Sat 31 May 2025 07:33:50 +0000 Manifest next update: Sat 07 Jun 2025 07:33:50 +0000 Files and hashes: 1: Ilh8wstvNRBjeD-xz9pm5E4uysE.crl (hash: EgUFbvKCxP7PK2IDynrB+GpX0FYT+6ydrEAKw0cMHBI=) 2: BDA4863C1E6111F09E161078C4F9AE02.roa (hash: 3wClZfyrRuvHiw5+gXU2O2uGIydycpdkHEs8+vS/Fqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Validity Not Before: May 31 07:33:50 2025 GMT Not After : Jun 7 07:33:50 2025 GMT Subject: CN=683ab0de-e5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:0c:0e:ca:68:72:90:f6:83:90:3d:e6:3d: e1:10:a1:94:6e:80:76:95:e1:22:89:14:52:bc:f8: 93:ba:46:93:aa:90:e5:29:1b:f7:6d:95:90:24:36: 7c:67:43:98:1a:f9:49:40:ba:3e:09:d0:0b:ba:63: b8:79:ff:48:68:d8:b3:94:1c:a6:4b:8d:04:dd:35: a3:91:45:6c:7a:4e:41:75:d8:8d:b1:4c:4a:22:d7: b2:5b:5d:c7:0a:89:37:c7:4a:b7:ae:18:c0:26:e9: 0a:ec:ed:95:ba:61:f5:98:d2:b8:6b:d5:28:99:0f: f9:0c:0c:9e:e8:28:ef:3e:c5:17:74:26:a6:4f:12: 55:f3:28:cc:94:cc:6e:e8:fc:e3:6d:5f:b6:39:f6: ba:6d:37:73:dd:ba:3d:d5:60:06:b2:67:76:f1:b7: 66:86:74:f0:61:5d:f6:f1:e3:76:a5:83:e7:15:c7: a8:3e:ae:e8:9b:b4:74:fa:97:11:01:f3:51:42:8b: df:b0:59:63:5e:47:76:ae:8d:0f:82:3c:04:1b:f9: 48:2e:52:d3:fc:b2:92:66:de:f3:bf:3f:7e:56:67: e9:48:89:b2:8e:31:c9:bb:66:bc:0c:2e:79:43:d6: d8:ad:69:18:31:39:b8:c5:84:ac:cb:c3:e9:e2:46: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6A:E2:57:1C:06:1C:13:85:B9:0D:F7:B9:F8:02:29:0D:00:2E:69 X509v3 Authority Key Identifier: keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:13:a1:7b:36:a4:db:21:3f:00:c2:7e:e2:27:c0:b8:cb:d1: 2d:c5:b3:16:14:34:d2:53:b5:bd:78:da:5e:70:16:20:16:02: fb:9d:a3:77:30:09:36:28:d8:3e:92:4b:c0:a0:c4:7b:03:ae: 27:2d:fa:ab:77:02:3d:4e:77:11:bd:10:74:ec:b8:b4:a2:bf: d5:7c:d3:e8:70:c0:c6:4a:1f:13:0c:2a:6c:1b:63:3b:2d:b6: a7:7a:2d:99:08:af:47:83:c2:35:04:a9:11:16:43:d3:ba:08: dc:b0:18:24:ed:1d:01:05:ab:59:35:1e:e0:82:08:94:1a:2f: 85:9c:ee:ba:c2:33:f2:9c:b8:f1:c1:f2:09:e6:d3:41:6b:0f: 88:7f:43:6a:e8:6e:af:73:4e:e1:12:ea:76:88:58:5e:94:74: b7:97:dc:5e:86:2e:74:71:ce:43:04:e7:cc:d9:7f:f7:2e:65: 29:2a:1b:8a:3a:5b:4f:e9:42:d6:ed:72:b3:01:03:6c:df:39: d1:8d:74:54:52:6b:ae:dc:fa:16:3a:8b:d8:7d:96:56:97:15: 1b:95:f5:0e:b8:9b:e4:2b:65:2f:19:c0:17:f1:55:69:29:ee: 72:59:9e:7f:39:2f:b7:fb:e2:76:ab:7d:4d:d8:fa:10:2a:6f: 76:84:77:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OUI5RDExMC8GA1UEBRMoMjI1ODdDQzJDQjZGMzUxMDYzNzgzRkIxQ0ZEQTY2RTQ0 RTJFQ0FDMTAeFw0yNTA1MzEwNzMzNTBaFw0yNTA2MDcwNzMzNTBaMBgxFjAUBgNV BAMTDTY4M2FiMGRlLWU1ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzCQwOymhykPaDkD3mPeEQoZRugHaV4SKJFFK8+JO6RpOqkOUpG/dtlZAkNnxn Q5ga+UlAuj4J0Au6Y7h5/0ho2LOUHKZLjQTdNaORRWx6TkF12I2xTEoi17JbXccK iTfHSreuGMAm6Qrs7ZW6YfWY0rhr1SiZD/kMDJ7oKO8+xRd0JqZPElXzKMyUzG7o /ONtX7Y59rptN3Pduj3VYAayZ3bxt2aGdPBhXfbx43alg+cVx6g+ruibtHT6lxEB 81FCi9+wWWNeR3aujQ+CPAQb+UguUtP8spJm3vO/P35WZ+lIibKOMcm7ZrwMLnlD 1titaRgxObjFhKzLw+niRmYjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURGriVxwG HBOFuQ33ufgCKQ0ALmkwHwYDVR0jBBgwFoAUIlh8wstvNRBjeD+xz9pm5E4uysEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5QjlELzI0MDJGQjA4MUU2 MTExRjBBREQzRDE3M0M0RjlBRTAyL0lsaDh3c3R2TlJCamVELXh6OXBtNUU0dXlz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWxoOHdzdHZOUkJqZUQteHo5cG01RTR1eXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 QjlELzI0MDJGQjA4MUU2MTExRjBBREQzRDE3M0M0RjlBRTAyL0lsaDh3c3R2TlJC amVELXh6OXBtNUU0dXlzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALgToXs2pNshPwDCfuInwLjL0S3FsxYUNNJTtb142l5wFiAWAvudo3cw CTYo2D6SS8CgxHsDrict+qt3Aj1OdxG9EHTsuLSiv9V80+hwwMZKHxMMKmwbYzst tqd6LZkIr0eDwjUEqREWQ9O6CNywGCTtHQEFq1k1HuCCCJQaL4Wc7rrCM/KcuPHB 8gnm00FrD4h/Q2robq9zTuES6naIWF6UdLeX3F6GLnRxzkME58zZf/cuZSkqG4o6 W0/pQtbtcrMBA2zfOdGNdFRSa67c+hY6i9h9llaXFRuV9Q64m+QrZS8ZwBfxVWkp 7nJZnn85L7f74narfU3Y+hAqb3aEd+w= -----END CERTIFICATE-----Generated at Sat May 31 17:50:35 2025 by rpki-client