$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: 1qjgUvDqboozCpx7LlcyW2oXY2Knr08weFjEOkZkzo8= Subject key identifier: 9B:30:AA:A8:58:DB:BD:18:A4:00:33:83:52:76:50:A0:AF:59:B1:D3 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 0790 Signing time: Fri 30 May 2025 21:37:31 +0000 Manifest this update: Fri 30 May 2025 21:37:31 +0000 Manifest next update: Fri 06 Jun 2025 21:37:30 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: r2TOo5wJ1wFZP8TPkf/jBLcldjXyxBW/qfR0qpPkcOU=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: May 30 21:37:31 2025 GMT Not After : Jun 6 21:37:30 2025 GMT Subject: CN=683a251b-af2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b7:09:1e:6f:dd:bf:df:42:49:25:2e:80:84: 1a:b2:4d:3b:00:41:c3:60:78:c6:a8:f6:cd:2f:37: 33:55:e6:bd:11:9e:b4:c8:21:5f:9b:3f:8b:9d:56: 82:4c:0f:92:56:ae:e1:2f:ca:1e:a8:7b:31:b1:89: de:d0:b1:60:8e:b9:7a:87:b0:ae:93:0c:89:d3:f4: bd:83:97:dc:b0:86:3a:82:96:ee:e9:2a:f2:19:34: 62:c5:8e:00:06:7e:0f:32:e2:f2:e9:c9:27:15:f6: ed:d3:11:98:f4:d6:d1:fa:df:d8:07:e4:16:20:aa: d8:08:4d:ac:e6:09:c7:19:4d:82:32:89:3a:11:b8: f8:ff:b2:fa:ef:fe:10:69:89:15:aa:93:ce:4d:57: 43:55:62:88:a7:aa:d7:be:35:a2:5d:d5:72:66:95: 04:0b:f5:98:b4:f5:a2:1a:b4:fe:29:fd:da:83:94: 17:5e:3f:d4:cf:28:32:70:4c:d1:cc:fd:e5:b1:3f: 57:de:bd:ae:ed:f4:32:62:3c:87:0e:e1:81:bf:25: 4c:7c:8d:cd:40:03:f2:97:3e:b0:4f:66:42:d7:c6: f3:7f:bf:7d:fc:2f:1b:dc:07:e1:1d:87:b4:ed:78: 83:b2:9e:a7:3f:66:55:3e:5f:e5:e4:e4:83:f7:5a: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:30:AA:A8:58:DB:BD:18:A4:00:33:83:52:76:50:A0:AF:59:B1:D3 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4e:33:47:ea:84:a0:cf:77:7b:f5:b3:61:d1:13:d5:fa:4a: cd:13:31:7f:a2:66:dd:e3:6b:de:33:13:5d:07:e0:ff:27:32: ba:ed:63:dc:64:d4:3b:26:32:2c:9b:41:56:0c:85:da:2e:34: b4:ae:f7:28:ae:eb:7f:83:0e:b8:1c:e1:d2:f1:dc:96:cb:da: 1e:3c:40:a9:19:e3:74:49:68:ae:4c:5b:41:a5:c4:6b:7e:6b: 60:ba:1b:28:51:7a:54:f9:56:ab:0f:32:72:7e:f2:23:06:03: fb:aa:77:90:21:6c:6e:17:21:7d:db:32:64:2e:70:c2:75:29: 00:c0:42:d9:af:3d:c5:ff:c6:44:48:96:c2:bb:f1:cf:5d:ea: 0e:8c:cc:7f:08:6a:5e:24:19:a9:80:7c:84:62:94:85:91:e2: f1:9d:d4:53:89:1b:1f:a6:df:8a:78:d8:3a:7e:bb:9c:d0:fc: 9d:35:10:be:f7:bd:87:df:96:f9:89:13:e3:88:ac:6a:ca:69: 4b:1c:96:ed:8a:c6:43:0a:83:4e:6c:ec:41:d4:36:e9:23:05: be:af:64:92:50:f5:01:3a:2d:3f:61:88:4b:d6:3e:f3:f0:49: 77:e2:57:9f:15:15:47:95:94:8e:dd:33:c7:65:95:18:f5:ab: b1:b5:83:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjUwNTMwMjEzNzMxWhcNMjUwNjA2MjEzNzMwWjAYMRYwFAYD VQQDEw02ODNhMjUxYi1hZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bcJHm/dv99CSSUugIQask07AEHDYHjGqPbNLzczVea9EZ60yCFfmz+LnVaC TA+SVq7hL8oeqHsxsYne0LFgjrl6h7CukwyJ0/S9g5fcsIY6gpbu6SryGTRixY4A Bn4PMuLy6cknFfbt0xGY9NbR+t/YB+QWIKrYCE2s5gnHGU2CMok6Ebj4/7L67/4Q aYkVqpPOTVdDVWKIp6rXvjWiXdVyZpUEC/WYtPWiGrT+Kf3ag5QXXj/UzygycEzR zP3lsT9X3r2u7fQyYjyHDuGBvyVMfI3NQAPylz6wT2ZC18bzf799/C8b3AfhHYe0 7XiDsp6nP2ZVPl/l5OSD91oDFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJswqqhY 270YpAAzg1J2UKCvWbHTMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3TjNH6oSgz3d79bNh0RPV+krNEzF/ombd42veMxNdB+D/JzK67WPc ZNQ7JjIsm0FWDIXaLjS0rvcorut/gw64HOHS8dyWy9oePECpGeN0SWiuTFtBpcRr fmtguhsoUXpU+VarDzJyfvIjBgP7qneQIWxuFyF92zJkLnDCdSkAwELZrz3F/8ZE SJbCu/HPXeoOjMx/CGpeJBmpgHyEYpSFkeLxndRTiRsfpt+KeNg6fruc0PydNRC+ 972H35b5iRPjiKxqymlLHJbtisZDCoNObOxB1DbpIwW+r2SSUPUBOi0/YYhL1j7z 8El34lefFRVHlZSO3TPHZZUY9auxtYOC -----END CERTIFICATE-----Generated at Sat May 31 17:31:53 2025 by rpki-client