$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: zqAQH+K9Oc2t5e4nhCfabO8k7swXoJ7m0Vo9soYA4R8= Subject key identifier: 1D:FA:4A:32:F9:09:B3:A0:2B:2C:D2:7E:21:5C:00:C8:75:4A:6C:DD Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0A78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0A5E Signing time: Fri 30 May 2025 19:52:47 +0000 Manifest this update: Fri 30 May 2025 19:52:47 +0000 Manifest next update: Fri 06 Jun 2025 19:52:47 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: vj4aCQ0g71503W7ClofnUAAtj/iJGsUQZCHit8CSB70=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: nBUoblotDyN0/Ui1SLb2Vd1fmIjqvsKS8zhy8qSXzhY=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: GuMyFs8mowkXrX6mHMVeKiU6aeZe3E0B32jb5heztzI=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: lYCr6kAfGaxdZr+eWwEYwFIaASsvVDDBGvokBcs3KLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2680 (0xa78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: May 30 19:52:47 2025 GMT Not After : Jun 6 19:52:47 2025 GMT Subject: CN=683a0c8f-f4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:a4:ec:c2:c3:f1:87:c1:78:71:c3:b0:f0: 9b:fd:4b:5c:2d:db:da:cb:04:f9:25:ea:bf:91:db: 3e:60:f1:17:a0:64:cc:62:55:87:83:ba:c4:8f:12: 38:7c:f6:cf:a7:39:0f:77:33:d0:6e:cf:34:c7:ff: 18:a9:51:0e:49:19:76:af:de:7a:21:36:10:09:38: a3:56:1c:75:b6:85:37:70:a6:20:b4:fb:3b:ea:00: 2b:98:c7:b6:58:6a:be:38:c4:57:5e:7f:6d:10:d8: 13:f8:63:b2:09:ee:bc:ae:a8:fb:2d:ab:bb:1b:2b: ba:a3:cf:2e:9e:e8:ef:b6:7e:3b:29:08:2f:19:5f: dc:b9:41:44:47:e6:43:2f:7f:e7:f0:0d:6d:e8:8e: 21:ba:6c:3f:68:d8:07:10:3e:e5:2f:4f:bd:b6:66: d5:68:46:e7:98:cf:e7:c2:3a:98:7d:d2:1e:31:d4: 33:cd:d2:59:d9:a4:15:52:b2:32:60:f8:ad:e6:b3: 76:dd:5a:8b:20:98:8f:b6:65:34:53:9c:4c:88:c1: 91:8e:dd:db:d7:3e:14:1f:3f:5b:8e:ee:30:b4:6a: b8:a1:38:39:15:ab:e6:a4:e3:05:34:4e:d5:11:c3: 2c:02:f5:e2:24:37:bc:44:d2:74:86:0d:39:69:d7: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:4A:32:F9:09:B3:A0:2B:2C:D2:7E:21:5C:00:C8:75:4A:6C:DD X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:50:f0:fc:d8:35:c5:be:4a:6d:9d:1d:b9:54:1c:2b:1a:02: ad:b3:29:31:4c:8f:ed:49:7c:16:d0:53:bb:11:90:eb:87:65: 9e:9e:05:f0:e7:68:ed:99:eb:11:b5:d6:83:a3:e6:5d:38:6f: 9a:52:14:4e:0a:30:7b:2b:c6:ee:2a:74:d8:45:bf:e3:e0:c1: f8:22:66:4c:48:7a:ce:e5:bb:72:45:0d:80:45:6d:19:a4:5e: ef:2b:61:07:b7:da:61:bd:8a:7c:fd:fc:2c:39:4b:3d:3a:e2: 52:6a:57:a1:f9:06:13:17:6b:2a:c7:b6:29:b8:47:fd:77:64: bc:44:f0:8f:fc:45:c3:2b:9b:60:c0:6c:6f:12:81:92:45:8f: 8d:4a:20:07:d5:bb:1c:81:f6:81:f1:a1:5e:87:d5:20:7f:99: c0:de:5f:21:7f:71:4f:19:dc:44:75:93:be:c0:4b:42:45:39: 48:4d:40:c0:b4:5e:fe:15:19:dd:b3:ee:34:2c:69:db:50:e7: 82:70:71:d6:5d:f2:3c:60:b9:f7:d1:79:15:bf:90:7c:e7:cf: bc:72:66:29:70:26:df:6d:80:c7:18:9b:a6:a7:3c:e6:0a:62: 20:54:17:01:04:a1:28:a2:98:b8:ec:41:ae:1d:26:31:06:b5: 9d:fd:2b:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUwNTMwMTk1MjQ3WhcNMjUwNjA2MTk1MjQ3WjAYMRYwFAYD VQQDEw02ODNhMGM4Zi1mNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHqk7MLD8YfBeHHDsPCb/UtcLdvaywT5Jeq/kds+YPEXoGTMYlWHg7rEjxI4 fPbPpzkPdzPQbs80x/8YqVEOSRl2r956ITYQCTijVhx1toU3cKYgtPs76gArmMe2 WGq+OMRXXn9tENgT+GOyCe68rqj7Lau7Gyu6o88unujvtn47KQgvGV/cuUFER+ZD L3/n8A1t6I4humw/aNgHED7lL0+9tmbVaEbnmM/nwjqYfdIeMdQzzdJZ2aQVUrIy YPit5rN23VqLIJiPtmU0U5xMiMGRjt3b1z4UHz9bju4wtGq4oTg5FavmpOMFNE7V EcMsAvXiJDe8RNJ0hg05addzVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB36SjL5 CbOgKyzSfiFcAMh1SmzdMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNUPD82DXFvkptnR25VBwrGgKtsykxTI/tSXwW0FO7EZDrh2WengXw 52jtmesRtdaDo+ZdOG+aUhROCjB7K8buKnTYRb/j4MH4ImZMSHrO5btyRQ2ARW0Z pF7vK2EHt9phvYp8/fwsOUs9OuJSaleh+QYTF2sqx7YpuEf9d2S8RPCP/EXDK5tg wGxvEoGSRY+NSiAH1bscgfaB8aFeh9Ugf5nA3l8hf3FPGdxEdZO+wEtCRTlITUDA tF7+FRnds+40LGnbUOeCcHHWXfI8YLn30XkVv5B858+8cmYpcCbfbYDHGJumpzzm CmIgVBcBBKEoopi47EGuHSYxBrWd/Stc -----END CERTIFICATE-----Generated at Sat May 31 16:43:49 2025 by rpki-client