$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft File: 1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json) Hash identifier: ShU59nEIr70jWdrTr91pJnPu4Ut/GBE/CMGJs+5rYOc= Subject key identifier: E7:4A:F6:27:14:2D:8B:89:77:A7:FE:F8:4B:9F:C0:6D:BC:2C:6D:06 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft Manifest number: 0108 Signing time: Sat 31 May 2025 04:46:10 +0000 Manifest this update: Sat 31 May 2025 04:46:10 +0000 Manifest next update: Sat 07 Jun 2025 04:46:10 +0000 Files and hashes: 1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: q8HrbRj96HSbrIIr65rJ5a7jdqxSMfzSlL5wMJMru7g=) 2: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: kortXzDV3z8yqdb7hUTvSq2L5JWGq27VKKVJ2FtpSxc=) 3: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: rRm+rUr3qcN16z/Oqf9uTNEkdYMxgFxb6sxz/dypYvc=) 4: A17C3508168911EFBF38F580C4F9AE02.roa (hash: 5gm1wj46SXJPZC1pKKhppvpQZgvvcitCu8i+WN1ATKA=) 5: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: O9tYO6kupKQU9ptuAQl06h/ZNlTFKl9W/lRHr1Y6j4E=) 6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: vihfleeETh6RhPkPr9fPr5Gym7kQ9gHXsPSD/cQHxVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: May 31 04:46:10 2025 GMT Not After : Jun 7 04:46:10 2025 GMT Subject: CN=683a8992-92ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:49:04:d0:1b:4e:4c:5c:d2:7a:9e:0b:03: dc:5e:11:14:37:cd:be:72:93:bc:b1:fa:c0:d0:97: 02:43:85:cd:4d:1a:dd:ed:82:4d:00:ca:f3:1e:6c: bc:ce:78:63:4a:66:26:37:1b:12:22:ec:44:94:d0: a9:44:f0:f8:1e:d1:12:65:fb:26:06:70:e9:b1:eb: 07:3d:07:5d:60:02:13:1b:88:18:ac:9a:3e:9c:98: 70:8a:0f:4e:ee:2a:ff:51:82:2f:a0:5a:f5:dc:9e: e0:cd:5c:c0:2f:75:46:8b:8a:ff:1f:7d:12:25:e1: d3:08:c8:d8:80:4f:99:af:35:9c:8a:57:12:e1:0d: 3a:ab:52:32:4f:63:6e:50:a5:8a:22:f2:f1:c7:df: d2:33:e7:67:62:87:15:fa:af:f2:61:d4:2e:f8:9e: 4d:6f:21:41:a6:23:4f:a7:2f:66:0c:fa:3e:d2:72: c8:90:5e:d6:08:47:a4:6d:15:4e:1f:af:d9:01:89: 65:5b:ad:f1:63:73:df:b5:85:15:5f:19:b1:a8:4c: fc:8f:de:c0:4a:dd:4d:e7:1d:6a:f2:8d:80:f6:f2: e4:a0:f9:ce:a6:c5:07:49:2d:5b:3b:e5:d5:96:0b: c4:ba:9b:72:da:e8:e8:87:ae:01:31:f1:f8:e0:e0: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4A:F6:27:14:2D:8B:89:77:A7:FE:F8:4B:9F:C0:6D:BC:2C:6D:06 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:be:a8:c8:26:ac:94:89:e9:3a:af:e0:c8:97:79:7a:5d:de: 8c:e1:97:1e:d0:b2:f8:d1:ab:c3:79:05:15:4b:26:a7:3d:09: 4d:42:b6:65:cb:63:04:88:4c:4f:6b:d1:69:5e:a6:cb:3c:42: 3e:c1:6c:35:a5:12:9f:77:de:a4:93:fd:6a:30:e7:65:01:16: d2:03:3c:0e:34:ce:7e:11:94:17:4b:86:35:03:0c:82:77:18: f2:15:ea:35:2d:45:83:74:93:d4:99:1b:bf:d9:98:09:89:05: eb:eb:71:95:89:83:ac:d0:d5:69:c9:ca:93:24:80:47:b1:55: 58:0b:b7:6f:59:04:19:61:c0:b8:7a:cf:3e:d6:38:86:fb:4e: 57:c3:03:b9:2c:8b:8a:da:39:ca:dd:4a:3e:3b:9b:93:c3:64: 11:01:f2:8a:89:ee:1a:da:a4:c1:e9:ac:27:9a:2b:13:e0:86: 8a:29:a5:f2:bf:20:bb:32:cc:d6:df:2c:c8:e5:96:7c:73:0e: e9:b9:4f:82:35:ef:67:82:7b:c2:ab:5f:c8:33:91:77:e2:9d: 93:a5:ab:a9:26:4d:13:bd:cb:b0:2b:ec:31:6c:29:dc:29:f3: f9:fa:48:7e:65:62:a1:77:4b:e0:a5:2f:6b:a2:04:71:4a:0e: 29:4a:5b:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUwNTMxMDQ0NjEwWhcNMjUwNjA3MDQ0NjEwWjAYMRYwFAYD VQQDEw02ODNhODk5Mi05MmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ5JBNAbTkxc0nqeCwPcXhEUN82+cpO8sfrA0JcCQ4XNTRrd7YJNAMrzHmy8 znhjSmYmNxsSIuxElNCpRPD4HtESZfsmBnDpsesHPQddYAITG4gYrJo+nJhwig9O 7ir/UYIvoFr13J7gzVzAL3VGi4r/H30SJeHTCMjYgE+ZrzWcilcS4Q06q1IyT2Nu UKWKIvLxx9/SM+dnYocV+q/yYdQu+J5NbyFBpiNPpy9mDPo+0nLIkF7WCEekbRVO H6/ZAYllW63xY3PftYUVXxmxqEz8j97ASt1N5x1q8o2A9vLkoPnOpsUHSS1bO+XV lgvEupty2ujoh64BMfH44OB9OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdK9icU LYuJd6f++EufwG28LG0GMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p YVlQNS1abWhRR05pZGJhbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwvqjIJqyUiek6r+DIl3l6Xd6M4Zce0LL40avDeQUVSyanPQlNQrZl y2MEiExPa9FpXqbLPEI+wWw1pRKfd96kk/1qMOdlARbSAzwONM5+EZQXS4Y1AwyC dxjyFeo1LUWDdJPUmRu/2ZgJiQXr63GViYOs0NVpycqTJIBHsVVYC7dvWQQZYcC4 es8+1jiG+05XwwO5LIuK2jnK3Uo+O5uTw2QRAfKKie4a2qTB6awnmisT4IaKKaXy vyC7MszW3yzI5ZZ8cw7puU+CNe9ngnvCq1/IM5F34p2TpaupJk0TvcuwK+wxbCnc KfP5+kh+ZWKhd0vgpS9rogRxSg4pSlsL -----END CERTIFICATE-----Generated at Sat May 31 17:44:03 2025 by rpki-client