$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft File: IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json) Hash identifier: L+oS5kcGdscnbJhU0VRnRsPwv7Zd3F9p+FavChBxxK0= Subject key identifier: A0:F0:40:1D:59:A9:67:83:AD:E7:88:39:9E:20:E2:E2:FE:02:7A:F6 Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF Certificate serial: 2FD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft Manifest number: 2FAD Signing time: Mon 14 Apr 2025 15:29:42 +0000 Manifest this update: Mon 14 Apr 2025 15:29:42 +0000 Manifest next update: Mon 21 Apr 2025 15:29:42 +0000 Files and hashes: 1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: +mPMiU5KYINBk06tKBcbL+ZPGYSDlewTyrBwg75TiYE=) 2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: E2NZXpYraOPVv0cpnUWbQpkzMNGT1LYi52LyYrBbmwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 15:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12241 (0x2fd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF Validity Not Before: Apr 14 15:29:42 2025 GMT Not After : Apr 21 15:29:42 2025 GMT Subject: CN=67fd29e6-9832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:46:b6:5d:6d:b2:46:df:d0:05:57:57:8d: 75:20:36:a3:c3:3e:a7:3b:6a:4f:fd:af:67:9b:1d: 6f:22:93:c2:56:39:48:f2:19:62:dc:df:f0:46:f8: f4:06:4f:cb:32:26:ff:3e:8d:1c:31:fc:8c:2e:0d: d5:dd:33:83:80:7b:c8:c7:48:11:c1:fb:d5:0a:a7: 90:b0:46:17:9c:34:17:3f:96:3c:bd:85:89:5e:d9: 78:50:cd:50:62:7d:fc:a1:2d:25:68:6e:b0:54:fb: a8:54:c5:56:57:fe:5a:9f:20:35:fd:8b:92:2d:b7: 1b:6e:4f:5a:fa:14:c0:90:a6:14:e6:ff:11:b1:41: c6:56:fe:ee:49:b5:f3:5d:8a:11:e4:f5:54:93:94: 7a:95:80:e2:e1:f7:72:b9:83:88:0c:06:b5:c0:af: bb:3a:36:88:04:79:77:a8:03:db:49:33:cc:b8:ff: 03:ae:10:3c:88:99:b8:ed:1b:e3:ea:30:ab:d2:01: bf:4f:6a:a3:bf:d8:cb:83:b7:0d:44:be:04:8d:41: 21:41:f1:85:db:77:75:f9:24:80:fa:ab:04:fc:07: 86:b2:ee:ed:e1:73:24:2e:57:08:5d:6a:ba:63:8d: a0:ca:51:9a:0d:39:f8:42:92:79:76:4a:41:d8:a6: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:40:1D:59:A9:67:83:AD:E7:88:39:9E:20:E2:E2:FE:02:7A:F6 X509v3 Authority Key Identifier: keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:2e:e9:f2:26:22:ff:2f:72:a0:e4:62:99:7a:77:9b:94:1a: 52:ed:64:29:44:45:47:00:60:dc:64:64:7c:05:88:84:cc:9c: 11:da:84:44:82:04:a7:c0:36:4d:e1:c9:5a:0c:0c:79:0a:38: 00:8f:41:e9:b0:f7:38:14:1f:65:6f:8d:23:ea:2b:09:8e:da: 06:46:79:1f:95:71:c7:f7:cb:3a:5a:7e:4a:e1:3c:9f:97:87: dc:e0:1d:a2:ac:d3:3b:16:03:6c:7a:53:aa:c8:f6:bd:0b:9c: 4e:de:01:41:13:a7:cf:63:87:9b:e4:2f:08:ac:9d:0d:11:04: 04:a8:dc:c9:96:98:64:82:09:1a:b4:71:a5:3d:4c:4c:47:08: fc:c8:ea:0f:b5:9b:8d:e4:16:de:a2:b9:b4:17:53:9f:91:fb: 7d:a2:fd:b7:7f:7f:fc:1f:7f:6b:aa:12:5a:5c:bc:7b:5a:d5: 9c:eb:b0:61:af:bb:d0:1c:ed:50:aa:7a:b4:57:bd:ff:bd:a2: cf:ea:ec:01:7d:4f:94:43:c2:ce:41:96:0c:18:9e:57:67:c1: f0:8f:c0:24:63:8b:e3:3d:71:2a:4b:f1:59:d3:fb:9f:df:69: 5a:f9:b2:e2:8e:f6:3c:80:f6:5e:4c:ba:98:81:0e:d8:23:8f: e3:55:06:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3N0MxMTAvBgNVBAUTKDIyOTNCRDRDNUU0RjlBMjk2NTM1OENCMDE4REYzRTRF RUU0REYxQ0YwHhcNMjUwNDE0MTUyOTQyWhcNMjUwNDIxMTUyOTQyWjAYMRYwFAYD VQQDEw02N2ZkMjllNi05ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmpGtl1tskbf0AVXV411IDajwz6nO2pP/a9nmx1vIpPCVjlI8hli3N/wRvj0 Bk/LMib/Po0cMfyMLg3V3TODgHvIx0gRwfvVCqeQsEYXnDQXP5Y8vYWJXtl4UM1Q Yn38oS0laG6wVPuoVMVWV/5anyA1/YuSLbcbbk9a+hTAkKYU5v8RsUHGVv7uSbXz XYoR5PVUk5R6lYDi4fdyuYOIDAa1wK+7OjaIBHl3qAPbSTPMuP8DrhA8iJm47Rvj 6jCr0gG/T2qjv9jLg7cNRL4EjUEhQfGF23d1+SSA+qsE/AeGsu7t4XMkLlcIXWq6 Y42gylGaDTn4QpJ5dkpB2Ka+AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDwQB1Z qWeDreeIOZ4g4uL+Anr2MB8GA1UdIwQYMBaAFCKTvUxeT5opZTWMsBjfPk7uTfHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc3Qy85MjRDRENDMDE0 MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1pbGxOWXl3R044LVR1NU44 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwTzlURjVQbWlsbE5ZeXdHTjgtVHU1TjhjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTc3Qy85MjRDRENDMDE0MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1p bGxOWXl3R044LVR1NU44YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmLunyJiL/L3Kg5GKZeneblBpS7WQpREVHAGDcZGR8BYiEzJwR2oRE ggSnwDZN4claDAx5CjgAj0HpsPc4FB9lb40j6isJjtoGRnkflXHH98s6Wn5K4Tyf l4fc4B2irNM7FgNselOqyPa9C5xO3gFBE6fPY4eb5C8IrJ0NEQQEqNzJlphkggka tHGlPUxMRwj8yOoPtZuN5Bbeorm0F1Ofkft9ov23f3/8H39rqhJaXLx7WtWc67Bh r7vQHO1Qqnq0V73/vaLP6uwBfU+UQ8LOQZYMGJ5XZ8Hwj8AkY4vjPXEqS/FZ0/uf 32la+bLijvY8gPZeTLqYgQ7YI4/jVQZN -----END CERTIFICATE-----Generated at Tue Apr 15 22:51:40 2025 by rpki-client