$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft File: ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json) Hash identifier: DIoO91wG5dt8vGYMJJ/Ap258/xVQsRHvR8QMsK6/jF4= Subject key identifier: 1D:F1:28:FC:9B:B3:30:7D:AA:59:13:93:24:A5:5B:1D:B5:D9:46:81 Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B Certificate issuer: /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft Manifest number: 0164 Signing time: Sat 31 May 2025 03:38:41 +0000 Manifest this update: Sat 31 May 2025 03:38:40 +0000 Manifest next update: Sat 07 Jun 2025 03:38:40 +0000 Files and hashes: 1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: kpAXj5aXVitCL1IFS1QZEg6xhBmfFeBzv7NQYfJpsAI=) 2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: tPpYtoObLW6IaU9Qrnag/tKS5hGwADSPolXixr4yblo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Validity Not Before: May 31 03:38:40 2025 GMT Not After : Jun 7 03:38:40 2025 GMT Subject: CN=683a79c1-22c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:6b:44:c9:e3:5f:43:ac:16:96:08:51:09: db:73:be:bf:a9:71:0c:70:79:c6:f0:8e:c9:1a:e9: a2:0e:e9:44:04:71:ce:aa:ce:f2:08:ce:81:e3:fb: 54:3e:42:67:b8:85:05:73:d1:70:e2:e7:53:e8:63: 65:e8:bf:60:1b:14:2a:d9:65:a1:fc:83:cc:a1:28: c7:bf:3f:12:6d:c0:c2:f4:4d:e4:65:c7:f7:a2:38: 16:af:25:07:f6:be:8f:91:ca:1b:ff:8b:60:56:dd: 66:2a:ee:db:b3:91:64:8a:d0:b9:99:1e:22:04:58: ad:aa:b7:83:ab:cf:90:52:2a:72:38:f7:60:b9:b0: 4e:77:4e:5f:06:83:08:61:18:6d:ed:4b:b9:0f:fa: 74:38:b9:f2:7e:07:03:d3:bb:aa:43:90:e8:85:cc: e5:38:ae:1f:b0:10:57:e0:a6:db:2a:8f:fe:8f:cb: c1:47:75:0f:0b:f7:94:80:c3:03:98:f3:e9:01:32: 39:08:5a:d1:44:71:cf:94:57:7d:d9:23:76:3e:c5: 6a:3e:3d:0e:12:c3:b8:c2:ee:19:d1:83:89:aa:c5: 3f:95:58:c4:c1:ea:b9:3b:3d:5f:59:1e:f9:d7:81: 9d:3a:e7:79:63:03:a0:28:8d:3b:5c:ce:69:75:1e: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F1:28:FC:9B:B3:30:7D:AA:59:13:93:24:A5:5B:1D:B5:D9:46:81 X509v3 Authority Key Identifier: keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9e:8d:49:f2:44:35:d4:d5:e1:e1:2f:c1:8a:4e:cc:99:bc: a7:7b:ff:e4:60:e1:ca:8a:1d:1f:b0:21:52:af:20:93:04:62: 5b:07:5c:fd:57:36:8a:ac:b1:46:1c:77:c9:a7:6c:72:ef:1d: 56:e5:a5:bd:3c:28:7c:b0:c4:c3:ea:22:de:71:98:1a:c4:0d: 39:ff:69:81:c8:fc:9c:50:4e:96:b6:64:58:9b:9f:1c:be:df: 7e:5c:46:27:d5:b7:09:3d:cb:ff:58:0e:84:a8:77:fd:54:51: de:01:37:46:fb:a7:13:36:26:ec:ad:6d:a4:19:78:dc:37:b1: 16:42:32:63:88:a1:50:ee:dc:a8:d9:48:69:32:f8:f5:20:31: 27:11:7a:32:95:f4:0e:c7:f5:a2:61:e0:b5:9c:f3:3b:60:0e: db:f8:0d:a5:7a:5d:bf:af:84:a1:35:de:74:7a:e2:6b:ee:bb: 0f:62:46:e5:62:46:19:ed:51:e6:f2:59:da:7a:4d:d7:bb:b8: b9:68:95:76:71:9c:1b:ae:f9:5c:63:ad:fb:75:55:e8:5e:1f: c2:61:a5:e6:49:8f:55:76:36:1a:16:8c:82:17:89:47:ca:f0: 85:f1:ad:56:99:a2:b9:e5:d7:7f:77:f9:93:9e:a6:ea:4f:09: 91:0a:94:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNzYxMTAvBgNVBAUTKDhBNTgxNjU1QzkyMkE3QTUxMjFFMDBGQjdBNDI3RTAx OUFDNzMwN0IwHhcNMjUwNTMxMDMzODQwWhcNMjUwNjA3MDMzODQwWjAYMRYwFAYD VQQDEw02ODNhNzljMS0yMmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv45rRMnjX0OsFpYIUQnbc76/qXEMcHnG8I7JGumiDulEBHHOqs7yCM6B4/tU PkJnuIUFc9Fw4udT6GNl6L9gGxQq2WWh/IPMoSjHvz8SbcDC9E3kZcf3ojgWryUH 9r6Pkcob/4tgVt1mKu7bs5FkitC5mR4iBFitqreDq8+QUipyOPdgubBOd05fBoMI YRht7Uu5D/p0OLnyfgcD07uqQ5DohczlOK4fsBBX4KbbKo/+j8vBR3UPC/eUgMMD mPPpATI5CFrRRHHPlFd92SN2PsVqPj0OEsO4wu4Z0YOJqsU/lVjEweq5Oz1fWR75 14GdOud5YwOgKI07XM5pdR6MMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3xKPyb szB9qlkTkySlWx212UaBMB8GA1UdIwQYMBaAFIpYFlXJIqelEh4A+3pCfgGaxzB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM3Ni9BMzU3RDc5NjIw OEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2VVNIZ0Q3ZWtKLUFackhN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lsZ1dWY2tpcDZVU0hnRDdla0otQVpySE1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM3Ni9BMzU3RDc5NjIwOEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2 VVNIZ0Q3ZWtKLUFackhNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNno1J8kQ11NXh4S/Bik7Mmbyne//kYOHKih0fsCFSryCTBGJbB1z9 VzaKrLFGHHfJp2xy7x1W5aW9PCh8sMTD6iLecZgaxA05/2mByPycUE6WtmRYm58c vt9+XEYn1bcJPcv/WA6EqHf9VFHeATdG+6cTNibsrW2kGXjcN7EWQjJjiKFQ7tyo 2UhpMvj1IDEnEXoylfQOx/WiYeC1nPM7YA7b+A2lel2/r4ShNd50euJr7rsPYkbl YkYZ7VHm8lnaek3Xu7i5aJV2cZwbrvlcY637dVXoXh/CYaXmSY9VdjYaFoyCF4lH yvCF8a1WmaK55dd/d/mTnqbqTwmRCpTX -----END CERTIFICATE-----Generated at Sat May 31 17:45:09 2025 by rpki-client