$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json) Hash identifier: ZMIOry+O9NdA9vVL5g+YVDmEnW6ODe0/TyEanfYzR7U= Subject key identifier: 4E:05:17:BB:8E:70:1C:C2:30:E7:44:BE:FD:1D:19:E6:D8:78:24:86 Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft Manifest number: 03A7 Signing time: Sat 31 May 2025 00:56:42 +0000 Manifest this update: Sat 31 May 2025 00:56:42 +0000 Manifest next update: Sat 07 Jun 2025 00:56:42 +0000 Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: wFKZmbGTqj8WIJknQUjYlGQo1vMwXPBBhEhIEQ7cGxc=) 2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: o33RNCZroDwsAJGcMgsni5M3q2cYV8AkaewWNhrky5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Validity Not Before: May 31 00:56:42 2025 GMT Not After : Jun 7 00:56:42 2025 GMT Subject: CN=683a53ca-14f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:35:a3:f8:42:99:fd:bf:1f:ec:d9:44:82:be: 89:25:2e:bb:30:7f:d4:ec:1d:66:55:de:be:03:b6: a5:85:a7:0d:f3:4e:4a:ea:63:20:0b:a3:c8:59:78: fd:f4:bc:df:ea:89:70:1c:d9:92:bf:3f:46:f3:7e: 25:42:d6:c5:5c:99:44:29:67:70:b6:09:a9:fc:a9: ba:84:d5:58:19:a3:35:18:91:95:9c:7b:79:b0:25: 2e:30:6f:2b:da:10:9c:da:72:61:ad:f3:8d:6a:33: 6c:bf:b0:5a:29:59:5a:a4:a2:10:16:64:de:1e:bc: b7:0a:fe:c7:bc:f6:39:d4:88:86:00:3e:b8:de:06: 77:07:be:b8:3d:24:39:34:11:c3:22:6f:fb:27:48: 98:78:5d:87:3b:31:e4:e5:ca:15:98:11:74:1d:33: e7:d8:74:d5:d7:35:52:3f:43:4b:41:a4:34:fd:40: c1:c9:94:ad:16:1d:f7:3b:e3:39:99:0b:19:60:6c: 67:87:b5:65:cb:b6:9c:40:45:c5:ac:98:6f:fe:52: 08:b4:7e:2b:37:1f:21:0d:13:ea:56:3b:f9:54:17: 9b:f0:b9:35:48:ce:97:85:ab:80:b3:5c:65:7a:50: ca:a6:1a:88:55:2b:c1:27:fc:38:d1:87:65:37:ac: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:05:17:BB:8E:70:1C:C2:30:E7:44:BE:FD:1D:19:E6:D8:78:24:86 X509v3 Authority Key Identifier: keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:63:89:b4:62:3f:31:58:f1:75:aa:23:4c:79:f3:0a:0d:40: 5d:05:06:06:6a:8b:23:6a:2c:62:c0:93:f4:fd:88:4f:19:6e: 44:e1:e3:94:31:87:fc:a7:e5:fd:5e:04:7a:29:fb:84:cf:b3: 2a:54:60:81:e5:cf:cd:c2:70:2e:e7:68:24:7b:f8:3f:ca:69: 32:8a:61:b4:fe:5e:71:81:0f:e7:14:cd:ce:09:88:d9:20:77: 90:0d:78:3d:ed:b2:af:e1:c4:19:b3:7a:97:2f:f5:5f:53:f6: 2d:f8:29:db:38:0b:51:1a:ce:f4:83:5d:5c:fb:3b:6c:79:74: 9a:54:e9:30:90:4d:00:82:16:ed:8e:12:79:89:b4:e9:84:d5: 0f:6b:9b:4f:a1:b7:18:20:02:b0:0a:21:2d:f1:90:30:68:5b: d8:d4:7b:75:6d:14:f3:2e:88:64:21:90:b8:bd:25:8a:14:39: 43:43:a5:7c:b4:02:dc:84:f9:c1:05:6d:4a:f8:1c:54:d4:1c: 09:d6:ed:a6:1f:df:20:28:75:e1:31:fa:eb:bf:b4:be:b6:f4: 3b:68:d9:49:0f:29:48:54:83:dd:20:cd:c9:be:aa:b8:0a:62: c4:69:1c:87:62:f8:aa:d3:79:b0:4d:a3:93:f5:4f:c9:b3:b2: 90:ce:65:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx QzZFQ0I3QjMwHhcNMjUwNTMxMDA1NjQyWhcNMjUwNjA3MDA1NjQyWjAYMRYwFAYD VQQDEw02ODNhNTNjYS0xNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9DWj+EKZ/b8f7NlEgr6JJS67MH/U7B1mVd6+A7alhacN805K6mMgC6PIWXj9 9Lzf6olwHNmSvz9G834lQtbFXJlEKWdwtgmp/Km6hNVYGaM1GJGVnHt5sCUuMG8r 2hCc2nJhrfONajNsv7BaKVlapKIQFmTeHry3Cv7HvPY51IiGAD643gZ3B764PSQ5 NBHDIm/7J0iYeF2HOzHk5coVmBF0HTPn2HTV1zVSP0NLQaQ0/UDByZStFh33O+M5 mQsZYGxnh7Vly7acQEXFrJhv/lIItH4rNx8hDRPqVjv5VBeb8Lk1SM6XhauAs1xl elDKphqIVSvBJ/w40YdlN6zp5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4FF7uO cBzCMOdEvv0dGebYeCSGMB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5 RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Y4m0Yj8xWPF1qiNMefMKDUBdBQYGaosjaixiwJP0/YhPGW5E4eOU MYf8p+X9XgR6KfuEz7MqVGCB5c/NwnAu52gke/g/ymkyimG0/l5xgQ/nFM3OCYjZ IHeQDXg97bKv4cQZs3qXL/VfU/Yt+CnbOAtRGs70g11c+ztseXSaVOkwkE0Aghbt jhJ5ibTphNUPa5tPobcYIAKwCiEt8ZAwaFvY1Ht1bRTzLohkIZC4vSWKFDlDQ6V8 tALchPnBBW1K+BxU1BwJ1u2mH98gKHXhMfrrv7S+tvQ7aNlJDylIVIPdIM3Jvqq4 CmLEaRyHYviq03mwTaOT9U/Js7KQzmW1 -----END CERTIFICATE-----Generated at Sat May 31 17:08:55 2025 by rpki-client