$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft File: IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json) Hash identifier: UCn77cYI3AMqqBA5yB3Zd8GI1G6pYVqWjsbfU5QbcDY= Subject key identifier: D9:E4:54:30:59:D1:59:FF:1A:48:74:2B:49:F7:E8:C2:DD:D9:ED:32 Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft Manifest number: 018A Signing time: Sat 31 May 2025 03:14:38 +0000 Manifest this update: Sat 31 May 2025 03:14:38 +0000 Manifest next update: Sat 07 Jun 2025 03:14:38 +0000 Files and hashes: 1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: GTdkhlVPiNBCaXfss8lnVbBoy8Ckf6v8ZeNkj4oGa6k=) 2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: KHyj1otfkf2S5YApB/OtC5OI1QkNCQ8X27Eo+XCQipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: May 31 03:14:38 2025 GMT Not After : Jun 7 03:14:38 2025 GMT Subject: CN=683a741e-eb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:12:6a:bc:4d:f5:9f:8d:4b:fa:b7:da:11: 87:89:f5:62:e4:ab:19:20:ea:b2:6a:a0:95:e4:d0: 24:d1:6d:7f:48:f8:68:2e:46:ad:c0:71:38:1b:d5: 57:e0:a8:7b:50:d9:82:84:41:44:0d:6a:e4:ad:ca: 65:44:8c:3e:21:90:a9:d0:78:c7:65:79:23:41:c4: 72:fc:7f:08:75:58:7d:4d:06:82:4f:f6:61:c6:4e: a7:5b:a1:64:c9:c4:a6:bd:a6:89:16:cc:89:0c:6f: 51:7c:ec:e5:7f:17:f8:a2:99:b4:ea:42:12:cd:04: 3b:98:cd:c3:c6:e2:37:d1:66:31:f6:b1:a1:66:a7: d6:f9:17:39:b0:4a:9b:8c:db:f0:58:7a:d2:8f:9d: b0:26:35:c3:e8:a5:88:40:83:31:08:70:50:8d:27: fe:c0:96:ac:54:54:4d:b4:57:51:c0:c2:57:7a:dd: 8f:18:21:1e:fb:e1:51:07:2d:5b:55:78:60:11:df: 63:dd:0b:66:9a:be:6a:ae:72:c3:e2:3b:72:a4:a1: be:89:a6:22:f7:7e:dd:d7:f3:40:f6:7a:6c:ec:2f: f0:e7:f3:fa:32:45:7b:15:92:a2:d6:c1:68:eb:a9: 3d:f7:1f:ad:91:ef:f4:be:89:92:c3:01:af:14:10: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E4:54:30:59:D1:59:FF:1A:48:74:2B:49:F7:E8:C2:DD:D9:ED:32 X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ad:52:7e:82:e1:1c:eb:d0:60:48:dc:47:57:bc:85:e7:20: cf:fa:c1:c9:d9:f9:9c:4e:64:85:c8:29:fa:38:7a:d2:63:aa: 16:ac:a6:27:d7:85:85:bc:2b:be:8d:62:c6:bb:cb:9f:ab:57: 95:f5:bd:fa:f1:94:5a:0a:85:da:15:a0:b8:cd:28:73:6d:e7: 49:6b:3d:61:7a:2a:72:30:5a:cc:68:a0:e4:e3:96:c6:4f:e9: 73:77:ef:13:72:d7:98:cd:87:97:14:3d:06:f4:0f:40:87:4a: e0:6a:c2:43:bb:9e:5e:a6:0b:02:bf:e0:f6:23:b4:cf:c7:41: fd:bd:7b:b2:ae:b0:4f:ba:d4:e2:77:83:89:56:74:7b:72:5f: c5:9d:31:0c:29:6a:86:b6:26:f0:9c:b8:8a:18:fd:04:7d:84: eb:64:01:0f:bc:6f:95:8d:d7:8e:31:01:7f:6b:63:14:25:e3: 6e:af:67:f1:b2:40:cc:a9:40:69:75:03:02:5d:87:02:8d:b1: 66:db:2b:9d:6b:e9:5a:ca:fe:fc:c8:a4:7d:1f:f0:f3:df:ba: 52:99:4a:47:c5:f8:93:82:98:5b:b8:b9:10:06:16:36:e4:da: dc:a7:21:44:3a:4f:97:06:03:ab:5d:a1:cc:5b:90:13:ac:21: 98:30:92:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjUwNTMxMDMxNDM4WhcNMjUwNjA3MDMxNDM4WjAYMRYwFAYD VQQDEw02ODNhNzQxZS1lYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9MSarxN9Z+NS/q32hGHifVi5KsZIOqyaqCV5NAk0W1/SPhoLkatwHE4G9VX 4Kh7UNmChEFEDWrkrcplRIw+IZCp0HjHZXkjQcRy/H8IdVh9TQaCT/Zhxk6nW6Fk ycSmvaaJFsyJDG9RfOzlfxf4opm06kISzQQ7mM3DxuI30WYx9rGhZqfW+Rc5sEqb jNvwWHrSj52wJjXD6KWIQIMxCHBQjSf+wJasVFRNtFdRwMJXet2PGCEe++FRBy1b VXhgEd9j3Qtmmr5qrnLD4jtypKG+iaYi937d1/NA9nps7C/w5/P6MkV7FZKi1sFo 66k99x+tke/0vomSwwGvFBAPgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnkVDBZ 0Vn/Gkh0K0n36MLd2e0yMB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Nzk0RC9DMkNDRTFEQ0U0MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3Vmct Tm9mTjdMX0JQcGxCQWExQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzrVJ+guEc69BgSNxHV7yF5yDP+sHJ2fmcTmSFyCn6OHrSY6oWrKYn 14WFvCu+jWLGu8ufq1eV9b368ZRaCoXaFaC4zShzbedJaz1heipyMFrMaKDk45bG T+lzd+8TcteYzYeXFD0G9A9Ah0rgasJDu55epgsCv+D2I7TPx0H9vXuyrrBPutTi d4OJVnR7cl/FnTEMKWqGtibwnLiKGP0EfYTrZAEPvG+VjdeOMQF/a2MUJeNur2fx skDMqUBpdQMCXYcCjbFm2yuda+layv78yKR9H/Dz37pSmUpHxfiTgphbuLkQBhY2 5NrcpyFEOk+XBgOrXaHMW5ATrCGYMJJp -----END CERTIFICATE-----Generated at Sat May 31 16:42:08 2025 by rpki-client