$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft File: i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft (raw, json) Hash identifier: /hO12xGpETSQsPUHojEtE4cj0OcE1WWFlOs+hAmN6Bw= Subject key identifier: 4F:90:0B:E0:0F:09:AD:BA:A5:9F:76:A4:C6:FB:63:5E:E1:EE:D9:26 Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C Certificate issuer: /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft Manifest number: 0100 Signing time: Thu 15 May 2025 04:27:33 +0000 Manifest this update: Thu 15 May 2025 04:27:33 +0000 Manifest next update: Thu 22 May 2025 04:27:33 +0000 Files and hashes: 1: i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl (hash: tW9ph5EGZSFclGAj0I4r/3dg7f/9UuYnNk9ckXr6le0=) 2: 2601A296AE1011EE92B7161BC4F9AE02.roa (hash: ruTuAI8tCOCbFuPP+2u83Ib06u3MS/nsClPmyXw7xNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116E68, serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Validity Not Before: May 15 04:27:33 2025 GMT Not After : May 22 04:27:33 2025 GMT Subject: CN=68256d35-b34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:b5:e0:b2:6a:80:85:bf:23:91:79:a7:61: 61:fc:b7:fc:7c:b9:fa:7a:19:4a:d8:8c:33:a6:0b: 4b:aa:ed:df:ca:f7:3f:29:bc:e1:dd:60:86:e4:c4: 60:2c:be:ad:e9:c1:a2:82:5f:8a:2f:7b:7d:2a:25: e6:b7:a0:d4:26:83:f0:59:6e:80:34:cb:8a:fe:11: c0:32:68:18:05:20:a2:04:7e:e8:d4:e2:c7:ca:8b: 2e:0f:cb:cd:6c:57:ba:73:d8:60:d5:66:23:b9:f7: 78:8c:e3:2d:69:11:d1:c6:c6:40:50:43:81:eb:6e: 37:99:f3:5d:57:b8:67:17:d9:81:56:98:9c:39:15: 2b:b0:76:d6:f9:52:4f:73:ef:2a:f2:09:01:a7:ad: cb:5e:d5:85:f8:b4:1a:9c:db:4f:ea:89:bd:e6:b5: bb:f3:98:f2:78:7a:79:0b:b9:65:70:30:6f:f3:bd: 01:64:36:03:ce:ea:55:24:4d:2f:91:f1:b7:9c:9f: e0:1f:cf:f0:3c:a8:c8:3c:3e:fd:f1:9e:f3:04:16: bc:0d:aa:e6:37:4c:a5:7b:bc:f5:a8:91:e3:55:aa: c6:af:71:7d:87:1b:6a:7e:c0:e7:7d:d6:7a:56:3f: 79:f9:73:e0:ce:b1:57:e2:c9:0c:11:50:b1:e9:7e: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:0B:E0:0F:09:AD:BA:A5:9F:76:A4:C6:FB:63:5E:E1:EE:D9:26 X509v3 Authority Key Identifier: keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ad:c5:51:36:5d:b0:90:b1:03:3e:c6:f5:75:2b:e5:fc:93: 15:05:12:84:89:6f:c2:f6:19:2a:5c:7c:55:47:ca:6e:a9:4e: 26:aa:56:e2:17:3f:26:0d:8c:21:a0:f6:a9:77:13:e8:0a:9d: fa:d0:68:5a:39:db:6b:43:aa:08:1d:f1:91:dd:5e:9e:c3:aa: 65:8c:2c:e2:14:1e:79:23:47:36:b7:05:60:3d:c0:95:97:b7: 74:34:4e:b5:7f:da:62:e2:a5:12:a9:1a:bf:4f:f6:47:32:87: ec:b3:c8:75:ea:24:45:5f:d8:45:91:06:9c:a6:7a:f5:18:35: a7:56:d4:a5:90:81:5b:d5:1b:e1:bd:b4:96:0c:02:df:00:ed: 6b:d5:60:94:1c:e5:09:5a:cb:69:17:49:69:12:b8:fa:94:8b: 20:8b:06:c9:c7:e7:48:75:b3:f3:29:4f:af:e0:03:10:01:ce: 00:51:31:ad:96:14:4f:e2:d0:d5:bb:23:a3:6a:97:25:24:80: 6e:18:23:95:2a:47:e8:aa:1c:06:e1:bf:cf:37:63:71:9b:03: 7d:bf:06:dd:f5:9e:90:27:63:2e:8c:53:1b:66:34:ca:0d:3c: ba:cd:7e:e7:44:49:77:05:d0:0f:08:f8:6b:8d:09:1f:dd:50: e2:6b:e0:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZFNjgxMTAvBgNVBAUTKDhCQTk0RTI0NEM4NzAzRTJFMjEyNDU2Qjk4NzFCM0M4 MkQ1MDcwOUMwHhcNMjUwNTE1MDQyNzMzWhcNMjUwNTIyMDQyNzMzWjAYMRYwFAYD VQQDEw02ODI1NmQzNS1iMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKi14LJqgIW/I5F5p2Fh/Lf8fLn6ehlK2IwzpgtLqu3fyvc/Kbzh3WCG5MRg LL6t6cGigl+KL3t9KiXmt6DUJoPwWW6ANMuK/hHAMmgYBSCiBH7o1OLHyosuD8vN bFe6c9hg1WYjufd4jOMtaRHRxsZAUEOB6243mfNdV7hnF9mBVpicORUrsHbW+VJP c+8q8gkBp63LXtWF+LQanNtP6om95rW785jyeHp5C7llcDBv870BZDYDzupVJE0v kfG3nJ/gH8/wPKjIPD798Z7zBBa8DarmN0yle7z1qJHjVarGr3F9hxtqfsDnfdZ6 Vj95+XPgzrFX4skMEVCx6X5ouwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+QC+AP Ca26pZ92pMb7Y17h7tkmMB8GA1UdIwQYMBaAFIupTiRMhwPi4hJFa5hxs8gtUHCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkU2OC9EMkJBQUM0QUFF MEYxMUVFQTdBQzk0MUFDNEY5QUUwMi9pNmxPSkV5SEEtTGlFa1ZybUhHenlDMVFj SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2bE9KRXlIQS1MaUVrVnJtSEd6eUMxUWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkU2OC9EMkJBQUM0QUFFMEYxMUVFQTdBQzk0MUFDNEY5QUUwMi9pNmxPSkV5SEEt TGlFa1ZybUhHenlDMVFjSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXrcVRNl2wkLEDPsb1dSvl/JMVBRKEiW/C9hkqXHxVR8puqU4mqlbi Fz8mDYwhoPapdxPoCp360GhaOdtrQ6oIHfGR3V6ew6pljCziFB55I0c2twVgPcCV l7d0NE61f9pi4qUSqRq/T/ZHMofss8h16iRFX9hFkQacpnr1GDWnVtSlkIFb1Rvh vbSWDALfAO1r1WCUHOUJWstpF0lpErj6lIsgiwbJx+dIdbPzKU+v4AMQAc4AUTGt lhRP4tDVuyOjapclJIBuGCOVKkfoqhwG4b/PN2NxmwN9vwbd9Z6QJ2MujFMbZjTK DTy6zX7nREl3BdAPCPhrjQkf3VDia+De -----END CERTIFICATE-----Generated at Fri May 16 19:26:48 2025 by rpki-client