$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: FUjkJO+PdHUVugbzHDreeDf64GUrobVHubdAfTzhzN4= Subject key identifier: FB:24:B2:BD:56:07:59:A3:47:60:C5:75:6F:C4:CE:7E:B0:99:C1:4A Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 019B Signing time: Tue 13 May 2025 03:11:22 +0000 Manifest this update: Tue 13 May 2025 03:11:22 +0000 Manifest next update: Tue 20 May 2025 03:11:22 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: Oc2enBv06mHN5tBXw618oIYlK2H/Dir2vdYEPjseg0s=) 2: 50F934AEFFCE11EEAF1CA783C4F9AE02.roa (hash: sVvAJAto5nS+PJW2xudvaNZimEOtDLNCZ3HK4HpuOtY=) 3: 41BE8C60BF7211EE8D281E83C4F9AE02.roa (hash: EFlPTIDh/flAQJr1anznK2j9MXoucgVjlIwMhZopTcg=) 4: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: dnFPJnob0iVhfZy+h628YHTmIBu/2rM+XDutXFD80e0=) 5: F95B12AEBF7111EE806CB182C4F9AE02.roa (hash: LVpmryw+uYS24nJeG/+qspxNYBu9ZoQZ5h3e0ahfWXo=) 6: 8692D090BF7111EE95DFE981C4F9AE02.roa (hash: Wpe5PworCum/nFcap1/E1+zKePOZQIpIAtfCfOVXg7s=) 7: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: KHuTzz/kFiU3cRoYtOMYxj6wU6aR+DEFWLsHndFiGX4=) 8: 20127C7C120411EF91CB6459C4F9AE02.roa (hash: EGjFAKrOA7ymJav4jaslQmpl/cbPT+voPNs5hCTYUM4=) 9: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: pS29Ljdr6W25s2Hduyo4rCqyFsm2/2KQ7prNwHso1r0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: May 13 03:11:22 2025 GMT Not After : May 20 03:11:22 2025 GMT Subject: CN=6822b85a-2fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:3d:c1:48:5f:af:b3:9d:65:59:a9:a8:20: e5:39:e1:83:5e:a6:78:e3:52:d8:fc:04:5f:45:44: c1:04:10:0a:2a:4e:9a:7d:20:fc:5a:54:52:40:72: cf:d0:ac:0a:9b:3d:24:0a:a5:f0:24:50:28:2f:b5: cd:ef:8c:0f:ec:01:92:49:4a:a7:5f:5f:37:40:b2: 1a:a4:25:40:92:fb:00:49:47:27:b2:e8:82:82:df: c6:b4:e9:76:f7:24:e4:a6:72:08:16:47:0a:aa:74: 9a:eb:2c:33:76:14:72:6f:76:6f:ee:d4:bc:05:31: 90:9e:4a:7a:11:e5:c0:99:c8:e3:84:23:32:59:4e: e1:4d:60:71:c7:1a:51:a2:c3:97:5a:b1:0b:88:9c: 22:97:d4:40:48:d5:9c:34:8c:5b:f8:02:6d:48:62: 3e:7b:d4:ba:b4:18:ac:17:2e:19:54:88:44:04:b5: 2e:93:a9:60:07:ee:a0:8a:34:25:d3:3f:74:41:bc: da:81:86:00:95:63:6e:4a:e3:14:07:84:aa:44:f1: 96:c3:76:74:d7:d6:9a:15:19:e6:08:2a:96:b8:c3: 1c:a7:fd:94:63:1b:93:73:b9:70:f4:e7:e6:bf:3f: c3:2c:7b:fe:23:e6:5c:d0:3a:59:c8:76:96:66:cb: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:24:B2:BD:56:07:59:A3:47:60:C5:75:6F:C4:CE:7E:B0:99:C1:4A X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7c:56:90:bd:82:16:bc:69:e3:5f:66:27:e7:88:c6:31:a2: 21:91:c4:07:f2:d4:31:14:3a:33:4a:92:5b:32:c8:1d:65:c3: 64:1f:91:e6:89:e7:8e:f1:d5:f0:de:ed:66:8b:af:55:e5:56: 9b:77:bb:5c:70:93:54:21:0e:51:2e:58:14:fa:a2:b4:f9:ae: 39:83:7e:c2:44:69:5f:14:1f:7a:af:2b:46:62:38:de:c6:f1: 47:e1:33:5e:44:fd:38:b1:07:89:e7:57:78:4a:65:ef:db:b6: f5:a2:06:06:88:97:0f:1a:ba:fd:3c:0d:20:ca:94:e6:9c:36: 9d:1e:42:13:80:4a:36:98:42:d8:76:0e:3c:f7:96:f4:a4:19: 89:0c:90:bf:fd:54:c4:a6:26:ae:df:32:62:c5:5b:27:f0:01: e3:cd:03:94:46:c9:7b:55:76:2c:41:0c:4d:71:1c:2f:ae:b6: 36:ca:36:d2:29:67:16:98:87:4b:da:98:e3:b0:48:ce:73:dd: 53:49:59:d7:c6:0b:54:cf:36:59:a2:2b:10:5b:27:1d:27:28: 6c:cd:d6:bb:d2:87:da:f8:08:54:e5:ae:51:c3:c9:af:40:e2: 20:84:65:b7:ba:8b:8a:13:eb:8a:24:54:8e:02:08:74:3f:3a: dd:28:02:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUwNTEzMDMxMTIyWhcNMjUwNTIwMDMxMTIyWjAYMRYwFAYD VQQDEw02ODIyYjg1YS0yZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt849wUhfr7OdZVmpqCDlOeGDXqZ441LY/ARfRUTBBBAKKk6afSD8WlRSQHLP 0KwKmz0kCqXwJFAoL7XN74wP7AGSSUqnX183QLIapCVAkvsASUcnsuiCgt/GtOl2 9yTkpnIIFkcKqnSa6ywzdhRyb3Zv7tS8BTGQnkp6EeXAmcjjhCMyWU7hTWBxxxpR osOXWrELiJwil9RASNWcNIxb+AJtSGI+e9S6tBisFy4ZVIhEBLUuk6lgB+6gijQl 0z90QbzagYYAlWNuSuMUB4SqRPGWw3Z019aaFRnmCCqWuMMcp/2UYxuTc7lw9Ofm vz/DLHv+I+Zc0DpZyHaWZstL4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsksr1W B1mjR2DFdW/Ezn6wmcFKMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsfFaQvYIWvGnjX2Yn54jGMaIhkcQH8tQxFDozSpJbMsgdZcNkH5Hm ieeO8dXw3u1mi69V5Vabd7tccJNUIQ5RLlgU+qK0+a45g37CRGlfFB96rytGYjje xvFH4TNeRP04sQeJ51d4SmXv27b1ogYGiJcPGrr9PA0gypTmnDadHkITgEo2mELY dg4895b0pBmJDJC//VTEpiau3zJixVsn8AHjzQOURsl7VXYsQQxNcRwvrrY2yjbS KWcWmIdL2pjjsEjOc91TSVnXxgtUzzZZoisQWycdJyhszda70ofa+AhU5a5Rw8mv QOIghGW3uouKE+uKJFSOAgh0PzrdKALi -----END CERTIFICATE-----Generated at Tue May 13 22:55:14 2025 by rpki-client