$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: zTyiiICK9N5hh2Te5GBu3R3/KT4ZAMie0gGwrdHbgas= Subject key identifier: C8:5A:A3:F2:99:87:05:C4:E1:0F:1E:CE:23:A3:3C:2B:D0:71:7F:03 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 03DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 03D5 Signing time: Thu 15 May 2025 00:38:13 +0000 Manifest this update: Thu 15 May 2025 00:38:12 +0000 Manifest next update: Thu 22 May 2025 00:38:12 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: wivBAli7ZFstZit+2n06nqMIjjCNlEIpQD4BfeWs+Xg=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: HjJMtBZQa4j3w+aIjRMqWS8V5BytX4DObhkkXgOg0NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: May 15 00:38:12 2025 GMT Not After : May 22 00:38:12 2025 GMT Subject: CN=68253775-ab1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:32:74:03:cd:4b:95:9c:15:2a:5a:07:11: 3d:e2:05:f2:ae:4e:74:f5:9d:ea:1c:b5:52:cd:7e: 72:2f:4a:97:9f:9c:4c:fe:c3:68:da:df:76:5f:9a: 69:b4:33:cd:80:60:c6:c2:d2:d6:eb:9a:98:03:d3: c0:02:48:a6:60:ab:b0:fd:e0:ba:b1:7e:63:ab:5e: 67:11:d8:1b:21:af:50:21:c6:54:01:34:34:e5:78: c3:71:6c:12:a0:54:82:0a:70:3c:40:73:1f:fa:cf: e8:9a:a2:86:1f:c3:4d:58:c5:1e:6d:99:8d:51:c7: ca:5f:bd:c2:af:bb:42:4e:c7:7d:24:5e:1a:ec:35: 58:e9:5d:38:b0:55:b9:c0:7b:41:87:14:ad:c6:c2: 25:2d:e0:0e:f5:04:22:e2:88:36:3b:fc:5e:f2:34: 9d:9e:e9:0a:a9:77:cf:c9:ff:b9:01:7a:d6:72:9d: 61:d4:b2:87:13:ce:3d:b4:bc:70:1c:7c:b3:ce:68: 47:32:0d:a0:47:39:8d:2e:2e:56:8d:7d:fa:09:37: 57:a7:25:e7:6e:30:81:89:f0:d1:b9:e1:27:36:77: 7a:19:dd:32:0a:f6:f3:da:18:1a:7c:24:50:4e:04: 7a:3e:18:05:a4:72:1b:6b:89:11:40:a5:40:b6:ae: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5A:A3:F2:99:87:05:C4:E1:0F:1E:CE:23:A3:3C:2B:D0:71:7F:03 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:09:c4:80:d3:f2:f4:6d:e7:3d:9a:24:29:7b:4a:35:cc:b6: 06:5f:ae:66:90:66:8f:5d:e9:f3:6d:58:06:5b:3f:74:24:95: 47:fa:b7:82:f3:1d:ea:1d:fe:fa:de:92:f1:40:a1:1f:ba:09: e7:67:87:c4:28:4b:c6:1d:8a:53:5c:c9:0e:f7:ca:6c:3a:44: 5c:81:f9:0e:e6:33:bf:87:10:30:27:5b:82:48:c8:d4:88:5b: da:8b:99:2a:6b:09:f8:04:53:08:7d:d3:28:fa:1e:bb:a0:4c: 30:c1:2a:a2:6f:cf:38:0e:ea:24:04:f7:6a:98:52:28:0e:dc: 53:be:f1:b6:cb:96:4a:5a:a7:1a:6c:d1:90:f9:50:80:70:e7: 37:58:f9:00:cd:89:cf:9e:2f:46:88:c5:69:e8:06:37:d5:03: 3f:8d:77:b8:c1:69:40:7d:cb:14:0b:e6:cc:b7:c1:ba:63:d2: 6b:f6:0e:5c:c3:be:99:85:df:27:40:c5:1b:ad:11:0e:59:5e: 92:a0:f6:78:3c:39:d9:78:3d:6c:98:63:32:b1:58:90:a0:20: 2f:23:2a:2e:eb:54:33:5a:54:99:31:db:a5:bb:5b:09:86:33: 6b:05:a4:64:de:96:5b:d5:59:8d:fe:f6:3b:4e:29:cb:40:32: 8a:8f:18:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUwNTE1MDAzODEyWhcNMjUwNTIyMDAzODEyWjAYMRYwFAYD VQQDEw02ODI1Mzc3NS1hYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0cydAPNS5WcFSpaBxE94gXyrk509Z3qHLVSzX5yL0qXn5xM/sNo2t92X5pp tDPNgGDGwtLW65qYA9PAAkimYKuw/eC6sX5jq15nEdgbIa9QIcZUATQ05XjDcWwS oFSCCnA8QHMf+s/omqKGH8NNWMUebZmNUcfKX73Cr7tCTsd9JF4a7DVY6V04sFW5 wHtBhxStxsIlLeAO9QQi4og2O/xe8jSdnukKqXfPyf+5AXrWcp1h1LKHE849tLxw HHyzzmhHMg2gRzmNLi5WjX36CTdXpyXnbjCBifDRueEnNnd6Gd0yCvbz2hgafCRQ TgR6PhgFpHIba4kRQKVAtq4dSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhao/KZ hwXE4Q8eziOjPCvQcX8DMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWCcSA0/L0bec9miQpe0o1zLYGX65mkGaPXenzbVgGWz90JJVH+reC 8x3qHf763pLxQKEfugnnZ4fEKEvGHYpTXMkO98psOkRcgfkO5jO/hxAwJ1uCSMjU iFvai5kqawn4BFMIfdMo+h67oEwwwSqib884DuokBPdqmFIoDtxTvvG2y5ZKWqca bNGQ+VCAcOc3WPkAzYnPni9GiMVp6AY31QM/jXe4wWlAfcsUC+bMt8G6Y9Jr9g5c w76Zhd8nQMUbrREOWV6SoPZ4PDnZeD1smGMysViQoCAvIyou61QzWlSZMdulu1sJ hjNrBaRk3pZb1VmN/vY7TinLQDKKjxg0 -----END CERTIFICATE-----Generated at Sat May 17 02:31:24 2025 by rpki-client