$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: JsAIyVziUSye3vwYa4UFExPAnVZ+6V/C3sEVJgUuHYc= Subject key identifier: 3B:E6:FF:74:F8:50:F3:86:6C:7C:0A:D7:39:CB:6A:85:DC:AA:96:A6 Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: 011B Signing time: Sun 11 May 2025 03:46:37 +0000 Manifest this update: Sun 11 May 2025 03:46:37 +0000 Manifest next update: Sun 18 May 2025 03:46:37 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: u14KdC1g4gYKeZtFQnubEDLIcKpSRrIWQUjEH/0j5f4=) 2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: H7JonSUtz6tgIVuXpEGUpFZ7fUQBIkEHbO/Cd9DHtNo=) 3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: j/6dClTGKIF6Y0W3OQ8vmv5qC35aQkMZjQK9N8GGPFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: May 11 03:46:37 2025 GMT Not After : May 18 03:46:37 2025 GMT Subject: CN=68201d9d-39f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:bd:ea:17:f2:52:87:80:6a:94:22:fe:f4: 16:3a:84:d2:5f:43:6b:e5:ca:1b:5e:95:c3:91:ed: 70:40:58:79:03:e5:d3:3c:44:cc:e0:78:6c:c5:18: a2:b2:92:53:56:6a:fb:08:5d:7e:95:e3:c0:65:2a: 41:ef:4a:65:22:d0:1f:ac:32:fb:7e:22:d6:8c:38: 18:91:ac:9d:2a:66:3c:ea:fc:77:63:5c:92:b1:87: 8d:54:c4:12:a4:ae:38:95:df:31:29:ff:ac:51:8d: 64:50:0f:d8:55:8e:15:67:24:5e:45:5f:6b:ca:ed: 24:a4:d8:15:22:2b:3e:29:ad:e4:4b:74:bf:82:3c: a9:8e:2b:85:d5:54:aa:45:b4:bb:b8:8d:b4:ed:ce: 26:1c:03:4a:d5:84:31:74:90:bd:28:19:c7:77:42: 86:e1:5b:2f:6d:d9:25:43:2d:f3:78:71:d5:6c:97: b0:a0:d0:20:99:89:e5:5e:7a:41:89:71:16:cb:aa: 0d:a0:b4:42:2f:f9:35:d9:8e:86:fc:8d:62:09:5e: 5d:69:d1:a2:cd:94:10:52:87:b1:42:9e:a2:cf:fa: 69:5d:66:3a:1c:52:c4:35:11:51:c8:15:5f:5f:31: 45:e6:fd:56:97:6e:18:2a:3b:6c:71:72:c9:9b:81: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E6:FF:74:F8:50:F3:86:6C:7C:0A:D7:39:CB:6A:85:DC:AA:96:A6 X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e6:a7:1e:51:2e:f2:3f:bc:73:1e:4a:3d:f1:22:b8:86:91: c4:b6:78:ef:55:bd:91:e6:aa:b4:77:e1:e7:68:e8:5c:a8:00: 5e:23:ec:85:42:bd:a7:70:f2:bd:46:d0:8c:c0:f9:ff:01:ba: e2:fe:ed:f5:72:a7:ba:81:1f:98:0a:70:12:c7:b0:36:64:9f: 00:6c:ef:e8:5c:49:ef:06:d1:aa:97:7a:5e:6e:01:4b:8b:fc: 99:c3:f4:d9:a5:eb:c5:03:de:77:6d:30:5f:c6:a9:81:3b:b7: a5:e6:25:22:0a:13:d0:77:73:8b:18:58:cb:e4:a2:88:ac:8d: bd:c4:65:45:31:d5:2d:e7:92:81:6f:47:91:95:48:c5:b9:bd: cb:4f:b2:ba:cf:98:9f:fc:70:f4:3f:e1:fb:88:c8:68:fa:fe: 3c:53:c2:d3:5e:9b:5e:3b:b1:71:d0:f3:94:6b:81:07:23:59: 96:6d:ce:38:78:28:19:1b:8e:5d:61:7d:02:53:51:3c:73:0b: 47:eb:4c:80:b6:9c:c4:9d:29:36:39:30:35:64:ea:2b:0c:18: 5f:d7:f3:3a:20:04:f6:b7:23:15:ae:ae:58:31:75:3b:12:0a: a3:f0:47:3b:4c:28:3d:11:62:1b:d4:cc:ce:3a:07:86:d8:41: 78:0f:45:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjUwNTExMDM0NjM3WhcNMjUwNTE4MDM0NjM3WjAYMRYwFAYD VQQDEw02ODIwMWQ5ZC0zOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSK96hfyUoeAapQi/vQWOoTSX0Nr5cobXpXDke1wQFh5A+XTPETM4HhsxRii spJTVmr7CF1+lePAZSpB70plItAfrDL7fiLWjDgYkaydKmY86vx3Y1ySsYeNVMQS pK44ld8xKf+sUY1kUA/YVY4VZyReRV9ryu0kpNgVIis+Ka3kS3S/gjypjiuF1VSq RbS7uI207c4mHANK1YQxdJC9KBnHd0KG4VsvbdklQy3zeHHVbJewoNAgmYnlXnpB iXEWy6oNoLRCL/k12Y6G/I1iCV5dadGizZQQUoexQp6iz/ppXWY6HFLENRFRyBVf XzFF5v1Wl24YKjtscXLJm4GLkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvm/3T4 UPOGbHwK1znLaoXcqpamMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tB RmtMYnliSlBoZERNS0NOazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY5qceUS7yP7xzHko98SK4hpHEtnjvVb2R5qq0d+HnaOhcqABeI+yF Qr2ncPK9RtCMwPn/Abri/u31cqe6gR+YCnASx7A2ZJ8AbO/oXEnvBtGql3pebgFL i/yZw/TZpevFA953bTBfxqmBO7el5iUiChPQd3OLGFjL5KKIrI29xGVFMdUt55KB b0eRlUjFub3LT7K6z5if/HD0P+H7iMho+v48U8LTXpteO7Fx0POUa4EHI1mWbc44 eCgZG45dYX0CU1E8cwtH60yAtpzEnSk2OTA1ZOorDBhf1/M6IAT2tyMVrq5YMXU7 Egqj8Ec7TCg9EWIb1MzOOgeG2EF4D0Xy -----END CERTIFICATE-----Generated at Mon May 12 04:35:27 2025 by rpki-client