$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft File: IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json) Hash identifier: mHogWMsz5nMYFpWuBoFk5FJSuqZ07HM0Y3tnki9uzzU= Subject key identifier: 25:B6:67:8D:66:D6:25:6A:0B:80:82:89:F5:55:3F:BF:E7:7F:5A:DF Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C Certificate issuer: /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C Certificate serial: 1503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft Manifest number: 2B70 Signing time: Wed 14 May 2025 16:54:11 +0000 Manifest this update: Wed 14 May 2025 16:54:10 +0000 Manifest next update: Wed 21 May 2025 16:54:10 +0000 Files and hashes: 1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: tAGiU2q14IETE1t3GzTDg4dwNraDtmtxFUvkC49At9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5379 (0x1503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C Validity Not Before: May 14 16:54:10 2025 GMT Not After : May 21 16:54:10 2025 GMT Subject: CN=6824cab2-7872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:d2:68:5c:0d:f2:9a:48:57:34:0b:dc:67: f3:4c:20:a7:c0:1e:48:82:50:60:f5:78:31:2b:ce: b4:2c:87:54:ef:64:e8:16:c1:f9:71:5d:f7:53:9c: 1d:66:d5:a7:c8:4b:cf:c1:de:40:b3:9a:1c:6c:4d: a9:6b:26:fc:4b:35:fd:a0:d8:f5:0a:ef:a0:bc:63: 78:d6:82:fe:ea:11:70:cc:83:b6:36:a4:fa:f4:74: 67:d6:4f:98:63:c9:b8:0c:26:65:cf:a7:86:af:e3: 6c:09:3b:d5:31:d0:18:13:56:0b:43:60:ec:48:b6: 11:a3:23:7c:09:c9:6b:78:57:5e:46:87:f6:f5:6f: f6:cb:22:92:73:7a:ae:74:e3:fd:90:ec:6d:58:b5: dd:9b:48:48:06:22:43:23:42:b2:e0:38:36:db:ef: a9:95:ef:6e:a1:08:2b:2b:d7:45:aa:c0:55:48:d3: 53:fc:51:a1:c7:a3:6d:90:70:af:30:58:4f:ce:ec: fe:81:45:d5:e8:52:78:d7:56:6b:b5:25:cb:b1:0f: 2f:d5:35:33:81:fd:74:eb:bb:e4:fd:52:b3:24:bd: 70:a7:ff:c6:d8:ec:14:a1:06:f7:77:77:9c:ca:f1: db:fd:c8:46:80:b1:34:01:13:14:67:e5:f5:3e:61: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B6:67:8D:66:D6:25:6A:0B:80:82:89:F5:55:3F:BF:E7:7F:5A:DF X509v3 Authority Key Identifier: keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a4:14:e1:1e:dc:97:f2:01:7a:78:94:55:29:02:aa:2c:c4: d7:98:fd:4a:f3:f2:d4:7f:24:1c:ae:fa:3d:65:5b:11:aa:ba: 1a:21:57:73:7a:0a:86:dc:75:e0:e1:2b:a9:88:0b:db:21:d2: 0c:5d:f1:88:6b:ba:e5:a9:e2:cd:9a:09:e8:e5:1b:4f:1f:d1: 99:fa:05:e1:f8:43:7a:e7:33:f3:13:a7:71:de:56:2a:56:55: 07:26:12:b9:4f:88:35:00:e1:6d:59:db:19:03:c1:52:ec:1e: af:55:41:36:23:3c:f0:17:ef:95:d8:fe:7b:0a:11:a4:55:77: 92:a8:b8:23:6a:03:87:e8:28:2b:18:e5:55:e1:8e:eb:75:95: 41:58:94:62:02:2c:f7:19:56:ad:2d:c2:ca:2b:40:d2:47:f9: 28:c4:42:26:d6:32:c6:7a:fe:f3:3f:7f:39:74:1d:d8:b9:6a: 59:52:bb:10:b7:52:20:17:b6:ea:db:e0:27:6b:86:dd:d7:c7: 85:43:53:db:1d:3b:8e:e0:b9:ef:03:4a:ee:a7:d9:7b:51:c1: 81:81:cb:0a:51:b1:4e:47:67:be:85:83:17:c7:2f:53:31:b0: a4:ca:f9:3f:41:2b:f1:76:aa:5a:4d:7c:88:66:11:c8:9d:de: a2:73:50:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKDIyODg2RDE3NkE3M0MwQkUzQ0RENTg4OUMyQThCMzIz RTNCOTQxMkMwHhcNMjUwNTE0MTY1NDEwWhcNMjUwNTIxMTY1NDEwWjAYMRYwFAYD VQQDEw02ODI0Y2FiMi03ODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLvSaFwN8ppIVzQL3GfzTCCnwB5IglBg9XgxK860LIdU72ToFsH5cV33U5wd ZtWnyEvPwd5As5ocbE2payb8SzX9oNj1Cu+gvGN41oL+6hFwzIO2NqT69HRn1k+Y Y8m4DCZlz6eGr+NsCTvVMdAYE1YLQ2DsSLYRoyN8CclreFdeRof29W/2yyKSc3qu dOP9kOxtWLXdm0hIBiJDI0Ky4Dg22++ple9uoQgrK9dFqsBVSNNT/FGhx6NtkHCv MFhPzuz+gUXV6FJ411ZrtSXLsQ8v1TUzgf1067vk/VKzJL1wp//G2OwUoQb3d3ec yvHb/chGgLE0ARMUZ+X1PmEbswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCW2Z41m 1iVqC4CCifVVP7/nf1rfMB8GA1UdIwQYMBaAFCKIbRdqc8C+PN1YicKosyPjuUEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendMNDgzVmlKd3FpekktTzVR U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvaHRGMnB6d0w0ODNWaUp3cWl6SS1PNVFTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendM NDgzVmlKd3FpekktTzVRU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCpBThHtyX8gF6eJRVKQKqLMTXmP1K8/LUfyQcrvo9ZVsRqroaIVdz egqG3HXg4SupiAvbIdIMXfGIa7rlqeLNmgno5RtPH9GZ+gXh+EN65zPzE6dx3lYq VlUHJhK5T4g1AOFtWdsZA8FS7B6vVUE2IzzwF++V2P57ChGkVXeSqLgjagOH6Cgr GOVV4Y7rdZVBWJRiAiz3GVatLcLKK0DSR/koxEIm1jLGev7zP385dB3YuWpZUrsQ t1IgF7bq2+Ana4bd18eFQ1PbHTuO4LnvA0rup9l7UcGBgcsKUbFOR2e+hYMXxy9T MbCkyvk/QSvxdqpaTXyIZhHInd6ic1Dl -----END CERTIFICATE-----Generated at Wed May 14 22:55:03 2025 by rpki-client