$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: BlCK6EhuxpuDRrWabalrGhBZu3us8GaVQ28eC3SBiJo= Subject key identifier: A6:7B:D2:F4:75:7C:C9:AA:FC:89:1F:81:9F:63:B1:4C:FE:B0:85:C6 Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 04B8 Signing time: Sat 10 May 2025 23:30:51 +0000 Manifest this update: Sat 10 May 2025 23:30:50 +0000 Manifest next update: Sat 17 May 2025 23:30:50 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: iAqduO6c6xBguBolpeOT+jdbR3POTUUAn2J8LXv0IpQ=) 2: E747402C940211EFAAB77C3DC4F9AE02.roa (hash: V4kNzC9BCFB4bEAtUd+qwvHLEbfnpMX9a/DaKQbhUdI=) 3: DA655484CF0811EF9CF05B4FC4F9AE02.roa (hash: OtFmSPwV6EFHA0PFmeCzNbPWu4B2WoMirQl5I+it6TQ=) 4: 9C3B0AB8911A11EFB0F2DB5DC4F9AE02.roa (hash: 1ZwXIYT8WEQ8AXmik6kQ0iyXkhUrX8a9G8G1OnokxHI=) 5: DF2C7C5E8A3E11EF96BEBB3AC4F9AE02.roa (hash: Po0zIGF8aATq1hFnPm65zoH3mTgzDOjtTV7rd5eqe/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: May 10 23:30:50 2025 GMT Not After : May 17 23:30:50 2025 GMT Subject: CN=681fe1ab-6ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f4:ca:46:2c:5d:8f:5c:e1:38:80:c3:26:e4: 7f:49:e7:b4:40:dc:22:84:6a:e1:e3:a3:4f:ca:1e: d0:e6:90:bf:b0:7d:e4:09:97:34:da:db:a4:47:03: 52:f9:1d:82:2a:34:41:ea:4f:c0:78:40:47:40:0b: d0:cd:c7:fa:97:eb:28:19:14:80:dc:5e:a6:69:b9: 07:63:ac:83:0c:42:51:e5:b2:90:1c:df:03:47:b8: e2:d4:74:24:46:c7:c9:00:90:dc:bf:54:d3:56:b3: 05:a4:c6:92:e3:69:c4:28:d5:cd:45:ee:7e:02:77: 33:08:b7:a8:39:92:36:f6:c0:c3:99:75:ae:7c:db: 9e:1d:06:9f:8b:a7:f1:33:ce:da:9e:eb:bf:d7:5f: ec:43:da:c5:08:ec:7f:69:10:d6:76:0b:ed:fd:db: f8:94:82:1a:76:5a:6d:2c:ae:c2:d8:8b:90:3f:ce: a9:bf:fa:f4:0e:55:9a:92:50:f2:b3:2a:3d:ca:9e: 4c:b2:5e:00:98:eb:3d:e7:64:71:36:d5:12:d2:65: 6b:33:c1:7d:3d:74:b6:31:91:db:3f:c7:a3:47:5e: af:bc:ce:ff:4a:dd:df:ee:ee:95:3c:bd:6e:c2:7e: 3e:e5:d8:1a:23:34:e6:38:f9:9a:3a:29:f6:11:6d: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7B:D2:F4:75:7C:C9:AA:FC:89:1F:81:9F:63:B1:4C:FE:B0:85:C6 X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1c:67:50:e2:71:c7:bf:25:f5:25:f8:52:36:81:d6:94:f6: 4e:0b:95:60:63:f4:6a:9c:0f:00:42:51:2d:08:cb:b8:0f:c8: 88:f5:0f:07:fb:90:c3:82:94:e7:8a:d9:a4:fe:75:68:61:e8: 45:31:f6:bf:46:b2:46:b7:30:59:d8:79:5e:e5:f4:a9:04:e4: c9:e5:d3:d5:ab:8f:ac:16:7e:6f:8c:db:cc:2e:25:b8:00:98: 86:a7:2c:c2:2c:75:63:24:3b:94:54:df:d0:48:90:5c:0b:2b: 68:bd:2b:c6:d2:69:be:7a:15:5c:6d:f8:a5:06:03:dd:60:7f: ed:d2:04:13:a2:0b:4e:1d:26:d4:7d:f2:4a:db:fd:f6:29:9b: f1:ac:16:0d:07:d2:37:6d:28:05:a0:a7:0a:31:8e:6c:0f:2a: 6b:6d:bc:72:34:05:4d:09:6a:21:9a:28:9b:b5:ed:e1:cb:e2: 05:77:e7:34:88:e4:54:70:a2:5a:89:4b:11:2b:50:ea:cc:21: db:e5:58:b9:14:2e:65:6d:38:e8:ee:c9:7f:57:bd:d4:ac:11: d2:de:91:69:ff:63:8d:e1:d0:ae:53:49:55:76:78:2a:86:f9: c9:6a:23:d3:94:35:a3:a2:7d:05:96:3e:52:09:ac:36:e1:48: db:e3:37:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUwNTEwMjMzMDUwWhcNMjUwNTE3MjMzMDUwWjAYMRYwFAYD VQQDEw02ODFmZTFhYi02ZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fTKRixdj1zhOIDDJuR/See0QNwihGrh46NPyh7Q5pC/sH3kCZc02tukRwNS +R2CKjRB6k/AeEBHQAvQzcf6l+soGRSA3F6mabkHY6yDDEJR5bKQHN8DR7ji1HQk RsfJAJDcv1TTVrMFpMaS42nEKNXNRe5+AnczCLeoOZI29sDDmXWufNueHQafi6fx M87anuu/11/sQ9rFCOx/aRDWdgvt/dv4lIIadlptLK7C2IuQP86pv/r0DlWaklDy syo9yp5Msl4AmOs952RxNtUS0mVrM8F9PXS2MZHbP8ejR16vvM7/St3f7u6VPL1u wn4+5dgaIzTmOPmaOin2EW0RGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ70vR1 fMmq/IkfgZ9jsUz+sIXGMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMHGdQ4nHHvyX1JfhSNoHWlPZOC5VgY/RqnA8AQlEtCMu4D8iI9Q8H +5DDgpTnitmk/nVoYehFMfa/RrJGtzBZ2Hle5fSpBOTJ5dPVq4+sFn5vjNvMLiW4 AJiGpyzCLHVjJDuUVN/QSJBcCytovSvG0mm+ehVcbfilBgPdYH/t0gQTogtOHSbU ffJK2/32KZvxrBYNB9I3bSgFoKcKMY5sDyprbbxyNAVNCWohmiibte3hy+IFd+c0 iORUcKJaiUsRK1DqzCHb5Vi5FC5lbTjo7sl/V73UrBHS3pFp/2ON4dCuU0lVdngq hvnJaiPTlDWjon0Flj5SCaw24Ujb4zds -----END CERTIFICATE-----Generated at Mon May 12 14:48:11 2025 by rpki-client