$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft File: Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json) Hash identifier: gbF3UecHD9MYGse/a1H+ctV9rZ4Zh5BuCUxkc4Sbw/k= Subject key identifier: 99:6F:E1:AB:A6:5D:92:78:94:E5:43:3B:75:F1:A3:17:3A:A9:A7:6E Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB Certificate issuer: /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft Manifest number: A2 Signing time: Tue 13 May 2025 05:21:34 +0000 Manifest this update: Tue 13 May 2025 05:21:34 +0000 Manifest next update: Tue 20 May 2025 05:21:34 +0000 Files and hashes: 1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: NrhLEyN8uyvs2Fzf2qdWUEcdVyhBhVZkfA8bpFhYir0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Validity Not Before: May 13 05:21:34 2025 GMT Not After : May 20 05:21:34 2025 GMT Subject: CN=6822d6de-6f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:f2:bb:a6:4a:e8:3d:b4:75:38:51:4c:1c: 05:1a:48:94:85:d8:27:1f:98:b7:8f:ed:87:92:ec: de:38:02:30:31:03:6c:94:5a:7c:e8:1e:69:6f:36: de:99:46:8d:a5:f1:ef:dd:e9:42:62:80:53:25:32: 31:b3:4e:98:9c:0e:25:d4:33:8c:cb:1b:25:bd:80: 7f:c0:7c:26:ac:2e:15:a5:36:24:7c:49:c9:3c:80: 26:8a:53:b3:d7:be:3b:e0:93:ff:63:ff:66:81:ec: 29:b2:07:61:f0:dc:8b:54:d4:52:26:b9:aa:db:6b: 8c:85:6a:45:2c:98:ba:3f:3e:a5:a7:49:62:da:60: bc:a9:13:cb:80:a7:e5:ec:31:bb:4c:13:b3:26:95: c5:14:47:e6:28:d4:01:63:24:d1:0e:1a:23:3d:e2: aa:6b:07:65:97:8c:d0:a8:c7:d1:ad:c3:1e:97:47: 62:e8:b3:cb:47:24:7d:64:9b:7b:cc:12:84:fc:d7: 5a:70:1c:31:02:67:86:84:39:22:4e:71:cf:c5:69: 47:1d:59:ad:20:f6:93:48:97:b1:a4:0b:3f:63:9a: ef:67:6e:59:a5:6a:91:e2:36:51:30:09:53:34:e5: 7f:33:cd:c9:0f:bf:06:0c:73:ac:d6:ca:6b:7b:5e: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6F:E1:AB:A6:5D:92:78:94:E5:43:3B:75:F1:A3:17:3A:A9:A7:6E X509v3 Authority Key Identifier: keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7f:17:c7:c1:b6:4f:d0:20:dc:30:c3:e5:37:71:d6:1b:91: ba:53:2e:04:6e:42:21:a6:a2:c1:c8:9d:eb:f4:74:40:ba:c9: f5:5b:1a:cc:70:12:36:6b:f1:4f:aa:cd:d6:37:97:ec:cb:ea: 75:6a:42:75:d5:b1:4e:af:a9:99:dc:cf:cd:7f:a2:c3:01:3b: 6c:e7:f0:67:89:d6:e8:d1:cc:52:9d:34:d0:32:96:d0:f2:90: 81:ef:2c:e3:55:4b:d0:dc:04:ba:97:a5:bd:7d:6f:f1:e4:01: db:f0:5f:4d:cd:68:b8:52:c9:18:ce:14:5e:51:1c:1b:bd:d0: d4:c6:14:fd:a1:58:33:e1:7c:24:11:ad:6a:52:83:cb:40:72: b2:e1:b7:4a:d2:a2:62:4b:b4:d7:03:74:87:1b:fa:71:a1:8b: 92:ac:2e:d2:b4:42:10:74:66:bf:b6:2b:c5:b1:f0:22:c6:0f: 2a:64:b6:1b:f2:d8:02:e5:93:e8:e6:d4:ac:b5:94:46:8e:0e: 15:e7:81:68:56:45:de:4f:ff:43:d2:d9:b3:2b:7c:fa:6e:3c: 24:08:9d:41:17:ad:0a:96:6d:d9:9a:8f:3d:10:9f:be:51:81: 09:d3:bd:b3:fc:84:6f:90:c4:23:d9:7a:dc:96:36:d1:35:1b: d0:56:53:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKDIzMUJBOTk5RDhFODgyNEY2MjIyQjg1Njg1RDA3REQ0 N0E3MDQ2REIwHhcNMjUwNTEzMDUyMTM0WhcNMjUwNTIwMDUyMTM0WjAYMRYwFAYD VQQDEw02ODIyZDZkZS02ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sfyu6ZK6D20dThRTBwFGkiUhdgnH5i3j+2HkuzeOAIwMQNslFp86B5pbzbe mUaNpfHv3elCYoBTJTIxs06YnA4l1DOMyxslvYB/wHwmrC4VpTYkfEnJPIAmilOz 17474JP/Y/9mgewpsgdh8NyLVNRSJrmq22uMhWpFLJi6Pz6lp0li2mC8qRPLgKfl 7DG7TBOzJpXFFEfmKNQBYyTRDhojPeKqawdll4zQqMfRrcMel0di6LPLRyR9ZJt7 zBKE/NdacBwxAmeGhDkiTnHPxWlHHVmtIPaTSJexpAs/Y5rvZ25ZpWqR4jZRMAlT NOV/M83JD78GDHOs1spre16P6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlv4aum XZJ4lOVDO3Xxoxc6qaduMB8GA1UdIwQYMBaAFCMbqZnY6IJPYiK4VoXQfdR6cEbb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81QTE5QkRDQTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi9JeHVwbWRqb2drOWlJcmhXaGRCOTFIcHdS dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l4dXBtZGpvZ2s5aUlyaFdoZEI5MUhwd1J0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81QTE5QkRDQTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi9JeHVwbWRqb2dr OWlJcmhXaGRCOTFIcHdSdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSfxfHwbZP0CDcMMPlN3HWG5G6Uy4EbkIhpqLByJ3r9HRAusn1WxrM cBI2a/FPqs3WN5fsy+p1akJ11bFOr6mZ3M/Nf6LDATts5/Bnidbo0cxSnTTQMpbQ 8pCB7yzjVUvQ3AS6l6W9fW/x5AHb8F9NzWi4UskYzhReURwbvdDUxhT9oVgz4Xwk Ea1qUoPLQHKy4bdK0qJiS7TXA3SHG/pxoYuSrC7StEIQdGa/tivFsfAixg8qZLYb 8tgC5ZPo5tSstZRGjg4V54FoVkXeT/9D0tmzK3z6bjwkCJ1BF60Klm3Zmo89EJ++ UYEJ072z/IRvkMQj2XrcljbRNRvQVlMP -----END CERTIFICATE-----Generated at Thu May 15 00:23:34 2025 by rpki-client