$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json) Hash identifier: zuS1q/zwCAs04fjdPv8DCcRiJY2KP6+dLiyst3kxLUU= Subject key identifier: 25:54:A9:D8:23:AF:13:9A:38:F9:66:2F:04:FC:1C:6C:2B:DA:BD:1A Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Certificate serial: 0C14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft Manifest number: 0BFF Signing time: Sat 10 May 2025 18:34:15 +0000 Manifest this update: Sat 10 May 2025 18:34:14 +0000 Manifest next update: Sat 17 May 2025 18:34:14 +0000 Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: t6xLIoql+6qXwp4028L/ymXIGQOcxvXiuISgRRZQunQ=) 2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: FmIgsBhn26Msitd9uYBqz2EKKDjWry4yTM+2My3/Yyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3092 (0xc14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Validity Not Before: May 10 18:34:14 2025 GMT Not After : May 17 18:34:14 2025 GMT Subject: CN=681f9c27-f707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:6c:c8:e1:3d:d8:a0:5f:3c:d1:37:3c:43: c6:f1:6b:0f:ca:4c:34:e0:d7:9e:32:dc:b6:19:fa: 33:c1:1e:dd:57:3d:11:ff:73:6d:56:ca:23:a9:5e: 70:29:61:09:0e:3e:76:0f:54:f5:4d:ae:73:fa:67: 22:fe:0b:d4:47:db:4f:74:02:33:f4:98:b4:20:31: b9:b2:8e:2f:15:fc:df:77:d0:b4:86:56:da:87:b0: d0:bc:54:31:ba:f6:84:c9:f2:b5:0d:ef:1d:6a:82: 45:93:31:72:dc:06:3e:fe:f9:c5:bb:e8:fd:67:9d: 0e:19:78:03:12:df:c2:92:1f:ce:84:35:5e:9f:69: c1:91:52:1d:27:b0:e4:6a:26:33:0b:c2:ab:5d:0e: 83:e2:0c:8b:34:ed:85:58:fb:9a:d9:fa:ca:1b:fd: c4:d2:bf:6a:fd:6e:6d:82:bf:46:4b:25:d2:5b:0d: ff:2a:9c:bf:50:35:ef:8a:7c:46:83:26:ea:0d:90: 91:43:cf:af:8e:2a:8c:f7:72:e1:f5:6a:8f:89:2f: 3c:f6:86:ba:04:82:0d:44:48:79:88:8c:18:21:3b: cd:aa:99:c1:b2:45:b7:9a:2a:85:d6:be:f5:63:30: ee:5f:c6:29:68:07:f9:f9:af:9f:e1:d3:d0:fe:f9: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:54:A9:D8:23:AF:13:9A:38:F9:66:2F:04:FC:1C:6C:2B:DA:BD:1A X509v3 Authority Key Identifier: keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:98:cc:86:dd:e4:c7:4d:c3:20:2f:19:da:ad:10:b2:9b:ba: e0:88:e5:3b:e4:3e:39:91:27:e6:56:af:9c:95:9a:27:24:4f: 09:23:c9:8a:79:0c:cf:56:fa:35:cb:51:7e:c3:6c:72:4e:b9: 55:ef:6e:80:7b:2c:9f:49:22:ec:30:7b:5b:03:39:33:17:91: 11:37:9b:c8:22:61:e5:d0:39:be:e4:fd:44:fe:85:97:66:1f: 16:69:45:d7:3e:e8:fc:4e:a4:0b:b1:3d:af:da:b4:44:86:77: ee:ca:f5:97:d5:7a:bf:7b:13:ee:77:87:92:b2:27:4a:c1:2a: 3b:9e:ea:a2:71:da:d6:50:db:7e:62:66:d8:8e:fd:74:ec:37: 16:9f:0a:25:b4:95:cc:e0:67:53:03:dc:15:e4:f5:fe:1a:1a: f7:81:c0:74:03:ec:03:33:57:c3:08:67:4c:3f:86:70:56:23: fd:0c:e8:b4:60:f5:5c:ce:3c:6e:9c:93:8a:42:e0:e1:1b:e3: ab:bf:ad:9f:a4:10:cf:af:1b:d8:fc:17:ab:15:16:7e:1f:db: f4:cc:91:a0:3c:3a:c7:b0:64:c3:9a:28:3d:4e:82:6a:55:41: 40:c5:00:de:ca:7a:02:8a:3f:19:fc:60:78:af:e1:c4:6e:07: 93:87:00:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5 OTI1RkJENEYwHhcNMjUwNTEwMTgzNDE0WhcNMjUwNTE3MTgzNDE0WjAYMRYwFAYD VQQDEw02ODFmOWMyNy1mNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiNsyOE92KBfPNE3PEPG8WsPykw04NeeMty2GfozwR7dVz0R/3NtVsojqV5w KWEJDj52D1T1Ta5z+mci/gvUR9tPdAIz9Ji0IDG5so4vFfzfd9C0hlbah7DQvFQx uvaEyfK1De8daoJFkzFy3AY+/vnFu+j9Z50OGXgDEt/Ckh/OhDVen2nBkVIdJ7Dk aiYzC8KrXQ6D4gyLNO2FWPua2frKG/3E0r9q/W5tgr9GSyXSWw3/Kpy/UDXvinxG gybqDZCRQ8+vjiqM93Lh9WqPiS889oa6BIINREh5iIwYITvNqpnBskW3miqF1r71 YzDuX8YpaAf5+a+f4dPQ/vlypQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVUqdgj rxOaOPlmLwT8HGwr2r0aMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0 MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJmMyG3eTHTcMgLxnarRCym7rgiOU75D45kSfmVq+clZonJE8JI8mK eQzPVvo1y1F+w2xyTrlV726AeyyfSSLsMHtbAzkzF5ERN5vIImHl0Dm+5P1E/oWX Zh8WaUXXPuj8TqQLsT2v2rREhnfuyvWX1Xq/exPud4eSsidKwSo7nuqicdrWUNt+ YmbYjv107DcWnwoltJXM4GdTA9wV5PX+Ghr3gcB0A+wDM1fDCGdMP4ZwViP9DOi0 YPVczjxunJOKQuDhG+Orv62fpBDPrxvY/BerFRZ+H9v0zJGgPDrHsGTDmig9ToJq VUFAxQDeynoCij8Z/GB4r+HEbgeThwCd -----END CERTIFICATE-----Generated at Mon May 12 18:44:22 2025 by rpki-client