$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: Hoh7cVKuxKhSJNN01O3ai2yFlWT9sSyvNNpIGGSN6OM= Subject key identifier: DB:AC:77:ED:9E:FE:01:BE:C5:5C:6F:F0:40:00:D8:0C:0F:35:3E:90 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 0168 Signing time: Tue 13 May 2025 03:06:54 +0000 Manifest this update: Tue 13 May 2025 03:06:53 +0000 Manifest next update: Tue 20 May 2025 03:06:53 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: iEhSd6kAevBXA2kVzg9hB0O6v1snVJJk4vM9zTKE7ks=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 5G3UaqvRN/OiyPJztyDHavW6CqyUdsMIsiidpfCXP7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: May 13 03:06:53 2025 GMT Not After : May 20 03:06:53 2025 GMT Subject: CN=6822b74d-d1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:d3:1c:8a:53:85:28:72:5c:21:cc:01:40: fe:3b:10:4a:07:bf:9a:81:5c:77:1c:b8:d0:e5:fe: ea:9f:83:aa:04:6d:12:d9:8b:ad:44:d5:22:86:41: 94:af:15:8a:36:2c:89:92:de:85:66:41:f3:20:b2: 90:f4:43:41:28:17:2e:86:37:65:c5:c8:b3:65:44: c4:35:de:56:8f:38:ee:ca:b0:f8:0b:38:9c:8d:1a: 12:06:b2:bc:3d:62:76:84:6c:7f:f7:d4:a7:8b:13: 37:e2:13:44:c2:48:90:83:4c:0c:ff:b7:92:d1:eb: 6c:44:83:ab:90:e6:c2:b6:aa:45:1e:ef:85:35:da: 56:74:c3:01:96:e8:5b:aa:25:11:9b:51:a7:af:c9: 04:69:0d:6f:52:58:9b:60:80:1e:a3:da:53:52:8e: 1f:a3:72:a8:e6:ed:e4:d3:2a:83:19:53:93:92:e3: 46:e3:7c:51:d0:90:f2:ca:94:69:9f:b8:5a:eb:a6: 97:ef:cd:ad:13:1c:a2:b3:cb:22:71:c1:5c:fe:9c: 35:c4:8a:79:a1:53:60:a7:29:a2:68:9f:21:7e:fb: f3:4a:26:df:37:62:9b:ae:93:28:99:07:70:4b:dc: ff:85:08:7b:29:84:f9:46:8e:71:9c:92:b0:7f:b1: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AC:77:ED:9E:FE:01:BE:C5:5C:6F:F0:40:00:D8:0C:0F:35:3E:90 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9b:9f:90:66:27:14:7d:5f:7c:71:52:b0:91:6e:e1:6a:f0: 46:2d:df:02:f7:e6:f8:e3:6b:b5:6d:b8:07:4e:cd:c8:3c:68: 14:2b:b1:a2:e0:66:0b:a1:f7:04:8c:b8:fc:8e:36:00:a9:03: 65:a1:48:34:f5:3b:78:19:6d:b2:f1:ff:fe:5e:b6:27:b4:f9: 5a:8f:9d:71:9e:ac:66:8c:46:67:59:67:a7:c1:08:9f:cc:5d: 5b:39:72:3a:8c:49:71:f5:b6:43:58:c4:78:d0:c0:06:0c:05: 90:86:ce:f4:df:41:45:3d:66:14:c7:95:ec:bb:85:c6:0c:61: a8:e1:dd:3e:8a:0f:1c:dd:88:63:68:3a:b6:fb:18:66:60:f9: 49:54:c6:bf:47:14:b6:8d:db:a2:fd:02:50:7c:63:2f:3d:dd: aa:90:cf:09:d3:db:83:5b:1a:5c:80:93:e8:9a:16:9e:55:8e: 59:b2:51:dd:38:3f:25:49:a9:1d:ad:3b:6d:25:aa:51:91:99: 7b:64:cf:f5:2d:4e:7f:bc:1a:7b:ff:e8:15:a3:a4:60:21:c0: 70:fe:61:f0:ab:65:67:15:5d:6f:4c:b7:2b:ad:ed:48:76:62: e3:e9:95:09:fc:fd:c7:dd:45:4f:32:cc:27:8d:03:d8:af:0b: 24:13:df:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjUwNTEzMDMwNjUzWhcNMjUwNTIwMDMwNjUzWjAYMRYwFAYD VQQDEw02ODIyYjc0ZC1kMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JrTHIpThShyXCHMAUD+OxBKB7+agVx3HLjQ5f7qn4OqBG0S2YutRNUihkGU rxWKNiyJkt6FZkHzILKQ9ENBKBcuhjdlxcizZUTENd5WjzjuyrD4CzicjRoSBrK8 PWJ2hGx/99SnixM34hNEwkiQg0wM/7eS0etsRIOrkObCtqpFHu+FNdpWdMMBluhb qiURm1Gnr8kEaQ1vUlibYIAeo9pTUo4fo3Ko5u3k0yqDGVOTkuNG43xR0JDyypRp n7ha66aX782tExyis8siccFc/pw1xIp5oVNgpymiaJ8hfvvzSibfN2KbrpMomQdw S9z/hQh7KYT5Ro5xnJKwf7HjqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNusd+2e /gG+xVxv8EAA2AwPNT6QMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdm5+QZicUfV98cVKwkW7havBGLd8C9+b442u1bbgHTs3IPGgUK7Gi 4GYLofcEjLj8jjYAqQNloUg09Tt4GW2y8f/+XrYntPlaj51xnqxmjEZnWWenwQif zF1bOXI6jElx9bZDWMR40MAGDAWQhs7030FFPWYUx5Xsu4XGDGGo4d0+ig8c3Yhj aDq2+xhmYPlJVMa/RxS2jdui/QJQfGMvPd2qkM8J09uDWxpcgJPomhaeVY5ZslHd OD8lSakdrTttJapRkZl7ZM/1LU5/vBp7/+gVo6RgIcBw/mHwq2VnFV1vTLcrre1I dmLj6ZUJ/P3H3UVPMswnjQPYrwskE99j -----END CERTIFICATE-----Generated at Tue May 13 15:01:40 2025 by rpki-client