$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json) Hash identifier: knaKSKK54znyOrrL69NI0Pqb/FSjtkYBiocUhm0JtHU= Subject key identifier: 70:2A:AE:2F:D1:BC:4D:EB:FD:DE:9D:CB:79:9E:52:8E:38:AB:B8:7D Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft Manifest number: 073F Signing time: Wed 14 May 2025 21:46:13 +0000 Manifest this update: Wed 14 May 2025 21:46:12 +0000 Manifest next update: Wed 21 May 2025 21:46:12 +0000 Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: OPKM14fczZEod5DDaMi0mKk6wU5YVhPDXXVoQGpkmlA=) 2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: VX7tWpkB3IpeXdKnDIMHBHz09wmck5Wxazs1on6cWAs=) 3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: UtE0iQnooYxxq8F81zrRGsRO6qH6B3IIfoj4HCuUdUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED Validity Not Before: May 14 21:46:12 2025 GMT Not After : May 21 21:46:12 2025 GMT Subject: CN=68250f25-6477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:4e:d9:ea:2b:46:4b:66:22:15:ed:e2:7f: 5e:87:38:22:cf:64:ae:d7:a7:12:db:6e:4b:76:91: da:83:4e:34:c6:99:2d:df:61:49:a5:f5:4b:6c:b3: 02:30:73:ec:dc:56:b6:36:57:e0:e9:4d:81:31:1a: 3d:a2:4d:9a:77:93:5e:fc:5d:02:05:80:db:13:2e: 06:dd:08:7c:74:3b:89:94:24:70:42:94:11:a6:5a: 56:ee:a9:ba:43:b5:89:76:7f:fb:b7:72:91:e4:2c: f9:3e:a5:af:a0:49:3a:1c:b8:8f:bc:4b:55:3e:42: df:8a:b8:49:e2:9d:59:c9:98:fa:63:ca:24:47:5e: 2c:d6:b8:f1:9b:08:54:45:57:5a:ac:72:7a:be:24: 7b:fe:ce:42:bc:2c:8b:da:97:e7:62:9a:3a:18:7c: 47:e4:e7:a4:d6:ce:72:12:44:d5:7e:13:0c:d8:f4: aa:ba:3b:97:74:f9:73:77:f9:3c:1e:63:4c:10:3e: 75:da:c1:6a:d1:72:ad:32:f8:a9:82:89:70:73:4c: 32:0d:83:17:1b:12:ba:0d:54:d3:8a:7b:b7:ef:9c: c1:40:b2:64:09:2e:d6:b1:60:1e:29:9e:de:40:95: 24:71:35:69:cc:26:d1:a3:7f:fb:56:7b:95:89:da: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2A:AE:2F:D1:BC:4D:EB:FD:DE:9D:CB:79:9E:52:8E:38:AB:B8:7D X509v3 Authority Key Identifier: keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:6b:09:f8:92:17:cb:35:a9:48:31:5a:d7:8f:79:f0:99:3a: b6:7c:a1:ae:7e:48:4b:8e:43:48:45:87:b3:a5:0b:7c:d4:df: 88:e8:6f:33:70:ac:91:54:a7:a8:5b:3d:4d:e7:93:a5:39:77: ac:c2:47:48:74:3a:8e:1d:8d:62:18:22:ef:4b:59:20:30:7e: e7:c7:64:28:9b:b5:e3:bc:01:91:94:8a:3d:71:63:9b:64:af: 20:a1:87:08:d6:0b:22:7a:54:9e:2c:eb:ed:44:16:c3:2b:e1: 8b:f7:53:be:18:f9:d7:c3:13:91:d6:b8:88:32:3b:13:3c:dd: 75:66:6d:63:a2:ab:5e:ab:b0:d6:17:c9:2c:f3:1d:47:c6:ae: 20:d4:bc:6c:8f:4d:10:ba:7d:ef:9d:10:96:3c:06:86:61:c8: a4:a9:34:5b:83:9f:bd:ee:34:19:2a:e8:4f:3e:76:dc:8c:93: 2c:06:bd:cd:52:3b:ee:ce:3c:b5:8c:1f:07:25:40:be:e8:51: 69:50:4f:c3:62:3b:61:94:79:3c:78:d8:80:45:89:07:aa:5c: 29:de:64:ff:46:83:5f:5c:65:8b:48:94:1b:56:f9:3f:01:26: eb:4c:ec:f7:37:a5:fe:68:33:4a:fe:1c:96:da:e0:bb:11:57: 75:27:79:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy QjgzOUZCRUQwHhcNMjUwNTE0MjE0NjEyWhcNMjUwNTIxMjE0NjEyWjAYMRYwFAYD VQQDEw02ODI1MGYyNS02NDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQFO2eorRktmIhXt4n9ehzgiz2Su16cS225LdpHag040xpkt32FJpfVLbLMC MHPs3Fa2Nlfg6U2BMRo9ok2ad5Ne/F0CBYDbEy4G3Qh8dDuJlCRwQpQRplpW7qm6 Q7WJdn/7t3KR5Cz5PqWvoEk6HLiPvEtVPkLfirhJ4p1ZyZj6Y8okR14s1rjxmwhU RVdarHJ6viR7/s5CvCyL2pfnYpo6GHxH5Oek1s5yEkTVfhMM2PSqujuXdPlzd/k8 HmNMED512sFq0XKtMvipgolwc0wyDYMXGxK6DVTTinu375zBQLJkCS7WsWAeKZ7e QJUkcTVpzCbRo3/7VnuVidrXrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAqri/R vE3r/d6dy3meUo44q7h9MB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5 MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByawn4khfLNalIMVrXj3nwmTq2fKGufkhLjkNIRYezpQt81N+I6G8z cKyRVKeoWz1N55OlOXeswkdIdDqOHY1iGCLvS1kgMH7nx2Qom7XjvAGRlIo9cWOb ZK8goYcI1gsielSeLOvtRBbDK+GL91O+GPnXwxOR1riIMjsTPN11Zm1joqteq7DW F8ks8x1Hxq4g1Lxsj00Qun3vnRCWPAaGYcikqTRbg5+97jQZKuhPPnbcjJMsBr3N Ujvuzjy1jB8HJUC+6FFpUE/DYjthlHk8eNiARYkHqlwp3mT/RoNfXGWLSJQbVvk/ ASbrTOz3N6X+aDNK/hyW2uC7EVd1J3mq -----END CERTIFICATE-----Generated at Fri May 16 03:20:12 2025 by rpki-client