$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: NX8q+FyTfVSbbA70kI1K0q0IlogJCAuTLcZ8hpMNVSs= Subject key identifier: BD:AD:3E:EE:23:21:88:B0:EC:CD:B7:77:15:BC:92:3A:D0:33:2C:64 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 0979 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 096C Signing time: Mon 12 May 2025 20:01:31 +0000 Manifest this update: Mon 12 May 2025 20:01:30 +0000 Manifest next update: Mon 19 May 2025 20:01:30 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: jbBj6M8aLFD3TBr9QAll7ErV533Tsu2lBA/l4/f/BqQ=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: OKYnpL3ItOClZYUiMv6VNENRunTew7JMF8uzbl0/Bwg=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: c/YMEhJjfVpB3i5Wjtv4VGg1Y4E70AtSKzhUUpN9Sak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2425 (0x979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: May 12 20:01:30 2025 GMT Not After : May 19 20:01:30 2025 GMT Subject: CN=6822539a-75af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:85:a1:63:0a:38:02:32:45:10:67:b6:1e: 7a:e7:17:9a:16:eb:13:b2:53:3a:4a:d5:31:de:11: a7:82:7e:7a:3f:fc:d7:76:ee:09:50:bb:79:b4:89: e8:0d:e4:db:97:d3:ab:63:26:ef:99:89:68:0a:a5: bd:0a:b4:c1:d8:f8:1c:ad:31:89:85:cc:05:e5:ed: e4:c4:80:8b:01:9e:b6:6c:ac:e8:17:85:55:9b:7d: 36:7f:a2:e0:04:9e:ea:64:a3:f5:07:ad:78:13:31: 76:9d:b2:34:f7:4a:a6:81:58:bf:cd:b1:3a:78:02: b4:38:fb:e4:15:0c:51:c1:dd:3f:d2:e9:6b:e4:d6: ee:8d:f5:f9:b7:be:10:4a:2b:9b:8a:93:e6:c5:31: fd:3d:18:0e:b7:ec:e6:98:7f:59:fe:d5:fc:8d:f3: d3:f5:e9:8e:a6:e8:17:99:6b:76:55:b3:c4:04:3f: 79:43:5e:51:bb:82:4c:4f:05:3f:1a:b2:f4:7b:ee: 41:0e:73:08:3c:07:ba:37:55:d7:be:ce:f4:f2:e0: 47:19:63:d0:5a:f8:5a:22:73:09:18:30:94:3e:78: e7:13:e2:a4:82:da:43:73:69:0c:33:db:e0:e1:97: 97:fd:44:fc:a3:b7:8e:bb:49:75:9c:ca:f8:4a:6a: b5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AD:3E:EE:23:21:88:B0:EC:CD:B7:77:15:BC:92:3A:D0:33:2C:64 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b3:95:cb:e8:90:07:bb:b7:0c:e2:d0:44:a3:a7:05:cf:24: d6:fb:7a:82:98:17:44:2d:d9:14:d0:87:e9:64:d2:8e:35:4c: 43:5e:7d:59:8f:56:c3:73:11:38:52:e8:4d:62:e7:c9:9f:bd: b9:7e:47:d3:f6:8e:e0:bd:b8:31:fa:b1:d5:d7:27:06:f5:19: fe:96:c3:89:10:1b:ac:6d:12:03:47:a6:34:0b:dc:82:0e:54: 4f:ec:45:ca:e4:4f:46:9c:49:97:f0:37:a0:bc:54:ce:05:bc: bc:9a:10:1c:30:c8:5a:cc:5e:a8:9e:d1:8f:a7:46:36:22:37: 07:c8:b2:77:1a:7e:6f:33:bb:b5:eb:0d:48:11:44:85:37:c7: 74:01:8d:69:31:dd:30:08:93:38:e5:13:1f:75:02:82:6f:c1: 5b:89:66:d6:83:70:14:c5:68:2a:e2:89:00:2f:37:e1:66:cf: 41:41:3a:f9:90:39:05:10:19:30:58:04:d9:a6:50:4d:b4:5f: f4:44:3a:01:63:2d:8a:5e:70:ff:b5:ab:40:e6:58:f5:87:36: f2:a7:bc:36:52:7f:79:45:c7:e0:85:32:7b:b0:3d:68:5d:35: 64:7d:69:eb:0e:26:1a:16:0b:9b:79:fb:2e:55:24:81:b6:e1: f5:af:eb:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjUwNTEyMjAwMTMwWhcNMjUwNTE5MjAwMTMwWjAYMRYwFAYD VQQDEw02ODIyNTM5YS03NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFaFoWMKOAIyRRBnth565xeaFusTslM6StUx3hGngn56P/zXdu4JULt5tIno DeTbl9OrYybvmYloCqW9CrTB2PgcrTGJhcwF5e3kxICLAZ62bKzoF4VVm302f6Lg BJ7qZKP1B614EzF2nbI090qmgVi/zbE6eAK0OPvkFQxRwd0/0ulr5NbujfX5t74Q SiubipPmxTH9PRgOt+zmmH9Z/tX8jfPT9emOpugXmWt2VbPEBD95Q15Ru4JMTwU/ GrL0e+5BDnMIPAe6N1XXvs708uBHGWPQWvhaInMJGDCUPnjnE+KkgtpDc2kMM9vg 4ZeX/UT8o7eOu0l1nMr4Smq14QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2tPu4j IYiw7M23dxW8kjrQMyxkMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBks5XL6JAHu7cM4tBEo6cFzyTW+3qCmBdELdkU0IfpZNKONUxDXn1Z j1bDcxE4UuhNYufJn725fkfT9o7gvbgx+rHV1ycG9Rn+lsOJEBusbRIDR6Y0C9yC DlRP7EXK5E9GnEmX8DegvFTOBby8mhAcMMhazF6ontGPp0Y2IjcHyLJ3Gn5vM7u1 6w1IEUSFN8d0AY1pMd0wCJM45RMfdQKCb8FbiWbWg3AUxWgq4okALzfhZs9BQTr5 kDkFEBkwWATZplBNtF/0RDoBYy2KXnD/tatA5lj1hzbyp7w2Un95RcfghTJ7sD1o XTVkfWnrDiYaFgubefsuVSSBtuH1r+uG -----END CERTIFICATE-----Generated at Tue May 13 09:16:24 2025 by rpki-client