$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: mgtzbH3dGAyUkjWJV2/iv+cUQNaB3runf8dSrOG6nAo= Subject key identifier: DF:26:70:43:F8:91:F5:D9:A5:EE:6E:8E:37:5F:9F:48:96:F1:65:F2 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 01D1 Signing time: Sun 11 May 2025 01:52:05 +0000 Manifest this update: Sun 11 May 2025 01:52:05 +0000 Manifest next update: Sun 18 May 2025 01:52:05 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: gTMVtU7OvZENZU80A+rtFzfiDCFN1jUKe1jhVgE/nEc=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: zXr6NOZcCRqEcE9Pgk6RR5qOsx1G0XavR+U4MW0E+MQ=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: DV9Gdp3YkASaDfgSFkYwRK6BKaUQSr3ziC7H6K89rT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: May 11 01:52:05 2025 GMT Not After : May 18 01:52:05 2025 GMT Subject: CN=682002c5-fad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:e6:01:89:d6:ad:23:7d:b3:a8:3b:37:6d: c3:e5:7a:7d:ae:e7:a3:06:7d:06:8c:d9:d0:1c:ba: 63:72:38:62:46:30:ce:78:33:d6:fe:9b:4b:dd:d8: 16:0e:f4:b2:15:25:4b:a2:b2:fa:23:38:39:14:a2: 31:a3:68:bd:ea:c2:f6:37:35:7f:12:04:2e:7f:72: 0c:f6:be:54:9c:93:3d:aa:b1:0b:80:5e:28:db:d6: c0:44:4a:e8:bb:13:47:ab:bc:24:2c:a1:21:ab:67: e3:e0:80:5e:62:99:ec:a5:60:91:0a:38:c1:13:d0: 2d:36:50:15:bd:ba:48:b9:dc:68:35:54:36:c7:9d: 64:f3:38:e2:09:dd:f7:92:d0:e1:c7:14:b5:1e:da: 81:5d:d4:d1:76:4c:18:f3:c0:8e:83:77:a9:c6:16: ef:36:d2:84:75:b9:d6:0a:fb:75:6f:a6:1d:a6:24: 14:8b:01:bf:dd:76:8e:dd:55:87:50:ad:34:d1:a4: aa:28:f1:b0:a0:19:d2:7c:a2:cd:1f:3c:1b:a1:51: 06:b7:c9:80:a8:23:15:82:0b:01:58:78:44:df:67: 4d:a0:e4:c5:b6:d0:02:cb:b9:0e:c3:ef:60:8c:ed: d9:c1:b4:2d:f3:d0:fa:af:df:71:80:6a:54:a8:aa: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:26:70:43:F8:91:F5:D9:A5:EE:6E:8E:37:5F:9F:48:96:F1:65:F2 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:5e:d4:5c:d9:19:4f:23:8d:06:85:b0:5e:b6:7b:cd:64:a3: 8a:d3:7a:1c:c5:a1:b7:f6:aa:2a:87:19:8c:59:e6:73:35:1c: 0d:51:a7:67:1d:d3:a6:ed:55:63:33:1c:a2:9f:1a:bd:2d:55: 5a:6b:6c:24:5c:bb:c3:52:1b:42:f3:c3:2f:5b:78:c3:63:9b: a2:41:50:1d:36:45:11:7f:91:b6:66:b9:50:37:86:2c:33:6a: 05:4a:3a:b8:23:14:fb:07:29:8f:34:d0:e7:be:00:1a:f0:41: 2b:ff:a7:d7:e6:82:3a:73:d6:88:25:8d:e9:4a:fc:7b:a7:d8: cb:70:1a:f1:95:68:1a:45:91:df:6e:24:50:b7:04:e5:16:34: 89:52:f8:58:69:f5:e2:43:cf:d8:e6:80:df:35:ef:35:ad:22: 51:e2:f6:19:41:dd:ec:46:a9:3e:57:bc:2e:66:e7:3f:43:c7: fe:e1:ed:64:e7:59:d5:d2:b4:33:e8:df:75:2c:df:ed:fd:43: d3:2f:3e:90:2f:12:5b:ad:e7:1e:30:97:8c:21:ec:3d:78:b4: 7c:0d:d2:31:1f:5d:7e:b0:0e:6a:65:0d:03:bd:10:e2:13:68: b9:0d:83:23:dd:c4:f0:0b:e4:d0:7f:fe:3d:0b:c7:fb:b1:61: e1:ad:e3:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUwNTExMDE1MjA1WhcNMjUwNTE4MDE1MjA1WjAYMRYwFAYD VQQDEw02ODIwMDJjNS1mYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlIzmAYnWrSN9s6g7N23D5Xp9ruejBn0GjNnQHLpjcjhiRjDOeDPW/ptL3dgW DvSyFSVLorL6Izg5FKIxo2i96sL2NzV/EgQuf3IM9r5UnJM9qrELgF4o29bAREro uxNHq7wkLKEhq2fj4IBeYpnspWCRCjjBE9AtNlAVvbpIudxoNVQ2x51k8zjiCd33 ktDhxxS1HtqBXdTRdkwY88COg3epxhbvNtKEdbnWCvt1b6YdpiQUiwG/3XaO3VWH UK000aSqKPGwoBnSfKLNHzwboVEGt8mAqCMVggsBWHhE32dNoOTFttACy7kOw+9g jO3ZwbQt89D6r99xgGpUqKq1FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8mcEP4 kfXZpe5ujjdfn0iW8WXyMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1XtRc2RlPI40GhbBetnvNZKOK03ocxaG39qoqhxmMWeZzNRwNUadn HdOm7VVjMxyinxq9LVVaa2wkXLvDUhtC88MvW3jDY5uiQVAdNkURf5G2ZrlQN4Ys M2oFSjq4IxT7BymPNNDnvgAa8EEr/6fX5oI6c9aIJY3pSvx7p9jLcBrxlWgaRZHf biRQtwTlFjSJUvhYafXiQ8/Y5oDfNe81rSJR4vYZQd3sRqk+V7wuZuc/Q8f+4e1k 51nV0rQz6N91LN/t/UPTLz6QLxJbreceMJeMIew9eLR8DdIxH11+sA5qZQ0DvRDi E2i5DYMj3cTwC+TQf/49C8f7sWHhreP4 -----END CERTIFICATE-----Generated at Mon May 12 04:32:53 2025 by rpki-client