$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft File: iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json) Hash identifier: lLlP+CmLixVzp7HNYdm6NH25sNgWzU07g1NxeExQisI= Subject key identifier: C5:8E:12:EA:66:88:90:4B:7F:3B:FD:54:8E:EB:CE:84:66:71:DB:69 Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 Certificate issuer: /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft Manifest number: 14 Signing time: Thu 15 May 2025 07:19:23 +0000 Manifest this update: Thu 15 May 2025 07:19:22 +0000 Manifest next update: Thu 22 May 2025 07:19:22 +0000 Files and hashes: 1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: w5LqK4U3TzXXm9A/yO2LsW1ZD2EQMb3axVxzUaGCrG4=) 2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: v93VVwAanSucSOqj9EwS1pD5Lqih1cuGiSwwM282Dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Validity Not Before: May 15 07:19:22 2025 GMT Not After : May 22 07:19:22 2025 GMT Subject: CN=6825957a-a1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:d6:c3:be:06:bf:c3:6c:e3:5c:91:cb:07: 0c:66:d6:8e:1c:e1:d2:96:77:ec:5f:2a:39:36:63: fb:b1:a9:1c:66:f6:57:d1:9d:43:7c:cb:ff:a8:f7: 8f:80:1d:e4:a6:ec:f8:38:b0:00:91:b6:2f:c8:45: 1f:ff:ce:97:f4:cd:f1:09:d7:27:41:cc:d9:8f:75: fd:2f:98:6c:8d:f3:a6:e9:28:a3:dc:a9:02:b7:55: f3:f3:98:45:1b:3e:d5:89:99:d2:29:33:dc:63:04: 93:3d:ca:bb:5b:ac:55:a1:ce:8c:14:59:1e:68:8a: fb:8e:43:1c:61:c8:40:b5:fa:11:cb:36:de:80:a8: 1c:86:5e:14:5e:f1:92:70:b3:bb:21:a0:84:f3:fe: 5f:2a:05:a6:49:12:24:c8:e0:d7:2a:76:94:b6:bc: 3d:97:9b:18:28:aa:32:df:0c:55:04:3f:e9:28:90: 18:61:0a:ac:ff:75:1a:5c:be:56:f8:83:d4:a6:92: 8c:5c:69:e3:33:b5:1c:9a:03:50:c0:38:6f:2f:d4: 7b:f7:0e:f4:3b:ca:c0:45:b3:99:3e:6f:7c:ea:b8: 6c:b6:65:9b:ca:d8:d7:df:9b:4d:27:d1:bc:e3:57: 57:c4:bb:8f:6e:89:c5:e5:d8:6b:71:0a:60:0a:5a: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8E:12:EA:66:88:90:4B:7F:3B:FD:54:8E:EB:CE:84:66:71:DB:69 X509v3 Authority Key Identifier: keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:6b:b2:3e:93:65:1e:3e:b9:53:01:e0:01:3d:d5:6c:a3:6f: 75:00:75:5e:09:c9:d4:51:61:ec:47:70:b6:df:2e:dd:9c:25: f5:2a:57:7e:fe:5b:85:f2:77:b5:f0:11:b7:b9:fd:97:17:37: 17:30:ca:9b:1e:5b:34:94:15:bd:aa:9a:cf:88:31:fb:14:60: ad:ae:d7:bf:be:79:0c:5f:56:c1:95:3d:a9:3d:79:24:b1:a5: 64:ea:5a:4c:16:8c:42:21:09:9b:f0:4b:61:bb:27:f9:54:e2: 49:55:77:1d:db:f4:88:34:c3:48:31:a0:a3:b3:ef:ff:24:c6: 9e:3b:09:0f:5a:77:7e:15:38:64:d2:44:46:32:99:08:00:7e: e2:89:46:77:04:00:d6:6e:f9:62:6c:35:53:f4:5a:10:56:06: 48:b1:bf:4b:94:d7:dd:23:98:91:87:7f:81:93:6e:bc:69:1b: 8b:62:19:41:47:2a:1c:dc:9b:b2:19:55:4f:59:72:fe:65:d1: d0:f8:42:0e:1a:39:e8:2d:1b:f3:b6:06:ba:5e:8f:0f:93:9e: 98:7a:ce:48:86:be:61:1c:59:c7:ae:f9:7c:ec:e3:08:18:a3: 20:32:0d:16:89:1a:a8:1e:23:70:eb:eb:41:d5:56:a4:ad:45: d4:91:53:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoODg5MTk1MzhFRURFQzgzMjBENUVBRjZCMUYzMkIyOTgy M0FCNzgxMDAeFw0yNTA1MTUwNzE5MjJaFw0yNTA1MjIwNzE5MjJaMBgxFjAUBgNV BAMTDTY4MjU5NTdhLWExYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx4NbDvga/w2zjXJHLBwxm1o4c4dKWd+xfKjk2Y/uxqRxm9lfRnUN8y/+o94+A HeSm7Pg4sACRti/IRR//zpf0zfEJ1ydBzNmPdf0vmGyN86bpKKPcqQK3VfPzmEUb PtWJmdIpM9xjBJM9yrtbrFWhzowUWR5oivuOQxxhyEC1+hHLNt6AqByGXhRe8ZJw s7shoITz/l8qBaZJEiTI4NcqdpS2vD2XmxgoqjLfDFUEP+kokBhhCqz/dRpcvlb4 g9SmkoxcaeMztRyaA1DAOG8v1Hv3DvQ7ysBFs5k+b3zquGy2ZZvK2Nffm00n0bzj V1fEu49uicXl2GtxCmAKWlMRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxY4S6maI kEt/O/1UjuvOhGZx22kwHwYDVR0jBBgwFoAUiJGVOO7eyDINXq9rHzKymCOreBAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzA0OTg2NDc2MTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVC QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaUpHVk9PN2V5RElOWHE5ckh6S3ltQ09yZUJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzA0OTg2NDc2MTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJ TlhxOXJIekt5bUNPcmVCQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGFrsj6TZR4+uVMB4AE91Wyjb3UAdV4JydRRYexHcLbfLt2cJfUqV37+ W4Xyd7XwEbe5/ZcXNxcwypseWzSUFb2qms+IMfsUYK2u17++eQxfVsGVPak9eSSx pWTqWkwWjEIhCZvwS2G7J/lU4klVdx3b9Ig0w0gxoKOz7/8kxp47CQ9ad34VOGTS REYymQgAfuKJRncEANZu+WJsNVP0WhBWBkixv0uU190jmJGHf4GTbrxpG4tiGUFH Khzcm7IZVU9Zcv5l0dD4Qg4aOegtG/O2Brpejw+Tnph6zkiGvmEcWceu+Xzs4wgY oyAyDRaJGqgeI3Dr60HVVqStRdSRU+s= -----END CERTIFICATE-----Generated at Fri May 16 03:14:59 2025 by rpki-client