$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: VOF+KoSEgDCeqlkfNPwy7IZb6RNi/KPASBjj5Ox7H38= Subject key identifier: 6C:90:7F:57:4A:13:38:9B:CA:BE:99:4C:2F:7E:BB:68:04:69:24:86 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 01C8 Signing time: Mon 05 May 2025 01:57:40 +0000 Manifest this update: Mon 05 May 2025 01:57:39 +0000 Manifest next update: Mon 12 May 2025 01:57:39 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: QVyBj2zlZEzwEFPU4KJff4emCeGCabmfXyiWGlFgP8I=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: mzTY+yHaxiOoTmhIGnRxe8TteP35OSc9TDFULhxG7es=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: TCA2TacY4ZsDEXX4IqBFag6vpZrZlhAMEJDWvtGJDWs=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Tjdi12mwJxE8vytdEEm6LYs9NXU4cX9jhBUfI2VO1fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 01:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: May 5 01:57:39 2025 GMT Not After : May 12 01:57:39 2025 GMT Subject: CN=68181b13-4210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:62:c3:1d:0c:59:86:8c:e0:14:f1:af:06: 1c:fb:9d:34:88:89:cc:24:ba:9a:6d:34:32:38:40: 2a:05:67:71:bb:1b:27:36:73:81:5f:54:b5:a2:4d: ec:5d:4c:2a:57:b1:81:64:11:44:e8:e3:dc:82:9c: 7b:21:17:af:61:19:a2:31:96:b5:9d:9d:90:ca:9a: 9e:22:f7:b6:ba:96:fe:a9:df:3f:9d:09:57:b3:7d: 69:d6:1d:e3:55:38:94:73:d3:2c:63:c6:65:08:03: 7f:a3:76:40:fd:83:04:3b:eb:e9:db:5f:bc:1d:e5: 50:9f:cd:86:ae:b0:33:4e:04:64:7a:d1:1b:00:cb: a1:21:17:cb:59:c6:e7:73:1c:87:40:48:a2:06:1d: cf:85:7d:06:25:c8:5b:ec:55:7a:d4:a8:c1:95:52: ed:a5:b8:1a:10:0b:e2:84:7e:66:23:21:47:26:10: 0a:29:1a:b2:07:3a:2d:47:33:bd:1b:e6:5a:40:af: cd:b3:49:b3:b2:5e:62:9d:b1:c1:c2:97:64:d5:3f: 6d:3e:1d:5e:1c:51:46:09:03:f9:8b:2a:e0:d1:a0: 03:08:88:ea:e1:58:80:07:11:e8:1d:e1:2f:d2:87: a7:ed:8c:df:b2:64:35:f8:c1:cb:a3:3c:27:cd:b5: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:90:7F:57:4A:13:38:9B:CA:BE:99:4C:2F:7E:BB:68:04:69:24:86 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:30:76:fc:a4:1c:b4:d6:2a:97:85:1e:c2:32:52:5a:aa:d2: d2:66:fe:8d:89:e8:53:82:09:2e:fe:9f:bf:4d:8f:ea:8a:be: 07:e0:7a:3b:1c:ed:f8:a8:0e:ff:01:be:ea:a4:ee:97:30:90: e2:42:ed:ad:0b:22:6e:a2:38:75:a7:5f:72:6d:45:30:0d:35: 9a:da:4e:2e:4a:da:c0:7e:38:52:68:06:15:c6:ab:5c:44:9a: f1:df:28:e7:41:b8:c9:5e:e7:de:62:c3:f0:1e:4e:17:b1:65: 89:6d:e9:fb:60:d1:22:53:44:8b:84:d8:37:d3:1e:09:96:5e: 14:e7:ca:5c:2e:31:19:3a:1b:65:c8:89:af:f9:8a:34:e2:18: a3:f2:03:d5:a9:33:30:f5:e2:d6:e2:fd:a5:28:4d:59:10:e7: 02:25:f2:4a:a0:83:99:39:f8:16:be:2a:ea:82:67:dc:9c:ae: ae:6f:63:57:cd:66:70:c2:25:cb:20:bc:7e:85:59:60:0c:ec: 7b:d6:46:85:7b:dd:fe:e8:f1:ca:d7:45:11:52:82:c1:ad:70: b4:cf:0e:d1:b1:36:2a:76:3e:44:13:ed:8e:ff:52:71:da:83: d7:0a:bb:2d:51:2b:bd:72:75:b1:14:e2:17:e6:5e:87:a2:89: ec:a5:2c:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUwNTA1MDE1NzM5WhcNMjUwNTEyMDE1NzM5WjAYMRYwFAYD VQQDEw02ODE4MWIxMy00MjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooRiwx0MWYaM4BTxrwYc+500iInMJLqabTQyOEAqBWdxuxsnNnOBX1S1ok3s XUwqV7GBZBFE6OPcgpx7IRevYRmiMZa1nZ2QypqeIve2upb+qd8/nQlXs31p1h3j VTiUc9MsY8ZlCAN/o3ZA/YMEO+vp21+8HeVQn82GrrAzTgRketEbAMuhIRfLWcbn cxyHQEiiBh3PhX0GJchb7FV61KjBlVLtpbgaEAvihH5mIyFHJhAKKRqyBzotRzO9 G+ZaQK/Ns0mzsl5inbHBwpdk1T9tPh1eHFFGCQP5iyrg0aADCIjq4ViABxHoHeEv 0oen7YzfsmQ1+MHLozwnzbV1WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyQf1dK Ezibyr6ZTC9+u2gEaSSGMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCMHb8pBy01iqXhR7CMlJaqtLSZv6NiehTggku/p+/TY/qir4H4Ho7 HO34qA7/Ab7qpO6XMJDiQu2tCyJuojh1p19ybUUwDTWa2k4uStrAfjhSaAYVxqtc RJrx3yjnQbjJXufeYsPwHk4XsWWJben7YNEiU0SLhNg30x4Jll4U58pcLjEZOhtl yImv+Yo04hij8gPVqTMw9eLW4v2lKE1ZEOcCJfJKoIOZOfgWvirqgmfcnK6ub2NX zWZwwiXLILx+hVlgDOx71kaFe93+6PHK10URUoLBrXC0zw7RsTYqdj5EE+2O/1Jx 2oPXCrstUSu9cnWxFOIX5l6HoonspSxN -----END CERTIFICATE-----Generated at Mon May 5 12:52:51 2025 by rpki-client