$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft File: Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json) Hash identifier: dThZ09uUlT0K5bSF+jssfOrTdXJC2tON5gU1A/WCpUU= Subject key identifier: 0E:94:FB:FC:08:32:4C:D4:6D:9E:B0:09:21:7C:EC:E1:2D:6B:81:1C Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F Certificate issuer: /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft Manifest number: 3484 Signing time: Sun 04 May 2025 15:15:55 +0000 Manifest this update: Sun 04 May 2025 15:15:55 +0000 Manifest next update: Sun 11 May 2025 15:15:55 +0000 Files and hashes: 1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: GCPM9f8W+Ksus3b6hDSqY/X+yQCcpWYhAlA7mKYzyIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Validity Not Before: May 4 15:15:55 2025 GMT Not After : May 11 15:15:55 2025 GMT Subject: CN=681784ab-fc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:58:04:16:6e:90:73:83:d0:5b:56:b8:26: d4:60:6b:19:47:87:80:b3:3b:0f:c9:e6:bc:fb:5f: 29:26:4d:f7:e8:e7:ff:3f:b4:ca:e3:9f:0a:56:da: e3:8c:9a:1c:d7:33:37:ac:30:3a:60:30:7c:a7:16: 89:08:a2:16:26:de:ec:12:a4:3b:cc:55:30:59:ba: d8:37:18:bc:d4:42:d8:d2:63:68:9d:40:93:57:6b: bd:b5:19:2b:b6:1d:0e:01:bb:99:fd:16:6d:59:b2: c9:76:df:71:9f:2d:df:1d:96:43:79:cc:e8:58:00: aa:8a:44:3d:f9:2a:7e:c5:25:6f:6c:f4:27:18:6a: 0b:5f:26:36:70:ff:f9:0b:fb:52:5e:2d:d0:40:8d: 26:56:b5:45:04:2b:f0:61:ee:0b:0a:f7:45:00:58: d2:bc:73:0b:1d:d7:7e:11:8a:3a:49:51:db:fc:f4: 61:27:37:42:49:04:35:cf:cf:a5:f0:60:ce:73:e9: a9:b2:e6:45:ad:a2:58:4d:01:f6:85:6a:bf:1a:d4: 2c:b3:2f:83:b5:de:ac:f6:a2:d1:b1:8d:6a:59:62: 4c:d1:25:68:9f:b0:92:81:1e:9e:d1:33:49:06:34: cc:dd:51:cb:0a:80:28:8e:3a:31:7f:2a:db:43:86: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:94:FB:FC:08:32:4C:D4:6D:9E:B0:09:21:7C:EC:E1:2D:6B:81:1C X509v3 Authority Key Identifier: keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:6b:6b:86:c4:a8:f8:b5:90:38:f5:05:31:5e:5e:9a:cd:33: e6:8b:eb:dc:99:38:a3:52:62:c2:ec:53:e5:14:a0:2a:98:7a: 1e:db:ae:bc:de:26:fb:07:95:6f:a3:a7:9d:b5:85:18:b3:c9: 7b:3c:a0:39:48:2b:ff:e3:3a:7c:6a:49:70:2d:6d:0f:24:ef: d1:05:af:a0:6c:1e:78:93:df:aa:54:53:a9:95:52:b8:e0:64: 4e:ca:34:dc:67:c4:e0:70:f4:af:9c:5b:f2:04:99:55:07:03: ca:9e:40:9b:94:4c:92:f5:a8:29:88:d2:ac:2a:95:d8:c7:b9: ee:56:34:61:98:35:85:ac:59:b8:03:43:ea:97:29:59:92:c6: 66:1e:64:b4:c7:aa:d7:b6:39:e2:7a:03:af:42:6d:ba:36:5d: 4f:15:2b:5c:e1:a2:5c:03:f0:e8:33:3c:3f:8d:10:34:77:70: 34:70:19:84:a2:0f:53:80:c9:89:81:01:7c:44:8b:58:e9:61: 39:71:70:03:71:b4:16:2c:29:a6:70:07:c7:57:77:d5:2b:ec: c0:10:8b:f0:67:e2:68:49:05:cf:00:fc:41:84:8a:33:41:de: 73:46:66:12:ea:5c:d1:87:1f:e6:3f:d1:3d:f4:cb:ec:ef:36: 53:f0:38:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex QjBGODlCNkYwHhcNMjUwNTA0MTUxNTU1WhcNMjUwNTExMTUxNTU1WjAYMRYwFAYD VQQDEw02ODE3ODRhYi1mYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GJYBBZukHOD0FtWuCbUYGsZR4eAszsPyea8+18pJk336Of/P7TK458KVtrj jJoc1zM3rDA6YDB8pxaJCKIWJt7sEqQ7zFUwWbrYNxi81ELY0mNonUCTV2u9tRkr th0OAbuZ/RZtWbLJdt9xny3fHZZDeczoWACqikQ9+Sp+xSVvbPQnGGoLXyY2cP/5 C/tSXi3QQI0mVrVFBCvwYe4LCvdFAFjSvHMLHdd+EYo6SVHb/PRhJzdCSQQ1z8+l 8GDOc+mpsuZFraJYTQH2hWq/GtQssy+Dtd6s9qLRsY1qWWJM0SVon7CSgR6e0TNJ BjTM3VHLCoAojjoxfyrbQ4ayzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6U+/wI MkzUbZ6wCSF87OEta4EcMB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYa2uGxKj4tZA49QUxXl6azTPmi+vcmTijUmLC7FPlFKAqmHoe2668 3ib7B5Vvo6edtYUYs8l7PKA5SCv/4zp8aklwLW0PJO/RBa+gbB54k9+qVFOplVK4 4GROyjTcZ8TgcPSvnFvyBJlVBwPKnkCblEyS9agpiNKsKpXYx7nuVjRhmDWFrFm4 A0PqlylZksZmHmS0x6rXtjniegOvQm26Nl1PFStc4aJcA/DoMzw/jRA0d3A0cBmE og9TgMmJgQF8RItY6WE5cXADcbQWLCmmcAfHV3fVK+zAEIvwZ+JoSQXPAPxBhIoz Qd5zRmYS6lzRhx/mP9E99Mvs7zZT8Dhd -----END CERTIFICATE-----Generated at Mon May 5 04:35:49 2025 by rpki-client