$ rpki-client -vvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json) Hash identifier: qi/FPKpqTKc9NiFxLKK0kFsjB6Dom5mKFzHdVD9LVZY= Subject key identifier: 34:7B:79:4E:8D:EE:29:D5:F7:8B:FD:19:61:A3:ED:A6:A2:53:A0:16 Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft Manifest number: 057E Signing time: Sun 04 May 2025 22:54:55 +0000 Manifest this update: Sun 04 May 2025 22:54:54 +0000 Manifest next update: Sun 11 May 2025 22:54:54 +0000 Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: 2xBkyOltiIytlNmTsW/Qz+2cU6v8wSjz9cUEVf2x7LA=) 2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: QfVYtd7FvBpsR5Tca8bnLg+O7UqwB1xI72oRETrqTpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Validity Not Before: May 4 22:54:54 2025 GMT Not After : May 11 22:54:54 2025 GMT Subject: CN=6817f03f-f4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:ad:bd:1e:e9:73:68:9c:27:03:12:ab:bd: 69:62:09:34:43:3f:f3:fe:3f:a1:72:11:b4:bf:0b: 3a:46:5f:43:4f:82:66:51:d7:21:c1:c4:88:b3:73: aa:c6:a4:83:9c:46:a9:51:f2:86:5f:b4:00:c7:c0: 52:91:20:e6:9e:95:f3:b9:b4:22:e4:57:ff:3c:6f: 0d:e1:cd:a4:7f:f3:b0:e6:a7:a6:5c:59:d4:1b:a5: aa:20:50:e5:12:7f:d8:b2:fd:e5:83:0e:88:50:df: fa:5c:1d:61:d3:4d:bc:30:da:20:20:a0:80:ba:48: 5d:5f:91:33:52:0e:dd:b1:49:e7:93:aa:64:55:10: 40:14:51:ab:ca:94:74:f9:82:b8:ed:0b:fa:de:d0: b9:12:12:38:ea:51:59:8e:a9:2f:fc:ac:04:e4:3c: d1:9a:7b:32:bf:ac:ee:97:0d:38:0e:50:bd:de:15: e8:bf:df:1a:01:32:2e:c4:24:d5:18:6f:5d:4a:d1: 8c:cd:f5:40:41:94:8c:27:16:44:3b:4f:a4:fe:ec: 40:56:06:8a:49:5a:4c:13:94:40:85:8d:99:26:98: ef:4b:6a:82:7d:f9:21:db:ff:ff:4f:18:a8:c9:66: e6:d0:64:1f:c2:c8:7b:2d:7a:8e:f4:0b:f9:64:a2: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7B:79:4E:8D:EE:29:D5:F7:8B:FD:19:61:A3:ED:A6:A2:53:A0:16 X509v3 Authority Key Identifier: keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9a:9e:82:72:6b:d1:01:2e:59:56:2a:1f:7b:59:16:dd:19: 71:3b:2a:51:f6:86:0b:47:d8:db:21:dd:0a:91:e2:84:36:3e: 5a:35:d9:d3:a1:28:f5:e7:61:26:52:6b:80:15:fb:35:83:47: 25:16:60:b7:e9:f1:dc:5e:bb:44:15:e9:d6:72:cf:22:19:f5: 5e:58:ee:c5:21:51:4b:36:85:35:33:22:99:70:bc:ad:08:5b: b9:0b:98:c7:74:c3:37:17:6a:0f:ad:6e:9d:e8:40:3a:d4:a8: d4:74:45:70:b4:52:6a:eb:d9:91:d3:b6:4e:7e:15:f7:1b:d5: 16:1c:fa:71:82:72:3e:3b:fc:a1:2b:2c:75:a1:50:6f:9e:ed: 60:a7:65:cf:cc:c0:4a:64:70:d6:3f:36:43:67:33:93:1b:9c: e2:45:b6:cb:4c:17:00:d7:3f:09:14:09:b2:f5:eb:a3:71:74: d5:f7:30:01:cc:69:d8:d4:b3:6e:ef:c2:83:89:b2:ce:55:88: 84:c2:ee:57:e2:72:05:3f:8a:24:1c:29:d8:ed:45:55:b2:c4: 7d:ae:e4:04:f2:7c:79:55:ab:65:09:44:86:0c:3d:55:98:ee: 08:56:40:19:5b:76:a8:19:09:be:f7:69:aa:e1:cc:85:a4:d6: 11:d1:dc:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOUYxMTAvBgNVBAUTKDhCNTdERDE2QkQ5N0ZCNUJGQzIxRDlDQ0E5RTJCODZE NTUwMkUyODgwHhcNMjUwNTA0MjI1NDU0WhcNMjUwNTExMjI1NDU0WjAYMRYwFAYD VQQDEw02ODE3ZjAzZi1mNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTqtvR7pc2icJwMSq71pYgk0Qz/z/j+hchG0vws6Rl9DT4JmUdchwcSIs3Oq xqSDnEapUfKGX7QAx8BSkSDmnpXzubQi5Ff/PG8N4c2kf/Ow5qemXFnUG6WqIFDl En/Ysv3lgw6IUN/6XB1h0028MNogIKCAukhdX5EzUg7dsUnnk6pkVRBAFFGrypR0 +YK47Qv63tC5EhI46lFZjqkv/KwE5DzRmnsyv6zulw04DlC93hXov98aATIuxCTV GG9dStGMzfVAQZSMJxZEO0+k/uxAVgaKSVpME5RAhY2ZJpjvS2qCffkh2///Txio yWbm0GQfwsh7LXqO9Av5ZKL3JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR7eU6N 7inV94v9GWGj7aaiU6AWMB8GA1UdIwQYMBaAFItX3Ra9l/tb/CHZzKniuG1VAuKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5Ri8zQkU1NDlDRUQ2 NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0xdjhJZG5NcWVLNGJWVUM0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kxZmRGcjJYLTF2OElkbk1xZUs0YlZVQzRvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5Ri8zQkU1NDlDRUQ2NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0x djhJZG5NcWVLNGJWVUM0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANmp6CcmvRAS5ZViofe1kW3RlxOypR9oYLR9jbId0KkeKENj5aNdnT oSj152EmUmuAFfs1g0clFmC36fHcXrtEFenWcs8iGfVeWO7FIVFLNoU1MyKZcLyt CFu5C5jHdMM3F2oPrW6d6EA61KjUdEVwtFJq69mR07ZOfhX3G9UWHPpxgnI+O/yh Kyx1oVBvnu1gp2XPzMBKZHDWPzZDZzOTG5ziRbbLTBcA1z8JFAmy9eujcXTV9zAB zGnY1LNu78KDibLOVYiEwu5X4nIFP4okHCnY7UVVssR9ruQE8nx5VatlCUSGDD1V mO4IVkAZW3aoGQm+92mq4cyFpNYR0dx/ -----END CERTIFICATE-----Generated at Wed May 7 00:13:19 2025 by rpki-client