$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: u7nU41rKnKmGC73ms7IV+ZYcjuWrijbQYn5Hud8LVLs= Subject key identifier: 5E:4A:C5:4E:35:B4:6C:1D:4D:01:2B:D2:70:22:12:97:C2:DD:1B:E8 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 0128 Signing time: Sun 11 May 2025 03:31:02 +0000 Manifest this update: Sun 11 May 2025 03:31:01 +0000 Manifest next update: Sun 18 May 2025 03:31:01 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: Wtj5sNBTu7Lhat5Q3to61XnCWtL4ko49l5Nc9I/oEmQ=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: YEagGQfd4UV4nz53l/WybeYAt4w6+zm6QyFgV48pGBc=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: zzpFcIYATvvz+ehYyoXcGsAYVOBFYBXyZDv/oX18Mx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: May 11 03:31:01 2025 GMT Not After : May 18 03:31:01 2025 GMT Subject: CN=682019f6-6950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:1e:95:1f:4f:1f:5b:44:ef:b6:19:37:95: c7:97:c5:08:42:2d:8c:64:39:09:03:a4:bc:d2:a8: 9a:31:98:1d:e8:eb:0d:d6:1d:b7:32:29:14:4b:de: 46:a3:ff:36:4e:78:3e:57:f2:7c:08:31:0b:3f:bb: 0f:80:43:7a:99:26:68:b3:29:67:32:11:71:46:4f: d1:9a:6e:b6:7d:1f:a3:3c:f3:d7:35:da:42:33:09: b0:00:59:44:ea:7f:c0:ce:12:3d:70:50:1e:f4:98: 0c:61:a0:70:99:44:4e:71:79:b8:c8:9c:e8:a5:70: e3:2d:ae:6a:b5:3c:2a:8a:ae:5a:0f:b4:b4:cf:14: 87:9d:0f:4a:7c:3b:61:ef:51:a9:49:68:17:14:b5: 8a:e9:95:58:a4:3a:fb:6c:bd:a6:1d:c6:fa:c0:f7: 94:69:ed:1c:af:fa:8e:b7:02:10:8d:d7:21:74:b8: 25:48:98:10:68:0b:68:91:f7:43:be:ef:c1:00:95: ea:6a:48:43:68:ad:10:56:4d:dc:b8:de:43:be:59: 00:a2:46:fb:ff:87:5a:07:a6:b9:85:e4:fd:f8:51: c9:f6:9e:0f:88:53:68:96:4c:47:c5:4d:cb:8b:55: aa:c9:d0:2f:a7:43:20:65:bc:8c:ac:5f:67:89:e2: d1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4A:C5:4E:35:B4:6C:1D:4D:01:2B:D2:70:22:12:97:C2:DD:1B:E8 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:71:39:65:96:83:94:2f:bc:e0:d2:86:aa:f1:74:80:9a:82: 69:58:c7:40:03:2f:4d:7e:70:d8:0e:b9:6b:58:cd:b5:3f:cf: c8:19:10:c9:ba:0a:ff:45:8c:8e:a7:c7:1a:7c:11:37:1b:bd: 17:e0:f1:aa:92:ae:d5:27:61:f9:52:44:4d:c1:7d:15:ed:7e: 06:19:4b:5a:33:20:1d:6d:d9:35:a6:59:b7:dc:33:74:29:c4: ea:eb:b5:4c:22:39:42:32:ca:5f:c5:61:27:23:a7:f2:ac:a8: 93:f9:e9:56:e9:de:7b:94:39:76:65:68:f8:37:3a:bf:1f:3a: 0c:1c:5d:e3:7e:5f:3c:39:a3:1f:9d:f8:df:e1:19:89:be:ce: 35:40:4c:c8:19:09:4e:68:e6:81:b8:8d:85:2f:87:63:7a:f2: f9:80:0e:51:58:3b:00:63:e2:af:75:7c:78:23:2b:57:38:46: d1:cc:a1:46:2f:d4:83:06:88:a4:28:e4:58:5c:3e:32:2c:d6: 8f:6a:4a:b9:2f:45:27:49:ea:5b:37:bf:d3:4f:74:34:06:26: 98:61:67:be:f3:05:f1:db:de:a3:f2:16:e0:e0:ec:a6:55:bb: 86:1f:c7:64:2b:79:c6:7d:c5:70:8f:a8:40:73:32:38:6a:5a: 3f:fd:a7:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUwNTExMDMzMTAxWhcNMjUwNTE4MDMzMTAxWjAYMRYwFAYD VQQDEw02ODIwMTlmNi02OTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxygelR9PH1tE77YZN5XHl8UIQi2MZDkJA6S80qiaMZgd6OsN1h23MikUS95G o/82Tng+V/J8CDELP7sPgEN6mSZosylnMhFxRk/Rmm62fR+jPPPXNdpCMwmwAFlE 6n/AzhI9cFAe9JgMYaBwmUROcXm4yJzopXDjLa5qtTwqiq5aD7S0zxSHnQ9KfDth 71GpSWgXFLWK6ZVYpDr7bL2mHcb6wPeUae0cr/qOtwIQjdchdLglSJgQaAtokfdD vu/BAJXqakhDaK0QVk3cuN5DvlkAokb7/4daB6a5heT9+FHJ9p4PiFNolkxHxU3L i1WqydAvp0MgZbyMrF9nieLR7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5KxU41 tGwdTQEr0nAiEpfC3RvoMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBcTllloOUL7zg0oaq8XSAmoJpWMdAAy9NfnDYDrlrWM21P8/IGRDJ ugr/RYyOp8cafBE3G70X4PGqkq7VJ2H5UkRNwX0V7X4GGUtaMyAdbdk1plm33DN0 KcTq67VMIjlCMspfxWEnI6fyrKiT+elW6d57lDl2ZWj4Nzq/HzoMHF3jfl88OaMf nfjf4RmJvs41QEzIGQlOaOaBuI2FL4djevL5gA5RWDsAY+KvdXx4IytXOEbRzKFG L9SDBoikKORYXD4yLNaPakq5L0UnSepbN7/TT3Q0BiaYYWe+8wXx296j8hbg4Oym VbuGH8dkK3nGfcVwj6hAczI4alo//ac9 -----END CERTIFICATE-----Generated at Sun May 11 22:11:13 2025 by rpki-client