$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft File: Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json) Hash identifier: lynE39m8ulTBIA3XFUFVFLuxIafBH74vjw0caVcycTY= Subject key identifier: EF:5A:2D:7D:9E:EE:6D:76:CA:66:A0:C8:B3:FE:E0:3E:E2:79:5B:12 Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft Manifest number: 0317 Signing time: Sun 11 May 2025 00:45:45 +0000 Manifest this update: Sun 11 May 2025 00:45:44 +0000 Manifest next update: Sun 18 May 2025 00:45:44 +0000 Files and hashes: 1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: T9ne4VuyyPDZVsSpBAjmVsHCghrC53torRLwO0S2NNw=) 2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Validity Not Before: May 11 00:45:44 2025 GMT Not After : May 18 00:45:44 2025 GMT Subject: CN=681ff338-a1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3c:61:4d:c9:e5:5c:a2:0a:23:17:73:79:b6: 12:29:80:da:fb:03:77:2a:2c:0b:a0:a8:57:a6:6a: 41:fc:2e:9c:2f:3d:f9:d9:41:3b:a0:6a:4c:44:87: dd:39:87:5d:18:5e:68:19:00:34:04:8f:5c:ab:d5: 39:b9:64:a0:22:74:b8:21:6b:d6:fb:84:af:b7:98: 7d:61:4c:99:19:da:a5:92:c7:ce:57:8d:ab:5f:7f: 42:e1:39:dd:f3:1c:17:af:1d:bf:6f:0d:f7:7a:48: 00:a5:8e:0a:f5:d6:d7:e3:17:65:8f:bf:a5:25:f3: 51:e4:6d:ed:70:ad:c9:e0:ab:f2:e8:ce:19:2b:3e: 84:e8:dc:9f:c4:5c:56:8e:22:7a:be:52:12:8e:4a: 9f:bd:36:fa:83:a0:82:96:a3:00:1a:87:bc:4d:27: 6c:be:80:78:67:12:c5:eb:6b:46:43:b2:fa:79:9a: 4a:82:a1:67:bf:2f:04:46:a1:c9:18:06:08:ad:6f: d6:d9:65:1b:23:ed:f9:5f:1a:8a:03:6b:44:bc:b6: 57:3c:01:37:6a:a3:83:b2:3a:73:77:8e:45:cc:05: b5:ae:b6:9e:9c:41:88:76:64:7c:f6:10:96:19:2a: 0e:bb:ff:49:f8:fe:14:dd:44:2c:68:f7:43:75:97: a8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5A:2D:7D:9E:EE:6D:76:CA:66:A0:C8:B3:FE:E0:3E:E2:79:5B:12 X509v3 Authority Key Identifier: keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:21:e3:f5:c2:5b:c8:9f:02:41:37:81:a9:24:78:c3:bc:95: 4f:7b:53:e3:03:a6:ab:3e:0d:e0:2b:ca:83:ab:e6:c5:a5:db: 4c:e4:9e:7c:94:f4:5d:ad:53:9f:fa:8d:1c:7b:ab:92:48:ee: b8:8c:63:d5:20:6e:15:6e:58:ee:3c:24:20:b4:e8:b7:ee:fc: 63:57:bb:c9:b3:04:15:42:57:50:f0:f7:fc:59:34:02:7f:bc: 8f:03:f7:06:b4:64:31:3e:01:aa:e0:b5:a8:48:64:14:0c:02: 7e:54:d4:f9:fa:50:d7:13:ff:eb:fc:6a:eb:30:52:09:3d:96: ac:fb:77:1a:45:ce:d9:6e:1d:9a:d6:9b:3b:01:2d:85:3e:60: 84:d0:e1:ba:49:ac:53:5c:8d:91:f7:3b:18:b3:47:46:18:82: 50:aa:5f:ac:f1:a1:7c:29:ac:07:56:7f:b9:56:2b:c0:9c:6b: bc:50:58:1c:c9:05:4f:ff:85:e9:c6:a4:41:93:39:de:c5:fc: ee:85:4b:44:3f:3c:5d:32:91:58:f8:de:e4:66:47:08:15:17: 2f:3f:e2:a9:a3:87:a0:b7:d7:4d:25:16:84:e1:23:06:1f:65: 79:bf:ed:92:9c:08:ff:66:19:d2:04:c9:4a:6b:e2:2d:8b:93: 61:79:03:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDIyNkY3Mjg5RDRFMzdGRUNFMjI2MEM2NEQzQkNCQTdB QzAzMTVBNzUwHhcNMjUwNTExMDA0NTQ0WhcNMjUwNTE4MDA0NTQ0WjAYMRYwFAYD VQQDEw02ODFmZjMzOC1hMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zxhTcnlXKIKIxdzebYSKYDa+wN3KiwLoKhXpmpB/C6cLz352UE7oGpMRIfd OYddGF5oGQA0BI9cq9U5uWSgInS4IWvW+4Svt5h9YUyZGdqlksfOV42rX39C4Tnd 8xwXrx2/bw33ekgApY4K9dbX4xdlj7+lJfNR5G3tcK3J4Kvy6M4ZKz6E6NyfxFxW jiJ6vlISjkqfvTb6g6CClqMAGoe8TSdsvoB4ZxLF62tGQ7L6eZpKgqFnvy8ERqHJ GAYIrW/W2WUbI+35XxqKA2tEvLZXPAE3aqODsjpzd45FzAW1rraenEGIdmR89hCW GSoOu/9J+P4U3UQsaPdDdZeo0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9aLX2e 7m12ymagyLP+4D7ieVsSMB8GA1UdIwQYMBaAFCJvconU43/s4iYMZNO8unrAMVp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CMTYxMzExOENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYtemlKZ3hrMDd5NmVzQXhX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ltOXlpZFRqZi16aUpneGswN3k2ZXNBeFduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzI2OS9CMTYxMzExOENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYt emlKZ3hrMDd5NmVzQXhXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoIeP1wlvInwJBN4GpJHjDvJVPe1PjA6arPg3gK8qDq+bFpdtM5J58 lPRdrVOf+o0ce6uSSO64jGPVIG4VbljuPCQgtOi37vxjV7vJswQVQldQ8Pf8WTQC f7yPA/cGtGQxPgGq4LWoSGQUDAJ+VNT5+lDXE//r/GrrMFIJPZas+3caRc7Zbh2a 1ps7AS2FPmCE0OG6SaxTXI2R9zsYs0dGGIJQql+s8aF8KawHVn+5VivAnGu8UFgc yQVP/4XpxqRBkznexfzuhUtEPzxdMpFY+N7kZkcIFRcvP+Kpo4egt9dNJRaE4SMG H2V5v+2SnAj/ZhnSBMlKa+Iti5NheQPY -----END CERTIFICATE-----Generated at Sun May 11 13:50:05 2025 by rpki-client