$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json) Hash identifier: H/ATmnE//e0k4fECvcX/OPEmV+kPabZdx9B9oBFHtwE= Subject key identifier: 4C:F4:90:38:BB:5C:8C:FE:6D:B1:0A:50:E7:94:5A:29:F9:25:8E:04 Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft Manifest number: 0AE4 Signing time: Mon 12 May 2025 19:16:11 +0000 Manifest this update: Mon 12 May 2025 19:16:11 +0000 Manifest next update: Mon 19 May 2025 19:16:11 +0000 Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: rImBQNQQwHEdzTzBDDrgz1jMkLBZWTtmJYYbwJZP9+w=) 2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: kISEPEmE2ZLNGr7M+gIIuLb+wfjhIl0pN5Ozrn7290M=) 3: A558194E801F11EFB86B2647C4F9AE02.roa (hash: yZl4Rgg31ofEgyuQezY4Q6zD53Q3cflOAAa2hJJAiIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Validity Not Before: May 12 19:16:11 2025 GMT Not After : May 19 19:16:11 2025 GMT Subject: CN=682248fb-f245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:21:53:27:c3:37:2d:cc:e5:51:e7:c8:a5:b2: 76:b6:78:f5:2e:f2:f9:42:a5:31:47:b8:af:8d:30: f8:d5:15:d1:0c:45:47:fd:65:f1:0b:8b:d4:dd:7b: df:88:56:31:a7:82:10:4d:f9:59:11:9c:b5:4d:8f: db:73:a6:58:b3:fe:87:9d:9b:e6:2c:ab:de:04:93: e4:97:47:94:c9:fc:29:96:67:7a:ed:7c:d7:22:37: 04:7a:f2:84:49:a7:0e:cf:d6:a9:da:5a:dc:c6:f0: 77:77:1e:0e:bc:11:dd:a8:93:93:60:6a:a7:2b:54: f9:35:02:0e:c1:0a:87:08:32:f8:23:cc:39:fa:81: f5:a4:1b:de:db:0d:ab:ab:92:34:85:b3:4b:91:cb: 51:b5:61:fb:df:d4:d5:0f:42:a4:56:92:1b:b3:5a: 09:05:8c:ef:6d:ec:23:ec:ef:bb:2e:26:77:5a:7c: 1a:17:c2:2e:42:82:a7:d8:98:93:ac:3c:4a:40:47: c5:02:9a:2c:6e:c3:8a:df:97:86:ce:b5:aa:2e:12: 3a:ba:c0:a9:2d:5f:68:db:a3:9a:f9:99:04:51:6e: 37:75:c1:1c:74:42:80:89:6c:60:6d:f2:a7:83:39: f4:fa:1f:4b:ee:ff:3b:51:01:47:04:9a:94:c9:28: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F4:90:38:BB:5C:8C:FE:6D:B1:0A:50:E7:94:5A:29:F9:25:8E:04 X509v3 Authority Key Identifier: keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:61:d5:0e:10:20:ca:d3:e1:60:7d:65:33:92:93:25:f5:45: 57:f3:82:12:5b:32:22:d2:de:14:7e:5a:c5:c8:ce:76:5b:a2: 76:08:87:24:5a:f4:1d:01:ef:98:97:6c:c1:e8:34:4f:ef:47: 46:71:8b:5d:88:6f:aa:3c:0f:93:b3:74:bb:3d:a7:19:8c:b7: 38:f1:a3:2d:6d:da:0c:89:24:d5:43:49:dc:44:40:97:f7:44: 5f:60:61:11:08:41:4d:80:ec:d0:7b:9c:2d:5a:fd:10:b9:88: 1b:c7:fa:aa:6d:48:55:94:e7:16:77:0d:b9:a9:39:f8:4d:ec: 35:9b:f8:2a:bb:c5:29:44:fa:d3:be:76:7c:59:85:92:dc:47: 80:b2:c2:ee:7a:6a:63:3c:71:f0:1a:f8:b1:23:48:b5:10:9e: b4:de:32:13:7e:9a:79:27:43:37:43:5c:33:24:db:87:bc:de: 8a:5c:52:ed:79:45:55:e0:1c:0d:37:40:60:2a:fb:11:88:b2: d7:7b:59:e5:6a:aa:26:ee:1e:c0:b5:28:c8:8a:18:77:a5:69: 97:ec:7e:66:92:49:91:5a:90:a4:ed:19:51:2e:d9:ad:d1:8e: 50:0f:bb:15:b8:e1:9b:ea:38:e1:d2:d2:23:b6:24:4e:91:a0: b7:1e:17:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE MTgwN0ExNEMwHhcNMjUwNTEyMTkxNjExWhcNMjUwNTE5MTkxNjExWjAYMRYwFAYD VQQDEw02ODIyNDhmYi1mMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkyFTJ8M3LczlUefIpbJ2tnj1LvL5QqUxR7ivjTD41RXRDEVH/WXxC4vU3Xvf iFYxp4IQTflZEZy1TY/bc6ZYs/6HnZvmLKveBJPkl0eUyfwplmd67XzXIjcEevKE SacOz9ap2lrcxvB3dx4OvBHdqJOTYGqnK1T5NQIOwQqHCDL4I8w5+oH1pBve2w2r q5I0hbNLkctRtWH739TVD0KkVpIbs1oJBYzvbewj7O+7LiZ3WnwaF8IuQoKn2JiT rDxKQEfFAposbsOK35eGzrWqLhI6usCpLV9o26Oa+ZkEUW43dcEcdEKAiWxgbfKn gzn0+h9L7v87UQFHBJqUySgxcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEz0kDi7 XIz+bbEKUOeUWin5JY4EMB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4 RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjkwNS8xRkE3QzQ2QzQ4RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6 TmNCN2ttQmFMZF9SZ0hvVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdYdUOECDK0+FgfWUzkpMl9UVX84ISWzIi0t4UflrFyM52W6J2CIck WvQdAe+Yl2zB6DRP70dGcYtdiG+qPA+Ts3S7PacZjLc48aMtbdoMiSTVQ0ncRECX 90RfYGERCEFNgOzQe5wtWv0QuYgbx/qqbUhVlOcWdw25qTn4Tew1m/gqu8UpRPrT vnZ8WYWS3EeAssLuempjPHHwGvixI0i1EJ603jITfpp5J0M3Q1wzJNuHvN6KXFLt eUVV4BwNN0BgKvsRiLLXe1nlaqom7h7AtSjIihh3pWmX7H5mkkmRWpCk7RlRLtmt 0Y5QD7sVuOGb6jjh0tIjtiROkaC3HhfY -----END CERTIFICATE-----Generated at Wed May 14 16:32:07 2025 by rpki-client