$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft File: imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json) Hash identifier: dtsZZiX0y8hwKxxHbBib6ax0jDwrRbI1Alti+YkmrIw= Subject key identifier: 27:9D:B9:96:73:C2:E3:51:07:76:E2:5D:79:7C:18:F9:B6:30:5F:5A Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 Certificate issuer: /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft Manifest number: 0118 Signing time: Sun 11 May 2025 03:40:36 +0000 Manifest this update: Sun 11 May 2025 03:40:35 +0000 Manifest next update: Sun 18 May 2025 03:40:35 +0000 Files and hashes: 1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: TnUGctdP540/yVoEu4K8kV1KQfiAFG47cOH6PjS49I8=) 2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: MIl/OMgyucN0EutmGHMH29cPoxdMejUcwQsKGNX20nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Validity Not Before: May 11 03:40:35 2025 GMT Not After : May 18 03:40:35 2025 GMT Subject: CN=68201c33-52ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:ef:00:91:d4:45:71:d3:89:19:7c:51:2f: 75:e5:2d:61:25:fb:ab:e8:21:fe:29:b1:8d:ab:9e: 24:d2:c9:cf:74:e6:7c:be:71:cd:2b:ee:f3:7c:19: 70:b2:6c:8b:b1:c1:bf:b6:3c:88:59:47:e3:01:28: 57:94:98:68:1d:89:84:b6:ba:e8:f0:ec:3e:7e:37: b3:61:59:55:51:1a:3d:23:b7:aa:e0:6f:d4:fe:96: 59:c3:ed:a9:69:01:77:94:65:9d:1c:fa:af:ff:43: 40:84:f0:35:69:d4:21:f1:a7:45:3a:02:5f:0a:05: b6:9b:85:01:c8:ee:98:5d:81:eb:d5:2b:08:7d:95: aa:2a:d0:31:cc:3a:2e:e3:a7:60:7d:f3:fb:08:57: 01:e3:87:b7:b0:89:89:44:3b:da:d5:c6:35:d6:8d: 95:89:ce:0d:d5:31:47:02:ca:16:e1:2f:3a:91:91: e9:ac:09:f7:be:e3:f3:4f:4d:ae:cc:ab:82:4c:1b: 96:42:87:a5:a6:45:b8:99:b7:ce:17:5b:35:8c:c2: 07:9e:f8:d4:22:8e:58:3e:94:33:9d:61:60:be:ea: 70:8f:60:59:7c:76:f5:4d:56:c4:e9:f6:e9:a0:be: da:98:8e:2f:87:24:ee:7f:eb:48:89:79:46:eb:db: f3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9D:B9:96:73:C2:E3:51:07:76:E2:5D:79:7C:18:F9:B6:30:5F:5A X509v3 Authority Key Identifier: keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:82:0a:db:47:a4:c0:5d:47:39:91:d3:01:f1:3a:8e:9a:ab: f5:1f:5b:9d:1e:43:0c:cc:ef:62:fa:75:f0:31:eb:cb:83:61: ac:23:09:19:1e:5c:1d:81:1a:f1:73:24:4b:e7:16:32:eb:b1: 25:ea:eb:7e:0d:b7:74:d1:68:43:9b:25:4a:39:69:02:39:96: b9:c0:b4:40:55:a7:81:01:81:86:34:cb:09:fc:64:5c:90:2e: 2a:6e:e7:cc:23:c4:b3:3a:55:a9:66:17:d4:c4:4f:db:80:a4: 71:7d:9a:f7:65:7f:96:2b:67:98:84:ce:32:a3:f2:41:78:64: cc:c6:e1:74:41:df:e5:b6:3d:be:3f:d8:32:60:8b:04:2b:cb: 1c:54:fe:27:49:50:c7:2d:f2:71:a5:dc:5c:ba:48:a3:e7:f4: d0:81:ab:0e:0f:cc:27:a5:b6:76:1c:fa:31:3e:f5:3d:fc:29: 45:1b:c3:d1:98:6a:7b:ec:ce:73:43:51:7e:a0:2b:21:ad:64: 8e:4f:94:2b:58:ab:8b:bb:bc:b3:bd:bb:a8:bb:c9:76:9c:44: 68:d4:ce:36:8a:19:db:bb:62:3d:38:57:60:eb:43:6c:95:50: e3:b0:b4:4a:38:e5:27:a6:27:20:28:4c:33:c9:5d:b6:5d:78: 16:8d:0d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI0QzUxMTAvBgNVBAUTKDhBNjIxQkM3N0EzREQ0MTcwQ0I5MTAzRkY4Nzg4QkM5 MDkwMDgyRDEwHhcNMjUwNTExMDM0MDM1WhcNMjUwNTE4MDM0MDM1WjAYMRYwFAYD VQQDEw02ODIwMWMzMy01MmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvznvAJHURXHTiRl8US915S1hJfur6CH+KbGNq54k0snPdOZ8vnHNK+7zfBlw smyLscG/tjyIWUfjAShXlJhoHYmEtrro8Ow+fjezYVlVURo9I7eq4G/U/pZZw+2p aQF3lGWdHPqv/0NAhPA1adQh8adFOgJfCgW2m4UByO6YXYHr1SsIfZWqKtAxzDou 46dgffP7CFcB44e3sImJRDva1cY11o2Vic4N1TFHAsoW4S86kZHprAn3vuPzT02u zKuCTBuWQoelpkW4mbfOF1s1jMIHnvjUIo5YPpQznWFgvupwj2BZfHb1TVbE6fbp oL7amI4vhyTuf+tIiXlG69vz7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeduZZz wuNRB3biXXl8GPm2MF9aMB8GA1UdIwQYMBaAFIpiG8d6PdQXDLkQP/h4i8kJAILR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjRDNS9EMUUyRDk2ODgz NTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFCY011UkFfLUhpTHlRa0Fn dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltSWJ4M285MUJjTXVSQV8tSGlMeVFrQWd0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjRDNS9EMUUyRDk2ODgzNTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFC Y011UkFfLUhpTHlRa0FndEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEggrbR6TAXUc5kdMB8TqOmqv1H1udHkMMzO9i+nXwMevLg2GsIwkZ HlwdgRrxcyRL5xYy67El6ut+Dbd00WhDmyVKOWkCOZa5wLRAVaeBAYGGNMsJ/GRc kC4qbufMI8SzOlWpZhfUxE/bgKRxfZr3ZX+WK2eYhM4yo/JBeGTMxuF0Qd/ltj2+ P9gyYIsEK8scVP4nSVDHLfJxpdxcukij5/TQgasOD8wnpbZ2HPoxPvU9/ClFG8PR mGp77M5zQ1F+oCshrWSOT5QrWKuLu7yzvbuou8l2nERo1M42ihnbu2I9OFdg60Ns lVDjsLRKOOUnpicgKEwzyV22XXgWjQ0F -----END CERTIFICATE-----Generated at Sun May 11 09:39:55 2025 by rpki-client