$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json) Hash identifier: VVEzmlD30EpmwY4pzysVn6gMGU0dZIhfC07NaZN3mnc= Subject key identifier: C6:DA:9B:BD:26:85:27:27:08:DD:49:71:08:86:DC:FE:A7:FB:80:6B Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Certificate serial: 0BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft Manifest number: 0BD5 Signing time: Mon 12 May 2025 18:40:04 +0000 Manifest this update: Mon 12 May 2025 18:40:03 +0000 Manifest next update: Mon 19 May 2025 18:40:03 +0000 Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: zJP2dLSk3oW/tMkWvk/sJAJ43DSkR97SgUwgNje8SZI=) 2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Kec3OJ0yXeD5eottWlXfmKbDVOHd3PQe3ZSjrmCo8jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3035 (0xbdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Validity Not Before: May 12 18:40:03 2025 GMT Not After : May 19 18:40:03 2025 GMT Subject: CN=68224084-932b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:38:21:5f:17:af:c2:32:18:d6:ec:25:ec: 62:0a:77:6d:a1:74:06:53:be:c3:88:c4:2f:ae:df: 3b:68:07:15:50:78:8e:65:df:2d:3e:56:11:a7:28: a5:1d:8e:07:49:d3:06:ea:a2:9a:d7:45:64:cf:ce: 49:cf:0b:7f:16:8c:18:b5:ce:64:4c:05:e3:25:8c: 6c:5f:5d:c7:76:df:9d:54:5d:ad:6b:98:7c:cf:98: 30:48:79:62:4e:da:0a:d2:ab:f0:7b:69:b2:a8:74: 95:35:d1:86:41:9a:aa:41:2b:8a:b6:b0:41:61:1a: 0a:2f:05:02:3d:c9:1f:77:dd:ee:5d:e3:cb:29:3b: 35:e3:9d:2f:5f:77:dc:f7:f3:57:a3:0f:85:99:d2: 31:10:7b:17:d8:2f:7f:23:f2:d4:1e:f3:81:20:89: d2:69:ad:37:35:7b:76:ac:9b:d2:5c:2d:72:6c:13: 9a:eb:11:ce:05:12:9e:cf:cb:11:62:af:e3:c5:f7: 90:2d:02:4b:60:02:22:04:da:cc:36:91:17:5d:75: 81:81:49:d5:c8:2a:f3:e7:a9:35:17:27:5b:b5:b6: f0:29:66:cc:a2:cf:af:72:18:2b:c6:0f:11:9f:b7: 70:8e:0c:e8:eb:c1:b6:dc:2a:a1:19:52:8b:7c:2b: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DA:9B:BD:26:85:27:27:08:DD:49:71:08:86:DC:FE:A7:FB:80:6B X509v3 Authority Key Identifier: keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:fb:8c:8b:80:de:27:d9:b2:b8:38:94:d8:ac:fc:05:0e:fd: 3b:e8:4d:58:e0:d6:9c:e1:d1:29:39:ff:a4:33:10:7d:69:72: 49:00:4c:fa:c7:8f:33:b1:58:31:0e:6f:10:c3:12:ad:4c:7d: 0f:9a:e3:a1:d4:6d:2c:fd:cd:c7:29:5f:42:3e:84:c2:34:8c: 24:6d:cc:35:29:58:91:d3:fc:b1:86:c2:ff:09:2b:47:a8:d7: e7:f3:90:33:c0:21:b1:2a:bd:83:7b:a3:19:7b:3d:14:e9:0b: 79:12:0c:74:f4:cd:a9:ad:9d:b7:de:a9:da:04:51:e9:06:8e: 3e:65:13:70:47:0c:6e:c2:44:8b:aa:bf:b8:1f:a3:a3:1b:1a: 9e:35:6d:4b:cc:8d:2a:72:35:c1:5f:e5:17:56:2c:d4:a1:ad: 46:24:34:73:ce:34:27:e3:9c:1e:22:5c:fc:73:c6:10:98:13: 7f:9e:d4:e5:91:a1:ed:1d:76:f7:ab:5d:8c:ae:1f:5d:25:2c: 55:0a:e3:db:d2:d8:36:1e:d5:95:90:1c:e3:90:df:e4:49:8c: 3e:4d:3a:4a:da:04:d9:28:72:10:8c:d2:a3:a2:85:63:9d:92: 1f:4e:4e:fd:2f:47:be:16:b7:c7:f5:bc:65:a3:06:fa:44:f9: 77:1c:bf:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG RjhDMDg5RTMwHhcNMjUwNTEyMTg0MDAzWhcNMjUwNTE5MTg0MDAzWjAYMRYwFAYD VQQDEw02ODIyNDA4NC05MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6s4IV8Xr8IyGNbsJexiCndtoXQGU77DiMQvrt87aAcVUHiOZd8tPlYRpyil HY4HSdMG6qKa10Vkz85Jzwt/FowYtc5kTAXjJYxsX13Hdt+dVF2ta5h8z5gwSHli TtoK0qvwe2myqHSVNdGGQZqqQSuKtrBBYRoKLwUCPckfd93uXePLKTs1450vX3fc 9/NXow+FmdIxEHsX2C9/I/LUHvOBIInSaa03NXt2rJvSXC1ybBOa6xHOBRKez8sR Yq/jxfeQLQJLYAIiBNrMNpEXXXWBgUnVyCrz56k1FydbtbbwKWbMos+vchgrxg8R n7dwjgzo68G23CqhGVKLfCs6VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbam70m hScnCN1JcQiG3P6n+4BrMB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4 MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5 c043alhxVFAwdlhfakFpZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH+4yLgN4n2bK4OJTYrPwFDv076E1Y4Nac4dEpOf+kMxB9aXJJAEz6 x48zsVgxDm8QwxKtTH0PmuOh1G0s/c3HKV9CPoTCNIwkbcw1KViR0/yxhsL/CStH qNfn85AzwCGxKr2De6MZez0U6Qt5Egx09M2prZ233qnaBFHpBo4+ZRNwRwxuwkSL qr+4H6OjGxqeNW1LzI0qcjXBX+UXVizUoa1GJDRzzjQn45weIlz8c8YQmBN/ntTl kaHtHXb3q12Mrh9dJSxVCuPb0tg2HtWVkBzjkN/kSYw+TTpK2gTZKHIQjNKjooVj nZIfTk79L0e+FrfH9bxlowb6RPl3HL// -----END CERTIFICATE-----Generated at Wed May 14 17:15:15 2025 by rpki-client