$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: UKQ5mBUVSzJuHBDqrDrh/dc63b/Y+AmbvWfrbDcJmDk= Subject key identifier: 4B:4E:25:B6:E3:DB:9B:84:8C:6D:A8:C6:68:12:90:39:19:AF:75:4A Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 033A Signing time: Tue 13 May 2025 00:52:02 +0000 Manifest this update: Tue 13 May 2025 00:52:01 +0000 Manifest next update: Tue 20 May 2025 00:52:01 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: 6v/uAK5SpnLrxtzNhmjnR2jDimKQSZ15HdgHCJA4kec=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: May 13 00:52:01 2025 GMT Not After : May 20 00:52:01 2025 GMT Subject: CN=682297b2-5b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:74:5e:ec:79:7c:8f:7e:89:8c:a3:f9:b4: 72:15:41:4d:5c:21:d6:bb:9c:42:bb:bf:5b:33:48: 0f:e1:4d:c4:8c:60:af:2b:c6:d3:83:e8:cb:e4:aa: f2:f7:c5:ae:c3:79:05:1f:53:83:ac:19:57:b4:8e: ea:b5:d4:a6:8d:d5:bc:b6:f7:2c:47:8d:68:67:5c: 38:58:97:0b:16:e5:bd:b9:d0:23:0e:b9:c4:c1:20: 57:6f:a6:27:3f:1a:61:bb:93:73:e3:b7:14:b6:e0: 4a:a2:a8:f0:c5:5c:53:2f:61:9f:94:3a:98:24:01: 70:77:b6:05:a1:f3:fb:b0:0d:98:a7:28:b9:be:fe: e1:5f:f4:eb:5d:65:89:39:d6:6f:1f:b3:5c:9f:9f: 66:31:32:fc:07:16:0b:d4:7f:e8:61:78:8e:e2:f0: 00:0a:3c:3b:00:62:8f:d8:6b:d8:78:92:eb:3d:79: b6:89:84:ad:43:dd:08:59:a5:b2:6e:bf:13:62:bf: f3:21:8e:f6:56:34:98:e9:91:5d:b9:3c:e0:c7:b5: 39:e5:37:f1:23:31:3c:5e:c2:41:af:48:09:2c:e7: a6:8b:89:61:c7:8e:45:7f:02:84:32:5c:3a:8b:3d: 6f:06:72:20:de:13:dd:74:18:31:99:f3:d7:44:d1: cc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:25:B6:E3:DB:9B:84:8C:6D:A8:C6:68:12:90:39:19:AF:75:4A X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:00:4f:3a:71:57:90:d9:cb:d1:c2:5c:ab:d9:60:2e:0e:56: 87:8b:6f:70:b5:86:11:42:21:59:9d:d0:3b:4d:90:d7:06:31: 60:bc:02:60:ec:8b:3f:92:84:7a:17:4f:18:7d:1e:cc:cf:95: d5:22:7f:eb:0d:c6:d9:e8:12:6d:24:88:c0:e6:7f:48:64:bd: 3c:9b:70:6a:7a:ba:d4:89:89:bd:9f:f9:55:c9:f5:ad:44:af: b2:64:f7:eb:07:08:6d:a8:26:e0:8e:2e:97:e7:56:77:81:47: b5:85:3b:60:4c:a0:23:70:28:67:b3:c5:ea:e7:c3:d2:2e:22: 61:93:a6:15:05:6a:5e:ea:95:ac:49:1e:97:49:e6:bb:53:19: c4:0a:26:5f:15:cb:42:2e:52:cf:1c:16:9f:fb:19:21:6d:61: e5:c2:45:6f:8a:62:b9:e5:a2:7a:70:88:e4:f4:4d:63:37:0c: 64:0a:61:29:08:ae:3f:a5:d4:48:fc:32:06:43:5e:26:42:60: db:e4:2d:19:17:9a:27:47:ae:c5:18:c8:0d:03:3e:14:50:9e: c5:c9:eb:ea:12:85:dd:e9:ac:c7:0f:e1:b7:04:2d:b0:f6:91: f1:41:c0:6c:c4:09:a4:e5:0b:e2:47:e6:8b:2f:67:4d:aa:d7: 7f:e1:c9:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwNTEzMDA1MjAxWhcNMjUwNTIwMDA1MjAxWjAYMRYwFAYD VQQDEw02ODIyOTdiMi01YjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0l0Xux5fI9+iYyj+bRyFUFNXCHWu5xCu79bM0gP4U3EjGCvK8bTg+jL5Kry 98Wuw3kFH1ODrBlXtI7qtdSmjdW8tvcsR41oZ1w4WJcLFuW9udAjDrnEwSBXb6Yn Pxphu5Nz47cUtuBKoqjwxVxTL2GflDqYJAFwd7YFofP7sA2Ypyi5vv7hX/TrXWWJ OdZvH7Ncn59mMTL8BxYL1H/oYXiO4vAACjw7AGKP2GvYeJLrPXm2iYStQ90IWaWy br8TYr/zIY72VjSY6ZFduTzgx7U55TfxIzE8XsJBr0gJLOemi4lhx45FfwKEMlw6 iz1vBnIg3hPddBgxmfPXRNHMIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtOJbbj 25uEjG2oxmgSkDkZr3VKMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZAE86cVeQ2cvRwlyr2WAuDlaHi29wtYYRQiFZndA7TZDXBjFgvAJg 7Is/koR6F08YfR7Mz5XVIn/rDcbZ6BJtJIjA5n9IZL08m3BqerrUiYm9n/lVyfWt RK+yZPfrBwhtqCbgji6X51Z3gUe1hTtgTKAjcChns8Xq58PSLiJhk6YVBWpe6pWs SR6XSea7UxnECiZfFctCLlLPHBaf+xkhbWHlwkVvimK55aJ6cIjk9E1jNwxkCmEp CK4/pdRI/DIGQ14mQmDb5C0ZF5onR67FGMgNAz4UUJ7FyevqEoXd6azHD+G3BC2w 9pHxQcBsxAmk5QviR+aLL2dNqtd/4cmY -----END CERTIFICATE-----Generated at Wed May 14 16:38:32 2025 by rpki-client