$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: C7pWad6dUKZrex0vP2CqSCSI59XWLmxZ8+XycBjDAy4= Subject key identifier: EF:F2:62:88:38:9C:75:A7:6A:B6:35:67:28:76:CF:1C:38:FC:FD:FA Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: F9 Signing time: Tue 13 May 2025 04:27:57 +0000 Manifest this update: Tue 13 May 2025 04:27:56 +0000 Manifest next update: Tue 20 May 2025 04:27:56 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: tUSntGQ1iFmjpBqYUCuco+h2+ntSi9Rj0SV2EWuR8lU=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: May 13 04:27:56 2025 GMT Not After : May 20 04:27:56 2025 GMT Subject: CN=6822ca4c-55b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:ca:c0:27:fe:41:43:d4:31:f7:46:3f:d9: 29:43:28:54:82:e8:9e:3a:e8:ac:21:42:b0:4f:3e: 5b:81:5e:b3:65:29:f4:79:8d:88:1d:5c:6d:ad:08: aa:7a:17:b3:fb:bb:15:af:2f:d0:19:e7:13:eb:32: a3:dc:9a:17:dd:b4:fd:a2:86:e9:8e:68:ed:69:e0: 27:7e:57:3a:93:bb:41:c2:27:e5:e2:cf:2b:b1:9b: 9b:c1:bb:6f:c3:65:71:0f:ac:49:a8:32:a0:d4:9c: 9a:8d:b1:81:2d:ea:7b:31:d9:81:e3:51:e4:6a:43: 6f:4f:9b:8e:f0:84:4c:1f:61:28:91:39:ce:1c:65: cb:c7:33:58:4a:a8:17:ef:d2:47:8d:f8:94:6a:c9: 22:d4:45:ea:91:23:fe:ad:9f:e9:e9:6a:d3:d6:cf: bd:80:9c:7c:9a:59:81:19:3b:a0:bb:c1:02:6a:09: 7f:74:79:b4:61:36:cd:86:9d:b6:dd:14:75:ce:f9: 34:78:3a:33:2d:38:0e:61:24:52:e8:db:7e:84:08: 5a:8a:f3:f6:8f:e4:81:70:cf:ef:4c:76:ea:85:a9: ad:03:e7:3b:4e:64:60:de:d6:a2:73:97:a0:c6:65: 17:34:04:97:a3:fa:cf:8b:7d:62:d7:c8:36:6c:93: e6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F2:62:88:38:9C:75:A7:6A:B6:35:67:28:76:CF:1C:38:FC:FD:FA X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:46:62:fd:11:bf:d3:d3:1e:78:0c:96:9a:11:6b:f3:6a:37: 93:dc:b6:ad:0f:20:c0:cc:90:5a:32:6e:42:43:cb:17:90:ab: 2e:71:37:15:a7:a6:7f:d6:a1:75:7e:0f:6b:89:e0:ed:ab:54: 97:f5:24:d9:a2:c4:11:b4:18:83:10:8e:2f:82:5c:17:a0:8f: 1f:a7:0d:ea:af:b5:f6:f2:65:38:c2:22:04:a1:2c:4d:89:f2: 0d:e6:de:b6:5b:7e:74:72:64:8a:7a:5c:a9:31:60:8c:e6:37: 89:1b:1e:e4:52:a6:51:b6:24:3d:a7:da:8a:4d:15:08:84:26: d1:48:e1:47:55:55:99:21:34:b8:60:64:c1:24:74:47:dc:74: a7:11:8d:3d:bd:f6:2e:f8:45:21:5e:b6:94:97:fb:1e:91:65: aa:ad:8e:99:df:39:b4:54:33:46:b4:4a:7d:e4:3e:6b:40:23: 8d:30:b0:6d:8c:b1:09:c8:db:1a:2f:4a:4d:c2:3c:a9:39:05: f1:99:5e:6d:e9:dd:2d:b2:05:a2:77:f6:49:87:ef:77:97:fd: 26:43:f0:3f:c7:95:c1:32:9f:52:e0:a4:1d:14:83:6a:ae:60: f1:ea:5a:21:ab:6a:97:65:17:4e:63:24:4d:21:a9:2c:69:94: 04:e0:0a:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjUwNTEzMDQyNzU2WhcNMjUwNTIwMDQyNzU2WjAYMRYwFAYD VQQDEw02ODIyY2E0Yy01NWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUfKwCf+QUPUMfdGP9kpQyhUguieOuisIUKwTz5bgV6zZSn0eY2IHVxtrQiq ehez+7sVry/QGecT6zKj3JoX3bT9oobpjmjtaeAnflc6k7tBwifl4s8rsZubwbtv w2VxD6xJqDKg1JyajbGBLep7MdmB41HkakNvT5uO8IRMH2EokTnOHGXLxzNYSqgX 79JHjfiUaski1EXqkSP+rZ/p6WrT1s+9gJx8mlmBGTugu8ECagl/dHm0YTbNhp22 3RR1zvk0eDozLTgOYSRS6Nt+hAhaivP2j+SBcM/vTHbqhamtA+c7TmRg3taic5eg xmUXNASXo/rPi31i18g2bJPmoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/yYog4 nHWnarY1Zyh2zxw4/P36MB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeRmL9Eb/T0x54DJaaEWvzajeT3LatDyDAzJBaMm5CQ8sXkKsucTcV p6Z/1qF1fg9rieDtq1SX9STZosQRtBiDEI4vglwXoI8fpw3qr7X28mU4wiIEoSxN ifIN5t62W350cmSKelypMWCM5jeJGx7kUqZRtiQ9p9qKTRUIhCbRSOFHVVWZITS4 YGTBJHRH3HSnEY09vfYu+EUhXraUl/sekWWqrY6Z3zm0VDNGtEp95D5rQCONMLBt jLEJyNsaL0pNwjypOQXxmV5t6d0tsgWid/ZJh+93l/0mQ/A/x5XBMp9S4KQdFINq rmDx6lohq2qXZRdOYyRNIaksaZQE4ArV -----END CERTIFICATE-----Generated at Thu May 15 00:15:38 2025 by rpki-client