$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json) Hash identifier: PQCjUxjsL7ZmTct3a+uEp3LypPHk9Bjb+dLFMdqSmoo= Subject key identifier: EB:DB:27:42:98:5F:F3:A9:A5:5B:29:6E:DC:E2:76:15:82:D6:C5:92 Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft Manifest number: 51 Signing time: Thu 15 May 2025 06:36:02 +0000 Manifest this update: Thu 15 May 2025 06:36:01 +0000 Manifest next update: Thu 22 May 2025 06:36:01 +0000 Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: iQWlhx6y8HMpFxx3GmzglHkNMPSPzcv56akVVfUXSts=) 2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: NJttL+qjjIMKQduatRuB9wCf9GQJviKk9JlU07XKUgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Validity Not Before: May 15 06:36:01 2025 GMT Not After : May 22 06:36:01 2025 GMT Subject: CN=68258b51-4012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:bc:63:9f:95:e2:d5:1a:ec:73:ab:f9:82: 72:7f:d5:b3:00:d3:74:89:2e:7d:9f:a8:6a:c6:ac: 54:e6:99:80:0b:fb:09:d3:d7:9f:a5:50:44:b3:70: 37:a4:b8:08:1c:22:c2:13:18:2f:13:96:71:85:34: 70:30:c4:27:bf:38:12:92:c9:e0:f8:a5:23:40:97: 34:c3:3f:3f:45:fa:02:81:fd:00:dd:1a:f7:4c:47: 78:c1:66:ad:7c:6c:57:bd:0f:8e:58:ef:02:e1:8a: 41:6b:c4:2a:ee:2d:12:e8:57:4d:a7:7a:64:b2:15: db:61:e8:e1:a3:dd:65:df:5e:d0:56:bf:da:cd:bd: 7b:90:c3:65:6f:88:7c:54:17:78:b7:b1:9b:39:d3: 13:4f:5f:f7:67:f7:78:86:d5:59:61:63:99:cd:13: 50:74:e6:fe:31:7b:f3:c5:5b:c7:4d:6c:98:d8:7f: 45:18:d1:81:af:06:3f:6f:d9:f9:86:a1:be:db:b1: 3d:c7:b8:89:7a:4d:27:08:0b:34:32:fb:8b:61:74: 47:0d:cb:29:02:05:be:a9:7e:d9:b7:ea:a2:5d:96: cb:96:ac:77:b0:eb:4b:58:01:27:7f:28:a0:81:1a: f0:b0:c1:d3:a2:f2:eb:2c:af:ef:d0:7b:95:80:dc: da:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:27:42:98:5F:F3:A9:A5:5B:29:6E:DC:E2:76:15:82:D6:C5:92 X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6f:5a:9f:a0:b2:98:1d:8d:f5:45:c4:85:cc:39:6a:9e:c1: a3:7a:96:a6:28:8e:3a:c8:de:a6:b3:0e:9e:05:f9:5c:c8:50: fa:9e:14:e5:39:b3:62:64:57:ab:6b:35:77:85:93:47:ad:02: 36:11:97:7b:b0:ed:46:3c:dd:bb:84:5f:b2:94:fc:ce:0b:95: 18:22:9c:e9:5a:d5:09:d0:3b:cf:21:91:55:96:da:81:66:38: 86:0f:ed:81:85:61:12:d4:6d:85:33:3f:ce:a9:88:ac:6b:0f: e6:94:be:9b:54:9f:3a:38:e7:8f:10:6c:e2:8c:0b:c8:88:ac: d1:53:fc:c9:1c:3c:b8:9a:ec:97:e0:60:23:4f:10:ed:19:53: e8:b4:e2:64:99:09:95:bc:20:e7:97:6a:88:68:9c:d1:e1:0e: 5c:b7:60:0b:dc:36:1b:fb:bc:75:dc:59:e5:2d:ce:13:a7:88: ee:7c:b7:e7:0a:b8:80:73:7e:ae:87:ba:fc:c2:d4:95:25:c5: ca:5b:3e:94:2c:f6:d3:24:5e:f6:0e:6b:50:d6:d0:77:f2:ce: 33:99:5f:a9:ca:22:0c:36:ba:d1:27:b6:1e:af:eb:f3:bd:8c: 28:f0:28:f2:13:c3:24:fe:6f:6f:d9:f7:83:c6:25:6c:e0:76: 46:0c:03:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODM3QjExMC8GA1UEBRMoRkEyMjgwMUM1MkFFMkE1RkM0OTFCN0NCRUJFNjhFRkNB MkM4RDFEOTAeFw0yNTA1MTUwNjM2MDFaFw0yNTA1MjIwNjM2MDFaMBgxFjAUBgNV BAMTDTY4MjU4YjUxLTQwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA7bxjn5Xi1Rrsc6v5gnJ/1bMA03SJLn2fqGrGrFTmmYAL+wnT15+lUESzcDek uAgcIsITGC8TlnGFNHAwxCe/OBKSyeD4pSNAlzTDPz9F+gKB/QDdGvdMR3jBZq18 bFe9D45Y7wLhikFrxCruLRLoV02nemSyFdth6OGj3WXfXtBWv9rNvXuQw2VviHxU F3i3sZs50xNPX/dn93iG1VlhY5nNE1B05v4xe/PFW8dNbJjYf0UY0YGvBj9v2fmG ob7bsT3HuIl6TScICzQy+4thdEcNyykCBb6pftm36qJdlsuWrHew60tYASd/KKCB GvCwwdOi8ussr+/Qe5WA3No3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU69snQphf 86mlWylu3OJ2FYLWxZIwHwYDVR0jBBgwFoAU+iKAHFKuKl/EkbfL6+aO/KLI0dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MzdCLzE1OEQ3RjNDQjk5 QzExRUY5NjM4Rjc2OUM0RjlBRTAyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWlLQUhGS3VLbF9Fa2JmTDYtYU9fS0xJMGRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MzdCLzE1OEQ3RjNDQjk5QzExRUY5NjM4Rjc2OUM0RjlBRTAyLy1pS0FIRkt1S2xf RWtiZkw2LWFPX0tMSTBkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG1vWp+gspgdjfVFxIXMOWqewaN6lqYojjrI3qazDp4F+VzIUPqeFOU5 s2JkV6trNXeFk0etAjYRl3uw7UY83buEX7KU/M4LlRginOla1QnQO88hkVWW2oFm OIYP7YGFYRLUbYUzP86piKxrD+aUvptUnzo4548QbOKMC8iIrNFT/MkcPLia7Jfg YCNPEO0ZU+i04mSZCZW8IOeXaohonNHhDly3YAvcNhv7vHXcWeUtzhOniO58t+cK uIBzfq6HuvzC1JUlxcpbPpQs9tMkXvYOa1DW0HfyzjOZX6nKIgw2utEnth6v6/O9 jCjwKPITwyT+b2/Z94PGJWzgdkYMA5s= -----END CERTIFICATE-----Generated at Thu May 15 08:51:34 2025 by rpki-client