$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: x+bxj9FCwK4W42sytFvZ0NwDazY4phmVeAku+AG1C4U= Subject key identifier: D5:46:2A:2A:93:CB:0E:21:3D:EE:36:16:AE:61:E6:58:EC:9A:AD:AB Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: E4 Signing time: Tue 13 May 2025 04:38:53 +0000 Manifest this update: Tue 13 May 2025 04:38:53 +0000 Manifest next update: Tue 20 May 2025 04:38:53 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: t/eb2MQ9LimVL0Z3PznT4IAuI42SWpLI4YSuPZS5nwI=) 2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: FHRlsB48eK0jdLR0VwZXrRd3F+Rj548sH8y8zKsy5+s=) 3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: PAO2tzUE6VhuIQPWRUUuXZiVK/zRgbkDyCoIJqVq33M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: May 13 04:38:53 2025 GMT Not After : May 20 04:38:53 2025 GMT Subject: CN=6822ccdd-34bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:b6:5f:48:6c:5f:1b:db:17:04:c9:33:9e: 7f:a0:8f:8a:de:c0:e2:bd:bc:d1:f8:b0:de:bf:46: 03:5a:e3:2d:21:0c:7b:48:91:09:96:85:af:47:ad: 02:26:07:57:9e:1b:a9:c0:4b:75:ac:69:eb:18:26: 1f:b7:08:ef:be:d0:77:f4:63:c2:98:f0:a8:81:5f: 28:7b:bc:94:26:df:d5:c2:c1:4a:fa:07:34:c2:80: 01:18:02:96:6d:08:b4:cf:6f:27:e0:66:86:ff:97: 86:3e:23:56:66:d2:bc:71:52:47:7c:ca:89:42:b4: d7:d7:80:05:5a:1a:85:a7:3f:18:e8:e8:a8:54:fe: 6c:70:65:89:49:74:98:44:6c:af:76:4d:81:6c:ce: ce:4e:2c:e1:51:e7:eb:77:b7:b7:43:22:99:2b:54: 80:1e:fc:bd:9d:af:3f:0a:61:ff:8a:3d:a3:08:6e: b5:9f:0a:e2:96:fb:a1:44:d2:9f:72:95:02:5f:0a: 77:38:9d:5e:ac:cb:33:5d:fc:04:45:68:06:2f:cc: 96:f0:06:e9:96:99:94:a0:c8:2c:4a:ce:82:2c:c5: 37:b3:ce:73:f9:91:54:ed:94:85:6c:58:10:bd:b3: 5d:69:2d:79:9c:32:33:a1:28:2d:57:39:ed:92:1e: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:46:2A:2A:93:CB:0E:21:3D:EE:36:16:AE:61:E6:58:EC:9A:AD:AB X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:61:34:7e:8e:3f:1f:59:0e:7c:02:77:ba:5f:7d:10:94:68: af:76:df:f3:cd:ba:1c:95:1d:12:31:f5:8e:1e:bb:df:df:8e: 7e:f9:3d:38:0b:b1:71:1b:df:2a:db:14:68:32:d7:32:17:dc: 35:a3:8d:ba:4b:b2:43:22:65:14:86:9c:f0:c3:43:49:53:c7: 67:3b:a8:9d:ce:eb:2a:55:da:d8:03:4e:6a:2f:05:79:b8:23: 37:85:1a:7d:df:d0:12:f6:a6:db:34:76:d7:1c:a9:3d:4d:15: 99:e2:25:ab:72:23:b4:05:88:bd:66:62:d9:3d:21:94:2a:12: e0:6e:22:b0:16:3a:a7:44:41:47:8d:4b:21:f1:10:90:40:54: d6:d5:14:da:0c:1e:9f:91:ad:3e:ef:fc:29:63:0f:44:77:19: ce:2e:59:c5:a9:65:bc:15:b0:28:31:0f:e1:25:9c:f9:f7:83: 94:0a:54:dd:46:0d:61:34:65:97:13:39:82:73:1c:e9:5f:99: 7f:ab:56:1a:0a:fb:89:e2:80:e1:5f:7a:90:60:b5:13:74:0a: 66:f4:bf:a9:7b:7b:e0:ab:3f:21:d1:9d:1c:c6:a4:95:97:89: 2a:58:31:a2:75:a0:d0:79:4d:ac:25:56:56:04:dc:80:67:e7: 58:72:24:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjUwNTEzMDQzODUzWhcNMjUwNTIwMDQzODUzWjAYMRYwFAYD VQQDEw02ODIyY2NkZC0zNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4C2X0hsXxvbFwTJM55/oI+K3sDivbzR+LDev0YDWuMtIQx7SJEJloWvR60C JgdXnhupwEt1rGnrGCYftwjvvtB39GPCmPCogV8oe7yUJt/VwsFK+gc0woABGAKW bQi0z28n4GaG/5eGPiNWZtK8cVJHfMqJQrTX14AFWhqFpz8Y6OioVP5scGWJSXSY RGyvdk2BbM7OTizhUefrd7e3QyKZK1SAHvy9na8/CmH/ij2jCG61nwrilvuhRNKf cpUCXwp3OJ1erMszXfwERWgGL8yW8AbplpmUoMgsSs6CLMU3s85z+ZFU7ZSFbFgQ vbNdaS15nDIzoSgtVzntkh72TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVGKiqT yw4hPe42Fq5h5ljsmq2rMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmYTR+jj8fWQ58Ane6X30QlGivdt/zzboclR0SMfWOHrvf345++T04 C7FxG98q2xRoMtcyF9w1o426S7JDImUUhpzww0NJU8dnO6idzusqVdrYA05qLwV5 uCM3hRp939AS9qbbNHbXHKk9TRWZ4iWrciO0BYi9ZmLZPSGUKhLgbiKwFjqnREFH jUsh8RCQQFTW1RTaDB6fka0+7/wpYw9EdxnOLlnFqWW8FbAoMQ/hJZz594OUClTd Rg1hNGWXEzmCcxzpX5l/q1YaCvuJ4oDhX3qQYLUTdApm9L+pe3vgqz8h0Z0cxqSV l4kqWDGidaDQeU2sJVZWBNyAZ+dYciSn -----END CERTIFICATE-----Generated at Wed May 14 07:47:26 2025 by rpki-client