$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: Z9DyhpasXr2En0MFBJYg6yZSTwhwxaMWTVHRYwGiAGI= Subject key identifier: 1B:AF:CC:60:CC:D8:17:92:E2:E9:17:AA:7E:C0:72:33:89:2D:31:40 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 0725 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 06AC Signing time: Thu 08 May 2025 22:23:23 +0000 Manifest this update: Thu 08 May 2025 22:23:22 +0000 Manifest next update: Thu 15 May 2025 22:23:22 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: 9baCDcLd3TKa09v95GV3A7PDnRxmOQQySBrQDudctY0=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: gLMJhNvQtjkqWgYHOYJrflnpuLe5m/iNQsn8pAjqC+o=) 3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) 4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) 7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: IjGCmqfeR6dWCwkTJerprQJ5jh4UJlY6ZGEM3z029yo=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: 47tXXOX+6JbaiLW8oz6RWvc/L98lvJJCB2C4ifvRS0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1829 (0x725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: May 8 22:23:22 2025 GMT Not After : May 15 22:23:22 2025 GMT Subject: CN=681d2eda-e7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:30:29:92:c9:06:d4:0c:c6:22:48:5b:9e:3f: 62:94:b7:b4:df:85:a4:00:db:7b:80:73:57:6a:0a: 09:7c:d9:a7:34:da:04:40:e3:34:40:bb:a7:f5:0d: 65:c2:82:8f:d5:b2:76:72:ef:be:12:3b:04:36:67: 2f:b5:95:72:fd:8e:25:1a:f5:82:f9:69:b8:b4:94: a6:ac:36:b3:6a:e9:f6:3d:44:a4:a8:51:87:a3:89: 94:aa:7d:d2:a2:44:77:6a:7a:db:8e:47:2e:fd:3c: c4:f9:04:e9:af:a3:9e:8d:7e:d6:36:cf:96:75:18: 07:f3:04:57:43:50:a7:cc:a2:5c:6a:ef:64:12:84: da:57:88:a0:8e:38:cd:51:9e:3e:d7:47:02:98:0c: b8:bd:77:81:4e:bf:49:41:10:ec:61:e1:aa:50:d0: 1c:60:53:28:2a:05:61:ee:c9:74:8c:1e:d6:43:7b: 6a:3a:de:c8:a2:4b:be:5e:58:60:e7:fc:11:0f:c1: c8:ea:7d:75:cf:b7:76:d7:6a:0b:1a:51:eb:00:fc: 7b:45:a4:cf:f1:55:4d:13:83:8b:b0:66:aa:1f:31: 6a:d3:68:7a:6e:40:5e:00:7e:e7:44:b9:8b:3e:98: 54:55:79:4f:de:d0:72:11:18:52:f4:ed:8b:83:f4: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AF:CC:60:CC:D8:17:92:E2:E9:17:AA:7E:C0:72:33:89:2D:31:40 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f2:e3:9c:0f:c9:5b:40:7b:82:8c:e1:72:ab:ea:18:2b:b3: 68:33:56:7e:8e:e8:73:39:bd:57:89:d5:cb:42:24:d0:b5:17: cd:fa:9d:8f:cd:8d:93:50:c4:cb:9d:2e:dc:33:4d:f5:2a:31: 15:cb:1c:e1:25:33:8f:c0:c1:c3:6a:22:37:43:8e:c4:5b:85: 54:83:b1:d7:78:c5:c3:2f:7f:ef:e1:fe:05:44:42:ec:03:33: 35:7c:8e:05:90:d4:df:06:01:8f:13:75:11:af:dc:dc:47:81: 99:ab:5f:91:54:69:c9:1e:72:c4:a8:ef:e1:72:5d:e1:0c:53: 48:df:3d:02:47:2b:fe:ea:c2:d4:0d:e0:52:2f:6d:45:a2:b8: 1a:f2:a9:aa:b8:27:62:6e:66:a3:2a:86:58:14:24:cf:41:e1: 65:fa:41:e9:23:12:ce:93:33:95:60:df:87:f6:ea:d4:5a:7c: 30:71:9a:b8:a0:d0:d9:9d:1f:6f:ce:f3:f0:74:47:32:10:86: 75:d9:9a:2b:24:92:7c:31:c7:57:0b:89:c9:fd:b7:96:d1:85: cd:87:c9:6e:eb:c4:ea:47:a7:65:4e:ee:7c:28:ba:00:67:d8: 04:b6:e1:da:6d:2f:fa:1a:cc:4c:bf:8a:bc:a8:82:db:34:9d: 22:2e:8d:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwNTA4MjIyMzIyWhcNMjUwNTE1MjIyMzIyWjAYMRYwFAYD VQQDEw02ODFkMmVkYS1lN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8zApkskG1AzGIkhbnj9ilLe034WkANt7gHNXagoJfNmnNNoEQOM0QLun9Q1l woKP1bJ2cu++EjsENmcvtZVy/Y4lGvWC+Wm4tJSmrDazaun2PUSkqFGHo4mUqn3S okR3anrbjkcu/TzE+QTpr6OejX7WNs+WdRgH8wRXQ1CnzKJcau9kEoTaV4igjjjN UZ4+10cCmAy4vXeBTr9JQRDsYeGqUNAcYFMoKgVh7sl0jB7WQ3tqOt7Ioku+Xlhg 5/wRD8HI6n11z7d212oLGlHrAPx7RaTP8VVNE4OLsGaqHzFq02h6bkBeAH7nRLmL PphUVXlP3tByERhS9O2Lg/R2xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuvzGDM 2BeS4ukXqn7AcjOJLTFAMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz8uOcD8lbQHuCjOFyq+oYK7NoM1Z+juhzOb1XidXLQiTQtRfN+p2P zY2TUMTLnS7cM031KjEVyxzhJTOPwMHDaiI3Q47EW4VUg7HXeMXDL3/v4f4FRELs AzM1fI4FkNTfBgGPE3URr9zcR4GZq1+RVGnJHnLEqO/hcl3hDFNI3z0CRyv+6sLU DeBSL21Forga8qmquCdibmajKoZYFCTPQeFl+kHpIxLOkzOVYN+H9urUWnwwcZq4 oNDZnR9vzvPwdEcyEIZ12ZorJJJ8McdXC4nJ/beW0YXNh8lu68TqR6dlTu58KLoA Z9gEtuHabS/6GsxMv4q8qILbNJ0iLo2s -----END CERTIFICATE-----Generated at Sat May 10 19:17:30 2025 by rpki-client