$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json) Hash identifier: mfXH0A3ST6OI13FPxQ2y5wua4EeegmTSzPwYGz1mrLw= Subject key identifier: 55:8F:0A:D7:B7:34:03:08:E9:D2:0B:AB:C6:E8:47:3B:51:D5:66:33 Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft Manifest number: 3478 Signing time: Wed 14 May 2025 14:50:53 +0000 Manifest this update: Wed 14 May 2025 14:50:52 +0000 Manifest next update: Wed 21 May 2025 14:50:52 +0000 Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: C9ij1j4AxKzjUr9uPdpZbAxLci1C6xODFad0MjJhH7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Validity Not Before: May 14 14:50:52 2025 GMT Not After : May 21 14:50:52 2025 GMT Subject: CN=6824adcc-c8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:03:5a:f8:6c:c2:d9:b3:0a:ff:af:b9:8c: cf:53:fb:a1:61:2a:1a:9e:ea:6e:ef:96:d6:74:eb: 1c:c6:42:25:a2:79:8d:dc:fa:1c:f2:af:eb:61:3d: 1e:2b:0f:72:49:87:f4:71:e5:3b:35:53:20:63:ef: e1:f3:e3:dd:b6:39:55:2e:68:bb:3a:09:2a:8f:e1: 8e:7f:9a:bd:e0:2d:df:95:f4:02:21:96:b2:33:1b: 15:62:69:d3:31:5b:2f:58:d5:8c:3b:8f:62:12:ad: dd:dd:20:ea:c5:23:7d:ac:c1:7d:6d:13:5d:b0:09: db:91:fc:bc:e0:53:95:93:5e:e1:3f:20:d3:cf:66: 82:e0:d0:b9:90:af:17:c1:db:96:6b:60:84:3c:0f: a2:67:82:91:ca:7a:ee:e7:90:17:4e:01:50:2a:ea: e2:00:dd:6e:3e:4f:18:62:eb:46:5a:c9:d9:57:e0: 3f:40:f6:1f:6c:de:2f:18:05:9a:a9:95:60:6b:01: 57:3f:80:2b:78:b7:7e:36:16:92:79:73:5e:2d:72: 7c:95:31:57:15:85:34:33:e6:9b:62:be:5f:fb:bd: 2d:55:3f:d6:c6:7c:28:b7:23:1f:5b:2c:4f:42:c3: 48:b2:3e:e9:db:52:b1:96:10:8e:a6:2c:25:84:96: 08:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8F:0A:D7:B7:34:03:08:E9:D2:0B:AB:C6:E8:47:3B:51:D5:66:33 X509v3 Authority Key Identifier: keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a6:79:ed:3f:96:56:91:58:3a:8c:bb:8f:90:c9:a9:75:5b: 15:e5:20:4d:99:35:8f:e7:db:79:60:8c:1a:9c:53:38:b5:ce: c4:cd:e7:df:9c:3f:bb:ae:35:65:f2:ee:29:8a:c4:20:09:ad: 75:2c:26:b2:b8:f8:8d:8d:9e:6b:e5:96:da:4f:66:99:8b:6b: 08:bf:02:d7:b0:aa:56:87:39:d0:a3:09:34:6a:59:e7:53:7a: f1:12:80:87:40:be:34:7b:d3:3f:4a:2f:ff:40:a4:e1:39:0b: f5:25:43:9f:f0:ff:1f:be:59:8c:a1:6d:e6:29:cf:5c:8a:58: 50:ae:47:35:10:a9:ac:05:7d:90:cc:7e:b5:20:3d:d1:5b:9b: c8:5d:7f:02:86:13:bf:19:56:89:c1:64:e2:b6:7d:66:69:47: ac:3f:5b:16:11:53:25:f3:f0:06:5e:9e:a8:c4:9f:f8:46:0a: 22:7b:d1:f5:fe:d2:88:5a:c3:fb:8d:4b:95:ea:4a:c6:21:75: be:e0:20:dc:27:0b:eb:62:9c:e9:4b:5b:b7:70:04:91:cc:64: 2c:31:d3:41:17:31:54:25:8c:d5:fb:45:78:48:c2:20:ef:b2: fe:64:05:62:1c:0d:37:0d:a2:bd:93:4f:92:62:31:d6:75:71: df:88:56:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyMzQxMTAvBgNVBAUTKDg5MEExRTVDQ0MxRUM2QzdDRTFFQTcxRjQ5MTI5MTFG NTk5Mjg2QjIwHhcNMjUwNTE0MTQ1MDUyWhcNMjUwNTIxMTQ1MDUyWjAYMRYwFAYD VQQDEw02ODI0YWRjYy1jOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlQDWvhswtmzCv+vuYzPU/uhYSoanupu75bWdOscxkIlonmN3Poc8q/rYT0e Kw9ySYf0ceU7NVMgY+/h8+PdtjlVLmi7Ogkqj+GOf5q94C3flfQCIZayMxsVYmnT MVsvWNWMO49iEq3d3SDqxSN9rMF9bRNdsAnbkfy84FOVk17hPyDTz2aC4NC5kK8X wduWa2CEPA+iZ4KRynru55AXTgFQKuriAN1uPk8YYutGWsnZV+A/QPYfbN4vGAWa qZVgawFXP4AreLd+NhaSeXNeLXJ8lTFXFYU0M+abYr5f+70tVT/WxnwotyMfWyxP QsNIsj7p21KxlhCOpiwlhJYI+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWPCte3 NAMI6dILq8boRztR1WYzMB8GA1UdIwQYMBaAFIkKHlzMHsbHzh6nH0kSkR9Zkoay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjIzNC81MjI1NjkxNDFE OTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhzZk9IcWNmU1JLUkgxbVNo ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRb2VYTXdleHNmT0hxY2ZTUktSSDFtU2hySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjIzNC81MjI1NjkxNDFEOTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhz Zk9IcWNmU1JLUkgxbVNockkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLpnntP5ZWkVg6jLuPkMmpdVsV5SBNmTWP59t5YIwanFM4tc7Ezeff nD+7rjVl8u4pisQgCa11LCayuPiNjZ5r5ZbaT2aZi2sIvwLXsKpWhznQowk0alnn U3rxEoCHQL40e9M/Si//QKThOQv1JUOf8P8fvlmMoW3mKc9cilhQrkc1EKmsBX2Q zH61ID3RW5vIXX8ChhO/GVaJwWTitn1maUesP1sWEVMl8/AGXp6oxJ/4Rgoie9H1 /tKIWsP7jUuV6krGIXW+4CDcJwvrYpzpS1u3cASRzGQsMdNBFzFUJYzV+0V4SMIg 77L+ZAViHA03DaK9k0+SYjHWdXHfiFbY -----END CERTIFICATE-----Generated at Fri May 16 06:29:27 2025 by rpki-client