$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: MtUNrcsDU304/qlREUxYoSFeq9kCfdNuXgeVnfpish0= Subject key identifier: 5C:B4:99:C8:C4:13:F1:6E:6F:FC:80:34:02:DD:FE:41:29:6B:87:6D Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 04E3 Signing time: Sat 17 May 2025 00:00:16 +0000 Manifest this update: Sat 17 May 2025 00:00:15 +0000 Manifest next update: Sat 24 May 2025 00:00:15 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: CrDqamHAvQ7FBH8Ih4f1xru2MXc0+fYvgltYnhuBtow=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: May 17 00:00:15 2025 GMT Not After : May 24 00:00:15 2025 GMT Subject: CN=6827d18f-e3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:27:dc:26:27:0b:12:b7:f5:f1:20:77:88: 2e:ae:58:90:17:4b:6c:7f:28:d2:a4:c7:82:a9:4b: bd:25:f2:99:44:c2:5b:c2:4b:e3:e5:b4:46:bb:08: 3b:83:5d:7c:23:2e:fc:bf:08:b7:bc:b5:f0:ae:84: 59:4e:08:88:73:76:7e:9b:45:d4:f9:04:af:54:0d: ec:6c:88:14:77:6e:b1:9d:02:17:a1:7b:92:40:73: 3c:14:ef:dc:83:e7:ce:8b:61:3c:60:39:f1:3d:5f: d3:ce:9c:e2:fa:95:f2:cd:fb:c1:5a:ec:2c:fc:46: c6:9a:a2:e1:dd:34:a4:98:1c:47:67:5c:58:96:b4: b7:a9:36:81:28:c2:1b:21:6f:a7:41:be:35:e4:d1: 14:ba:36:df:ba:4e:85:65:c7:9c:04:c5:7a:24:74: 14:1f:40:ce:a3:b0:21:c3:9f:74:c1:ec:f2:eb:75: 42:8d:d3:36:35:02:5e:91:f7:d8:e4:bc:d0:5a:3d: d9:26:f3:94:be:22:0a:6c:a0:b9:50:83:88:06:c4: e3:83:af:d2:8f:2a:f1:17:18:41:a7:da:a9:9c:a9: b1:10:71:6e:c8:04:28:1d:39:ef:26:ff:7d:f2:66: 29:5d:8d:ba:bd:7f:81:b0:a8:49:af:c8:4c:79:88: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B4:99:C8:C4:13:F1:6E:6F:FC:80:34:02:DD:FE:41:29:6B:87:6D X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:1d:b8:85:0a:81:31:6b:2e:0a:83:28:b3:d7:90:c4:b8:87: 6a:95:43:88:6c:36:6f:8f:fb:1e:4d:d2:71:1d:37:11:ed:4f: 22:d1:e6:54:b1:9f:e2:c4:f0:02:56:93:61:ab:b8:31:5f:a6: 05:80:03:00:06:68:f7:6e:77:10:d9:c5:94:01:ad:f6:a0:2e: 66:d2:4c:b1:8b:1d:a5:aa:70:ad:40:d4:b4:df:f4:92:80:ea: 53:aa:ba:f5:bb:ff:32:a6:04:11:dd:f6:0b:13:df:8c:7f:92: a2:51:03:d1:8c:ac:a2:0b:6a:aa:22:45:56:36:6a:68:91:27: d9:29:f9:c0:14:15:36:57:b4:61:bc:3a:4a:03:13:4b:1a:ca: 39:28:f0:33:5e:58:52:6a:cf:7e:7f:d6:4c:7a:99:f4:aa:e2: 57:40:e1:42:51:cb:3c:a2:3d:9a:6f:97:64:c4:ba:5a:c2:2d: 66:3f:06:f5:83:c9:a2:94:71:f5:f5:78:1c:ee:17:24:3f:12: e4:70:a2:79:33:a9:b2:04:45:c9:65:f8:c7:47:9c:f6:41:02: be:e3:d0:5a:78:9b:13:63:99:69:be:7d:30:a0:04:68:a3:15: fd:9d:97:ce:0b:74:23:c8:52:62:6b:8d:1e:c8:d9:d0:2d:4b: d3:a2:c3:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUwNTE3MDAwMDE1WhcNMjUwNTI0MDAwMDE1WjAYMRYwFAYD VQQDEw02ODI3ZDE4Zi1lM2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ8n3CYnCxK39fEgd4gurliQF0tsfyjSpMeCqUu9JfKZRMJbwkvj5bRGuwg7 g118Iy78vwi3vLXwroRZTgiIc3Z+m0XU+QSvVA3sbIgUd26xnQIXoXuSQHM8FO/c g+fOi2E8YDnxPV/Tzpzi+pXyzfvBWuws/EbGmqLh3TSkmBxHZ1xYlrS3qTaBKMIb IW+nQb415NEUujbfuk6FZcecBMV6JHQUH0DOo7Ahw590wezy63VCjdM2NQJekffY 5LzQWj3ZJvOUviIKbKC5UIOIBsTjg6/SjyrxFxhBp9qpnKmxEHFuyAQoHTnvJv99 8mYpXY26vX+BsKhJr8hMeYi9PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy0mcjE E/Fub/yANALd/kEpa4dtMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpHbiFCoExay4Kgyiz15DEuIdqlUOIbDZvj/seTdJxHTcR7U8i0eZU sZ/ixPACVpNhq7gxX6YFgAMABmj3bncQ2cWUAa32oC5m0kyxix2lqnCtQNS03/SS gOpTqrr1u/8ypgQR3fYLE9+Mf5KiUQPRjKyiC2qqIkVWNmpokSfZKfnAFBU2V7Rh vDpKAxNLGso5KPAzXlhSas9+f9ZMepn0quJXQOFCUcs8oj2ab5dkxLpawi1mPwb1 g8milHH19Xgc7hckPxLkcKJ5M6myBEXJZfjHR5z2QQK+49BaeJsTY5lpvn0woARo oxX9nZfOC3QjyFJia40eyNnQLUvTosO1 -----END CERTIFICATE-----Generated at Sat May 17 16:46:32 2025 by rpki-client