$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: ru0v8mE3I1Wic7eyC4hHu+Wfdq10Xn/9OV+gYqfGX3Y= Subject key identifier: 40:A0:27:1A:1D:05:F9:3F:17:91:DF:D3:8E:A5:7A:08:6C:4A:F4:0B Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 2775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2726 Signing time: Mon 12 May 2025 15:38:30 +0000 Manifest this update: Mon 12 May 2025 15:38:29 +0000 Manifest next update: Mon 19 May 2025 15:38:29 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: RmWDp9YV4hWYBp+zIz1QFxlTlFEWhYz41cI5iaJhc2E=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: UoNQyiMbzRM8LTAnCH5+6vt93Lw53vJESQHvBWYcjss=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: cpPBl2HZl2WMGx0/E7w0QxRgBvloFKsPNiFCwchG+b8=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: gUaglzjVEo/jAQam5U3T7T5H9G5lSnkvKcItCzMbsY0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: lXtCcZI3WY8OIlNn2pthb5U4nO4x25l4CIfkoHRn3ik=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: g3qXc5xzXRuZuGvrf+0l5unc13/FwmeQdJGJ36GeWJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10101 (0x2775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: May 12 15:38:29 2025 GMT Not After : May 19 15:38:29 2025 GMT Subject: CN=682215f6-5b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:38:6c:1d:72:e8:76:85:d9:2d:23:84:9c: 53:8c:b1:22:8c:01:38:ca:ff:dd:d8:c8:3c:40:f3: db:1b:f4:72:90:02:89:01:90:63:38:e6:c8:b8:4c: 11:4f:cd:99:6a:f2:07:78:3c:90:c9:e9:d9:67:ac: 80:f3:1c:cd:b6:d4:a7:d5:5f:c7:06:6c:4b:f0:ca: 34:eb:3e:48:23:56:4c:fa:72:a8:2a:8c:38:f5:d2: e4:a9:4b:fc:32:58:c8:34:0f:08:ae:cb:d4:d2:4a: 36:8c:fc:39:06:57:65:de:f4:9b:cd:71:6b:b1:28: 35:b6:b2:3a:b6:01:56:fc:b5:98:aa:65:73:ee:5a: d0:dd:88:0d:67:fb:01:08:40:ed:ba:6c:0b:a0:e2: 2d:93:6a:5d:26:fa:5a:a5:cf:ab:ca:b0:9a:d6:51: d6:28:ca:38:1f:76:39:6b:c8:4a:51:5e:fa:40:e4: af:48:75:63:36:1f:ad:86:85:88:60:cf:eb:14:13: 93:92:eb:3a:f8:70:39:54:dd:83:ea:aa:ba:f7:fa: 60:8e:ea:6b:91:35:2f:67:fe:cd:3f:17:5c:a6:3e: 6b:3b:8a:cc:9d:64:86:e7:30:59:0c:6a:c3:7a:51: b3:7e:0c:04:5d:46:b8:bf:65:9b:c4:d3:c3:f2:06: cc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A0:27:1A:1D:05:F9:3F:17:91:DF:D3:8E:A5:7A:08:6C:4A:F4:0B X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a6:bd:86:71:d4:36:9a:10:0c:ac:97:d1:17:a5:fd:5b:50: 0b:23:c7:7a:2f:86:58:0c:f6:34:c4:51:6b:b5:a5:fa:6a:bb: 92:4e:7d:42:17:c5:0a:8b:45:3e:e2:d3:08:9e:d4:a4:24:2a: 18:21:be:e9:a3:25:07:aa:56:b1:28:87:44:44:45:41:fd:20: 4b:5c:71:4d:42:6d:27:1d:0b:3c:1c:53:92:18:d7:d7:f9:97: 55:50:12:cd:ec:cd:f4:45:ad:ff:0b:8f:5b:20:b7:a3:22:0d: 89:8c:aa:97:d8:8e:37:13:a8:29:3e:e4:a7:f6:52:a4:09:c6: 79:08:e9:b3:61:3b:16:39:40:cd:1f:99:d7:32:32:c6:17:08: 3a:94:aa:e5:15:3b:22:43:56:f4:d4:99:c7:bb:3d:88:87:8c: 9a:b9:26:b6:62:67:f3:ae:d1:61:ac:ef:aa:7a:bf:68:59:08: a8:09:ef:94:02:52:2c:df:5d:57:26:ca:f7:5b:d4:d9:5b:17: 48:fe:5d:d5:8c:36:dd:ca:74:fe:e3:1d:f9:a9:b7:ba:75:4d: b7:3b:4c:17:94:b9:c9:9a:ef:44:a5:0e:65:14:08:bc:da:50: f7:74:c5:ac:5b:7c:a5:66:72:05:4b:a2:44:d0:7f:d3:91:71: 77:a9:47:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwNTEyMTUzODI5WhcNMjUwNTE5MTUzODI5WjAYMRYwFAYD VQQDEw02ODIyMTVmNi01YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQc4bB1y6HaF2S0jhJxTjLEijAE4yv/d2Mg8QPPbG/RykAKJAZBjOObIuEwR T82ZavIHeDyQyenZZ6yA8xzNttSn1V/HBmxL8Mo06z5II1ZM+nKoKow49dLkqUv8 MljINA8IrsvU0ko2jPw5Bldl3vSbzXFrsSg1trI6tgFW/LWYqmVz7lrQ3YgNZ/sB CEDtumwLoOItk2pdJvpapc+ryrCa1lHWKMo4H3Y5a8hKUV76QOSvSHVjNh+thoWI YM/rFBOTkus6+HA5VN2D6qq69/pgjuprkTUvZ/7NPxdcpj5rO4rMnWSG5zBZDGrD elGzfgwEXUa4v2WbxNPD8gbMiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECgJxod Bfk/F5Hf046leghsSvQLMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqpr2GcdQ2mhAMrJfRF6X9W1ALI8d6L4ZYDPY0xFFrtaX6aruSTn1C F8UKi0U+4tMIntSkJCoYIb7poyUHqlaxKIdEREVB/SBLXHFNQm0nHQs8HFOSGNfX +ZdVUBLN7M30Ra3/C49bILejIg2JjKqX2I43E6gpPuSn9lKkCcZ5COmzYTsWOUDN H5nXMjLGFwg6lKrlFTsiQ1b01JnHuz2Ih4yauSa2YmfzrtFhrO+qer9oWQioCe+U AlIs311XJsr3W9TZWxdI/l3VjDbdynT+4x35qbe6dU23O0wXlLnJmu9EpQ5lFAi8 2lD3dMWsW3ylZnIFS6JE0H/TkXF3qUel -----END CERTIFICATE-----Generated at Tue May 13 23:04:51 2025 by rpki-client