$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json) Hash identifier: uhrN54RV32hQm4YE0G65Uiij4rqoxltscsO+elipA6s= Subject key identifier: B7:AB:91:60:81:CE:2C:27:A8:96:76:A9:A8:F7:47:71:B8:A9:CF:8E Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft Manifest number: 5D Signing time: Sun 11 May 2025 05:51:51 +0000 Manifest this update: Sun 11 May 2025 05:51:51 +0000 Manifest next update: Sun 18 May 2025 05:51:51 +0000 Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: VoiJDEaqTzKxJ6UrcQ3wnAKp0myBRzQ+TIC/+YsUOP8=) 2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: S974N0P9f8Bg6Jc7BIscRXeUqpVDlIBE/NP1Bo0j0PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Validity Not Before: May 11 05:51:51 2025 GMT Not After : May 18 05:51:51 2025 GMT Subject: CN=68203af7-4a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:c5:13:61:05:6d:0e:96:90:ed:bf:40:60: bc:d1:58:ae:26:af:31:7a:73:a1:b6:7f:5a:e2:b1: 81:83:c4:80:f4:b2:9f:d7:96:1e:43:d2:62:1c:36: 14:ba:31:f3:a1:35:82:7b:76:2a:98:3e:97:03:2f: e9:80:06:69:6f:17:16:1b:05:8d:83:a4:9c:0e:49: f3:00:fb:d7:f4:a1:6b:58:30:9f:98:ac:0f:67:f7: 02:ff:ed:f4:c8:bb:cf:aa:2e:58:96:1d:5e:ca:22: 83:b0:7a:13:db:da:ec:d5:59:6b:4f:ae:72:ac:ed: ed:52:2e:99:b6:2f:78:1c:aa:7b:4e:33:17:8f:4a: ad:d9:69:25:13:ef:a2:96:ec:de:69:f5:dd:9b:68: ac:35:0a:2d:0e:36:b5:2a:95:5f:58:9c:69:cc:39: 4b:f9:f8:2c:a0:b5:54:50:a2:4b:69:d6:4b:3b:b3: 47:dd:45:ed:49:e9:61:31:b6:16:2e:2f:0d:96:92: 6d:6d:9d:a1:63:d7:77:ae:94:eb:89:32:d5:6d:91: 6a:8a:c3:a5:f0:8b:1c:9e:15:19:f2:af:e7:26:56: 36:c5:bb:a3:37:8c:26:fc:f8:75:19:a6:db:c3:cc: 5d:a1:f1:d8:1a:e2:ad:df:d0:83:a4:d3:30:2c:d8: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AB:91:60:81:CE:2C:27:A8:96:76:A9:A8:F7:47:71:B8:A9:CF:8E X509v3 Authority Key Identifier: keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:65:61:d4:5d:c1:f6:39:5e:25:72:23:0e:0c:d0:d9:ac:2f: a8:1c:fc:09:28:f0:f5:bf:fa:0d:99:55:12:52:3b:5d:49:b8: 9e:0a:21:4e:64:6a:ef:5e:5b:98:8f:29:77:a3:50:67:18:45: 7f:e7:34:50:b8:95:d6:68:cf:63:79:c3:26:34:5f:3c:eb:eb: fa:70:53:ba:38:e3:42:64:92:a8:cf:d5:75:6c:4f:42:1b:30: 78:bf:19:61:4c:a6:a8:09:13:05:4c:fc:e5:35:1b:bb:95:b8: b6:f1:b1:05:dd:e7:2d:35:94:b8:b8:96:0f:c8:39:3f:9e:5a: 46:30:dc:25:8b:9d:b3:5a:68:51:53:2d:f6:93:07:64:1f:08: 24:6f:49:de:83:4b:c0:3a:9d:0e:d1:b4:f0:24:d5:54:b1:e5: 8b:23:dd:e1:a6:26:35:d0:cc:dc:bb:90:98:87:8e:d3:9c:a3: 0b:22:fc:a6:1f:7c:1f:20:1c:51:dd:ea:d5:d6:d8:ee:10:29: f5:18:24:ca:c1:f5:94:62:db:bc:8b:68:8d:a8:02:c0:a8:bf: 58:b1:ab:51:41:dd:ed:d1:2b:e8:07:3b:ba:52:d5:a7:46:e3: 12:d2:58:94:c7:fb:60:30:12:40:49:71:15:9c:47:06:9c:77: b6:1e:08:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzUzNzExMC8GA1UEBRMoMjEwOTQ2Q0RBOURFNzVERUY5NjA5ODk1RkJGMjFFRDg0 QzcyRjRFNzAeFw0yNTA1MTEwNTUxNTFaFw0yNTA1MTgwNTUxNTFaMBgxFjAUBgNV BAMTDTY4MjAzYWY3LTRhNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8CcUTYQVtDpaQ7b9AYLzRWK4mrzF6c6G2f1risYGDxID0sp/Xlh5D0mIcNhS6 MfOhNYJ7diqYPpcDL+mABmlvFxYbBY2DpJwOSfMA+9f0oWtYMJ+YrA9n9wL/7fTI u8+qLliWHV7KIoOwehPb2uzVWWtPrnKs7e1SLpm2L3gcqntOMxePSq3ZaSUT76KW 7N5p9d2baKw1Ci0ONrUqlV9YnGnMOUv5+CygtVRQoktp1ks7s0fdRe1J6WExthYu Lw2Wkm1tnaFj13eulOuJMtVtkWqKw6XwixyeFRnyr+cmVjbFu6M3jCb8+HUZptvD zF2h8dga4q3f0IOk0zAs2KG7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt6uRYIHO LCeolnapqPdHcbipz44wHwYDVR0jBBgwFoAUIQlGzanedd75YJiV+/Ie2Exy9Ocw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3Lzg3REQ1NDhDQTI3 MTExRUZBMzkyRjA3OUM0RjlBRTAyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlP Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVFsR3phbmVkZDc1WUppVi1fSWUyRXh5OU9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTM3Lzg3REQ1NDhDQTI3MTExRUZBMzkyRjA3OUM0RjlBRTAyL0lRbEd6YW5lZGQ3 NVlKaVYtX0llMkV4eTlPYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGplYdRdwfY5XiVyIw4M0NmsL6gc/Ako8PW/+g2ZVRJSO11JuJ4KIU5k au9eW5iPKXejUGcYRX/nNFC4ldZoz2N5wyY0Xzzr6/pwU7o440JkkqjP1XVsT0Ib MHi/GWFMpqgJEwVM/OU1G7uVuLbxsQXd5y01lLi4lg/IOT+eWkYw3CWLnbNaaFFT LfaTB2QfCCRvSd6DS8A6nQ7RtPAk1VSx5Ysj3eGmJjXQzNy7kJiHjtOcowsi/KYf fB8gHFHd6tXW2O4QKfUYJMrB9ZRi27yLaI2oAsCov1ixq1FB3e3RK+gHO7pS1adG 4xLSWJTH+2AwEkBJcRWcRwacd7YeCEs= -----END CERTIFICATE-----Generated at Mon May 12 12:50:59 2025 by rpki-client