$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json) Hash identifier: ZQ/lgCPW7UOWLdVC0Vp9MbU0rKEWxrcHxN93yxmCLts= Subject key identifier: AC:CD:5B:51:A3:1A:09:32:06:2A:97:C8:0A:AF:69:18:D6:9A:88:82 Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft Manifest number: 01FF Signing time: Fri 09 May 2025 01:47:55 +0000 Manifest this update: Fri 09 May 2025 01:47:54 +0000 Manifest next update: Fri 16 May 2025 01:47:54 +0000 Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: bwS9gQG+4jUM4Un/3kbA5sZrC3Zj+StzMohLUvA8gXo=) 2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=) 3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 01:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: May 9 01:47:54 2025 GMT Not After : May 16 01:47:54 2025 GMT Subject: CN=681d5ecb-d306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:cc:3d:10:4d:6b:cb:f9:01:75:f7:fa:1c: 21:a4:52:ab:52:68:1e:b2:ef:7f:15:8d:e5:ad:f5: 6a:76:d9:f1:e0:37:d2:33:fd:a3:34:3f:fd:f0:c7: 1e:e9:ff:23:8a:29:c8:79:67:1e:d3:5a:06:ac:57: a9:d7:6f:b4:be:77:b2:50:28:68:16:cb:74:52:53: fb:7f:40:e6:c2:b4:7d:5b:ac:7f:60:f3:82:6c:98: 1f:14:86:05:52:53:33:d9:b9:e3:3d:9f:71:88:e5: 6a:cc:f3:1a:90:de:02:a9:c9:bb:45:d7:5d:df:a5: 0f:61:bc:e7:d6:de:6d:9c:4f:74:0f:ed:19:3f:d9: 5d:dc:67:9a:27:ae:91:d7:91:77:f9:32:5c:d5:c2: 03:30:ec:cb:f8:ae:4a:1d:3e:d0:fb:b2:bc:be:b3: 68:7d:9a:c9:d4:56:eb:fc:7f:89:55:4a:a5:2f:19: d0:2e:a0:e5:c0:11:b8:ed:e6:d5:da:32:d0:12:c1: db:2f:7d:41:03:5e:58:1b:de:d7:0a:9b:f2:f4:fd: c5:4f:ff:c9:dd:38:15:f8:db:78:46:eb:c8:e0:26: 01:66:fd:31:21:66:c1:ba:4f:b9:a2:e7:72:fc:9a: c6:fe:1f:b1:99:8c:1e:f1:56:ad:50:8f:0e:4a:f0: c9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CD:5B:51:A3:1A:09:32:06:2A:97:C8:0A:AF:69:18:D6:9A:88:82 X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:62:a6:ed:71:8c:78:5f:bd:e0:5d:8e:b3:ff:36:45:91:15: ab:62:e1:32:2c:de:26:93:48:3d:ad:87:02:c2:fd:b9:61:f4: e7:83:d6:d6:f8:53:5b:f3:4e:43:29:83:c9:7a:70:25:57:a9: 33:82:64:b9:53:aa:a1:fe:0b:91:31:0b:9e:a2:65:33:f1:78: 45:93:15:79:5b:32:51:b9:d0:66:d8:fa:34:92:a9:79:54:d3: 1d:99:aa:d1:30:10:b1:5a:12:34:d4:a1:50:9a:63:23:50:f5: b4:c9:6a:78:8d:87:46:3f:aa:ff:9b:e1:d5:10:6b:26:b0:68: d6:be:8f:10:3e:70:6d:cc:dd:8a:42:da:cd:1e:7d:1a:cd:eb: 40:1a:d9:3f:de:99:5e:29:f4:31:c8:6f:37:30:ae:df:f2:ef: 52:af:9a:c6:29:24:7e:07:ed:e8:21:70:44:4e:8e:a9:b7:02: e1:be:3f:a3:53:2b:ff:49:66:8b:03:5f:88:6d:f8:44:6a:c4: d4:d6:8e:df:41:ed:4e:bd:0d:ca:6a:df:aa:cb:97:26:13:47: bd:40:93:1c:f6:ef:87:32:22:69:4b:b2:a9:64:2a:01:82:6e: 1a:06:62:ca:47:0d:bd:27:13:36:ac:85:c2:d5:71:57:9f:a9: de:f1:27:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjUwNTA5MDE0NzU0WhcNMjUwNTE2MDE0NzU0WjAYMRYwFAYD VQQDEw02ODFkNWVjYi1kMzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdfMPRBNa8v5AXX3+hwhpFKrUmgesu9/FY3lrfVqdtnx4DfSM/2jND/98Mce 6f8jiinIeWce01oGrFep12+0vneyUChoFst0UlP7f0DmwrR9W6x/YPOCbJgfFIYF UlMz2bnjPZ9xiOVqzPMakN4Cqcm7Rddd36UPYbzn1t5tnE90D+0ZP9ld3GeaJ66R 15F3+TJc1cIDMOzL+K5KHT7Q+7K8vrNofZrJ1Fbr/H+JVUqlLxnQLqDlwBG47ebV 2jLQEsHbL31BA15YG97XCpvy9P3FT//J3TgV+Nt4RuvI4CYBZv0xIWbBuk+5oudy /JrG/h+xmYwe8VatUI8OSvDJcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzNW1Gj GgkyBiqXyAqvaRjWmoiCMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq VUpua2hEUElKSmVobDduWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgYqbtcYx4X73gXY6z/zZFkRWrYuEyLN4mk0g9rYcCwv25YfTng9bW +FNb805DKYPJenAlV6kzgmS5U6qh/guRMQueomUz8XhFkxV5WzJRudBm2Po0kql5 VNMdmarRMBCxWhI01KFQmmMjUPW0yWp4jYdGP6r/m+HVEGsmsGjWvo8QPnBtzN2K QtrNHn0azetAGtk/3pleKfQxyG83MK7f8u9Sr5rGKSR+B+3oIXBETo6ptwLhvj+j Uyv/SWaLA1+IbfhEasTU1o7fQe1OvQ3Kat+qy5cmE0e9QJMc9u+HMiJpS7KpZCoB gm4aBmLKRw29JxM2rIXC1XFXn6ne8Se5 -----END CERTIFICATE-----Generated at Sat May 10 09:48:34 2025 by rpki-client