$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: yaqKqcan7U93Dg7piXe9P55nkcaueGb6xw8Bi+De5hk= Subject key identifier: F0:66:50:F9:52:0D:36:A8:C7:CD:43:B3:B9:58:33:AB:4D:3D:96:C9 Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 0192 Signing time: Fri 25 Apr 2025 03:11:01 +0000 Manifest this update: Fri 25 Apr 2025 03:11:00 +0000 Manifest next update: Fri 02 May 2025 03:11:00 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: UpN3matUifgBL1NWzpNRj9ZhzDsC/fq1YFKfh5TtHrg=) 2: 50F934AEFFCE11EEAF1CA783C4F9AE02.roa (hash: sVvAJAto5nS+PJW2xudvaNZimEOtDLNCZ3HK4HpuOtY=) 3: 41BE8C60BF7211EE8D281E83C4F9AE02.roa (hash: EFlPTIDh/flAQJr1anznK2j9MXoucgVjlIwMhZopTcg=) 4: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: dnFPJnob0iVhfZy+h628YHTmIBu/2rM+XDutXFD80e0=) 5: F95B12AEBF7111EE806CB182C4F9AE02.roa (hash: LVpmryw+uYS24nJeG/+qspxNYBu9ZoQZ5h3e0ahfWXo=) 6: 8692D090BF7111EE95DFE981C4F9AE02.roa (hash: Wpe5PworCum/nFcap1/E1+zKePOZQIpIAtfCfOVXg7s=) 7: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: KHuTzz/kFiU3cRoYtOMYxj6wU6aR+DEFWLsHndFiGX4=) 8: 20127C7C120411EF91CB6459C4F9AE02.roa (hash: EGjFAKrOA7ymJav4jaslQmpl/cbPT+voPNs5hCTYUM4=) 9: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: pS29Ljdr6W25s2Hduyo4rCqyFsm2/2KQ7prNwHso1r0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Apr 25 03:11:00 2025 GMT Not After : May 2 03:11:00 2025 GMT Subject: CN=680afd44-2002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:b8:cc:50:3b:fb:42:f4:92:9a:71:47:b7: 14:cb:41:6d:d3:c7:33:a4:29:12:5f:b1:a5:c0:5e: 03:b2:d1:d4:40:d7:81:2d:97:66:cf:46:81:90:0b: a5:e9:25:ff:cf:37:7d:d9:1a:91:a6:6d:14:b2:8f: 0f:e6:4c:2d:01:74:28:b8:13:b6:c1:03:45:44:90: bf:30:a4:6a:b2:18:51:bd:15:6a:da:5f:28:3b:1b: 9d:53:19:18:61:53:31:09:95:1d:8b:22:84:3b:07: b9:11:d5:ed:dd:c5:8e:a5:ec:80:dd:ff:cd:9b:27: e5:ea:b2:ec:59:5d:ff:9e:57:fa:bb:73:7c:83:37: 0d:14:70:9c:3c:34:80:fc:e4:8d:44:e1:2e:92:bb: 7a:2f:4b:d1:67:fc:ea:b3:86:6a:9a:50:1a:10:2b: c7:87:6d:41:b6:90:e0:b0:51:03:de:ab:d1:f8:1f: b6:85:c9:ed:10:12:8f:bc:55:f7:68:e6:6a:57:3a: d3:15:99:17:79:e7:26:fa:39:38:5d:65:83:00:b4: b0:26:0e:20:0a:de:03:b0:b4:b9:cf:2d:a7:8f:2b: 7e:e1:8f:df:23:9d:cc:ac:2f:49:83:4c:47:bb:d4: 33:69:ec:16:db:dd:b9:fc:7f:82:cf:3e:08:a8:ab: 2c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:66:50:F9:52:0D:36:A8:C7:CD:43:B3:B9:58:33:AB:4D:3D:96:C9 X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:bb:e6:8a:56:00:90:75:ca:06:7b:de:4b:8d:7d:15:1d:66: c3:72:d4:44:33:ca:63:62:63:37:71:d8:64:fa:33:ac:58:d2: ee:34:f3:42:c9:22:9c:22:cb:89:d7:6e:84:88:b3:3f:36:b6: cf:b6:50:5a:37:d8:cd:f0:80:c4:7d:a9:b9:0a:3b:4f:c2:18: ad:1e:c9:c5:b1:18:e2:c4:5f:30:e1:29:b7:cf:53:d4:75:d2: 84:12:de:10:97:b3:13:64:79:f8:f9:74:73:93:dd:49:75:13: 75:d7:e4:11:24:22:6d:73:c1:22:5b:04:17:9a:a6:b7:dd:0a: 3d:09:6b:f6:4e:e1:79:b2:78:5e:8a:ea:ea:c4:d5:6c:b5:22: 96:0c:e9:f0:f3:d9:24:cd:15:94:b3:6e:b7:63:10:90:73:15: ab:80:c9:7b:33:42:84:70:0d:76:9f:f3:d4:16:da:46:38:ff: 19:ef:25:e2:f4:f6:af:db:5d:23:b7:52:2b:32:38:7a:bd:6e: 69:41:48:a2:91:64:da:92:cc:9e:d4:f2:8c:28:9b:e6:ae:dc: 9b:d2:c8:d9:2c:c2:67:c6:4e:49:07:56:bf:43:85:55:00:bd: 7f:5c:45:e3:51:10:08:9f:32:a1:b2:3a:a3:fc:fb:b2:d1:cb: d9:48:6f:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUwNDI1MDMxMTAwWhcNMjUwNTAyMDMxMTAwWjAYMRYwFAYD VQQDEw02ODBhZmQ0NC0yMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteS4zFA7+0L0kppxR7cUy0Ft08czpCkSX7GlwF4DstHUQNeBLZdmz0aBkAul 6SX/zzd92RqRpm0Uso8P5kwtAXQouBO2wQNFRJC/MKRqshhRvRVq2l8oOxudUxkY YVMxCZUdiyKEOwe5EdXt3cWOpeyA3f/Nmyfl6rLsWV3/nlf6u3N8gzcNFHCcPDSA /OSNROEukrt6L0vRZ/zqs4ZqmlAaECvHh21BtpDgsFED3qvR+B+2hcntEBKPvFX3 aOZqVzrTFZkXeecm+jk4XWWDALSwJg4gCt4DsLS5zy2njyt+4Y/fI53MrC9Jg0xH u9QzaewW2925/H+Czz4IqKss0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBmUPlS DTaox81Ds7lYM6tNPZbJMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeu+aKVgCQdcoGe95LjX0VHWbDctREM8pjYmM3cdhk+jOsWNLuNPNC ySKcIsuJ126EiLM/NrbPtlBaN9jN8IDEfam5CjtPwhitHsnFsRjixF8w4Sm3z1PU ddKEEt4Ql7MTZHn4+XRzk91JdRN11+QRJCJtc8EiWwQXmqa33Qo9CWv2TuF5snhe iurqxNVstSKWDOnw89kkzRWUs263YxCQcxWrgMl7M0KEcA12n/PUFtpGOP8Z7yXi 9Pav210jt1IrMjh6vW5pQUiikWTaksye1PKMKJvmrtyb0sjZLMJnxk5JB1a/Q4VV AL1/XEXjURAInzKhsjqj/Puy0cvZSG+V -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:15 2025 by rpki-client