$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json) Hash identifier: j5g2K6X5ajqK8nKRGEqfzLYuYFRyCeT5brnJrlbdn2o= Subject key identifier: 9E:C1:99:5B:9C:9E:9F:5A:C5:FD:C9:26:B0:C7:AF:8D:A4:1C:6A:3D Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft Manifest number: 081A Signing time: Thu 24 Apr 2025 20:42:08 +0000 Manifest this update: Thu 24 Apr 2025 20:42:08 +0000 Manifest next update: Thu 01 May 2025 20:42:08 +0000 Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: FHO4tRK++NC1Xs5LI5WH0AvXMUC4iZ1dbt7eOo2rGk4=) 2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: yWbFOWnQZIbWuGJvtHpTMaWCZFK5VHcHceysjqEH3mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Validity Not Before: Apr 24 20:42:08 2025 GMT Not After : May 1 20:42:08 2025 GMT Subject: CN=680aa220-de6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:39:8a:96:63:7c:6d:91:02:e7:48:97:a1: bd:5a:80:fb:df:06:ae:89:8a:7e:4b:79:10:d4:9a: 9c:35:e2:dd:1f:cc:45:c5:b1:b8:5a:75:16:83:b7: 91:3a:69:31:a6:00:82:e7:cb:3f:c6:0c:fb:5e:b2: bf:86:ee:77:b1:34:e9:42:f4:41:39:89:58:41:f9: 02:7d:b6:72:85:ca:47:e0:88:02:58:44:e2:e5:90: b3:7f:fb:79:e4:fe:d9:de:10:72:99:ff:a1:66:e5: 1e:a2:1e:5c:73:ec:1e:d0:9a:77:7d:46:60:07:ab: f0:95:41:8c:aa:a3:87:82:07:88:ab:dd:07:e4:9d: 26:51:d9:c8:da:8b:47:7b:0b:99:88:9b:5a:fd:e5: 1b:a4:c7:35:cf:bf:ca:1b:e8:db:8e:21:92:37:13: 4e:c0:d9:0c:5d:8c:b8:91:10:2d:93:73:c7:a2:75: 7f:36:c6:78:1f:78:25:30:eb:64:6f:e1:95:e1:18: b4:75:e3:73:6f:d8:8d:f6:12:eb:67:dc:1e:5e:c4: ff:df:08:a0:cb:9a:cc:7b:e2:d5:e6:0f:d2:b9:aa: 1a:cc:40:7f:d9:a0:c0:01:5e:19:8d:44:0f:2c:58: c7:12:af:2a:6f:67:0e:d2:5e:9c:94:3e:fb:da:6d: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C1:99:5B:9C:9E:9F:5A:C5:FD:C9:26:B0:C7:AF:8D:A4:1C:6A:3D X509v3 Authority Key Identifier: keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:3c:e9:5f:de:17:f8:d0:71:5d:a8:99:1d:3f:fe:ad:2e:b5: a9:4b:f4:61:b2:56:b5:a0:d0:cf:cb:53:9a:07:7a:1c:7f:dc: f2:96:ae:03:0d:f4:84:a6:ad:6e:e5:8e:83:66:ca:99:13:3e: cf:44:52:b1:b8:56:f5:34:b9:33:22:a9:da:10:4d:75:cd:d2: 12:ba:cd:aa:cc:71:d2:b4:fe:49:07:c1:0b:7e:88:86:1e:59: f1:a1:7b:bc:b5:73:25:cb:01:f3:99:7e:d6:f3:a3:3d:51:cb: 76:2b:c3:fb:03:84:73:7a:d0:39:b3:db:d2:4a:cc:fe:95:3f: 4d:82:76:bc:42:5d:c0:07:1b:d5:ef:d1:fb:ea:cb:ff:ce:3e: f0:1b:10:8b:79:41:2b:eb:91:d5:0a:82:97:b2:1b:32:5d:fd: ac:03:26:f5:40:ef:ec:41:0b:39:0a:75:a9:9c:46:38:34:97: e4:7a:67:4a:f8:cc:30:5f:70:21:08:84:2c:52:40:99:2d:fc: b0:0c:39:b5:9f:95:28:d3:e7:c3:df:ed:05:5f:56:b2:3b:35: 6f:40:bc:39:5e:86:cb:bc:fe:9d:5d:10:bd:78:29:0b:41:56: 27:0c:46:31:43:66:ce:68:4a:d6:97:52:4f:3d:32:79:09:a6: 33:0f:1a:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD NDVDMzg1MDMwHhcNMjUwNDI0MjA0MjA4WhcNMjUwNTAxMjA0MjA4WjAYMRYwFAYD VQQDEw02ODBhYTIyMC1kZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06Q5ipZjfG2RAudIl6G9WoD73wauiYp+S3kQ1JqcNeLdH8xFxbG4WnUWg7eR OmkxpgCC58s/xgz7XrK/hu53sTTpQvRBOYlYQfkCfbZyhcpH4IgCWETi5ZCzf/t5 5P7Z3hBymf+hZuUeoh5cc+we0Jp3fUZgB6vwlUGMqqOHggeIq90H5J0mUdnI2otH ewuZiJta/eUbpMc1z7/KG+jbjiGSNxNOwNkMXYy4kRAtk3PHonV/NsZ4H3glMOtk b+GV4Ri0deNzb9iN9hLrZ9weXsT/3wigy5rMe+LV5g/SuaoazEB/2aDAAV4ZjUQP LFjHEq8qb2cO0l6clD772m2JFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7BmVuc np9axf3JJrDHr42kHGo9MB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY VGpFWkR0clZoU3JFWERoUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSPOlf3hf40HFdqJkdP/6tLrWpS/Rhsla1oNDPy1OaB3ocf9zylq4D DfSEpq1u5Y6DZsqZEz7PRFKxuFb1NLkzIqnaEE11zdISus2qzHHStP5JB8ELfoiG HlnxoXu8tXMlywHzmX7W86M9Uct2K8P7A4RzetA5s9vSSsz+lT9Ngna8Ql3ABxvV 79H76sv/zj7wGxCLeUEr65HVCoKXshsyXf2sAyb1QO/sQQs5CnWpnEY4NJfkemdK +MwwX3AhCIQsUkCZLfywDDm1n5Uo0+fD3+0FX1ayOzVvQLw5XobLvP6dXRC9eCkL QVYnDEYxQ2bOaErWl1JPPTJ5CaYzDxqo -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:54 2025 by rpki-client