$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: 2fUUO75hncesgXhzOMIUkPGKbVfW06wQUt48RINEZvA= Subject key identifier: FD:38:A9:6C:76:AC:0B:63:33:6D:35:96:2F:AC:14:8B:73:6D:49:66 Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 0134 Signing time: Fri 25 Apr 2025 03:34:54 +0000 Manifest this update: Fri 25 Apr 2025 03:34:54 +0000 Manifest next update: Fri 02 May 2025 03:34:53 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: 3Mpce6zt7aTwWuIPCMrGJ9jm0dJSo19UhqP4XyJSkG8=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: pevsaD4Tdrw3Ixu5KEE5rMHmedLOctKuJ/befOUTShA=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: T8iSluo7SP9pG/tufgbYgInS5lll4OSd156UhBgQ4N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Apr 25 03:34:54 2025 GMT Not After : May 2 03:34:53 2025 GMT Subject: CN=680b02de-473b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e0:e3:77:24:c7:6a:cd:9f:e3:4c:12:26:7c: ae:6a:0d:9c:aa:c6:00:a2:a7:b0:46:93:8b:5e:05: b9:e7:56:d7:31:64:13:bf:ea:71:63:a1:f9:9d:21: c2:b6:d6:a9:1e:ac:e8:40:eb:b5:01:63:01:1c:db: ec:18:ae:67:b4:50:a1:85:8d:9f:26:fb:96:fd:34: 66:d0:fd:70:6d:0d:43:30:4c:c1:79:d4:02:ef:42: 65:62:2b:81:94:0f:e5:9b:a5:59:cd:c6:6c:ce:e1: cb:9d:62:34:64:0d:8c:8b:65:24:4d:65:d2:38:78: 8a:67:fc:9a:ff:35:5a:f9:18:63:73:80:47:fc:e1: f6:11:b7:ea:8c:b9:e9:37:8c:b6:fa:16:05:3a:fa: 56:6d:8f:8e:1e:f8:93:75:13:a7:be:e4:11:12:50: 42:ab:7f:6e:48:d1:16:61:7e:de:cf:46:7b:9b:1c: 2b:ea:f4:d1:60:b4:7c:71:0d:7a:d2:bf:f7:69:3a: 26:37:be:90:4c:bb:6e:b5:af:e1:11:69:b8:d4:6c: 6a:eb:c9:7e:46:74:3d:52:e1:2e:cc:1a:83:6b:2c: 3c:06:c4:e1:7a:8c:8b:bc:5d:d6:6b:43:9d:0d:cb: 37:8c:17:e0:b1:06:ad:02:03:19:1a:db:a8:60:54: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:38:A9:6C:76:AC:0B:63:33:6D:35:96:2F:AC:14:8B:73:6D:49:66 X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:9f:86:f4:74:34:72:71:c2:32:a2:76:c7:b4:e7:4b:cc:bd: 6b:72:8f:44:ed:82:48:6d:49:e8:5d:84:a2:d0:c7:99:91:bd: 3a:1a:dd:ae:28:33:d0:b5:c0:57:ed:a1:9e:83:77:ce:95:18: c1:c4:2c:f9:ae:09:d1:27:67:b3:34:b1:d2:a9:cf:dd:c0:dd: 7d:25:1a:c5:2c:88:f5:59:d4:62:67:bf:e9:b2:28:16:fa:85: 43:a2:4f:2b:ae:ed:69:97:4c:b8:2f:77:cb:b7:98:d2:b1:11: b8:d9:71:82:6c:72:9f:0f:7d:3f:12:a7:1f:dc:0f:81:4f:c8: 6d:9b:36:7f:04:a9:ec:d3:1e:28:5c:61:9c:da:1c:b5:c5:af: 9e:13:bb:5c:e3:62:e8:21:bd:8d:92:43:00:a2:8d:8d:51:c5: 44:df:df:f5:ae:ff:41:39:96:7f:b1:0d:55:f1:e2:50:96:8c: a5:25:6e:9a:74:e4:b2:ed:50:02:e2:c7:dc:db:a4:a3:5b:d7: 77:8d:e1:be:8d:26:e7:14:71:7f:1c:27:aa:8b:a2:17:ad:c8: fb:cb:19:c5:4c:92:c1:a5:d5:69:12:d7:af:8f:88:95:9e:77: b2:37:aa:d4:4b:85:f7:a1:7d:2b:71:ae:1b:f4:64:b0:22:82: 27:2f:04:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjUwNDI1MDMzNDU0WhcNMjUwNTAyMDMzNDUzWjAYMRYwFAYD VQQDEw02ODBiMDJkZS00NzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ODjdyTHas2f40wSJnyuag2cqsYAoqewRpOLXgW551bXMWQTv+pxY6H5nSHC ttapHqzoQOu1AWMBHNvsGK5ntFChhY2fJvuW/TRm0P1wbQ1DMEzBedQC70JlYiuB lA/lm6VZzcZszuHLnWI0ZA2Mi2UkTWXSOHiKZ/ya/zVa+Rhjc4BH/OH2EbfqjLnp N4y2+hYFOvpWbY+OHviTdROnvuQRElBCq39uSNEWYX7ez0Z7mxwr6vTRYLR8cQ16 0r/3aTomN76QTLtuta/hEWm41Gxq68l+RnQ9UuEuzBqDayw8BsTheoyLvF3Wa0Od Dcs3jBfgsQatAgMZGtuoYFRJOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP04qWx2 rAtjM201li+sFItzbUlmMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxn4b0dDRyccIyonbHtOdLzL1rco9E7YJIbUnoXYSi0MeZkb06Gt2u KDPQtcBX7aGeg3fOlRjBxCz5rgnRJ2ezNLHSqc/dwN19JRrFLIj1WdRiZ7/psigW +oVDok8rru1pl0y4L3fLt5jSsRG42XGCbHKfD30/Eqcf3A+BT8htmzZ/BKns0x4o XGGc2hy1xa+eE7tc42LoIb2NkkMAoo2NUcVE39/1rv9BOZZ/sQ1V8eJQloylJW6a dOSy7VAC4sfc26SjW9d3jeG+jSbnFHF/HCeqi6IXrcj7yxnFTJLBpdVpEtevj4iV nneyN6rUS4X3oX0rca4b9GSwIoInLwRd -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:57 2025 by rpki-client