$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json) Hash identifier: 6kkLLnoeih4bQiP4LHef0X8j21R6/3I2FzXCm0MaJCs= Subject key identifier: 67:68:00:B5:75:05:05:16:86:35:E6:53:E2:C1:F9:09:E0:1A:34:73 Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft Manifest number: 066B Signing time: Thu 24 Apr 2025 22:09:49 +0000 Manifest this update: Thu 24 Apr 2025 22:09:49 +0000 Manifest next update: Thu 01 May 2025 22:09:49 +0000 Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: tlzR+ZHlqwN2jy3BnzBpvC4vsonhN1/QjLpbSqkj0r4=) 2: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: QRognwJk9AvzC5yneK2dgTuODW0yL1x1QHdbXzDSYZ0=) 3: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: JEn605s5uj7twYN8vhMjV/lhtaUfRkimlGOAUbH9hfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Validity Not Before: Apr 24 22:09:49 2025 GMT Not After : May 1 22:09:49 2025 GMT Subject: CN=680ab6ad-34ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:9f:4e:cc:ce:f5:78:e3:71:38:09:62:10: 80:66:c5:35:cd:c1:bb:a8:e4:ff:b9:2e:51:65:59: 54:6e:3c:13:4a:60:97:ac:a5:35:a8:35:db:ad:53: 21:3b:fb:3a:31:e8:ba:72:00:e9:0f:e8:57:39:3d: 24:60:49:7c:a7:c1:66:67:c2:db:bf:25:b6:fa:aa: dc:ec:3c:29:2d:f0:81:3c:36:00:ca:7e:a2:4d:d7: 3d:ac:34:52:6f:98:0f:ad:e0:dd:0d:95:82:35:58: e7:15:c0:9b:84:66:0e:a3:98:f0:b1:8f:90:d7:f6: 08:7f:b8:8d:31:32:e5:88:9a:e2:e9:f9:33:8e:33: 0f:9d:64:3c:18:6f:c5:be:33:8e:b0:9f:c5:2c:10: 4b:10:87:ed:21:eb:c1:3a:8e:e0:40:27:cc:8f:58: c2:a3:8f:0f:2b:2f:73:a8:45:e3:7f:81:3c:33:1d: 84:68:2b:3b:0b:fc:46:99:8e:16:b2:ff:c8:ce:81: 74:c2:0e:8a:d4:0a:c1:e9:ae:46:7a:d5:27:50:68: 46:5f:b4:fb:9b:b8:d8:12:07:db:76:9a:7e:94:fa: c9:44:ef:b1:86:55:ac:1a:11:8c:78:52:11:8a:fd: 8d:b0:67:03:d8:f1:1c:6f:0f:a9:ee:46:b7:04:1f: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:68:00:B5:75:05:05:16:86:35:E6:53:E2:C1:F9:09:E0:1A:34:73 X509v3 Authority Key Identifier: keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:2c:69:04:4c:b9:fd:c3:5c:0c:9a:0b:58:76:fa:83:95:af: 77:e2:70:0e:21:cc:fd:04:3e:0e:b0:fa:d7:74:cf:b6:88:fa: df:c0:90:c4:b6:9b:39:3d:33:f8:1b:eb:be:6c:3c:56:7d:6f: ec:25:f7:64:6f:54:0e:a0:bf:f5:bb:7a:ed:aa:a9:8b:6a:55: 65:1a:54:73:2b:0d:5c:84:1e:18:b7:03:7d:89:e1:fc:ba:0c: 1b:30:11:54:5c:2f:f4:0d:a2:2c:f9:fe:7a:fe:24:04:ae:4b: 44:7c:c2:c8:ad:39:1b:43:1d:ef:05:3f:2b:10:65:fe:25:7d: c3:a5:9f:a4:17:87:a9:b5:93:a4:7c:f3:d8:ac:b6:44:71:c1: 66:81:51:06:b6:2c:83:3c:89:fb:d9:32:f2:02:7e:40:57:e2: 1b:31:94:3b:99:b9:36:9f:b2:0d:95:c4:36:12:f0:8b:46:d2: 2c:01:f0:d8:43:6b:24:6c:dc:ea:fd:86:df:6c:31:a4:0d:60: c5:64:86:b3:b6:89:78:8c:a4:38:19:8e:4e:99:d0:0b:a6:bb: 15:45:bf:77:05:66:53:d9:5b:87:6a:5b:b0:7a:da:55:21:f9: 32:cd:92:0c:e3:54:21:0e:38:55:ba:80:cf:ef:dd:8d:d5:7d: 33:21:c7:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1RTYxMTAvBgNVBAUTKDg4NzgyRjgzMUYzNjlFOTZGOTc5QTI1ODVDRjI3M0M5 MTZDN0I0RkQwHhcNMjUwNDI0MjIwOTQ5WhcNMjUwNTAxMjIwOTQ5WjAYMRYwFAYD VQQDEw02ODBhYjZhZC0zNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQifTszO9XjjcTgJYhCAZsU1zcG7qOT/uS5RZVlUbjwTSmCXrKU1qDXbrVMh O/s6Mei6cgDpD+hXOT0kYEl8p8FmZ8LbvyW2+qrc7DwpLfCBPDYAyn6iTdc9rDRS b5gPreDdDZWCNVjnFcCbhGYOo5jwsY+Q1/YIf7iNMTLliJri6fkzjjMPnWQ8GG/F vjOOsJ/FLBBLEIftIevBOo7gQCfMj1jCo48PKy9zqEXjf4E8Mx2EaCs7C/xGmY4W sv/IzoF0wg6K1ArB6a5GetUnUGhGX7T7m7jYEgfbdpp+lPrJRO+xhlWsGhGMeFIR iv2NsGcD2PEcbw+p7ka3BB8qmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdoALV1 BQUWhjXmU+LB+QngGjRzMB8GA1UdIwQYMBaAFIh4L4MfNp6W+XmiWFzyc8kWx7T9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVFNi84N0QxRUQwNjdB ODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5wYjVlYUpZWFBKenlSYkh0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lIZ3ZneDgybnBiNWVhSllYUEp6eVJiSHRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVFNi84N0QxRUQwNjdBODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5w YjVlYUpZWFBKenlSYkh0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQLGkETLn9w1wMmgtYdvqDla934nAOIcz9BD4OsPrXdM+2iPrfwJDE tps5PTP4G+u+bDxWfW/sJfdkb1QOoL/1u3rtqqmLalVlGlRzKw1chB4YtwN9ieH8 ugwbMBFUXC/0DaIs+f56/iQErktEfMLIrTkbQx3vBT8rEGX+JX3DpZ+kF4eptZOk fPPYrLZEccFmgVEGtiyDPIn72TLyAn5AV+IbMZQ7mbk2n7INlcQ2EvCLRtIsAfDY Q2skbNzq/YbfbDGkDWDFZIaztol4jKQ4GY5OmdALprsVRb93BWZT2VuHaluwetpV IfkyzZIM41QhDjhVuoDP792N1X0zIcfH -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:54 2025 by rpki-client