$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json) Hash identifier: 4zetvLD1RWC9AqANVhXM5tqoKDjWucGcuhFmGWgCZzs= Subject key identifier: 76:E1:3C:99:94:74:D9:81:F2:C1:93:86:F8:99:C9:70:FE:DB:89:44 Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Certificate serial: 0BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft Manifest number: 0BCC Signing time: Thu 24 Apr 2025 18:44:37 +0000 Manifest this update: Thu 24 Apr 2025 18:44:36 +0000 Manifest next update: Thu 01 May 2025 18:44:36 +0000 Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: YVbpCUlcScSr2s+CNGlaJ8mWEAe4xlaw8rHkxFS7p8c=) 2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Kec3OJ0yXeD5eottWlXfmKbDVOHd3PQe3ZSjrmCo8jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Validity Not Before: Apr 24 18:44:36 2025 GMT Not After : May 1 18:44:36 2025 GMT Subject: CN=680a8695-c5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:9b:9f:8c:f5:c7:be:2e:ac:f3:2a:dc:ba: 42:fd:73:b6:94:d8:c0:1e:4c:78:a6:85:22:d1:5c: 97:75:ca:1f:88:08:80:60:ae:bc:be:ae:7f:14:b0: 40:50:ae:f0:ef:22:47:86:43:03:9d:a3:34:65:94: e2:53:66:98:a8:62:11:df:74:3d:fe:ab:0d:27:8b: 06:e1:4f:4d:fd:87:45:81:7a:df:7e:97:ed:44:96: 49:d1:81:9f:b3:d9:59:c8:b4:1c:78:c6:94:7e:91: c4:1e:8f:9e:38:96:04:7b:de:40:67:15:ad:3e:be: f0:b9:4e:07:4e:50:bb:7d:6a:3c:3a:7c:c7:45:33: e6:a8:04:15:e4:03:de:bb:b4:3f:d5:91:e7:a1:49: ca:42:e6:6f:97:db:76:7d:9a:9d:20:21:ce:ac:16: c3:3b:0f:17:c7:ca:4d:88:fb:c2:a8:31:10:52:eb: 8b:1a:52:ea:42:41:8c:71:2e:63:71:74:ca:23:b1: 55:b4:c8:3b:6a:5c:55:a5:e5:23:51:1d:29:94:da: 66:dc:40:14:68:e5:d7:19:22:42:fd:24:67:5b:aa: 78:2c:66:ad:23:2b:bb:0a:5f:39:27:b8:63:c9:4a: c1:7f:bc:20:f0:ae:e4:8b:81:40:3f:03:6c:9c:16: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E1:3C:99:94:74:D9:81:F2:C1:93:86:F8:99:C9:70:FE:DB:89:44 X509v3 Authority Key Identifier: keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:60:f4:f5:67:46:ab:cf:c6:c6:7a:e8:53:bf:dd:18:e9:ca: 0f:18:17:23:51:24:a6:05:92:64:7a:90:b6:4f:e1:44:a8:00: 6b:79:f5:cd:3d:33:48:63:39:90:d9:8a:f8:fc:45:00:a4:15: 4d:de:5b:cc:5b:b5:52:af:47:5b:49:49:66:ca:08:91:f9:22: d2:24:0d:d9:da:1c:4e:a4:0e:37:29:8a:7b:c5:de:af:86:7d: 2b:af:70:01:19:6e:83:dd:19:0d:65:9b:41:77:26:04:a1:ce: a2:a2:96:3f:b5:70:22:f1:4b:b3:b6:ec:6b:f7:4e:88:24:71: eb:f1:13:4e:aa:b4:e9:2a:39:1a:21:58:17:7e:b4:4a:d0:f4: fa:8d:42:74:29:8b:67:07:9b:ba:95:54:0b:0f:c2:1f:09:91: ac:d2:59:14:7d:a7:b9:5c:b7:e5:af:9b:2d:7d:ed:6a:68:0f: 28:46:63:1a:d8:54:11:35:a0:7f:05:30:92:28:d6:fe:29:f1: 6b:c7:9a:d3:8b:2a:6d:74:53:ca:dd:05:4f:19:7e:a4:b5:38: 1f:17:ca:7b:72:a4:59:35:65:5b:62:9f:a1:57:26:96:ba:8a: f1:66:da:4a:5a:b6:02:ff:e3:5e:76:40:e5:75:f8:53:f1:dd: 0d:58:8d:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG RjhDMDg5RTMwHhcNMjUwNDI0MTg0NDM2WhcNMjUwNTAxMTg0NDM2WjAYMRYwFAYD VQQDEw02ODBhODY5NS1jNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWubn4z1x74urPMq3LpC/XO2lNjAHkx4poUi0VyXdcofiAiAYK68vq5/FLBA UK7w7yJHhkMDnaM0ZZTiU2aYqGIR33Q9/qsNJ4sG4U9N/YdFgXrffpftRJZJ0YGf s9lZyLQceMaUfpHEHo+eOJYEe95AZxWtPr7wuU4HTlC7fWo8OnzHRTPmqAQV5APe u7Q/1ZHnoUnKQuZvl9t2fZqdICHOrBbDOw8Xx8pNiPvCqDEQUuuLGlLqQkGMcS5j cXTKI7FVtMg7alxVpeUjUR0plNpm3EAUaOXXGSJC/SRnW6p4LGatIyu7Cl85J7hj yUrBf7wg8K7ki4FAPwNsnBbfzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbhPJmU dNmB8sGThviZyXD+24lEMB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4 MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5 c043alhxVFAwdlhfakFpZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTYPT1Z0arz8bGeuhTv90Y6coPGBcjUSSmBZJkepC2T+FEqABrefXN PTNIYzmQ2Yr4/EUApBVN3lvMW7VSr0dbSUlmygiR+SLSJA3Z2hxOpA43KYp7xd6v hn0rr3ABGW6D3RkNZZtBdyYEoc6iopY/tXAi8Uuztuxr906IJHHr8RNOqrTpKjka IVgXfrRK0PT6jUJ0KYtnB5u6lVQLD8IfCZGs0lkUfae5XLflr5stfe1qaA8oRmMa 2FQRNaB/BTCSKNb+KfFrx5rTiyptdFPK3QVPGX6ktTgfF8p7cqRZNWVbYp+hVyaW uorxZtpKWrYC/+NedkDldfhT8d0NWI1/ -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:46 2025 by rpki-client