$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft File: IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft (raw, json) Hash identifier: b+Ejf2fFzVpqxebixqtFJPbl0HL2HdDkYOirYNU7E7I= Subject key identifier: 8A:BF:19:56:64:A9:4E:23:26:6F:14:B9:41:26:16:B6:EE:48:9C:37 Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft Manifest number: BE Signing time: Fri 25 Apr 2025 04:54:35 +0000 Manifest this update: Fri 25 Apr 2025 04:54:35 +0000 Manifest next update: Fri 02 May 2025 04:54:35 +0000 Files and hashes: 1: IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl (hash: qNfxF+48Y/+2aMTLybr3uPJhFW0jmX2Z4L1/LQ4iCnU=) 2: B15E8BECFF3211EEA8607454C4F9AE02.roa (hash: M9Q8RXEiuL/wyMNZhN9zbPG+N0QQluDkDpfmSIoYCRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53FD, serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Validity Not Before: Apr 25 04:54:35 2025 GMT Not After : May 2 04:54:35 2025 GMT Subject: CN=680b158b-2379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ee:7e:9f:18:15:60:06:74:93:67:77:55:7f: 91:13:31:5c:70:43:67:a3:c9:5e:38:a1:fb:1d:82: c5:d0:59:14:34:f5:e8:ac:e9:34:4b:7a:51:7f:c9: 8e:66:80:9e:1d:98:77:31:55:f4:40:27:19:bd:f4: 16:cf:af:2f:1b:50:29:68:94:28:98:82:e8:d8:a4: 96:3a:74:a4:38:f9:1b:bd:e3:e9:d7:c5:6f:25:8f: aa:5d:d7:ac:dd:90:76:da:21:90:10:95:6f:c9:09: 18:a7:4c:ae:04:00:28:de:03:9b:a6:88:84:8c:8c: e1:a9:6f:db:5a:39:83:f4:64:16:1b:1d:2f:97:05: 00:b7:89:a9:cd:8f:1e:92:3b:46:f8:ad:21:4b:1b: 4f:ab:a4:86:9f:2a:08:1c:bf:97:c7:a3:fe:e3:cb: 2b:89:22:ae:0a:36:94:7e:30:dc:6f:f2:99:ec:95: 68:ba:45:80:09:82:e9:b6:55:7c:b1:cf:24:e7:32: f4:f9:dc:08:9a:dc:d9:13:d5:2d:0d:22:38:e1:28: 4b:da:25:bc:e9:3e:71:a8:e0:77:4e:5d:62:8e:e4: 86:b2:15:a4:aa:cd:43:cd:c7:56:97:0e:bf:13:7b: c9:5c:3e:16:d9:df:49:4e:e2:7a:77:d7:62:89:a2: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BF:19:56:64:A9:4E:23:26:6F:14:B9:41:26:16:B6:EE:48:9C:37 X509v3 Authority Key Identifier: keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:2f:02:96:2c:79:03:a8:73:5f:58:da:a5:28:cb:ca:59:f5: 38:66:e1:7e:02:b4:b2:cb:66:ff:1b:d8:46:49:8d:03:ac:dd: b6:b5:d1:69:31:38:35:aa:84:4e:71:53:d3:12:db:74:17:ad: 88:13:70:19:47:06:a7:35:47:54:12:d2:8d:33:c0:ac:d6:19: d0:20:76:32:25:ff:73:fa:4c:59:b0:6c:82:6a:43:0f:4b:0a: 5d:eb:28:ab:bb:0f:39:0c:4f:8a:fd:5f:f3:17:03:6b:d9:c5: 0a:4c:39:59:50:2e:18:fc:f2:46:bf:1d:99:5b:d4:b1:77:33: 14:76:76:ae:1a:2d:ef:b2:1c:33:96:97:01:72:4a:12:8f:6a: 9e:cb:3c:2b:23:09:34:b1:d0:37:ac:49:81:a9:8d:b0:ff:41: 37:e7:95:d2:2e:88:ae:7a:49:3c:43:d9:45:47:38:c2:67:5b: 66:1d:7a:d9:b0:4d:e3:2e:68:ca:2e:92:a8:76:7f:96:ab:ec: 25:78:fc:e2:68:f3:0a:9b:e7:fe:fc:e3:7e:d7:9b:e2:35:b0: c6:41:f6:81:ec:58:06:95:71:34:79:a9:32:11:d0:5a:61:5b: 26:b7:21:d2:24:88:1d:3b:e1:db:ac:db:82:d2:53:e7:34:6d: 7a:80:6a:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRkQxMTAvBgNVBAUTKDIxOTM0MTk4RTgzMzEwNjFEMjc1QjhDRkM3OTQ1OEQz MkZBQkQ2QzkwHhcNMjUwNDI1MDQ1NDM1WhcNMjUwNTAyMDQ1NDM1WjAYMRYwFAYD VQQDEw02ODBiMTU4Yi0yMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAke5+nxgVYAZ0k2d3VX+REzFccENno8leOKH7HYLF0FkUNPXorOk0S3pRf8mO ZoCeHZh3MVX0QCcZvfQWz68vG1ApaJQomILo2KSWOnSkOPkbvePp18VvJY+qXdes 3ZB22iGQEJVvyQkYp0yuBAAo3gObpoiEjIzhqW/bWjmD9GQWGx0vlwUAt4mpzY8e kjtG+K0hSxtPq6SGnyoIHL+Xx6P+48sriSKuCjaUfjDcb/KZ7JVoukWACYLptlV8 sc8k5zL0+dwImtzZE9UtDSI44ShL2iW86T5xqOB3Tl1ijuSGshWkqs1DzcdWlw6/ E3vJXD4W2d9JTuJ6d9diiaKXwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIq/GVZk qU4jJm8UuUEmFrbuSJw3MB8GA1UdIwQYMBaAFCGTQZjoMxBh0nW4z8eUWNMvq9bJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNGRC82ODhFNTdFRUZG MzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVHSFNkYmpQeDVSWTB5LXIx c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laTkJtT2d6RUdIU2RialB4NVJZMHktcjFzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNGRC82ODhFNTdFRUZGMzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVH SFNkYmpQeDVSWTB5LXIxc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQLwKWLHkDqHNfWNqlKMvKWfU4ZuF+ArSyy2b/G9hGSY0DrN22tdFp MTg1qoROcVPTEtt0F62IE3AZRwanNUdUEtKNM8Cs1hnQIHYyJf9z+kxZsGyCakMP Swpd6yiruw85DE+K/V/zFwNr2cUKTDlZUC4Y/PJGvx2ZW9SxdzMUdnauGi3vshwz lpcBckoSj2qeyzwrIwk0sdA3rEmBqY2w/0E355XSLoiuekk8Q9lFRzjCZ1tmHXrZ sE3jLmjKLpKodn+Wq+wlePziaPMKm+f+/ON+15viNbDGQfaB7FgGlXE0eakyEdBa YVsmtyHSJIgdO+HbrNuC0lPnNG16gGqT -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:59 2025 by rpki-client