$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json) Hash identifier: iUWA92nHf3FPlt+uJSIckkQXPZ0rgcO3u6jQnwZX7tE= Subject key identifier: CF:9E:7A:62:17:86:D8:4C:35:A7:09:5E:6A:EC:45:00:B5:71:5F:5C Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft Manifest number: E7 Signing time: Fri 25 Apr 2025 04:28:10 +0000 Manifest this update: Fri 25 Apr 2025 04:28:09 +0000 Manifest next update: Fri 02 May 2025 04:28:09 +0000 Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: XAjSiyW+RfI3waVzt+/pvdeLKJrmvpqXUGnrgplfXLQ=) 2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: NOsPGGlDSlCfn8hbBHu4EWI+usdJzaN80KZom3HQWsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5 Validity Not Before: Apr 25 04:28:09 2025 GMT Not After : May 2 04:28:09 2025 GMT Subject: CN=680b0f5a-2ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:7b:f8:af:7d:e3:ef:a8:e9:59:be:d0:ab: a9:97:15:83:d8:7d:89:38:18:c6:df:2c:84:7f:b1: 54:07:e5:95:63:4d:15:d5:07:e5:90:e6:fe:1d:50: 82:38:4a:9a:0c:05:bc:99:cb:80:1e:e1:4c:5a:cc: 60:ea:18:bc:25:f1:5a:6a:ce:af:ec:59:b5:08:db: b8:fc:6c:f2:65:d7:e0:4c:36:73:f4:2d:8f:db:08: 54:69:12:10:4b:78:aa:0c:44:1f:4c:f1:f1:56:87: 81:cd:0c:69:fc:38:b5:56:c4:cb:e1:c8:1a:2a:62: 64:2b:72:d7:9c:65:69:2c:79:36:86:fe:a4:75:e7: c8:0d:87:8f:9d:de:e2:3e:56:7d:54:9d:9c:79:a4: b9:2f:69:95:53:9f:05:72:6a:0a:56:08:73:6d:98: fd:0a:f0:ed:5b:ae:30:73:8a:06:38:41:5a:a8:69: b3:b2:89:be:ff:ed:99:fd:9b:08:e3:55:7f:df:8b: f3:99:a6:df:1d:88:1d:b0:1e:47:7b:cb:64:7f:dc: 70:a5:db:c4:7f:fd:3b:12:0f:e0:d8:57:5b:a9:a8: d0:69:d7:48:6c:4e:7a:10:e9:85:2b:fd:54:74:7e: f8:12:b3:26:58:7c:f6:2d:da:a8:44:d0:cc:ce:a2: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9E:7A:62:17:86:D8:4C:35:A7:09:5E:6A:EC:45:00:B5:71:5F:5C X509v3 Authority Key Identifier: keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d3:38:41:39:36:a0:c2:3a:86:69:82:26:ee:bf:1c:59:23: 61:b7:d2:fd:9b:27:a9:ab:bd:1d:82:04:2e:34:b0:6b:50:5e: 82:d5:fb:44:c4:21:bd:ad:39:5a:56:4a:9d:e4:4e:d4:e4:8b: c3:a8:f4:aa:ae:3b:4f:4b:f3:c0:e2:22:9d:a2:d0:3b:46:a8: db:09:4c:f4:b0:64:5e:d5:e0:c3:2a:83:4d:05:4d:32:45:ee: fb:10:8a:2f:d2:31:5c:94:62:3b:ab:d2:c7:a2:aa:1b:7c:b1: 99:5e:51:8a:f2:07:f0:dc:c2:da:a1:17:84:c3:5d:82:a2:07: 79:53:c3:54:62:74:f0:3d:f9:cd:f7:57:7b:e2:6d:1b:39:8c: 10:47:94:f2:e9:ab:9b:5f:bf:3a:fb:cb:8b:06:de:f4:db:b1: 15:c9:6d:be:3b:72:a1:71:c8:d5:90:53:83:a3:b9:ba:13:1f: 9d:b5:d6:be:f0:7a:9a:79:44:0a:90:9d:c4:6c:46:f7:67:1e: 60:24:72:89:3b:cb:70:a2:5e:c9:97:7b:a2:28:60:11:29:c4: f7:2b:d0:d6:f8:87:75:43:e8:8c:b5:5d:f3:56:9c:6a:58:96: d0:33:57:3b:13:44:f4:86:6b:e3:2a:c8:d4:94:d0:4b:4b:c3: f3:46:37:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FCRjAxMTAvBgNVBAUTKEZDODg2ODk0RTJENzBFMzUyRTRGMTY4MDUyQzUxQjA1 QUIwNUFDQzUwHhcNMjUwNDI1MDQyODA5WhcNMjUwNTAyMDQyODA5WjAYMRYwFAYD VQQDEw02ODBiMGY1YS0yZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/97+K994++o6Vm+0KuplxWD2H2JOBjG3yyEf7FUB+WVY00V1QflkOb+HVCC OEqaDAW8mcuAHuFMWsxg6hi8JfFaas6v7Fm1CNu4/GzyZdfgTDZz9C2P2whUaRIQ S3iqDEQfTPHxVoeBzQxp/Di1VsTL4cgaKmJkK3LXnGVpLHk2hv6kdefIDYePnd7i PlZ9VJ2ceaS5L2mVU58FcmoKVghzbZj9CvDtW64wc4oGOEFaqGmzsom+/+2Z/ZsI 41V/34vzmabfHYgdsB5He8tkf9xwpdvEf/07Eg/g2FdbqajQaddIbE56EOmFK/1U dH74ErMmWHz2LdqoRNDMzqKX4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+eemIX hthMNacJXmrsRQC1cV9cMB8GA1UdIwQYMBaAFPyIaJTi1w41Lk8WgFLFGwWrBazF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUJGMC9EOTZCQTY2MEMw OTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERqVXVUeGFBVXNVYkJhc0Zy TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUJGMC9EOTZCQTY2MEMwOTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERq VXVUeGFBVXNVYkJhc0ZyTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA70zhBOTagwjqGaYIm7r8cWSNht9L9myepq70dggQuNLBrUF6C1ftE xCG9rTlaVkqd5E7U5IvDqPSqrjtPS/PA4iKdotA7RqjbCUz0sGRe1eDDKoNNBU0y Re77EIov0jFclGI7q9LHoqobfLGZXlGK8gfw3MLaoReEw12Cogd5U8NUYnTwPfnN 91d74m0bOYwQR5Ty6aubX786+8uLBt7027EVyW2+O3KhccjVkFODo7m6Ex+dtda+ 8HqaeUQKkJ3EbEb3Zx5gJHKJO8twol7Jl3uiKGARKcT3K9DW+Id1Q+iMtV3zVpxq WJbQM1c7E0T0hmvjKsjUlNBLS8PzRjd2 -----END CERTIFICATE-----Generated at Sat Apr 26 05:10:11 2025 by rpki-client