$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: tcTEmxhG0fU+abWf8lBEkX6dQvrAY3AkPHXzvq332b0= Subject key identifier: DE:8B:D7:60:61:4C:24:27:EB:7A:78:A2:68:B1:3E:56:70:8E:92:DA Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 0331 Signing time: Fri 25 Apr 2025 00:51:44 +0000 Manifest this update: Fri 25 Apr 2025 00:51:43 +0000 Manifest next update: Fri 02 May 2025 00:51:43 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: 4cBEtvu1iwQx8OTE8g67c85C7cvuw2w/plT23ehzRAo=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Apr 25 00:51:43 2025 GMT Not After : May 2 00:51:43 2025 GMT Subject: CN=680adca0-fafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:4b:e3:87:89:3f:e1:ed:3d:a6:0e:3a:78: d9:64:15:7f:fd:2b:b5:71:5a:6b:03:73:d5:d3:e2: e9:a6:1a:44:c4:cc:99:d2:70:69:a5:a5:5d:b2:c5: e6:d3:92:8c:24:c6:74:11:79:5b:44:69:f4:2e:4f: 18:df:18:57:cf:2c:7c:6f:03:17:cf:67:2e:34:f9: ce:7d:61:31:b5:3e:a7:18:c5:94:8d:4f:78:c7:d4: 07:28:f3:1f:0e:5c:b0:e8:7c:f3:f4:25:09:b0:f8: c3:d2:b7:70:76:41:a2:9b:17:46:03:c4:be:b8:8e: 1b:d0:c6:01:f1:44:31:69:d2:88:86:73:63:7d:31: 53:14:bc:f7:c5:c7:ee:f0:17:24:cf:03:ab:a9:fa: 50:a5:c5:11:66:e3:51:36:d0:9b:fb:31:ce:69:72: fe:19:1a:11:0c:fb:30:5e:dc:3a:74:2c:b9:20:60: b0:45:8a:40:99:45:e2:9c:0a:12:47:95:9f:d3:1d: 66:70:43:f4:63:3b:2e:9b:89:e3:49:8a:37:a8:d7: f6:89:22:d9:37:57:38:07:6a:28:97:00:d1:52:d2: 16:f3:56:f8:0a:20:49:8a:7f:90:7b:0a:e9:9d:db: a7:9b:f1:27:2a:1e:88:1f:73:e6:c4:52:65:cb:17: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8B:D7:60:61:4C:24:27:EB:7A:78:A2:68:B1:3E:56:70:8E:92:DA X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:94:68:63:0b:64:35:c8:7b:31:41:61:a1:1a:72:c7:4d:47: b1:d4:5d:1e:7c:56:fc:ee:0a:cd:56:f0:17:42:5f:0d:89:12: 04:6b:49:87:14:cf:36:bf:b3:5d:f0:30:88:23:31:73:67:f0: 55:6a:f0:88:df:b5:7e:ae:5f:a4:9a:f5:d8:60:0e:09:5e:f6: 29:fc:c6:d4:36:7c:7b:f7:a5:3f:0c:d9:56:e6:ef:51:cc:bf: c1:2e:1f:bf:a6:db:5a:81:6c:18:1a:e3:04:70:df:c3:f3:0d: f6:ae:57:9a:52:ef:51:76:25:d5:73:2e:ca:29:7c:58:5e:94: df:5d:9a:0d:86:1d:93:e7:bf:4c:4b:86:37:62:d9:2b:ae:88: db:3b:98:b8:64:8e:e4:b8:1b:2d:90:53:b6:e1:b8:4c:bb:22: 3f:fa:36:5b:74:d2:cf:1a:ef:c8:61:f0:1a:b9:fb:c5:81:bf: 57:6f:a0:f5:0c:a8:93:f5:8c:09:86:8a:37:c8:53:46:27:45: 72:07:b3:69:d6:4d:11:38:b4:25:5d:1b:fc:85:bd:a7:ce:30: fa:51:27:2d:86:d4:66:fc:01:0c:ec:87:e0:3b:ce:b5:ac:c8: d2:94:b4:b0:a5:dd:ce:13:1b:93:46:f9:fd:4c:06:e5:90:4c: 4b:a4:89:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwNDI1MDA1MTQzWhcNMjUwNTAyMDA1MTQzWjAYMRYwFAYD VQQDEw02ODBhZGNhMC1mYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8xL44eJP+HtPaYOOnjZZBV//Su1cVprA3PV0+LpphpExMyZ0nBppaVdssXm 05KMJMZ0EXlbRGn0Lk8Y3xhXzyx8bwMXz2cuNPnOfWExtT6nGMWUjU94x9QHKPMf Dlyw6Hzz9CUJsPjD0rdwdkGimxdGA8S+uI4b0MYB8UQxadKIhnNjfTFTFLz3xcfu 8BckzwOrqfpQpcURZuNRNtCb+zHOaXL+GRoRDPswXtw6dCy5IGCwRYpAmUXinAoS R5Wf0x1mcEP0Yzsum4njSYo3qNf2iSLZN1c4B2oolwDRUtIW81b4CiBJin+Qewrp ndunm/EnKh6IH3PmxFJlyxe/GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6L12Bh TCQn63p4omixPlZwjpLaMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHlGhjC2Q1yHsxQWGhGnLHTUex1F0efFb87grNVvAXQl8NiRIEa0mH FM82v7Nd8DCIIzFzZ/BVavCI37V+rl+kmvXYYA4JXvYp/MbUNnx796U/DNlW5u9R zL/BLh+/pttagWwYGuMEcN/D8w32rleaUu9RdiXVcy7KKXxYXpTfXZoNhh2T579M S4Y3YtkrrojbO5i4ZI7kuBstkFO24bhMuyI/+jZbdNLPGu/IYfAaufvFgb9Xb6D1 DKiT9YwJhoo3yFNGJ0VyB7Np1k0ROLQlXRv8hb2nzjD6UScthtRm/AEM7IfgO861 rMjSlLSwpd3OExuTRvn9TAblkExLpImy -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:28 2025 by rpki-client