$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: X0XR8Z144FSllQKASi+xSvJOzg9xucDh9mwDqNGs/2Q= Subject key identifier: 7D:C1:9A:3B:D2:E2:6C:06:29:F3:EF:D5:BD:24:A3:D3:A5:D9:8D:48 Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: F0 Signing time: Fri 25 Apr 2025 04:26:20 +0000 Manifest this update: Fri 25 Apr 2025 04:26:19 +0000 Manifest next update: Fri 02 May 2025 04:26:19 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: r97SHnvGvyydrGayJzC/T06QZ476k2HrBGqcHuQ1FTU=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Apr 25 04:26:19 2025 GMT Not After : May 2 04:26:19 2025 GMT Subject: CN=680b0eeb-8534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7c:5b:08:a6:07:11:87:1a:dc:0d:5f:36:48: f9:f3:7b:8b:e3:bb:28:11:3d:d1:32:49:93:48:4a: 89:af:be:68:bf:26:dc:c1:49:b5:d6:09:62:5d:46: a8:52:e7:81:89:90:d5:07:45:0c:11:7a:42:a4:e4: da:11:17:e9:f4:8c:f5:63:12:df:ae:bf:9a:01:14: 0f:1e:93:a8:2d:a8:bc:94:60:bf:bb:39:40:13:da: 75:53:4f:b7:40:e7:78:af:fe:46:60:d0:9d:eb:f1: db:0f:0b:eb:db:b6:c4:94:51:63:b2:f4:82:19:5b: 5a:7e:3e:49:b5:4e:01:9d:12:3f:2d:2f:4f:cc:b7: 17:b1:e1:a4:f2:eb:47:95:61:cd:e1:04:aa:b6:c6: 33:14:e2:7e:5b:41:06:c6:e2:2e:24:f8:18:8c:9f: 0d:3c:76:3b:be:8e:39:a6:7e:d2:4d:24:58:7e:ce: e6:5b:7c:bf:97:1f:d7:64:e7:68:ae:4d:a6:cc:57: a4:a0:9b:06:e8:96:80:4d:0d:86:fd:93:ba:cf:74: e3:be:f1:2f:e4:02:f2:45:c6:15:92:38:33:ce:63: 42:d0:ab:0c:06:18:4d:52:44:48:20:e4:2b:53:83: 63:68:13:1d:8a:fa:54:70:68:98:fe:ff:51:68:c6: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C1:9A:3B:D2:E2:6C:06:29:F3:EF:D5:BD:24:A3:D3:A5:D9:8D:48 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a0:b0:31:38:44:70:4d:1f:00:43:1f:0d:22:ee:f7:41:22: 7a:7c:a3:ae:d9:78:61:50:2c:f7:0a:ab:83:9a:43:99:2d:b2: 93:7b:c6:34:00:1c:a1:41:2b:70:84:f8:75:53:6a:fc:6b:04: af:d4:e4:97:4b:6e:2f:55:ea:54:81:0c:dd:06:c3:a2:db:cd: 4a:80:af:14:e7:5c:23:f1:5e:52:f9:52:47:6e:ff:db:33:5b: a6:12:3e:a1:3b:18:ca:d8:67:e1:03:c1:8d:61:7e:2f:e4:d3: aa:66:dd:85:12:59:8c:ee:9c:18:39:d3:5c:a9:e3:a2:e8:3b: af:74:8c:bc:29:ee:7e:4c:26:b5:8f:7e:93:a9:32:0f:44:56: 83:3b:bf:fe:a7:de:bc:28:28:6a:16:48:18:47:3d:db:40:30: 1d:55:28:bb:2e:12:a3:8d:1f:c2:e2:03:27:17:f9:a8:8c:00: a7:af:48:5c:2f:16:70:1e:41:b9:8b:dc:af:48:b4:78:18:28: 30:e5:33:56:40:3a:6f:26:b3:35:21:a8:1d:e2:ff:d5:d8:4c: 9a:79:24:99:2e:67:18:57:f2:f4:76:03:fa:f1:d8:e7:34:4b: dd:58:5d:a9:5a:e4:0c:8a:06:51:5b:54:e2:69:ab:70:2e:02: 11:a8:89:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjUwNDI1MDQyNjE5WhcNMjUwNTAyMDQyNjE5WjAYMRYwFAYD VQQDEw02ODBiMGVlYi04NTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8nxbCKYHEYca3A1fNkj583uL47soET3RMkmTSEqJr75ovybcwUm11gliXUao UueBiZDVB0UMEXpCpOTaERfp9Iz1YxLfrr+aARQPHpOoLai8lGC/uzlAE9p1U0+3 QOd4r/5GYNCd6/HbDwvr27bElFFjsvSCGVtafj5JtU4BnRI/LS9PzLcXseGk8utH lWHN4QSqtsYzFOJ+W0EGxuIuJPgYjJ8NPHY7vo45pn7STSRYfs7mW3y/lx/XZOdo rk2mzFekoJsG6JaATQ2G/ZO6z3TjvvEv5ALyRcYVkjgzzmNC0KsMBhhNUkRIIOQr U4NjaBMdivpUcGiY/v9RaMaiwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3BmjvS 4mwGKfPv1b0ko9Ol2Y1IMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANoLAxOERwTR8AQx8NIu73QSJ6fKOu2XhhUCz3CquDmkOZLbKTe8Y0 AByhQStwhPh1U2r8awSv1OSXS24vVepUgQzdBsOi281KgK8U51wj8V5S+VJHbv/b M1umEj6hOxjK2GfhA8GNYX4v5NOqZt2FElmM7pwYOdNcqeOi6DuvdIy8Ke5+TCa1 j36TqTIPRFaDO7/+p968KChqFkgYRz3bQDAdVSi7LhKjjR/C4gMnF/mojACnr0hc LxZwHkG5i9yvSLR4GCgw5TNWQDpvJrM1Iagd4v/V2EyaeSSZLmcYV/L0dgP68djn NEvdWF2pWuQMigZRW1TiaatwLgIRqIlJ -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:12 2025 by rpki-client