$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: 6jGL+i0pUxmOb+JLix1NMAQQdxVt8idvHAusW1hV5m8= Subject key identifier: 2E:FA:1E:8E:CD:56:76:86:BA:E8:2B:DD:B0:56:B3:AB:2F:7D:B3:0D Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: DB Signing time: Fri 25 Apr 2025 04:36:56 +0000 Manifest this update: Fri 25 Apr 2025 04:36:56 +0000 Manifest next update: Fri 02 May 2025 04:36:55 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: yzFyT1IU/UC1v/9ttCW5Bv4niLbFjW4E6gvchsUTt1c=) 2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: FHRlsB48eK0jdLR0VwZXrRd3F+Rj548sH8y8zKsy5+s=) 3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: PAO2tzUE6VhuIQPWRUUuXZiVK/zRgbkDyCoIJqVq33M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Apr 25 04:36:56 2025 GMT Not After : May 2 04:36:55 2025 GMT Subject: CN=680b1168-4bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:4a:ab:e4:fc:e3:1e:a1:7c:21:46:93:f5: 55:44:27:8d:cf:c9:e3:da:ff:20:e2:8f:c4:f3:da: 93:83:37:91:25:52:9b:31:ff:c4:4e:af:0a:4f:7f: 4f:29:c8:06:42:dd:b0:cf:2c:db:03:d4:47:24:c7: d6:16:42:ae:b7:7b:87:f6:ca:11:e5:11:05:16:8d: cd:6f:cb:8e:98:1e:ae:61:56:82:dd:bb:9f:22:16: 0f:d8:e0:d4:e3:35:04:a2:d0:75:1d:d1:e6:b4:54: d6:66:3f:86:fe:ee:ac:1e:0d:d1:15:f5:84:cc:7f: 40:9b:44:7e:c5:5d:01:b0:ca:44:d8:39:35:0c:6a: 37:f3:45:8d:0f:b9:ca:0d:2a:de:11:a2:b7:a0:35: 7f:83:76:77:d0:2e:49:e8:38:4d:ac:7e:b9:64:27: 40:84:65:38:cf:d5:95:9a:11:e6:e1:c0:2c:bb:85: 9d:99:af:fe:4f:eb:d9:7c:26:68:b4:4c:08:56:a8: fd:85:bb:79:c3:bd:d9:28:cc:f9:7f:85:ef:90:2b: b9:ed:66:e8:45:8f:2b:9e:00:30:e1:94:94:df:aa: 02:8d:2d:56:03:4b:38:9f:e8:9b:14:a3:50:48:ee: 18:fc:7e:14:82:6b:3e:8c:77:c4:4c:a4:bb:b4:f8: bb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FA:1E:8E:CD:56:76:86:BA:E8:2B:DD:B0:56:B3:AB:2F:7D:B3:0D X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:80:38:a0:47:b2:f9:9b:9f:df:a5:27:2a:56:39:cb:6c:2f: 90:4f:ff:28:9e:5f:a6:ae:7a:be:63:65:b4:b9:fe:a3:8b:b0: 66:76:74:91:b8:45:06:05:dc:06:1f:c4:dc:1e:da:e6:15:5e: be:30:52:bc:5b:0e:eb:65:7a:09:8f:9f:b4:cf:99:bf:5b:13: ce:98:e9:7e:2f:4c:81:db:a4:ec:00:78:bb:48:a2:ea:54:3c: f7:1e:68:ea:58:31:38:34:7d:59:9c:63:16:26:e5:05:60:2a: 51:59:cd:97:df:af:ee:81:c0:1b:70:e6:1f:fa:13:57:97:ba: 97:fb:cf:16:65:c8:97:b7:e6:3f:1d:4a:d1:fe:44:60:25:57: 3a:42:d7:82:fe:11:45:8f:a6:95:0b:43:cc:06:26:52:2a:ff: a4:92:fd:70:7a:eb:56:10:83:28:40:c6:c4:dc:f7:b3:e2:7e: ba:59:5b:52:12:98:61:14:bc:c9:89:01:56:66:a4:4e:92:f4: 3b:f7:da:e2:06:17:86:c5:e9:da:34:80:f0:12:a3:da:1c:06: ce:c4:80:b6:d3:fd:51:c8:f1:01:ac:eb:68:14:f1:54:94:f8: d2:64:3e:9e:7d:5d:dc:e7:b6:e5:6e:2a:90:f8:39:81:1d:14: 4f:3c:e1:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjUwNDI1MDQzNjU2WhcNMjUwNTAyMDQzNjU1WjAYMRYwFAYD VQQDEw02ODBiMTE2OC00YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzxKq+T84x6hfCFGk/VVRCeNz8nj2v8g4o/E89qTgzeRJVKbMf/ETq8KT39P KcgGQt2wzyzbA9RHJMfWFkKut3uH9soR5REFFo3Nb8uOmB6uYVaC3bufIhYP2ODU 4zUEotB1HdHmtFTWZj+G/u6sHg3RFfWEzH9Am0R+xV0BsMpE2Dk1DGo380WND7nK DSreEaK3oDV/g3Z30C5J6DhNrH65ZCdAhGU4z9WVmhHm4cAsu4Wdma/+T+vZfCZo tEwIVqj9hbt5w73ZKMz5f4XvkCu57WboRY8rngAw4ZSU36oCjS1WA0s4n+ibFKNQ SO4Y/H4Ugms+jHfETKS7tPi7uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC76Ho7N VnaGuugr3bBWs6svfbMNMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWgDigR7L5m5/fpScqVjnLbC+QT/8onl+mrnq+Y2W0uf6ji7BmdnSR uEUGBdwGH8TcHtrmFV6+MFK8Ww7rZXoJj5+0z5m/WxPOmOl+L0yB26TsAHi7SKLq VDz3HmjqWDE4NH1ZnGMWJuUFYCpRWc2X36/ugcAbcOYf+hNXl7qX+88WZciXt+Y/ HUrR/kRgJVc6QteC/hFFj6aVC0PMBiZSKv+kkv1weutWEIMoQMbE3Pez4n66WVtS EphhFLzJiQFWZqROkvQ799riBheGxenaNIDwEqPaHAbOxIC20/1RyPEBrOtoFPFU lPjSZD6efV3c57blbiqQ+DmBHRRPPOH5 -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:36 2025 by rpki-client