$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft File: ihuLzV7XzXIsUwBJjkqTZdBGo04.mft (raw, json) Hash identifier: z3gQqEX2YL6Lu6trdwZ9PVmruYSWUWpDpOgfPz+AdrY= Subject key identifier: 20:DB:CD:AD:EE:90:B3:5E:4E:F1:D1:4D:E7:50:11:E0:6F:50:E2:EA Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft Manifest number: 0832 Signing time: Thu 24 Apr 2025 20:39:23 +0000 Manifest this update: Thu 24 Apr 2025 20:39:22 +0000 Manifest next update: Thu 01 May 2025 20:39:22 +0000 Files and hashes: 1: ihuLzV7XzXIsUwBJjkqTZdBGo04.crl (hash: bthGG/WTXKOQz5RbAj2tvWnXFH7jjwyJ2/mAlZbxhqQ=) 2: B6EB6C5ED46611ECA1A27035C4F9AE02.roa (hash: MzytEdv6AFwyptJ19U9Ds4XRz9r3S4O8DZQCdtraCmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Validity Not Before: Apr 24 20:39:22 2025 GMT Not After : May 1 20:39:22 2025 GMT Subject: CN=680aa17a-f806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3e:9d:90:33:95:34:f8:f3:de:42:6c:65:af: c7:b4:89:21:46:ba:f5:81:f3:dc:06:07:7a:3e:66: a0:06:ce:05:2d:ef:01:9c:c3:95:41:bb:46:16:86: a4:d1:b2:12:0b:e8:2b:dc:b1:7c:57:02:af:4e:26: 43:16:9b:4a:2b:be:79:f4:25:b4:da:82:4f:b7:5c: c6:fa:94:7c:ea:02:b4:4a:da:6c:12:18:8b:6f:ed: 15:a8:9e:da:1d:d5:bb:9e:bb:ea:c4:13:b1:29:f2: 21:97:0e:83:09:c1:c5:de:aa:3a:32:e1:e9:e5:5a: fa:f4:0d:d4:d9:cb:65:a3:3d:21:4c:e8:47:43:c5: ce:74:cb:29:50:c4:69:00:d5:9d:5f:8f:a0:bf:af: d8:12:12:0d:20:83:a6:60:12:10:d1:9d:47:77:e8: c7:13:d4:0c:2f:47:83:af:db:3b:9e:80:c5:cb:43: 5b:a2:82:17:9f:06:17:ac:bc:b2:a0:6f:74:12:fe: 6c:74:9e:47:e6:07:7a:77:d7:74:95:ff:8b:ea:07: 8a:1f:09:6a:a1:50:00:2e:bc:21:55:d4:4f:06:2e: d6:ad:d7:ea:d7:84:f0:73:e0:51:13:47:71:6e:25: 3b:57:9f:70:d6:20:7d:18:a5:c0:a5:06:5f:2d:f6: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DB:CD:AD:EE:90:B3:5E:4E:F1:D1:4D:E7:50:11:E0:6F:50:E2:EA X509v3 Authority Key Identifier: keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:df:b1:73:e6:87:86:bf:af:dd:cb:2d:8c:bc:17:c1:fd:cb: 17:5f:55:f6:01:a6:27:22:42:77:cf:4a:9f:57:e7:f6:bf:36: 4f:c7:7d:9d:72:51:3e:95:aa:65:ca:48:77:61:83:b1:6b:7f: ab:fb:ab:01:06:78:27:e1:9e:bc:99:b6:05:dd:35:5f:2c:98: 4a:13:0c:7c:2e:86:3d:db:05:8d:71:f3:db:1b:e0:0e:fc:ed: 2d:28:46:29:10:6e:16:a9:e5:56:b4:89:f3:99:68:2a:65:5d: 5c:8b:f6:80:22:ee:9a:57:10:70:43:44:ee:d2:1b:a6:7a:bc: 9b:c4:6b:b8:05:2b:1a:8b:b4:03:b1:9b:d0:48:bd:b4:61:a2: 16:ec:dd:1f:3d:96:e7:5b:da:46:69:6e:9a:45:bf:b1:bc:22: 96:1b:ed:ce:f2:49:0a:29:f2:44:40:d3:4c:0e:99:44:2e:e7: ed:d3:a1:e3:d5:f0:01:a6:76:4f:74:1e:b9:ea:fd:78:5f:f1: 0b:41:dc:a7:1e:c6:7d:13:e4:a6:26:21:22:c4:d4:0a:c6:c1: 50:9a:17:76:f7:44:e4:de:8f:ed:a0:21:02:5f:85:d0:38:8f: 6a:66:da:28:a0:8e:c8:70:e3:d0:53:8a:67:a2:dc:f9:25:72: b6:00:96:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQzYxMTAvBgNVBAUTKDhBMUI4QkNENUVEN0NENzIyQzUzMDA0OThFNEE5MzY1 RDA0NkEzNEUwHhcNMjUwNDI0MjAzOTIyWhcNMjUwNTAxMjAzOTIyWjAYMRYwFAYD VQQDEw02ODBhYTE3YS1mODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D6dkDOVNPjz3kJsZa/HtIkhRrr1gfPcBgd6PmagBs4FLe8BnMOVQbtGFoak 0bISC+gr3LF8VwKvTiZDFptKK7559CW02oJPt1zG+pR86gK0StpsEhiLb+0VqJ7a HdW7nrvqxBOxKfIhlw6DCcHF3qo6MuHp5Vr69A3U2ctloz0hTOhHQ8XOdMspUMRp ANWdX4+gv6/YEhINIIOmYBIQ0Z1Hd+jHE9QML0eDr9s7noDFy0NbooIXnwYXrLyy oG90Ev5sdJ5H5gd6d9d0lf+L6geKHwlqoVAALrwhVdRPBi7Wrdfq14Twc+BRE0dx biU7V59w1iB9GKXApQZfLfbAQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDbza3u kLNeTvHRTedQEeBvUOLqMB8GA1UdIwQYMBaAFIobi81e181yLFMASY5Kk2XQRqNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFDNi80OTFDOENFNkND OTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpYSXNVd0JKamtxVFpkQkdv MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lodUx6VjdYelhJc1V3Qkpqa3FUWmRCR28wNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFDNi80OTFDOENFNkNDOTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpY SXNVd0JKamtxVFpkQkdvMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv37Fz5oeGv6/dyy2MvBfB/csXX1X2AaYnIkJ3z0qfV+f2vzZPx32d clE+laplykh3YYOxa3+r+6sBBngn4Z68mbYF3TVfLJhKEwx8LoY92wWNcfPbG+AO /O0tKEYpEG4WqeVWtInzmWgqZV1ci/aAIu6aVxBwQ0Tu0humerybxGu4BSsai7QD sZvQSL20YaIW7N0fPZbnW9pGaW6aRb+xvCKWG+3O8kkKKfJEQNNMDplELuft06Hj 1fABpnZPdB656v14X/ELQdynHsZ9E+SmJiEixNQKxsFQmhd290Tk3o/toCECX4XQ OI9qZtoooI7IcOPQU4pnotz5JXK2AJYv -----END CERTIFICATE-----Generated at Sat Apr 26 13:47:13 2025 by rpki-client