$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: AOK8V22rIX60NJ51PNDp9ZDfXHP3MhzPBh+VnNcRXBA= Subject key identifier: 76:CE:AD:CF:D7:5C:23:5A:CB:89:55:95:48:C8:B9:AD:E7:D6:D6:8A Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 0844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 080F Signing time: Thu 24 Apr 2025 20:49:58 +0000 Manifest this update: Thu 24 Apr 2025 20:49:58 +0000 Manifest next update: Thu 01 May 2025 20:49:58 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: z4tXzOMcOnGMMLBp0MyaRZ6wlU5Emf6GJnvmfCOcu64=) 2: EF40C4AC404611EFA2014651C4F9AE02.roa (hash: czaYuAZrmltxjeFq6mD06OZKMChDyKz2TsFDBFMIxYw=) 3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: IR0gL9HuGQPasCSDeDXOONGQSnX5FqddD0h9jerJFTk=) 4: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: RgPF5melWGZf5AFZ9hv+NJPKC/EOsjcNRxGMLnUAhvk=) 5: 35D16082404911EFBC4C610EC4F9AE02.roa (hash: CZyYnpg8fZRv7/01XkAyfUiNYVCaEIGt11t+Ww7CLyk=) 6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: 5tsj3TAsFxb8qTqVXGn9He+Eq077vpR4YIaSiSHaTqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Apr 24 20:49:58 2025 GMT Not After : May 1 20:49:58 2025 GMT Subject: CN=680aa3f6-6d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:91:9a:56:92:af:38:31:72:c0:9f:07:47: bf:30:a5:a1:6a:55:44:a8:ed:ba:55:b9:9e:cf:ca: 21:b4:f7:ea:f3:b8:2c:b2:42:17:48:fa:52:5c:41: b9:7f:0d:08:2e:0a:1b:7e:f1:4b:d2:03:1f:19:23: 1b:07:3c:b0:7d:09:bd:d3:18:d5:49:fe:08:65:97: 54:a4:54:2f:e3:e2:55:4a:d6:32:5a:a8:e9:8e:bf: ff:25:0d:6f:0b:1d:26:fc:a1:28:49:cc:a7:67:cc: f7:8e:ec:02:76:79:85:e8:71:bb:09:83:e0:6d:42: 9d:ab:d4:91:dd:aa:79:9c:34:9a:84:9e:3b:27:97: c5:61:f4:4e:f8:ed:62:7e:cc:f7:6d:5b:91:ed:43: 95:1c:b7:00:c6:94:7b:52:5e:f3:57:99:b8:0d:da: 19:e0:ef:66:c4:cc:93:be:c2:a3:ce:a3:61:0d:35: 66:fe:6a:fd:3a:d1:11:74:f4:2a:92:84:7d:cc:ac: f1:53:df:14:0b:62:42:02:0b:44:f2:6c:b6:64:61: 02:dd:e5:ef:e9:0d:e4:2a:09:04:d2:b0:b3:cf:b7: f0:0b:de:76:fe:23:a8:9c:58:34:5a:48:d0:b5:94: 0a:27:e2:8b:e5:14:0e:0c:55:c2:58:53:b7:c0:4a: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CE:AD:CF:D7:5C:23:5A:CB:89:55:95:48:C8:B9:AD:E7:D6:D6:8A X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ce:c3:28:fc:b6:9f:71:2d:a9:28:ba:4d:61:8d:ad:76:47: 9d:b9:b9:24:aa:23:ee:d4:2a:03:32:68:bc:40:40:ae:f7:80: f5:8c:f1:f6:e0:dc:3a:1a:d4:66:5c:ae:09:3b:8b:d4:00:e6: b2:53:91:4e:e5:b9:75:ab:d0:1f:67:c6:a4:7d:d9:6d:8d:8a: dd:00:e6:9e:b5:e4:82:4c:64:cb:15:79:95:e2:df:27:c0:fd: 9d:50:4b:39:2f:66:88:00:38:7f:01:58:3f:19:53:f6:61:98: 7d:19:79:df:2e:93:61:19:e0:7f:fd:14:49:f8:57:23:e0:af: 93:5b:70:28:4c:f5:d8:6b:95:5a:c6:79:08:18:58:7a:f1:28: de:ee:23:95:da:3b:07:3f:69:03:18:c6:19:26:6b:d6:72:4b: c1:ec:4a:8e:37:f6:88:2f:50:00:81:b1:61:d5:56:6f:a8:b9: c2:a8:2e:69:cb:c8:f0:3e:9e:86:3d:73:3f:0e:1f:7f:84:9e: ee:e6:a9:d3:80:17:a2:5a:15:5a:a1:00:ac:31:5d:91:f0:68: c8:78:95:39:4c:0b:a4:f6:a1:73:89:02:9f:a2:1e:16:bd:e2: ef:55:46:43:43:4c:59:0e:f5:6e:2b:88:b2:8f:06:8e:84:f2: 55:5a:68:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUwNDI0MjA0OTU4WhcNMjUwNTAxMjA0OTU4WjAYMRYwFAYD VQQDEw02ODBhYTNmNi02ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oaRmlaSrzgxcsCfB0e/MKWhalVEqO26Vbmez8ohtPfq87gsskIXSPpSXEG5 fw0ILgobfvFL0gMfGSMbBzywfQm90xjVSf4IZZdUpFQv4+JVStYyWqjpjr//JQ1v Cx0m/KEoScynZ8z3juwCdnmF6HG7CYPgbUKdq9SR3ap5nDSahJ47J5fFYfRO+O1i fsz3bVuR7UOVHLcAxpR7Ul7zV5m4DdoZ4O9mxMyTvsKjzqNhDTVm/mr9OtERdPQq koR9zKzxU98UC2JCAgtE8my2ZGEC3eXv6Q3kKgkE0rCzz7fwC952/iOonFg0WkjQ tZQKJ+KL5RQODFXCWFO3wErObQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbOrc/X XCNay4lVlUjIua3n1taKMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4zsMo/LafcS2pKLpNYY2tdkedubkkqiPu1CoDMmi8QECu94D1jPH2 4Nw6GtRmXK4JO4vUAOayU5FO5bl1q9AfZ8akfdltjYrdAOaeteSCTGTLFXmV4t8n wP2dUEs5L2aIADh/AVg/GVP2YZh9GXnfLpNhGeB//RRJ+Fcj4K+TW3AoTPXYa5Va xnkIGFh68Sje7iOV2jsHP2kDGMYZJmvWckvB7EqON/aIL1AAgbFh1VZvqLnCqC5p y8jwPp6GPXM/Dh9/hJ7u5qnTgBeiWhVaoQCsMV2R8GjIeJU5TAuk9qFziQKfoh4W veLvVUZDQ0xZDvVuK4iyjwaOhPJVWmiM -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:43 2025 by rpki-client