$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: 7qVVaQPk8jKmWKEYy1QuFe4j79xZ3aBkG/vRUZr1EWA= Subject key identifier: 2A:34:43:BE:1D:1D:44:D4:90:5F:39:EE:D0:87:19:4C:F2:30:8F:69 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 276C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 271D Signing time: Thu 24 Apr 2025 15:41:22 +0000 Manifest this update: Thu 24 Apr 2025 15:41:22 +0000 Manifest next update: Thu 01 May 2025 15:41:22 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: T0JbNDFQ7fJRscpCkiwse3Xkrc+nGf/Jbbi+SWAyyYI=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: UoNQyiMbzRM8LTAnCH5+6vt93Lw53vJESQHvBWYcjss=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: cpPBl2HZl2WMGx0/E7w0QxRgBvloFKsPNiFCwchG+b8=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: gUaglzjVEo/jAQam5U3T7T5H9G5lSnkvKcItCzMbsY0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: lXtCcZI3WY8OIlNn2pthb5U4nO4x25l4CIfkoHRn3ik=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: g3qXc5xzXRuZuGvrf+0l5unc13/FwmeQdJGJ36GeWJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10092 (0x276c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Apr 24 15:41:22 2025 GMT Not After : May 1 15:41:22 2025 GMT Subject: CN=680a5ba2-ef47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:63:ff:e8:a8:39:45:d2:5e:48:2d:d3:50: e3:06:f6:f2:ed:0e:72:23:57:df:b2:af:cb:7c:72: 9b:31:8e:05:43:2b:2d:05:43:cf:c9:f1:2d:f5:32: 2c:bb:3a:ca:6f:ca:69:84:bb:fb:a6:c6:67:e4:14: 3b:07:fc:7f:f3:af:6c:9f:1d:6d:c1:95:62:e8:05: 76:5d:a7:43:e2:11:7a:f5:6a:b2:cc:cb:0e:a6:c9: 61:74:c4:40:ad:72:ec:a5:49:3b:c2:79:8e:34:10: d1:ff:53:f7:3f:81:a7:66:37:d3:b2:d9:1b:1d:8d: fc:4c:1b:f3:7d:19:6a:9b:a4:94:e4:da:f9:fe:1b: 17:09:08:6a:5f:3f:11:45:12:c5:7d:84:ff:4c:be: d4:e8:57:e3:dc:fa:42:4a:4f:9a:d1:d8:c4:23:e2: b3:47:ec:c8:dc:67:68:de:05:79:76:04:f5:dc:58: 5e:2c:9c:10:74:4d:66:a5:ad:47:a8:51:b9:5e:ee: 00:49:e6:35:6d:ea:d6:2a:56:1d:fd:eb:33:ba:56: 03:30:c1:db:de:62:d3:46:5b:cc:a3:f0:8c:60:14: f6:f8:15:0b:55:d8:5c:38:ea:6a:7f:43:7d:10:94: 2d:68:a6:50:1a:0a:07:13:7b:64:19:67:96:68:ff: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:34:43:BE:1D:1D:44:D4:90:5F:39:EE:D0:87:19:4C:F2:30:8F:69 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:af:fa:34:e3:11:8e:36:77:d9:02:d0:ba:5f:d0:bf:0e:30: 32:e8:98:27:de:ef:27:a2:69:11:9f:15:e9:98:61:eb:cd:d8: 21:85:be:71:83:b8:d8:4c:df:18:88:9d:e0:4f:67:8c:e8:bd: 18:1b:7d:47:85:8b:bb:a8:2a:2e:12:90:fd:2a:a6:47:46:80: 29:8b:94:fd:01:d3:0e:71:c0:e1:a3:1c:2e:d0:28:b1:87:ba: 13:42:7f:cb:ce:78:ad:f7:1d:fd:35:af:1e:a4:57:a0:40:02: e4:7e:c4:f2:ba:cf:09:48:b9:e4:60:66:29:54:c6:fa:98:c3: 26:0f:9f:b3:7f:e5:69:fe:a4:86:a5:9c:12:31:ad:10:7f:5b: 39:18:19:67:d8:02:e4:57:df:5b:1d:1d:11:2f:c1:7d:e6:24: 1a:09:66:a3:38:e7:52:09:8b:0e:b7:46:69:9e:0e:fb:d7:f4: b4:45:a9:d0:7e:4a:b2:e5:67:76:e8:f5:0f:7d:8a:84:9e:ec: ac:94:1a:a1:22:51:e7:16:cb:b0:5f:8b:d8:5d:5e:96:c7:44: 8a:98:d7:92:ee:89:76:da:28:24:80:ae:d4:de:22:47:36:b0: e7:8d:76:f9:3b:a8:dd:7b:77:91:5a:55:32:9b:99:13:90:92: 40:87:cd:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwNDI0MTU0MTIyWhcNMjUwNTAxMTU0MTIyWjAYMRYwFAYD VQQDEw02ODBhNWJhMi1lZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi9j/+ioOUXSXkgt01DjBvby7Q5yI1ffsq/LfHKbMY4FQystBUPPyfEt9TIs uzrKb8pphLv7psZn5BQ7B/x/869snx1twZVi6AV2XadD4hF69WqyzMsOpslhdMRA rXLspUk7wnmONBDR/1P3P4GnZjfTstkbHY38TBvzfRlqm6SU5Nr5/hsXCQhqXz8R RRLFfYT/TL7U6Ffj3PpCSk+a0djEI+KzR+zI3Gdo3gV5dgT13FheLJwQdE1mpa1H qFG5Xu4ASeY1berWKlYd/eszulYDMMHb3mLTRlvMo/CMYBT2+BULVdhcOOpqf0N9 EJQtaKZQGgoHE3tkGWeWaP8+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo0Q74d HUTUkF857tCHGUzyMI9pMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEr/o04xGONnfZAtC6X9C/DjAy6Jgn3u8nomkRnxXpmGHrzdghhb5x g7jYTN8YiJ3gT2eM6L0YG31HhYu7qCouEpD9KqZHRoApi5T9AdMOccDhoxwu0Cix h7oTQn/Lznit9x39Na8epFegQALkfsTyus8JSLnkYGYpVMb6mMMmD5+zf+Vp/qSG pZwSMa0Qf1s5GBln2ALkV99bHR0RL8F95iQaCWajOOdSCYsOt0Zpng771/S0RanQ fkqy5Wd26PUPfYqEnuyslBqhIlHnFsuwX4vYXV6Wx0SKmNeS7ol22igkgK7U3iJH NrDnjXb5O6jde3eRWlUym5kTkJJAh81G -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:32 2025 by rpki-client