$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: oStFzod8IXanajMi/XEo5PYUDprCaz0ScM28eVAJMjM= Subject key identifier: FF:09:36:F8:C1:BE:BA:4B:19:F7:49:3B:33:38:10:BE:03:FB:CD:C5 Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: 43 Signing time: Thu 24 Apr 2025 17:40:52 +0000 Manifest this update: Thu 24 Apr 2025 17:40:52 +0000 Manifest next update: Thu 01 May 2025 17:40:52 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: VdGw2hQDbtqUQix7OxeYDcYh3J74UjlhLq7PBU6C3VU=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: AoCtdlkJJmrM0z3AC3jCQKm47jbQAWLBDnBBfT5EtYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Apr 24 17:40:52 2025 GMT Not After : May 1 17:40:52 2025 GMT Subject: CN=680a77a4-87c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8b:47:a7:ee:09:92:cc:34:49:f5:7e:f7:d6: 4c:26:4b:00:f6:0a:d9:4d:e2:32:05:39:96:59:75: b7:01:cd:37:fe:5e:56:f0:16:00:72:1d:11:22:dd: f0:a5:47:e6:60:f7:5d:cb:96:66:33:d4:ea:21:97: 24:92:5f:22:9e:42:d9:bb:5f:09:43:44:97:76:d3: 23:a3:b9:d1:a7:18:a8:3b:51:6d:b2:5e:80:ba:e4: 2e:c4:8d:dd:79:33:30:2a:3b:f8:c1:22:e9:69:b5: 21:0f:d7:8d:8e:7f:a7:b0:28:47:7a:6f:f4:9a:fe: 63:e8:a7:63:0f:26:13:9a:c3:ad:0c:d7:ed:9a:99: 40:d1:02:e8:3d:c4:72:52:7b:ff:1a:3d:75:30:4f: 49:a5:a9:48:ee:19:b8:c7:2c:6b:13:0e:40:3b:46: 69:40:11:f4:86:dc:d7:c5:db:c8:fe:4a:1e:a3:e4: 26:e6:41:e1:da:f3:d5:2c:8d:91:fa:01:0d:b8:77: d8:05:98:61:0d:4c:43:0e:34:63:28:4d:d6:18:29: 95:a5:64:02:19:73:d9:7a:69:58:a3:99:5a:e2:29: a7:0a:c5:17:82:1a:74:3b:f4:4b:c5:a8:34:3f:41: 22:e6:a1:d7:91:df:83:d7:f0:5c:3d:48:cd:89:24: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:09:36:F8:C1:BE:BA:4B:19:F7:49:3B:33:38:10:BE:03:FB:CD:C5 X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:5a:a1:f9:17:e0:e9:02:ab:79:64:02:45:6f:34:8d:76:bd: 0c:73:06:69:bc:d9:87:67:0b:7d:09:2a:11:ea:e0:21:1e:b5: 68:84:a9:9a:2c:eb:e9:1c:c3:83:d0:76:49:12:7e:3d:5b:2c: 06:4c:f8:89:ab:aa:6e:50:d1:53:f3:f6:0c:ae:e6:a3:7d:82: 69:69:d8:ad:bc:c7:34:1c:9c:02:65:b0:cf:a5:45:af:85:00: cf:84:b0:c3:c1:28:3a:d5:00:21:0c:2e:a7:54:aa:7a:0e:16: 27:b3:1c:a0:2f:fc:f6:43:d9:df:ec:b2:ba:a8:c7:fe:9d:8f: 30:87:4c:f9:2f:e2:4b:71:db:59:91:b1:b8:57:bd:ac:8b:ff: c7:a0:7f:2b:c1:f2:f6:bb:64:2c:ef:98:fd:99:ac:c5:fc:40: b9:b2:57:47:46:ab:62:a3:a1:0b:0b:2b:55:b8:af:d9:db:90: 59:3c:a7:d6:25:de:f0:3f:f9:85:2a:bd:7d:f2:b6:66:0b:3a: bb:8a:62:8f:9f:eb:7a:1e:a7:66:0b:62:e6:8b:8e:55:ba:0f: a0:6a:a0:58:5e:aa:00:04:74:c5:d7:5f:c0:63:93:d7:48:a5: 7b:93:77:a9:55:a5:d4:40:00:41:ab:46:4a:7a:fd:b0:63:83: 39:44:64:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzIyNTExMC8GA1UEBRMoMjJDN0VDM0NEOUVENEM1MEU4OTRBMTFCQ0Q3MEQwMzEw Q0Q1Rjg1OTAeFw0yNTA0MjQxNzQwNTJaFw0yNTA1MDExNzQwNTJaMBgxFjAUBgNV BAMTDTY4MGE3N2E0LTg3YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhi0en7gmSzDRJ9X731kwmSwD2CtlN4jIFOZZZdbcBzTf+XlbwFgByHREi3fCl R+Zg913LlmYz1OohlySSXyKeQtm7XwlDRJd20yOjudGnGKg7UW2yXoC65C7Ejd15 MzAqO/jBIulptSEP142Of6ewKEd6b/Sa/mPop2MPJhOaw60M1+2amUDRAug9xHJS e/8aPXUwT0mlqUjuGbjHLGsTDkA7RmlAEfSG3NfF28j+Sh6j5CbmQeHa89UsjZH6 AQ24d9gFmGENTEMONGMoTdYYKZWlZAIZc9l6aVijmVriKacKxReCGnQ79EvFqDQ/ QSLmodeR34PX8Fw9SM2JJLdxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/wk2+MG+ uksZ90k7MzgQvgP7zcUwHwYDVR0jBBgwFoAUIsfsPNntTFDolKEbzXDQMQzV+Fkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDMjI1L0M5NDQ3RkYwQkVG OTExRUZCQ0Y2ODk0NEM0RjlBRTAyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSXNmc1BObnRURkRvbEtFYnpYRFFNUXpWLUZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD MjI1L0M5NDQ3RkYwQkVGOTExRUZCQ0Y2ODk0NEM0RjlBRTAyL0lzZnNQTm50VEZE b2xLRWJ6WERRTVF6Vi1Gay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVaofkX4OkCq3lkAkVvNI12vQxzBmm82YdnC30JKhHq4CEetWiEqZos 6+kcw4PQdkkSfj1bLAZM+Imrqm5Q0VPz9gyu5qN9gmlp2K28xzQcnAJlsM+lRa+F AM+EsMPBKDrVACEMLqdUqnoOFiezHKAv/PZD2d/ssrqox/6djzCHTPkv4ktx21mR sbhXvayL/8egfyvB8va7ZCzvmP2ZrMX8QLmyV0dGq2KjoQsLK1W4r9nbkFk8p9Yl 3vA/+YUqvX3ytmYLOruKYo+f63oep2YLYuaLjlW6D6BqoFheqgAEdMXXX8Bjk9dI pXuTd6lVpdRAAEGrRkp6/bBjgzlEZJw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:25:00 2025 by rpki-client