$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: q+jisQq+l99PMfq7nyLbtW5zGoV4VwrGMiN/iPCVvUI= Subject key identifier: 5C:FA:F3:F8:F2:28:E9:47:C2:DB:13:C8:C2:5C:55:06:8A:6F:C4:7B Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 0145 Signing time: Fri 25 Apr 2025 03:28:15 +0000 Manifest this update: Fri 25 Apr 2025 03:28:14 +0000 Manifest next update: Fri 02 May 2025 03:28:14 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: 2iebfeJYO6yqpmXI9RsLAHqOiZFwDVHAY018tPAx1EU=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: MRW+pxq2rIQWqz0eewlHDxgHTLGzIYysThVYJrp2BDc=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: Fv5yzaRaYXm7EcaxJ9d0RT5up4myTdlO4UPvIXp3L88=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: mGJXgF/PKI9FEq/cPxsdqAyVl2gi74HVL2n1gwNWhDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Apr 25 03:28:14 2025 GMT Not After : May 2 03:28:14 2025 GMT Subject: CN=680b014e-3864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:1e:d8:fb:1f:cc:c2:b7:ff:47:47:67:15: 15:c0:8f:d3:35:4e:18:03:93:86:b8:e5:9c:05:3a: 69:1f:ce:cf:3b:f2:a3:81:ac:9a:d0:82:f3:16:d8: a4:f5:29:55:57:af:9d:41:85:1e:20:59:54:4b:9a: fa:00:5c:ac:62:b0:d7:cf:18:60:88:00:1c:13:5d: 2d:0a:fa:01:92:ba:dc:4b:f0:27:5c:87:d8:47:71: 7c:79:5b:d9:53:79:8c:e0:cf:1a:bc:29:0f:90:fa: 30:57:c8:54:b0:34:6a:2f:36:78:1a:41:62:8f:c0: 3d:15:55:c0:ef:62:c2:f7:07:3b:08:31:a5:8b:0a: 62:15:6c:ce:28:84:be:ac:80:79:45:09:6f:4d:f0: f7:2b:68:2a:13:ec:8f:64:04:55:b4:cf:f9:c0:cd: e3:89:49:7e:c4:dd:b6:2f:ae:d3:ac:e7:3c:4c:96: 7c:ad:3f:62:b2:31:8c:c4:c7:ad:eb:7f:83:52:76: 20:03:13:29:ee:2a:f3:d3:44:97:90:7f:64:2b:58: 6a:98:e8:17:ec:d3:39:c9:03:74:34:06:54:a1:ec: 2f:1e:37:92:f5:88:c6:f1:d4:cb:f7:6c:f3:fb:1a: 94:e2:a4:cd:38:a1:c0:31:8d:08:f2:7e:ca:64:29: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FA:F3:F8:F2:28:E9:47:C2:DB:13:C8:C2:5C:55:06:8A:6F:C4:7B X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4d:5d:c7:1b:9c:9d:a1:81:f7:31:74:08:28:3d:2d:90:1f: 60:e9:58:dc:38:1a:63:f1:8b:5a:cd:d4:3a:ba:0d:b8:1b:46: 28:63:15:06:4e:b5:7a:c3:8c:40:89:99:f4:46:a4:b1:02:d1: f9:19:ba:9d:fb:7f:9a:88:41:3f:c6:22:39:17:75:00:04:91: 2e:fe:0f:af:4d:8c:f0:a0:fa:77:28:b2:94:e8:32:35:ff:28: 44:8d:71:96:88:f4:fa:f2:36:ab:cd:ff:1d:5c:1c:f5:36:a3: fb:71:64:14:07:3a:1b:6c:d1:5f:d8:89:ba:d2:40:f1:b9:fd: 55:d1:fb:52:70:e2:10:e0:1f:86:66:59:53:c5:27:f6:16:a5: a7:13:d0:bd:39:0c:fe:7a:54:00:24:50:27:31:58:c1:6e:55: 16:42:d5:86:86:8a:d9:bd:e6:ce:37:d5:c6:72:a4:33:c5:a6: 72:3a:45:41:74:9f:00:be:fe:7e:e2:d0:11:d3:e0:71:08:04: 3e:47:9e:de:4f:8d:5c:21:c5:73:e3:3e:57:a0:dc:24:c9:f8: 70:13:db:19:b1:f8:3b:d5:40:88:10:51:b1:46:d7:59:a9:ac: d0:53:55:73:1e:99:86:04:6a:da:6b:8a:04:f6:1e:df:8d:bb: ea:88:13:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjUwNDI1MDMyODE0WhcNMjUwNTAyMDMyODE0WjAYMRYwFAYD VQQDEw02ODBiMDE0ZS0zODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXke2PsfzMK3/0dHZxUVwI/TNU4YA5OGuOWcBTppH87PO/Kjgaya0ILzFtik 9SlVV6+dQYUeIFlUS5r6AFysYrDXzxhgiAAcE10tCvoBkrrcS/AnXIfYR3F8eVvZ U3mM4M8avCkPkPowV8hUsDRqLzZ4GkFij8A9FVXA72LC9wc7CDGliwpiFWzOKIS+ rIB5RQlvTfD3K2gqE+yPZARVtM/5wM3jiUl+xN22L67TrOc8TJZ8rT9isjGMxMet 63+DUnYgAxMp7irz00SXkH9kK1hqmOgX7NM5yQN0NAZUoewvHjeS9YjG8dTL92zz +xqU4qTNOKHAMY0I8n7KZCnzMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz68/jy KOlHwtsTyMJcVQaKb8R7MB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6TV3HG5ydoYH3MXQIKD0tkB9g6VjcOBpj8YtazdQ6ug24G0YoYxUG TrV6w4xAiZn0RqSxAtH5Gbqd+3+aiEE/xiI5F3UABJEu/g+vTYzwoPp3KLKU6DI1 /yhEjXGWiPT68jarzf8dXBz1NqP7cWQUBzobbNFf2Im60kDxuf1V0ftScOIQ4B+G ZllTxSf2FqWnE9C9OQz+elQAJFAnMVjBblUWQtWGhorZvebON9XGcqQzxaZyOkVB dJ8Avv5+4tAR0+BxCAQ+R57eT41cIcVz4z5XoNwkyfhwE9sZsfg71UCIEFGxRtdZ qazQU1VzHpmGBGraa4oE9h7fjbvqiBM+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:43 2025 by rpki-client