$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: s3nOUNk+dP3sAYirFS2DhsGX83J7PyAQINMWu14om4Y= Subject key identifier: 7D:BC:65:A5:66:CB:C6:94:D5:E4:5B:4F:6F:0D:48:24:5A:DE:30:57 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 03C2 Signing time: Mon 07 Apr 2025 00:16:50 +0000 Manifest this update: Mon 07 Apr 2025 00:16:50 +0000 Manifest next update: Mon 14 Apr 2025 00:16:50 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: oQbdywelb61GlZGUW81dPVE+tEnUN6N6Rpqpij3ezc8=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: HjJMtBZQa4j3w+aIjRMqWS8V5BytX4DObhkkXgOg0NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 00:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB Validity Not Before: Apr 7 00:16:50 2025 GMT Not After : Apr 14 00:16:50 2025 GMT Subject: CN=67f31972-5e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:b7:bd:83:af:57:a2:97:94:66:5c:50:49: 55:c7:56:46:25:bc:19:f4:17:b2:0f:dc:0f:fc:70: 4c:3f:c9:77:04:72:84:66:b4:17:60:84:37:bc:49: 8c:f4:69:5e:21:d9:2a:75:77:6c:81:76:c0:ab:b4: a2:59:fd:fb:9d:d9:05:5b:60:b5:ce:1a:55:37:62: 24:e3:f8:87:83:9b:18:ff:16:eb:fb:47:d5:10:26: 04:8a:78:d3:d9:fc:d6:d6:3c:15:e1:cf:45:eb:ef: 0a:85:5e:c8:ab:f7:a8:44:69:40:61:dc:8f:76:e7: 45:02:95:3e:e0:27:ff:14:de:65:f9:e5:9b:4d:71: 62:13:a4:5e:c7:59:47:43:d3:95:6a:3f:bc:19:d4: a2:3a:83:03:8b:99:4e:d1:96:4c:b3:5e:ce:bf:ae: 1d:3c:47:62:77:a1:72:90:7f:51:83:24:8e:3c:b9: 62:3c:08:c6:00:4c:19:53:a0:34:00:32:36:3e:08: b2:13:80:69:bc:0f:8b:79:77:2d:c4:67:d5:d1:60: 71:ba:d0:df:42:a7:7e:55:50:db:93:2d:b8:8e:60: 9d:7b:1e:93:ed:a6:f1:3e:f3:ff:5f:92:ea:3e:2c: b8:de:09:2e:c2:1c:9a:2e:61:e6:c8:da:5b:32:45: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BC:65:A5:66:CB:C6:94:D5:E4:5B:4F:6F:0D:48:24:5A:DE:30:57 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d2:8b:d6:2b:70:3a:80:b2:d2:e6:ec:4f:57:26:9e:9a:88: 00:b5:bd:85:f6:98:c3:b1:c9:c4:1f:a6:7d:99:25:d0:47:2a: f1:35:7b:b5:5c:8b:cc:9d:64:d4:7c:95:d9:03:f8:31:24:f0: e7:cf:df:89:e3:9f:39:2e:18:47:b7:9f:3a:57:c9:81:f0:f8: 41:00:db:cb:ae:dc:9c:5f:9e:10:14:1a:c5:ae:6d:95:c3:60: 3c:ff:ab:b6:e1:87:76:22:31:c4:86:fa:10:8e:c2:ad:93:22: da:4e:22:e2:3a:7d:a1:a1:8b:b8:53:28:b5:19:b8:92:6d:f9: 42:d4:c9:42:e4:44:77:0b:1b:b6:ad:1e:3c:ec:24:e1:fd:fc: ea:3a:6c:15:c5:4b:43:2d:ac:cc:ca:ce:37:66:0c:e2:9c:b0: 11:1f:76:88:84:c9:0b:d1:32:71:bf:58:d7:b0:5a:85:43:14: ab:96:70:ab:a5:d8:a4:49:71:99:1d:f3:59:d3:47:c6:0a:5e: 64:56:34:73:fd:6f:88:51:b8:60:20:d5:f0:b6:0b:21:35:7b: ca:9b:73:4a:1e:e2:85:f6:1d:cf:7d:f2:77:83:07:f3:60:fd: 29:8f:6f:31:84:91:18:e6:ed:b2:2e:e0:f7:3c:6b:cf:90:a9: 89:d9:64:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUwNDA3MDAxNjUwWhcNMjUwNDE0MDAxNjUwWjAYMRYwFAYD VQQDEw02N2YzMTk3Mi01ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwt+3vYOvV6KXlGZcUElVx1ZGJbwZ9BeyD9wP/HBMP8l3BHKEZrQXYIQ3vEmM 9GleIdkqdXdsgXbAq7SiWf37ndkFW2C1zhpVN2Ik4/iHg5sY/xbr+0fVECYEinjT 2fzW1jwV4c9F6+8KhV7Iq/eoRGlAYdyPdudFApU+4Cf/FN5l+eWbTXFiE6Rex1lH Q9OVaj+8GdSiOoMDi5lO0ZZMs17Ov64dPEdid6FykH9RgySOPLliPAjGAEwZU6A0 ADI2PgiyE4BpvA+LeXctxGfV0WBxutDfQqd+VVDbky24jmCdex6T7abxPvP/X5Lq Piy43gkuwhyaLmHmyNpbMkXQxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH28ZaVm y8aU1eRbT28NSCRa3jBXMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn0ovWK3A6gLLS5uxPVyaemogAtb2F9pjDscnEH6Z9mSXQRyrxNXu1 XIvMnWTUfJXZA/gxJPDnz9+J4585LhhHt586V8mB8PhBANvLrtycX54QFBrFrm2V w2A8/6u24Yd2IjHEhvoQjsKtkyLaTiLiOn2hoYu4Uyi1GbiSbflC1MlC5ER3Cxu2 rR487CTh/fzqOmwVxUtDLazMys43ZgzinLARH3aIhMkL0TJxv1jXsFqFQxSrlnCr pdikSXGZHfNZ00fGCl5kVjRz/W+IUbhgINXwtgshNXvKm3NKHuKF9h3PffJ3gwfz YP0pj28xhJEY5u2yLuD3PGvPkKmJ2WSd -----END CERTIFICATE-----Generated at Mon Apr 7 04:27:31 2025 by rpki-client