$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft File: IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json) Hash identifier: 2Lv5/MqMiC0e3INISqi9v1pEcHQ4LzzF6Jv7Knwe32s= Subject key identifier: 11:E6:86:38:12:01:2B:C8:34:76:76:BF:FA:14:83:88:96:58:1A:D3 Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C Certificate issuer: /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C Certificate serial: 14EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft Manifest number: 2B34 Signing time: Fri 04 Apr 2025 16:54:42 +0000 Manifest this update: Fri 04 Apr 2025 16:54:41 +0000 Manifest next update: Fri 11 Apr 2025 16:54:41 +0000 Files and hashes: 1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: HWBYuOAqt5dpZvIWaI8ALq/s415d4eiW7/TwQSAiUDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5359 (0x14ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF Validity Not Before: Apr 4 16:54:41 2025 GMT Not After : Apr 11 16:54:41 2025 GMT Subject: CN=67f00ed1-2023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:28:d6:d4:5e:91:7b:6e:42:2e:4d:24:65: 44:10:d1:01:a3:06:68:f6:ca:19:76:3d:5b:7e:cc: 76:6d:9c:2a:7a:5c:e1:c1:35:02:0a:89:3b:8e:1e: 1b:30:3f:7c:0e:5e:e5:49:4d:58:33:a6:a3:9a:33: 18:6f:a1:32:59:5d:ad:cb:91:f8:7c:c5:ae:43:7a: 95:92:1a:cf:4e:41:b5:55:9b:14:62:fa:b5:e2:dc: 6c:91:59:04:71:02:90:47:8e:1d:1b:a5:76:e1:f2: 0e:56:d2:24:41:f2:de:ca:c4:cc:70:cf:68:c6:8a: d6:c8:22:92:06:69:d8:09:8b:e2:12:08:bc:92:c7: 76:36:41:91:e7:37:10:81:7b:f9:18:ee:3a:7b:4d: 44:86:ad:2a:e7:76:ea:36:b7:fd:89:d4:95:2f:bf: 77:7b:95:68:b0:5b:cf:1e:50:d7:4f:50:33:ea:af: 4d:04:3b:47:e1:25:49:c4:88:8d:da:2a:d9:3e:d3: 51:44:35:b6:ad:76:46:c7:53:45:64:fc:6b:c1:04: d5:29:9b:18:78:f8:a2:29:fa:83:7e:4a:ca:9e:15: d3:26:60:ab:8d:8d:31:18:99:ec:7c:ab:61:12:7e: d4:67:a1:7c:fd:03:d0:a6:c3:10:59:3d:62:7c:be: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E6:86:38:12:01:2B:C8:34:76:76:BF:FA:14:83:88:96:58:1A:D3 X509v3 Authority Key Identifier: keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:64:91:c3:84:ed:3d:37:4d:e1:cd:d7:58:48:52:f3:b3:19: 8a:23:25:bc:6a:ce:df:a3:c9:ef:d2:b9:ad:e8:8f:a6:8d:78: 70:a2:0e:c0:e1:5f:db:9e:6c:c1:33:3a:8d:ef:0e:55:57:ef: 97:b7:d8:d1:90:e4:9d:68:5d:b7:16:1f:1b:c5:39:18:dd:f7: 6e:ae:3b:99:19:86:c5:84:cb:14:ea:6c:65:f7:53:d3:54:05: 70:a7:af:a8:78:87:40:23:cd:0e:b0:3a:42:9c:b1:a0:40:88: bb:1c:df:58:cb:f1:28:19:d0:92:8e:63:f9:8e:2a:81:96:32: fc:d8:aa:96:70:80:60:3f:76:5a:f4:ea:55:03:e1:9e:4a:bd: 42:24:89:56:81:56:77:2e:9f:dd:60:b1:0e:96:0b:ae:aa:bb: 41:47:96:72:43:08:47:65:4a:08:77:78:91:fe:6f:75:c0:de: 85:b9:ff:db:46:c7:84:cd:01:8b:49:df:12:d4:ff:e2:c8:6e: cb:62:73:ef:5c:4d:19:7d:fa:10:79:3f:63:8a:27:6e:a8:65: 55:88:05:71:3d:e2:da:33:46:0d:fd:d4:25:01:78:df:6f:95: 1d:85:65:6f:7d:15:9c:26:ef:9b:0b:2b:10:a3:72:a3:40:0b: 9c:68:5f:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKDIyODg2RDE3NkE3M0MwQkUzQ0RENTg4OUMyQThCMzIz RTNCOTQxMkMwHhcNMjUwNDA0MTY1NDQxWhcNMjUwNDExMTY1NDQxWjAYMRYwFAYD VQQDEw02N2YwMGVkMS0yMDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcAo1tRekXtuQi5NJGVEENEBowZo9soZdj1bfsx2bZwqelzhwTUCCok7jh4b MD98Dl7lSU1YM6ajmjMYb6EyWV2ty5H4fMWuQ3qVkhrPTkG1VZsUYvq14txskVkE cQKQR44dG6V24fIOVtIkQfLeysTMcM9oxorWyCKSBmnYCYviEgi8ksd2NkGR5zcQ gXv5GO46e01Ehq0q53bqNrf9idSVL793e5VosFvPHlDXT1Az6q9NBDtH4SVJxIiN 2irZPtNRRDW2rXZGx1NFZPxrwQTVKZsYePiiKfqDfkrKnhXTJmCrjY0xGJnsfKth En7UZ6F8/QPQpsMQWT1ifL5suwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHmhjgS ASvINHZ2v/oUg4iWWBrTMB8GA1UdIwQYMBaAFCKIbRdqc8C+PN1YicKosyPjuUEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendMNDgzVmlKd3FpekktTzVR U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvaHRGMnB6d0w0ODNWaUp3cWl6SS1PNVFTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendM NDgzVmlKd3FpekktTzVRU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRZJHDhO09N03hzddYSFLzsxmKIyW8as7fo8nv0rmt6I+mjXhwog7A 4V/bnmzBMzqN7w5VV++Xt9jRkOSdaF23Fh8bxTkY3fdurjuZGYbFhMsU6mxl91PT VAVwp6+oeIdAI80OsDpCnLGgQIi7HN9Yy/EoGdCSjmP5jiqBljL82KqWcIBgP3Za 9OpVA+GeSr1CJIlWgVZ3Lp/dYLEOlguuqrtBR5ZyQwhHZUoId3iR/m91wN6Fuf/b RseEzQGLSd8S1P/iyG7LYnPvXE0ZffoQeT9jiiduqGVViAVxPeLaM0YN/dQlAXjf b5UdhWVvfRWcJu+bCysQo3KjQAucaF/R -----END CERTIFICATE-----Generated at Sat Apr 5 05:59:50 2025 by rpki-client