$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: Hk07bEdQNzCAfQcOmhcy8Z3sUOgyDMrrWn8NB9P7hgQ= Subject key identifier: 14:11:0F:AA:BF:2C:B6:45:40:91:E7:A6:E4:51:23:27:28:37:C6:B4 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 01BF Signing time: Sat 05 Apr 2025 02:32:14 +0000 Manifest this update: Sat 05 Apr 2025 02:32:14 +0000 Manifest next update: Sat 12 Apr 2025 02:32:14 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: 5yk56TM2wWQVFKJC0jzlsgnyZK9pp+Ffi1fcJVwAHQw=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: zXr6NOZcCRqEcE9Pgk6RR5qOsx1G0XavR+U4MW0E+MQ=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: DV9Gdp3YkASaDfgSFkYwRK6BKaUQSr3ziC7H6K89rT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA Validity Not Before: Apr 5 02:32:14 2025 GMT Not After : Apr 12 02:32:14 2025 GMT Subject: CN=67f0962e-249a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:ed:37:a7:40:64:9b:53:9a:d6:63:5a:f3: 6a:9a:50:ba:a6:71:53:84:5c:aa:2e:07:57:4e:3b: 50:95:1d:40:09:0d:01:27:79:d9:ed:44:ea:cf:b1: 3a:ff:d2:19:46:be:d2:e9:99:3c:25:0f:36:06:8b: 70:81:98:2a:4c:af:9c:92:09:68:9e:d4:fd:fc:11: 48:60:f0:5b:31:70:0c:bb:b2:ad:f6:35:82:d4:23: 31:1c:95:0a:ed:d6:7e:60:d7:88:52:3e:2e:9d:0f: 3d:23:d1:f9:2e:de:99:89:02:2a:00:d1:7b:ce:fa: 06:32:ca:a4:d4:76:ea:c6:a3:8d:a3:42:91:09:53: 87:90:10:1e:c3:79:aa:e4:38:90:1e:72:b9:96:d4: 12:c0:18:e4:10:63:35:59:9f:78:53:ad:26:47:95: 4f:6c:c6:83:a7:bc:bc:a5:f3:86:f5:2a:bb:c9:ea: 55:f3:b3:a5:8a:9f:c7:af:ab:cf:a8:c7:3f:c3:33: 77:8f:f5:63:e7:85:28:c0:20:e5:e1:a7:e5:6d:9e: ba:ee:dc:35:a3:55:ca:71:0e:7a:e0:a1:66:f0:b8: 60:0c:1a:41:6b:cb:45:dd:36:2b:cc:c0:4d:7b:13: 01:4a:3c:53:c1:4f:55:89:76:57:ac:1e:8e:36:70: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:11:0F:AA:BF:2C:B6:45:40:91:E7:A6:E4:51:23:27:28:37:C6:B4 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:49:03:25:93:39:02:e6:79:57:0b:c8:fd:12:83:4c:47:61: 9f:f8:63:81:6d:ac:57:fd:c9:b1:c1:c3:e9:13:ec:a6:17:36: ca:24:5c:b6:46:b2:b7:cf:e5:fd:0b:9f:d9:fe:2e:34:c8:60: 64:dc:61:8c:f9:c8:8c:39:f7:be:69:66:eb:34:7a:01:4a:02: 07:52:b1:76:35:3a:cd:39:cd:3e:da:b6:4d:0b:09:56:66:12: 18:e2:f4:b7:44:0c:15:6e:8d:74:8e:a2:cc:0b:8a:af:d8:7f: c2:8c:41:0a:c9:d5:06:94:1f:5e:ce:79:fc:d1:68:45:ea:c0: 3c:1a:24:85:b0:23:ab:88:11:0e:62:ff:86:9c:2b:53:af:6b: dc:cb:5e:ee:28:77:28:d1:4a:95:05:da:a9:f2:89:46:f5:72: b8:37:23:2c:ac:b4:d4:2a:40:f4:4e:c7:52:7e:a8:c1:c8:d9: a3:d4:40:f9:5a:2f:9b:ae:8c:aa:69:78:92:ba:bf:9c:47:39: ac:2d:31:d7:d0:61:60:4f:36:51:0a:fd:0a:f0:8f:e1:66:f3: 8e:27:9b:f8:e8:56:9c:fe:9d:bd:2c:6f:75:08:39:27:57:a0: 56:31:11:ee:64:aa:5f:fc:8d:0d:a7:9b:96:63:b6:e6:bd:0c: 24:73:0d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUwNDA1MDIzMjE0WhcNMjUwNDEyMDIzMjE0WjAYMRYwFAYD VQQDEw02N2YwOTYyZS0yNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw53tN6dAZJtTmtZjWvNqmlC6pnFThFyqLgdXTjtQlR1ACQ0BJ3nZ7UTqz7E6 /9IZRr7S6Zk8JQ82BotwgZgqTK+ckglontT9/BFIYPBbMXAMu7Kt9jWC1CMxHJUK 7dZ+YNeIUj4unQ89I9H5Lt6ZiQIqANF7zvoGMsqk1HbqxqONo0KRCVOHkBAew3mq 5DiQHnK5ltQSwBjkEGM1WZ94U60mR5VPbMaDp7y8pfOG9Sq7yepV87Olip/Hr6vP qMc/wzN3j/Vj54UowCDl4aflbZ667tw1o1XKcQ564KFm8LhgDBpBa8tF3TYrzMBN exMBSjxTwU9ViXZXrB6ONnC6swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQRD6q/ LLZFQJHnpuRRIycoN8a0MB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtSQMlkzkC5nlXC8j9EoNMR2Gf+GOBbaxX/cmxwcPpE+ymFzbKJFy2 RrK3z+X9C5/Z/i40yGBk3GGM+ciMOfe+aWbrNHoBSgIHUrF2NTrNOc0+2rZNCwlW ZhIY4vS3RAwVbo10jqLMC4qv2H/CjEEKydUGlB9eznn80WhF6sA8GiSFsCOriBEO Yv+GnCtTr2vcy17uKHco0UqVBdqp8olG9XK4NyMsrLTUKkD0TsdSfqjByNmj1ED5 Wi+broyqaXiSur+cRzmsLTHX0GFgTzZRCv0K8I/hZvOOJ5v46Fac/p29LG91CDkn V6BWMRHuZKpf/I0Np5uWY7bmvQwkcw0f -----END CERTIFICATE-----Generated at Sat Apr 5 22:04:30 2025 by rpki-client