$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: M35tTmfIbOsFjB6VZo2XO8v8O3xFojwDSZjrPThQhZk= Subject key identifier: D2:CB:66:FF:1B:A0:4B:50:70:9F:60:85:28:E8:F6:99:A4:24:31:06 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 0115 Signing time: Thu 03 Apr 2025 04:06:32 +0000 Manifest this update: Thu 03 Apr 2025 04:06:32 +0000 Manifest next update: Thu 10 Apr 2025 04:06:32 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: z9xqvF9xGk93TqW5SgSqzL4VIhqFX5osaKaNyN6oenY=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: YEagGQfd4UV4nz53l/WybeYAt4w6+zm6QyFgV48pGBc=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: zzpFcIYATvvz+ehYyoXcGsAYVOBFYBXyZDv/oX18Mx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD Validity Not Before: Apr 3 04:06:32 2025 GMT Not After : Apr 10 04:06:32 2025 GMT Subject: CN=67ee0948-3522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:70:62:96:0b:f4:84:02:22:b6:e3:09:d4: 40:d0:d4:91:d5:71:06:10:58:22:49:32:68:f4:4d: b6:41:ac:06:3a:f2:20:60:ed:a6:b7:14:33:e1:a2: b7:f4:f8:44:f3:ce:f0:43:8f:ea:04:24:fc:b8:6a: 3a:2e:11:6f:a2:e5:1f:c9:32:cb:af:61:34:63:8d: 72:86:3a:c6:ed:ce:c9:0a:2b:c3:1b:b1:af:68:8d: 4f:11:cc:b8:ef:4b:61:ad:d8:98:04:d4:82:2d:fd: ea:01:0a:1c:a0:c4:78:78:e1:f8:84:8c:28:de:96: 1b:3a:ed:34:f7:4d:8b:52:fb:5d:21:b9:c6:3a:e9: 83:c8:21:de:c9:77:50:ef:4f:08:19:f7:fc:3d:78: 9c:8e:36:b0:81:d1:82:4b:e4:1e:fe:72:f0:53:6e: 9e:d3:a3:97:78:03:7e:c5:3a:f0:48:49:14:f2:7a: 46:8c:41:66:02:0d:64:c6:3c:44:0c:3d:d5:6c:39: 62:cb:83:9e:00:df:26:1b:ff:e9:15:8a:26:04:9e: 75:1e:b4:76:8a:87:38:fe:3f:37:1b:3a:35:6e:91: cd:41:dd:bc:ff:cb:6f:08:00:15:00:8e:a2:68:d5: d1:7e:bd:d4:a0:b5:9f:ea:8a:69:b6:3d:4a:7e:7e: 68:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CB:66:FF:1B:A0:4B:50:70:9F:60:85:28:E8:F6:99:A4:24:31:06 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:39:8f:70:68:d8:ba:de:d0:0e:ad:2e:74:7f:47:af:fe:a0: 1c:c9:e2:53:c3:ac:6e:04:a6:01:c3:0a:1a:1a:b0:2d:a1:97: 8a:eb:dc:92:e9:e2:7c:00:eb:0a:93:12:ba:8d:ac:1b:42:e6: d8:c4:e6:e3:d8:d4:03:d2:f8:07:57:b6:9a:ec:e7:1c:2e:86: e6:41:d0:71:80:e0:c0:16:ae:f4:57:8b:ff:59:1c:ba:07:2f: f9:19:70:28:47:08:96:1d:47:5e:19:f5:a6:b9:f6:0d:9a:87: 7c:91:44:09:cd:27:89:48:1d:c7:76:43:be:8a:d5:fc:50:4b: 63:31:00:a2:bf:6b:82:52:ff:05:34:f1:85:13:fc:96:99:4d: 4e:32:95:b5:20:26:bf:91:64:03:a6:3e:2f:56:1f:e5:97:45: 4c:e0:10:e2:a6:f7:33:eb:65:37:e6:f8:b4:87:1d:44:e0:f5: 9f:16:88:9f:4c:b8:00:5c:1e:40:59:6e:e7:7f:6e:81:2f:57: e9:1a:16:13:d2:94:df:a2:94:91:89:0a:8e:aa:f1:02:8f:0f: 58:ce:84:c8:9e:d6:27:42:41:8e:30:3e:3e:f6:b7:e8:91:9e: aa:14:c7:4e:cb:37:a7:d1:96:ff:52:d3:d9:f8:ed:0e:04:1f: 5f:10:51:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUwNDAzMDQwNjMyWhcNMjUwNDEwMDQwNjMyWjAYMRYwFAYD VQQDEw02N2VlMDk0OC0zNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhFwYpYL9IQCIrbjCdRA0NSR1XEGEFgiSTJo9E22QawGOvIgYO2mtxQz4aK3 9PhE887wQ4/qBCT8uGo6LhFvouUfyTLLr2E0Y41yhjrG7c7JCivDG7GvaI1PEcy4 70thrdiYBNSCLf3qAQocoMR4eOH4hIwo3pYbOu00902LUvtdIbnGOumDyCHeyXdQ 708IGff8PXicjjawgdGCS+Qe/nLwU26e06OXeAN+xTrwSEkU8npGjEFmAg1kxjxE DD3VbDliy4OeAN8mG//pFYomBJ51HrR2ioc4/j83Gzo1bpHNQd28/8tvCAAVAI6i aNXRfr3UoLWf6opptj1Kfn5osQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLLZv8b oEtQcJ9ghSjo9pmkJDEGMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZOY9waNi63tAOrS50f0ev/qAcyeJTw6xuBKYBwwoaGrAtoZeK69yS 6eJ8AOsKkxK6jawbQubYxObj2NQD0vgHV7aa7OccLobmQdBxgODAFq70V4v/WRy6 By/5GXAoRwiWHUdeGfWmufYNmod8kUQJzSeJSB3HdkO+itX8UEtjMQCiv2uCUv8F NPGFE/yWmU1OMpW1ICa/kWQDpj4vVh/ll0VM4BDipvcz62U35vi0hx1E4PWfFoif TLgAXB5AWW7nf26BL1fpGhYT0pTfopSRiQqOqvECjw9YzoTIntYnQkGOMD4+9rfo kZ6qFMdOyzen0Zb/UtPZ+O0OBB9fEFG6 -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:10 2025 by rpki-client