$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: aDxRnKQFsX/Aj4+Zxba3Y9hluEzo7A3oDs4EpYa+oVY= Subject key identifier: 4B:2E:F1:1F:F1:8A:57:D0:D6:6F:3B:DB:C3:FF:FE:34:DD:05:4F:92 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 0326 Signing time: Thu 03 Apr 2025 01:08:20 +0000 Manifest this update: Thu 03 Apr 2025 01:08:20 +0000 Manifest next update: Thu 10 Apr 2025 01:08:20 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: LJV01+2oWgN11yS2l9p/NF0LfNTiycndceWFy3VXBXM=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6 Validity Not Before: Apr 3 01:08:20 2025 GMT Not After : Apr 10 01:08:20 2025 GMT Subject: CN=67eddf84-a92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:81:0f:e8:b6:ea:e6:e4:e5:78:81:4f:49:64: 15:f1:d8:d6:40:8b:4b:52:29:d9:69:0d:11:48:95: 02:08:7d:cb:43:f5:6b:26:09:e4:36:62:70:11:4f: f2:31:0b:44:59:41:84:74:10:65:07:c3:8b:a1:c2: 4d:a3:db:a0:3f:12:85:93:58:fc:9d:5f:b3:91:7e: fe:bb:8c:b7:57:fb:82:75:26:2f:6d:02:25:5f:0a: f3:e3:68:cf:8e:e3:29:b1:22:89:de:ee:d0:c4:c0: 68:b2:99:18:26:67:39:4f:5e:7d:4d:8c:64:2e:47: 5d:09:09:87:08:d2:23:b8:e5:0a:a6:3f:84:51:57: 62:77:8f:15:44:dd:3c:9c:f8:ed:62:91:5b:60:f9: 89:01:98:52:26:24:18:f5:ac:ed:c6:1e:7e:95:56: 8b:0b:c9:fd:76:62:be:f6:97:70:1c:a8:1a:2c:dc: 2b:a4:57:45:7c:38:ef:fe:4b:33:11:a9:3b:c4:08: 07:73:58:58:51:b3:15:72:d0:1e:24:4d:f7:82:20: 50:2a:2d:13:28:0f:6f:c6:fe:36:1a:0c:84:4e:3d: 00:cd:0c:10:07:41:5b:cc:3f:5a:2e:0f:45:3c:68: b6:fc:3b:7f:b9:3e:8d:71:96:b2:85:1f:ea:58:23: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2E:F1:1F:F1:8A:57:D0:D6:6F:3B:DB:C3:FF:FE:34:DD:05:4F:92 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:53:c4:8a:73:53:aa:65:64:68:93:97:1f:ac:34:a6:1e:44: fa:ff:9b:66:54:f5:10:b4:7b:25:59:9a:ef:85:52:ef:13:a2: af:ec:f6:39:c6:ef:c4:ce:45:cd:45:43:6d:0f:8a:2e:9f:8a: dd:ff:f2:c9:75:db:62:d8:dd:74:38:5b:bf:c7:e3:a5:84:f8: 9a:69:32:d1:73:9f:d3:8f:06:29:d6:b0:d6:f3:47:3f:35:8c: 64:4f:d4:53:0f:7d:44:23:11:20:32:39:71:27:eb:98:7d:99: 35:07:8c:8e:99:f0:81:a5:84:f4:9f:12:a1:e6:32:54:ac:57: c8:de:b7:67:22:e4:c1:e1:f6:a3:8d:af:59:56:93:8c:a6:95: f5:aa:71:2c:dc:c2:cf:6c:86:40:e3:69:66:9e:bc:5a:8f:9e: 19:1d:59:94:11:e1:af:fa:b1:fc:dd:ed:09:17:06:db:ac:7d: 01:32:1e:f5:2b:b3:12:79:b2:27:aa:88:22:60:8c:e9:ee:51: be:fd:1a:e3:f9:4a:26:ac:e7:dd:67:79:b4:1b:37:7e:07:da: 9e:2b:0f:5c:05:ca:5c:62:de:f2:1b:07:a8:79:65:ff:0a:97: 3b:14:71:11:f8:bb:0f:17:65:6f:ee:ce:2e:1f:22:d0:0b:fd: 51:65:f5:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwNDAzMDEwODIwWhcNMjUwNDEwMDEwODIwWjAYMRYwFAYD VQQDEw02N2VkZGY4NC1hOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIEP6Lbq5uTleIFPSWQV8djWQItLUinZaQ0RSJUCCH3LQ/VrJgnkNmJwEU/y MQtEWUGEdBBlB8OLocJNo9ugPxKFk1j8nV+zkX7+u4y3V/uCdSYvbQIlXwrz42jP juMpsSKJ3u7QxMBospkYJmc5T159TYxkLkddCQmHCNIjuOUKpj+EUVdid48VRN08 nPjtYpFbYPmJAZhSJiQY9aztxh5+lVaLC8n9dmK+9pdwHKgaLNwrpFdFfDjv/ksz Eak7xAgHc1hYUbMVctAeJE33giBQKi0TKA9vxv42GgyETj0AzQwQB0FbzD9aLg9F PGi2/Dt/uT6NcZayhR/qWCOL2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsu8R/x ilfQ1m8728P//jTdBU+SMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9U8SKc1OqZWRok5cfrDSmHkT6/5tmVPUQtHslWZrvhVLvE6Kv7PY5 xu/EzkXNRUNtD4oun4rd//LJddti2N10OFu/x+OlhPiaaTLRc5/TjwYp1rDW80c/ NYxkT9RTD31EIxEgMjlxJ+uYfZk1B4yOmfCBpYT0nxKh5jJUrFfI3rdnIuTB4faj ja9ZVpOMppX1qnEs3MLPbIZA42lmnrxaj54ZHVmUEeGv+rH83e0JFwbbrH0BMh71 K7MSebInqogiYIzp7lG+/Rrj+UomrOfdZ3m0Gzd+B9qeKw9cBcpcYt7yGweoeWX/ Cpc7FHER+LsPF2Vv7s4uHyLQC/1RZfX7 -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:25 2025 by rpki-client