$ rpki-client -vvf rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft File: RRIms-l3zxGWF1WwaTfB9-c13F4.mft (raw, json) Hash identifier: tZl0YuGVVXjvOob8leytBrDNWyoSy7tRVk+BolWWEpE= Subject key identifier: 92:46:0C:05:C6:88:0F:6E:D4:98:E7:DF:BD:7D:D3:25:91:76:5B:DD Authority key identifier: 45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E Certificate issuer: /CN=A91D18DA/serialNumber=451226B3E977CF11961755B06937C1F7E735DC5E Certificate serial: 06B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft Manifest number: 06A2 Signing time: Fri 28 Mar 2025 22:29:37 +0000 Manifest this update: Fri 28 Mar 2025 22:29:36 +0000 Manifest next update: Fri 04 Apr 2025 22:29:36 +0000 Files and hashes: 1: RRIms-l3zxGWF1WwaTfB9-c13F4.crl (hash: DpISt9wAh/eHOOAzdwxrtqadekOldBSUluqgpmiP7Qg=) 2: 4D5AE9DC5EEB11EB9D80C03EC4F9AE02.roa (hash: CkC6ANX758VxZawlsLHGSAa3XJCkHalxckMndJyeulg=) 3: 277A0A5A642B11EBBB477E4EC4F9AE02.roa (hash: HVXaOsNZoPltolHevFPiB1XXc2ZtYhS+FxC+Zs4U1G4=) 4: 76A8A3E460F111EBBA7FFA79C4F9AE02.roa (hash: u0IXLJwtvydpHb+eS/CGN5IGunShgi4NMqu7a7fC+84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D18DA Validity Not Before: Mar 28 22:29:36 2025 GMT Not After : Apr 4 22:29:36 2025 GMT Subject: CN=67e722d1-82ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:d9:c6:05:34:49:99:4b:f7:f7:1b:8d:b1: 1e:27:47:59:0a:62:f7:6b:92:48:57:f0:59:be:1c: 70:ef:2d:8c:36:02:7d:df:97:75:eb:0a:61:49:54: 44:bd:5e:74:be:7e:f7:6d:90:d6:0b:c6:6e:28:4f: b8:ca:a1:f8:da:51:61:78:fb:1b:c2:42:9f:3e:ea: 73:3a:f4:e2:5c:0a:ea:f1:bf:44:60:9a:0b:4c:ed: e6:dd:21:1b:92:ea:fd:46:56:3e:c7:2f:f7:f5:ac: e7:0c:b0:69:b0:6a:75:16:18:51:99:d4:d9:a2:77: f5:ec:b3:55:a0:6f:4b:42:e3:e4:bf:e4:c0:f6:3c: ba:06:6b:2f:cc:c7:a2:78:c2:df:b4:27:06:ca:26: e0:08:ab:06:df:2e:46:7b:f3:0a:84:64:f6:74:a3: 9e:9f:b4:00:ab:46:7b:2a:39:f8:b2:c8:b9:d1:22: 7a:e8:85:4d:fe:bb:1c:75:a2:24:24:10:2a:e4:e8: 30:1e:53:50:14:58:bd:aa:ae:23:ff:2f:4e:4f:77: be:06:2d:b6:50:8c:da:db:7c:64:02:8a:22:f5:9a: cf:cd:88:1e:5e:e3:a0:ae:52:b4:cf:71:a1:3c:30: 7e:92:fd:ec:aa:62:5b:7b:16:dd:34:9c:3f:db:d3: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:46:0C:05:C6:88:0F:6E:D4:98:E7:DF:BD:7D:D3:25:91:76:5B:DD X509v3 Authority Key Identifier: keyid:45:12:26:B3:E9:77:CF:11:96:17:55:B0:69:37:C1:F7:E7:35:DC:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RRIms-l3zxGWF1WwaTfB9-c13F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D18DA/DE3894EC5EE911EB9F3B7F3DC4F9AE02/RRIms-l3zxGWF1WwaTfB9-c13F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:21:06:6d:be:a0:63:5b:54:c3:bf:f4:25:4a:a5:dc:f2:39: 66:d1:9a:a1:0e:6e:bb:9b:9d:be:d3:a3:8e:88:47:9a:e6:da: 57:a1:33:46:7f:15:8c:5b:c6:54:83:a8:36:b1:34:8f:d3:7d: a0:9b:6a:45:48:71:bd:05:aa:02:9c:41:7a:a9:73:4e:ab:dd: 9b:14:c9:f5:2a:c0:f5:31:5b:2c:14:39:98:81:ca:bc:d1:4a: 36:45:09:8e:bf:2f:59:b9:59:51:99:72:a8:5f:09:6b:ca:ed: 7a:78:63:d1:e8:9a:4a:73:eb:60:c4:bd:42:bb:b8:aa:20:07: ef:00:6c:b2:4d:70:39:ca:5a:77:f4:dc:0c:65:6a:66:22:4f: 9b:96:96:cb:b0:85:97:60:79:28:5d:3b:f1:2b:2b:5f:b8:c4: f5:5e:40:32:ff:23:ee:53:3d:53:dc:71:b9:95:1b:5e:94:fe: ee:d0:ac:ec:e0:c5:5a:95:4d:9c:e0:84:8a:30:4d:94:85:fb: 81:0f:b3:fc:e3:d0:28:da:a7:cd:40:92:fb:f7:3b:c3:72:2a: 8a:6d:49:74:d1:87:c0:b4:53:f3:33:11:a4:e0:dc:c4:af:60: f0:05:94:15:85:5c:e0:0b:06:97:7c:77:8b:ac:13:e3:9e:8e: a8:31:dd:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE4REExMTAvBgNVBAUTKDQ1MTIyNkIzRTk3N0NGMTE5NjE3NTVCMDY5MzdDMUY3 RTczNURDNUUwHhcNMjUwMzI4MjIyOTM2WhcNMjUwNDA0MjIyOTM2WjAYMRYwFAYD VQQDEw02N2U3MjJkMS04MmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmvZxgU0SZlL9/cbjbEeJ0dZCmL3a5JIV/BZvhxw7y2MNgJ935d16wphSVRE vV50vn73bZDWC8ZuKE+4yqH42lFhePsbwkKfPupzOvTiXArq8b9EYJoLTO3m3SEb kur9RlY+xy/39aznDLBpsGp1FhhRmdTZonf17LNVoG9LQuPkv+TA9jy6BmsvzMei eMLftCcGyibgCKsG3y5Ge/MKhGT2dKOen7QAq0Z7Kjn4ssi50SJ66IVN/rscdaIk JBAq5OgwHlNQFFi9qq4j/y9OT3e+Bi22UIza23xkAooi9ZrPzYgeXuOgrlK0z3Gh PDB+kv3sqmJbexbdNJw/29MJTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJGDAXG iA9u1Jjn37190yWRdlvdMB8GA1UdIwQYMBaAFEUSJrPpd88RlhdVsGk3wffnNdxe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMThEQS9ERTM4OTRFQzVF RTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4R1dGMVd3YVRmQjktYzEz RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JSSW1zLWwzenhHV0YxV3dhVGZCOS1jMTNGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MThEQS9ERTM4OTRFQzVFRTkxMUVCOUYzQjdGM0RDNEY5QUUwMi9SUkltcy1sM3p4 R1dGMVd3YVRmQjktYzEzRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzIQZtvqBjW1TDv/QlSqXc8jlm0ZqhDm67m52+06OOiEea5tpXoTNG fxWMW8ZUg6g2sTSP032gm2pFSHG9BaoCnEF6qXNOq92bFMn1KsD1MVssFDmYgcq8 0Uo2RQmOvy9ZuVlRmXKoXwlryu16eGPR6JpKc+tgxL1Cu7iqIAfvAGyyTXA5ylp3 9NwMZWpmIk+blpbLsIWXYHkoXTvxKytfuMT1XkAy/yPuUz1T3HG5lRtelP7u0Kzs 4MValU2c4ISKME2UhfuBD7P849Ao2qfNQJL79zvDciqKbUl00YfAtFPzMxGk4NzE r2DwBZQVhVzgCwaXfHeLrBPjno6oMd3R -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:51 2025 by rpki-client