$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft File: ihuLzV7XzXIsUwBJjkqTZdBGo04.mft (raw, json) Hash identifier: UOBNzLpXVTh4xkTdA1BLnMiS/CqduE+CBC9/vwM/Q64= Subject key identifier: 93:4A:D9:CC:B3:76:F0:70:36:71:4B:01:48:5A:C7:B0:FC:66:11:64 Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Certificate serial: 082F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft Manifest number: 0828 Signing time: Fri 04 Apr 2025 20:59:00 +0000 Manifest this update: Fri 04 Apr 2025 20:58:59 +0000 Manifest next update: Fri 11 Apr 2025 20:58:59 +0000 Files and hashes: 1: ihuLzV7XzXIsUwBJjkqTZdBGo04.crl (hash: ctoX3AAyFJNY5G2M9u+JWa0TQd7OM00pHMOkLQXtmaM=) 2: B6EB6C5ED46611ECA1A27035C4F9AE02.roa (hash: MzytEdv6AFwyptJ19U9Ds4XRz9r3S4O8DZQCdtraCmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2095 (0x82f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01C6 Validity Not Before: Apr 4 20:58:59 2025 GMT Not After : Apr 11 20:58:59 2025 GMT Subject: CN=67f04813-d861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:2b:b2:64:ba:76:85:ce:0f:23:ba:dc:17: 14:54:8c:63:c9:8b:d1:0f:ab:ba:36:85:a7:d8:9e: a0:7d:a3:55:d6:05:61:4b:52:59:3f:f0:d7:53:a7: a8:42:75:f7:4b:b7:46:3b:1f:61:51:9e:3e:ca:98: bb:ca:a7:7a:6c:bc:a1:90:c2:2b:bc:f9:c0:07:40: 4e:e0:5f:91:7b:fc:4b:9d:42:a0:9d:93:ff:f3:75: 29:a4:b7:8b:24:4e:97:07:c7:26:e3:7e:14:49:f2: f8:fd:44:58:94:43:9b:ef:b1:2f:a2:65:58:23:15: c6:b0:78:d5:b8:b5:3f:9a:2a:34:f0:10:a2:55:5e: 6e:65:c8:db:9a:6e:7f:42:01:3e:54:06:c8:04:ab: 0d:93:d9:a0:6a:5a:50:f9:22:63:df:1b:9e:71:8d: 3a:f3:f5:7a:ca:1c:c9:7b:27:37:61:37:d2:2f:d7: f1:a4:0b:40:62:f5:d4:19:f9:93:df:bf:00:e2:94: 84:db:58:b7:ba:da:b2:ba:1a:bf:0f:e1:d2:4e:4c: 70:10:47:b9:f3:78:fa:de:61:2e:5d:23:bf:dd:2b: 56:7d:8f:09:2a:40:fc:be:f7:13:b1:c7:0a:eb:be: ae:9b:15:83:22:b6:c2:af:47:8f:59:49:24:62:a7: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4A:D9:CC:B3:76:F0:70:36:71:4B:01:48:5A:C7:B0:FC:66:11:64 X509v3 Authority Key Identifier: keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7e:3e:26:98:9e:41:42:3e:56:fe:10:57:f2:c2:35:be:a4: 29:ba:18:1a:fc:3a:38:bb:c8:7e:08:3b:c1:69:4e:e9:9f:6a: 8f:c7:8e:12:f1:e9:b8:e8:e0:73:e8:de:dd:fe:94:42:29:0a: 25:26:14:fb:05:6c:59:15:7d:2a:88:78:1c:84:d8:b4:59:c0: 3a:a6:2a:93:db:ad:d3:23:9e:83:a4:4d:dd:25:b9:79:73:2f: b4:44:14:91:d3:37:30:3b:d1:ec:06:53:2b:60:67:b3:ad:d3: 5b:d6:0e:5c:3f:1c:86:29:10:50:b7:5f:a2:57:47:66:ec:53: b8:65:c0:35:40:9d:5d:1f:43:53:7a:21:a1:a2:5a:11:bc:4a: b4:67:24:9b:38:ba:62:b9:6a:20:bd:ec:9f:10:f1:b3:bb:fb: 91:04:61:55:61:94:c2:a8:e7:78:cc:b4:21:1e:73:fa:c8:96: d9:67:66:7a:a4:ab:69:7c:64:d7:c2:e2:cf:4f:2d:c6:d8:b6: 89:f6:5a:6b:2e:3a:9a:53:3c:68:c5:36:f9:36:97:b3:8e:0e: 25:b2:f8:90:86:d3:e7:8a:ab:4f:ef:3b:d2:b1:e1:d2:a3:94: cd:64:da:1b:08:bc:f3:e1:35:b5:43:75:6d:f0:db:3d:68:1c: 2e:a1:2d:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQzYxMTAvBgNVBAUTKDhBMUI4QkNENUVEN0NENzIyQzUzMDA0OThFNEE5MzY1 RDA0NkEzNEUwHhcNMjUwNDA0MjA1ODU5WhcNMjUwNDExMjA1ODU5WjAYMRYwFAYD VQQDEw02N2YwNDgxMy1kODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdUrsmS6doXODyO63BcUVIxjyYvRD6u6NoWn2J6gfaNV1gVhS1JZP/DXU6eo QnX3S7dGOx9hUZ4+ypi7yqd6bLyhkMIrvPnAB0BO4F+Re/xLnUKgnZP/83UppLeL JE6XB8cm434USfL4/URYlEOb77EvomVYIxXGsHjVuLU/mio08BCiVV5uZcjbmm5/ QgE+VAbIBKsNk9mgalpQ+SJj3xuecY068/V6yhzJeyc3YTfSL9fxpAtAYvXUGfmT 378A4pSE21i3utqyuhq/D+HSTkxwEEe583j63mEuXSO/3StWfY8JKkD8vvcTsccK 676umxWDIrbCr0ePWUkkYqdLBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNK2cyz dvBwNnFLAUhax7D8ZhFkMB8GA1UdIwQYMBaAFIobi81e181yLFMASY5Kk2XQRqNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFDNi80OTFDOENFNkND OTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpYSXNVd0JKamtxVFpkQkdv MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lodUx6VjdYelhJc1V3Qkpqa3FUWmRCR28wNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFDNi80OTFDOENFNkNDOTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpY SXNVd0JKamtxVFpkQkdvMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4fj4mmJ5BQj5W/hBX8sI1vqQpuhga/Do4u8h+CDvBaU7pn2qPx44S 8em46OBz6N7d/pRCKQolJhT7BWxZFX0qiHgchNi0WcA6piqT263TI56DpE3dJbl5 cy+0RBSR0zcwO9HsBlMrYGezrdNb1g5cPxyGKRBQt1+iV0dm7FO4ZcA1QJ1dH0NT eiGholoRvEq0ZySbOLpiuWogveyfEPGzu/uRBGFVYZTCqOd4zLQhHnP6yJbZZ2Z6 pKtpfGTXwuLPTy3G2LaJ9lprLjqaUzxoxTb5Npezjg4lsviQhtPniqtP7zvSseHS o5TNZNobCLzz4TW1Q3Vt8Ns9aBwuoS0m -----END CERTIFICATE-----Generated at Sun Apr 6 06:32:29 2025 by rpki-client