$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: iQ2guu6eVtMOz0iWNJHLhSUIylBaS7a0ws7GXUpGHoo= Subject key identifier: D2:EC:27:35:3A:EF:59:81:47:E6:EC:E1:E3:F2:EB:BB:37:F9:15:0F Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 18DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 18D0 Signing time: Fri 04 Apr 2025 16:32:01 +0000 Manifest this update: Fri 04 Apr 2025 16:32:01 +0000 Manifest next update: Fri 11 Apr 2025 16:32:01 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: f83WQhD4ske1ldIUrWu6QqyVvA0ICdu1ZCRbQ5OogJk=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: CS+09tEdeSx7uIOBkaLSiPeVYQX/xw7ybPJk0cnYVHY=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: mbcYtTY7pzkjLAPzzBYkqLR1semAFFI9aiFhIVq/OQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6362 (0x18da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A Validity Not Before: Apr 4 16:32:01 2025 GMT Not After : Apr 11 16:32:01 2025 GMT Subject: CN=67f00981-829c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:72:96:02:c7:b4:22:63:09:f2:45:24:89: 35:53:a0:ed:d8:34:5e:66:18:cb:40:88:14:c7:89: 1f:b3:95:2c:6c:f7:b6:30:f9:e8:a8:52:e6:96:c1: a8:86:be:98:2a:85:c8:07:fc:5a:f7:6b:fa:df:cb: 20:12:eb:21:0a:d8:28:87:db:32:f5:da:28:3a:91: 7d:19:b0:b0:21:b4:36:21:be:31:c6:55:3f:6d:08: 43:78:5d:c2:87:a6:69:55:e8:e0:1c:d0:75:ae:27: dc:db:21:4e:90:b2:00:4f:1b:b9:0b:97:c4:3d:38: 1a:47:75:91:ea:f1:36:5c:64:ed:8a:23:09:7a:81: 51:19:06:fc:78:3a:15:58:80:fe:b4:a0:f1:cd:3c: bd:54:fe:b3:cf:58:9f:fe:08:a1:95:35:9b:0d:87: 99:5b:6b:34:89:3c:4a:96:ea:4a:d2:c4:6a:b8:4c: 80:8b:83:54:96:54:f7:b1:80:4c:a1:2f:b5:ac:19: 1f:d2:48:e1:ab:c6:4f:7f:e2:ff:da:3c:fd:50:c1: 85:0d:b8:28:e0:a0:6e:bc:fd:0e:87:26:82:f5:96: fc:eb:58:6c:15:11:a0:ac:72:db:7d:8f:2f:cf:4a: e2:42:6b:c4:01:e6:e5:bc:d4:15:e1:8b:ff:d2:8b: 32:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EC:27:35:3A:EF:59:81:47:E6:EC:E1:E3:F2:EB:BB:37:F9:15:0F X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:b2:e8:62:95:50:70:b7:f9:8a:1f:34:25:d4:a8:d9:ed:ed: 21:1f:52:c8:b5:46:64:b3:07:c1:d9:4e:4b:8a:52:ad:72:87: 7d:b0:d4:18:c5:70:d7:07:9d:c7:00:97:a8:15:12:15:4d:09: 49:97:cb:20:a2:fe:04:65:73:d8:07:06:1d:ef:7a:09:2a:dc: f9:c2:8b:f9:71:46:13:ea:b3:9a:23:0a:63:11:a7:69:14:d3: ae:30:61:42:61:c0:d8:b7:78:b8:a9:f2:0c:a3:dc:67:2f:b8: d4:56:cf:2f:18:9a:f4:b3:b7:1b:62:ee:78:6f:ff:6e:bb:a5: 32:91:39:58:44:b6:2b:5f:73:77:e2:d7:4c:12:2b:ee:04:cd: 3a:ac:74:4a:a3:a1:04:ea:80:73:3c:64:35:7b:11:8b:a6:f7: 8f:8d:47:db:da:12:88:53:d6:36:15:1a:0a:8d:68:3c:13:d5: 79:21:84:e6:99:55:5d:b5:2e:66:43:3d:8f:cc:1c:c7:6c:10: 8d:68:1a:55:a3:b6:38:79:33:90:79:0f:64:4c:38:23:69:4a: 27:70:88:4f:0c:c3:ec:e6:c7:88:d4:2e:89:a9:85:a4:48:47: 0f:0f:b8:d8:a6:5b:60:c0:fd:1c:5b:bd:71:6b:c3:55:d7:58: fb:a2:49:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUwNDA0MTYzMjAxWhcNMjUwNDExMTYzMjAxWjAYMRYwFAYD VQQDEw02N2YwMDk4MS04MjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jpylgLHtCJjCfJFJIk1U6Dt2DReZhjLQIgUx4kfs5UsbPe2MPnoqFLmlsGo hr6YKoXIB/xa92v638sgEushCtgoh9sy9dooOpF9GbCwIbQ2Ib4xxlU/bQhDeF3C h6ZpVejgHNB1rifc2yFOkLIATxu5C5fEPTgaR3WR6vE2XGTtiiMJeoFRGQb8eDoV WID+tKDxzTy9VP6zz1if/gihlTWbDYeZW2s0iTxKlupK0sRquEyAi4NUllT3sYBM oS+1rBkf0kjhq8ZPf+L/2jz9UMGFDbgo4KBuvP0OhyaC9Zb861hsFRGgrHLbfY8v z0riQmvEAeblvNQV4Yv/0osyHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLsJzU6 71mBR+bs4ePy67s3+RUPMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGsuhilVBwt/mKHzQl1KjZ7e0hH1LItUZkswfB2U5LilKtcod9sNQY xXDXB53HAJeoFRIVTQlJl8sgov4EZXPYBwYd73oJKtz5wov5cUYT6rOaIwpjEadp FNOuMGFCYcDYt3i4qfIMo9xnL7jUVs8vGJr0s7cbYu54b/9uu6UykTlYRLYrX3N3 4tdMEivuBM06rHRKo6EE6oBzPGQ1exGLpvePjUfb2hKIU9Y2FRoKjWg8E9V5IYTm mVVdtS5mQz2PzBzHbBCNaBpVo7Y4eTOQeQ9kTDgjaUoncIhPDMPs5seI1C6JqYWk SEcPD7jYpltgwP0cW71xa8NV11j7okkv -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:01 2025 by rpki-client