$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: kOQudZQFp3aUPlLGCzphsuXU0cgIn/Fd0PTu3CIPMTY= Subject key identifier: BD:77:FB:A7:D0:DA:5D:B1:3C:45:37:83:5E:9A:67:16:DC:4C:7B:E5 Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 04CE Signing time: Fri 04 Apr 2025 23:54:59 +0000 Manifest this update: Fri 04 Apr 2025 23:54:59 +0000 Manifest next update: Fri 11 Apr 2025 23:54:59 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: i5k3oyBLGGKs0OPtUUgPvTFwDAWcga5cmxdpLOknJxQ=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44 Validity Not Before: Apr 4 23:54:59 2025 GMT Not After : Apr 11 23:54:59 2025 GMT Subject: CN=67f07153-81ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:51:d2:ad:c2:4f:e9:4d:c7:f4:a2:11:a9: 45:21:3f:7b:4c:45:f4:0a:b3:c6:7d:fc:ff:b2:57: 84:8b:46:64:57:d1:db:15:90:a7:c9:f1:4b:d0:fc: a0:74:e3:4b:0e:fe:28:25:41:2a:05:f0:b4:0f:8d: bd:c9:73:6b:48:ce:21:d2:51:4b:59:9d:13:d1:7b: 7b:95:27:d4:57:ee:e8:66:38:2f:61:bf:3a:1b:7f: f2:5d:22:aa:80:16:93:cb:c3:df:2c:2c:2b:fc:ba: 39:fd:56:86:36:40:34:8a:ee:9e:45:44:a3:a4:2a: c1:ab:58:0a:ec:ee:de:17:0e:0f:4d:24:3f:62:56: 27:bf:f7:d6:02:13:c3:58:f4:54:7a:8d:99:49:9c: 55:2f:ca:6e:3d:0a:a3:94:06:8a:cb:30:fd:6c:25: 3e:e7:66:5b:1d:57:73:aa:3f:da:66:a1:7e:43:98: 2e:ff:7a:f2:71:65:8a:25:11:04:20:e0:7f:6c:4a: 0b:11:70:75:5f:d3:5e:6d:e3:30:6f:a1:89:bf:ec: 1b:e7:78:b8:11:ea:fb:48:0a:50:f6:c3:cb:51:90: 10:8d:66:5c:f2:f8:ea:28:a8:3d:0a:ec:ee:e7:dd: 7e:35:8d:00:bb:c6:6a:6a:73:58:9c:a0:a2:e2:da: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:77:FB:A7:D0:DA:5D:B1:3C:45:37:83:5E:9A:67:16:DC:4C:7B:E5 X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:93:e5:03:18:ff:9a:d7:9a:5f:c4:1c:e2:f7:74:ad:d1:4f: dd:c3:d4:6d:61:ba:34:f8:8d:af:26:6c:d1:08:cf:8a:a9:7f: 72:74:9d:42:7d:3e:40:e8:b4:45:ba:e8:52:d0:0d:05:33:b6: b6:aa:cd:63:52:ab:3c:50:18:bc:95:0f:68:1a:ac:80:ec:1e: 48:f4:86:4d:e7:a1:09:6d:ea:5b:d0:51:b4:9a:02:b1:b4:d5: 14:58:b7:bc:a2:87:cb:a7:ae:0f:be:26:64:2c:ae:34:9c:d2: 79:ed:52:54:ab:51:bc:c2:bc:37:48:66:06:b2:48:29:d9:95: 92:d6:4d:e0:29:db:49:2c:f3:e2:12:43:6a:17:3c:19:a4:36: ef:c5:6e:e4:44:b1:99:24:16:ed:82:c1:18:51:6d:f5:d9:47: 97:de:2f:38:1e:6d:3f:92:9d:54:47:1e:d7:c1:e4:f5:53:b4: 6f:9b:87:83:76:a1:82:7c:e4:d7:f2:7e:7c:ff:67:50:b5:48: 8c:46:70:27:43:36:81:8f:91:bb:e5:5c:21:d1:e0:9c:ab:2b: 57:dc:eb:98:ec:12:3b:d7:00:d9:93:32:34:c9:6d:cc:fd:08: 67:96:10:9d:ef:e9:4b:8b:5b:3f:3b:da:bc:e9:1a:c6:bc:d1: 44:f8:a0:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUwNDA0MjM1NDU5WhcNMjUwNDExMjM1NDU5WjAYMRYwFAYD VQQDEw02N2YwNzE1My04MWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3hR0q3CT+lNx/SiEalFIT97TEX0CrPGffz/sleEi0ZkV9HbFZCnyfFL0Pyg dONLDv4oJUEqBfC0D429yXNrSM4h0lFLWZ0T0Xt7lSfUV+7oZjgvYb86G3/yXSKq gBaTy8PfLCwr/Lo5/VaGNkA0iu6eRUSjpCrBq1gK7O7eFw4PTSQ/YlYnv/fWAhPD WPRUeo2ZSZxVL8puPQqjlAaKyzD9bCU+52ZbHVdzqj/aZqF+Q5gu/3rycWWKJREE IOB/bEoLEXB1X9NebeMwb6GJv+wb53i4Eer7SApQ9sPLUZAQjWZc8vjqKKg9Cuzu 591+NY0Au8ZqanNYnKCi4tr20QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL13+6fQ 2l2xPEU3g16aZxbcTHvlMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsk+UDGP+a15pfxBzi93St0U/dw9RtYbo0+I2vJmzRCM+KqX9ydJ1C fT5A6LRFuuhS0A0FM7a2qs1jUqs8UBi8lQ9oGqyA7B5I9IZN56EJbepb0FG0mgKx tNUUWLe8oofLp64PviZkLK40nNJ57VJUq1G8wrw3SGYGskgp2ZWS1k3gKdtJLPPi EkNqFzwZpDbvxW7kRLGZJBbtgsEYUW312UeX3i84Hm0/kp1URx7XweT1U7Rvm4eD dqGCfOTX8n58/2dQtUiMRnAnQzaBj5G75Vwh0eCcqytX3OuY7BI71wDZkzI0yW3M /QhnlhCd7+lLi1s/O9q86RrGvNFE+KBT -----END CERTIFICATE-----Generated at Sun Apr 6 00:34:21 2025 by rpki-client