$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: Yz92eVEF9eU0XeYaib8I/fo7N2comIlud5MGUijmg5I= Subject key identifier: 4E:66:62:CA:80:21:F3:AE:D2:75:50:91:CF:61:2B:E0:FA:93:C6:F6 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 2763 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2714 Signing time: Sun 06 Apr 2025 15:37:26 +0000 Manifest this update: Sun 06 Apr 2025 15:37:25 +0000 Manifest next update: Sun 13 Apr 2025 15:37:25 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: Ahy+UOEL6sIAQ8ZExErZD9oATdgtEkwBH+v/fy83cl4=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: UoNQyiMbzRM8LTAnCH5+6vt93Lw53vJESQHvBWYcjss=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: cpPBl2HZl2WMGx0/E7w0QxRgBvloFKsPNiFCwchG+b8=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: gUaglzjVEo/jAQam5U3T7T5H9G5lSnkvKcItCzMbsY0=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: lXtCcZI3WY8OIlNn2pthb5U4nO4x25l4CIfkoHRn3ik=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: g3qXc5xzXRuZuGvrf+0l5unc13/FwmeQdJGJ36GeWJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 15:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10083 (0x2763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60 Validity Not Before: Apr 6 15:37:25 2025 GMT Not After : Apr 13 15:37:25 2025 GMT Subject: CN=67f29fb5-5b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:df:35:3f:6f:4c:be:1e:12:7f:6b:c2:4b: aa:6b:25:f7:7e:21:70:a8:37:39:7f:f7:32:7a:2f: 16:8a:f8:24:ad:6b:7a:76:08:8f:78:c3:cc:87:a0: c1:98:cd:30:25:f2:9e:24:ba:02:6d:21:b9:36:7f: 42:ec:23:ef:fa:5a:52:54:d2:1b:0b:81:ff:c2:aa: 1b:fd:01:df:7e:54:2d:48:b9:38:62:97:46:7f:01: bb:e2:48:e1:64:15:d7:12:61:8a:d9:3b:12:b3:90: 61:aa:15:f6:77:4a:63:c1:7d:26:58:18:c5:9d:02: b4:f1:c4:8b:9e:15:1a:5a:d9:01:b5:e7:58:ed:b3: 4b:0b:31:71:90:8f:ca:26:b2:79:94:60:15:d2:f9: 02:df:13:b9:82:9a:aa:db:28:31:cb:5a:16:a4:50: ba:fc:26:15:74:63:dd:f5:da:65:4d:c2:68:b6:6f: 23:d9:91:61:17:bf:3b:0a:b0:ad:84:88:53:ce:dd: 3d:24:15:32:db:5e:f6:c5:d9:62:42:8c:a3:2f:27: a5:cd:1b:35:ee:cc:c8:44:3e:14:37:c1:33:de:77: 89:af:59:d7:6b:da:87:f0:21:70:36:62:65:6e:ef: 9d:9f:37:af:fd:86:02:0a:93:5c:b5:26:5c:c2:58: e5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:66:62:CA:80:21:F3:AE:D2:75:50:91:CF:61:2B:E0:FA:93:C6:F6 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b8:63:91:28:74:f7:15:c5:fd:0c:89:35:7d:c5:f2:6a:fa: 41:e2:f4:e1:06:29:fc:ba:73:82:6f:8a:f5:37:cb:61:e6:0c: 22:ef:37:b1:d5:d1:16:d8:8e:e0:32:30:e5:4d:b2:9e:e2:a1: 13:13:30:f3:4a:55:24:a7:f9:af:2c:63:3b:48:f5:13:51:fe: 8f:38:d2:53:63:d3:24:39:dc:16:e6:93:6d:82:64:5d:5d:74: 4b:f4:20:39:66:f7:e0:20:c1:51:5c:a2:eb:48:76:8b:3e:b0: ea:41:94:c1:22:89:f1:5e:4b:65:0e:a8:a9:e0:73:9c:66:f1: 62:c0:a6:5c:43:e8:76:73:54:4b:50:c2:7c:49:6e:8f:3b:85: 52:5f:54:02:cb:a7:32:57:2b:c3:3b:85:3a:00:cf:cc:15:3b: e0:76:d3:c2:45:0b:90:89:2a:6d:a6:cc:04:4d:50:d1:05:a3: 14:e7:99:da:a6:dc:b7:94:26:b5:57:95:39:d6:71:11:de:bc: 39:ca:92:03:55:6d:9d:8d:e1:05:79:cc:d6:a9:79:c8:ea:66: 20:45:2d:34:83:ef:f8:c2:20:af:ba:0d:3e:0c:37:b7:ce:36: 0b:0f:16:6a:19:11:96:04:15:1d:2b:2c:44:d1:c1:c3:e4:d3: 7e:26:34:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwNDA2MTUzNzI1WhcNMjUwNDEzMTUzNzI1WjAYMRYwFAYD VQQDEw02N2YyOWZiNS01YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yLfNT9vTL4eEn9rwkuqayX3fiFwqDc5f/cyei8WivgkrWt6dgiPeMPMh6DB mM0wJfKeJLoCbSG5Nn9C7CPv+lpSVNIbC4H/wqob/QHfflQtSLk4YpdGfwG74kjh ZBXXEmGK2TsSs5BhqhX2d0pjwX0mWBjFnQK08cSLnhUaWtkBtedY7bNLCzFxkI/K JrJ5lGAV0vkC3xO5gpqq2ygxy1oWpFC6/CYVdGPd9dplTcJotm8j2ZFhF787CrCt hIhTzt09JBUy2172xdliQoyjLyelzRs17szIRD4UN8Ez3neJr1nXa9qH8CFwNmJl bu+dnzev/YYCCpNctSZcwljlUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5mYsqA IfOu0nVQkc9hK+D6k8b2MB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2uGORKHT3FcX9DIk1fcXyavpB4vThBin8unOCb4r1N8th5gwi7zex 1dEW2I7gMjDlTbKe4qETEzDzSlUkp/mvLGM7SPUTUf6PONJTY9MkOdwW5pNtgmRd XXRL9CA5ZvfgIMFRXKLrSHaLPrDqQZTBIonxXktlDqip4HOcZvFiwKZcQ+h2c1RL UMJ8SW6PO4VSX1QCy6cyVyvDO4U6AM/MFTvgdtPCRQuQiSptpswETVDRBaMU55na pty3lCa1V5U51nER3rw5ypIDVW2djeEFeczWqXnI6mYgRS00g+/4wiCvug0+DDe3 zjYLDxZqGRGWBBUdKyxE0cHD5NN+JjRu -----END CERTIFICATE-----Generated at Mon Apr 7 14:38:43 2025 by rpki-client