$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: BZitP92JLyi71thClZMgJewSO1SvzrYYpDvL4a5AKC8= Subject key identifier: 55:8F:9C:1E:8D:B1:AC:9D:3E:B0:EE:65:E6:6B:92:32:FA:F0:B5:1E Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: 96 Signing time: Sat 31 May 2025 05:57:30 +0000 Manifest this update: Sat 31 May 2025 05:57:29 +0000 Manifest next update: Sat 07 Jun 2025 05:57:29 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: eXJqG2BlQGUYahfJiDswZ8lN4LtKUCih7GQMuEbTEeg=) 2: AA5E96065B9F11EF9F1B175DC4F9AE02.roa (hash: 835GCMndjNXvDx8DWI9YwArs6Gdw+YBn2q/Ep2PzpX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: May 31 05:57:29 2025 GMT Not After : Jun 7 05:57:29 2025 GMT Subject: CN=683a9a49-3fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:cf:ca:09:c9:4e:99:c3:76:25:b4:f4:35: 7b:f4:0a:f6:37:3a:ef:00:14:4f:9f:7e:4e:31:ec: b6:0a:01:00:3f:2b:98:59:87:27:86:5a:d1:47:be: 29:95:d6:13:b7:88:94:14:a2:14:64:71:44:b7:ce: 89:7b:80:51:b7:af:20:bb:50:88:d4:b9:38:7f:af: c9:0e:98:39:62:f9:ab:9f:09:de:97:a5:33:56:aa: 7e:d1:03:22:87:48:b7:13:f2:15:c6:1e:ef:f2:c5: 1b:6a:a4:97:61:e4:fd:39:39:a8:09:23:17:07:37: df:69:2a:c3:de:ee:4d:5c:22:a5:87:f3:8e:19:2f: d0:3b:8c:2e:94:e1:eb:64:bd:7a:30:15:e4:57:a6: 5f:eb:ac:dc:04:b9:60:cd:34:c6:58:93:53:eb:98: 6d:2b:c2:9b:5c:45:49:35:7b:17:20:b0:76:f1:6e: f0:99:9e:fa:3a:fe:ae:c1:1b:9f:63:39:7c:74:5c: 6f:a2:c8:a2:1a:05:0a:a8:7d:e9:e4:ad:00:c9:fa: df:c4:d1:13:f4:c2:46:70:53:55:cc:a9:b5:83:9d: 81:e2:bc:e5:85:7d:1c:d2:33:3b:e6:0b:e9:9a:f1: 36:a7:20:66:22:f8:cd:f3:24:57:4e:a6:f4:65:45: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8F:9C:1E:8D:B1:AC:9D:3E:B0:EE:65:E6:6B:92:32:FA:F0:B5:1E X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d0:ba:b9:5a:84:a7:b8:b8:d8:70:8b:ab:96:b7:66:d2:f5: 23:7c:9a:04:ca:72:a5:ea:5e:fe:9d:a6:f6:08:19:f4:0a:ae: 49:2b:ba:90:5a:bf:4a:74:c2:ce:df:c4:1a:5b:db:04:60:d8: ce:34:0c:ae:d8:b4:89:8b:15:f4:96:71:a9:3b:ff:81:1e:3d: 0d:dd:56:f2:9e:97:b3:1f:8a:85:d1:d3:2c:52:40:2c:86:02: 61:b9:6c:08:8c:bb:e4:35:66:af:fa:0a:c2:ac:2b:7c:95:ee: 38:0f:c7:d6:c1:dc:09:ef:6a:5b:21:4e:b7:8c:7a:7e:be:47: 13:5c:a1:ca:0d:fd:3d:24:df:69:cd:05:87:33:cb:9c:61:42: c2:58:72:c1:2a:1e:3f:04:42:e1:a6:d8:fb:4f:ff:92:62:78: f1:ac:10:94:3a:d8:90:cd:2b:7d:d5:42:ac:dc:b1:04:5e:60: 2b:1d:12:c6:57:21:6c:77:9c:ba:9f:ca:40:d3:57:50:ff:0c: 9e:25:15:19:8f:8b:fb:c8:df:a3:95:0e:50:d2:51:82:3d:a2: af:d9:91:f0:3e:71:dd:ee:fe:b7:96:46:7e:57:b9:0d:74:59: 9a:ab:ac:fb:d8:f0:c4:d7:c9:b1:5d:6d:05:b4:21:98:4d:8c: 2b:8e:e2:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0 OUM1Q0FDMTcwHhcNMjUwNTMxMDU1NzI5WhcNMjUwNjA3MDU1NzI5WjAYMRYwFAYD VQQDEw02ODNhOWE0OS0zZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthjPygnJTpnDdiW09DV79Ar2NzrvABRPn35OMey2CgEAPyuYWYcnhlrRR74p ldYTt4iUFKIUZHFEt86Je4BRt68gu1CI1Lk4f6/JDpg5Yvmrnwnel6UzVqp+0QMi h0i3E/IVxh7v8sUbaqSXYeT9OTmoCSMXBzffaSrD3u5NXCKlh/OOGS/QO4wulOHr ZL16MBXkV6Zf66zcBLlgzTTGWJNT65htK8KbXEVJNXsXILB28W7wmZ76Ov6uwRuf Yzl8dFxvosiiGgUKqH3p5K0AyfrfxNET9MJGcFNVzKm1g52B4rzlhX0c0jM75gvp mvE2pyBmIvjN8yRXTqb0ZUWK5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWPnB6N saydPrDuZeZrkjL68LUeMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk UGY2RHJyN3k2akZKeGNyQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK0Lq5WoSnuLjYcIurlrdm0vUjfJoEynKl6l7+nab2CBn0Cq5JK7qQ Wr9KdMLO38QaW9sEYNjONAyu2LSJixX0lnGpO/+BHj0N3VbynpezH4qF0dMsUkAs hgJhuWwIjLvkNWav+grCrCt8le44D8fWwdwJ72pbIU63jHp+vkcTXKHKDf09JN9p zQWHM8ucYULCWHLBKh4/BELhptj7T/+SYnjxrBCUOtiQzSt91UKs3LEEXmArHRLG VyFsd5y6n8pA01dQ/wyeJRUZj4v7yN+jlQ5Q0lGCPaKv2ZHwPnHd7v63lkZ+V7kN dFmaq6z72PDE18mxXW0FtCGYTYwrjuKL -----END CERTIFICATE-----Generated at Sat May 31 16:35:50 2025 by rpki-client