$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: dcrZ5afUUB0enQXHr2FecmBizF2MgW3fKIeOcQ3n7c8= Subject key identifier: 24:EF:63:91:E9:8E:4E:0A:EB:0A:09:7A:23:C2:71:1E:5D:5A:AF:7A Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 03E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 03DC Signing time: Sat 31 May 2025 00:46:37 +0000 Manifest this update: Sat 31 May 2025 00:46:37 +0000 Manifest next update: Sat 07 Jun 2025 00:46:37 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: Ir2CY4CEk55JrQNelXKvmSsJCCCjWEvDw8l2qVZDRyc=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: HjJMtBZQa4j3w+aIjRMqWS8V5BytX4DObhkkXgOg0NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: May 31 00:46:37 2025 GMT Not After : Jun 7 00:46:37 2025 GMT Subject: CN=683a516d-eb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:77:c6:98:f1:9a:90:9b:a5:92:c0:c5:cc: 2b:51:08:7e:31:c8:61:6a:8b:d0:eb:c2:0a:a8:e5: 15:95:96:57:46:0d:1d:87:9b:54:1f:02:3b:d5:81: a1:03:37:63:14:77:db:f9:ab:1a:a2:22:ab:e7:24: 95:64:a0:a0:da:99:e4:2c:b8:c3:a0:4c:e0:cf:0d: fa:bf:2a:76:75:69:ec:f7:a6:01:52:4e:25:3a:b6: 09:e1:bb:da:43:72:a7:bb:22:05:03:49:7d:86:95: 4c:51:36:88:aa:40:d9:66:3f:c9:fe:d2:56:de:f4: ab:4f:6a:35:a7:8a:d3:25:f7:2a:66:2d:46:35:97: 84:84:29:c0:74:79:b0:9c:38:cd:ef:07:da:8e:d2: 5f:1d:0a:5e:49:90:1b:f6:bd:86:d6:8b:df:b5:7a: f5:fd:4a:a2:b9:7d:21:63:0c:31:3a:e4:b2:f2:b1: 55:9c:ad:e5:af:10:87:0a:ba:70:55:44:44:2d:4d: 3e:b5:9a:86:48:8e:89:5a:51:84:4c:a6:03:ed:b5: 27:0e:95:9a:21:c6:80:c7:2f:d9:6c:af:03:e2:0a: f6:21:b6:80:51:29:98:e3:31:f3:4c:2b:8a:7a:d8: af:e0:3f:1f:97:8a:a9:c9:45:7a:c7:f4:0e:38:f4: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EF:63:91:E9:8E:4E:0A:EB:0A:09:7A:23:C2:71:1E:5D:5A:AF:7A X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9a:fe:31:12:d0:05:15:26:1d:1c:38:55:a4:af:99:1d:65: 2a:23:6a:ee:6b:29:63:d7:14:ba:ba:44:6d:ec:4d:97:22:e1: c1:1e:f6:17:b4:f0:be:74:0c:9a:f5:bb:a9:2f:7c:10:39:56: 65:69:5f:2f:c3:f5:6f:af:8d:3e:e9:d9:f1:f5:05:2e:bb:88: 5d:6e:18:44:85:2e:b5:b5:9a:54:66:4a:ea:b3:23:5b:82:89: 15:dd:02:06:07:55:f3:4c:90:75:6f:d1:6f:62:4b:a1:1e:cd: d4:bc:1c:33:4b:0d:ef:cc:55:7e:17:21:10:08:13:11:57:b0: c1:4d:85:a0:5b:4a:64:78:c6:1a:b5:4c:d3:9c:bc:7f:cb:c0: 8d:98:43:bf:d3:9b:e1:a2:69:38:1d:b7:87:90:7a:51:76:bf: a1:23:58:9d:32:f8:59:04:35:f2:54:28:45:7e:f4:a7:e9:9e: 3c:2b:c2:cc:3b:b0:d1:02:f7:a2:d4:45:16:eb:e2:88:a2:ab: e8:eb:52:bb:00:21:06:da:de:93:9a:3a:df:cc:83:a7:a8:ce: 02:ca:e0:a8:e5:94:a3:51:68:b5:87:7a:84:d9:e1:f8:1c:25: 32:05:15:08:fd:d4:be:e2:db:0f:a6:2c:fb:6c:5e:a2:46:4d: 73:f1:49:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUwNTMxMDA0NjM3WhcNMjUwNjA3MDA0NjM3WjAYMRYwFAYD VQQDEw02ODNhNTE2ZC1lYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyx3xpjxmpCbpZLAxcwrUQh+MchhaovQ68IKqOUVlZZXRg0dh5tUHwI71YGh AzdjFHfb+asaoiKr5ySVZKCg2pnkLLjDoEzgzw36vyp2dWns96YBUk4lOrYJ4bva Q3KnuyIFA0l9hpVMUTaIqkDZZj/J/tJW3vSrT2o1p4rTJfcqZi1GNZeEhCnAdHmw nDjN7wfajtJfHQpeSZAb9r2G1ovftXr1/UqiuX0hYwwxOuSy8rFVnK3lrxCHCrpw VURELU0+tZqGSI6JWlGETKYD7bUnDpWaIcaAxy/ZbK8D4gr2IbaAUSmY4zHzTCuK etiv4D8fl4qpyUV6x/QOOPQnKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTvY5Hp jk4K6woJeiPCcR5dWq96MB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKmv4xEtAFFSYdHDhVpK+ZHWUqI2ruaylj1xS6ukRt7E2XIuHBHvYX tPC+dAya9bupL3wQOVZlaV8vw/Vvr40+6dnx9QUuu4hdbhhEhS61tZpUZkrqsyNb gokV3QIGB1XzTJB1b9FvYkuhHs3UvBwzSw3vzFV+FyEQCBMRV7DBTYWgW0pkeMYa tUzTnLx/y8CNmEO/05vhomk4HbeHkHpRdr+hI1idMvhZBDXyVChFfvSn6Z48K8LM O7DRAvei1EUW6+KIoqvo61K7ACEG2t6TmjrfzIOnqM4CyuCo5ZSjUWi1h3qE2eH4 HCUyBRUI/dS+4tsPpiz7bF6iRk1z8Ull -----END CERTIFICATE-----Generated at Sat May 31 17:04:52 2025 by rpki-client