$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: hFoIME9jipngySgMWkoQQc7TpKrVlzyZIxVuPm+P1eI= Subject key identifier: 5F:AD:4D:39:98:49:9D:BA:9C:5F:4B:90:03:33:23:E5:61:BE:EE:94 Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: 0124 Signing time: Sat 31 May 2025 04:27:00 +0000 Manifest this update: Sat 31 May 2025 04:26:59 +0000 Manifest next update: Sat 07 Jun 2025 04:26:59 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: Ep7ZbkeQx0y9NPOv9YbbbkN7S9yBzhze4R678NQ5Hhs=) 2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: H7JonSUtz6tgIVuXpEGUpFZ7fUQBIkEHbO/Cd9DHtNo=) 3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: j/6dClTGKIF6Y0W3OQ8vmv5qC35aQkMZjQK9N8GGPFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: May 31 04:26:59 2025 GMT Not After : Jun 7 04:26:59 2025 GMT Subject: CN=683a8514-e150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1e:d1:fc:cc:a6:42:45:77:ac:4c:ee:fb:07: f3:af:42:23:08:d5:d6:8c:c9:91:36:c3:d2:f1:31: 4e:b0:39:77:7c:7d:23:03:c2:5a:e5:13:fa:c6:71: ef:4e:01:87:e2:61:2a:d6:f6:a8:4e:13:2b:db:e4: 39:3c:f2:0b:5b:39:d6:dc:86:c5:d3:d0:e9:5a:8d: a6:76:e0:9f:ac:8c:af:5a:1b:92:8e:4e:cf:e6:b2: ae:b6:6a:18:cb:16:76:d4:8f:ff:26:22:81:1f:ed: dd:75:56:8e:67:b4:63:44:9f:25:8b:d9:a6:e7:4d: b9:10:59:14:84:e3:2d:dd:69:e6:ed:04:9b:85:aa: a5:38:81:a4:4d:a7:82:2f:c2:6e:6e:54:4b:32:21: 60:8f:14:81:34:4a:16:18:51:5d:e6:0a:e2:15:a3: 2a:06:b4:39:38:1a:d5:f5:b2:e5:17:7b:a2:85:6b: 6c:67:51:10:f6:f9:36:22:df:3d:76:ee:01:94:9f: a3:37:fd:9a:9a:f0:6e:66:43:46:ea:d8:78:c6:a4: c6:c0:78:b0:ec:d5:ec:d5:a1:c9:98:7c:35:53:4f: 13:a1:29:ae:44:ee:cd:cf:4b:49:c3:13:64:3d:e9: 05:ac:5f:a6:4c:f0:24:52:4f:83:0f:77:a6:00:e7: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AD:4D:39:98:49:9D:BA:9C:5F:4B:90:03:33:23:E5:61:BE:EE:94 X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:5b:5f:3a:89:dc:a4:7f:2e:3f:f6:17:ca:50:b3:8b:9f:a0: 28:fa:3c:21:c1:20:68:e0:64:09:01:1c:c7:af:1d:6f:4c:1f: cb:9b:1f:38:2b:9d:40:6c:6f:76:ee:ac:d1:ce:be:0f:15:8b: 5b:e6:b7:37:03:06:f0:53:74:0e:90:73:bc:32:0d:45:1a:f3: 18:c3:e8:ad:c2:40:bc:5a:d5:9f:55:e4:ed:74:e6:72:a5:21: 4c:3e:a9:03:e8:a2:bb:12:3e:f1:66:bf:e8:6d:43:78:dc:95: e5:28:96:35:f6:9b:05:10:bf:f7:c5:d2:0f:73:93:b5:a5:2c: 89:39:36:a2:ab:57:0c:35:32:35:14:43:b6:87:a7:03:7a:0c: 8a:40:21:e1:a4:e5:76:fe:9d:33:2f:5c:b3:9c:6b:d6:e8:bb: da:aa:bd:ed:0d:06:c9:ce:f3:9c:25:d5:b3:aa:43:62:ba:8f: 58:52:e4:f4:48:21:66:98:64:5e:b3:11:4a:07:6e:71:26:17: 3f:97:8f:c1:7a:d4:56:cc:b6:9f:1f:b2:10:3d:f1:ec:48:0a: 03:2a:be:a9:1a:32:fe:67:a8:95:2e:ac:48:ae:d6:ad:2c:81: 2a:70:80:fc:13:31:40:64:ec:b0:1e:54:86:3a:22:d5:7e:b8: 52:70:b4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjUwNTMxMDQyNjU5WhcNMjUwNjA3MDQyNjU5WjAYMRYwFAYD VQQDEw02ODNhODUxNC1lMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6R7R/MymQkV3rEzu+wfzr0IjCNXWjMmRNsPS8TFOsDl3fH0jA8Ja5RP6xnHv TgGH4mEq1vaoThMr2+Q5PPILWznW3IbF09DpWo2mduCfrIyvWhuSjk7P5rKutmoY yxZ21I//JiKBH+3ddVaOZ7RjRJ8li9mm5025EFkUhOMt3Wnm7QSbhaqlOIGkTaeC L8JublRLMiFgjxSBNEoWGFFd5griFaMqBrQ5OBrV9bLlF3uihWtsZ1EQ9vk2It89 du4BlJ+jN/2amvBuZkNG6th4xqTGwHiw7NXs1aHJmHw1U08ToSmuRO7Nz0tJwxNk PekFrF+mTPAkUk+DD3emAOc9CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+tTTmY SZ26nF9LkAMzI+Vhvu6UMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tB RmtMYnliSlBoZERNS0NOazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCW186idykfy4/9hfKULOLn6Ao+jwhwSBo4GQJARzHrx1vTB/Lmx84 K51AbG927qzRzr4PFYtb5rc3AwbwU3QOkHO8Mg1FGvMYw+itwkC8WtWfVeTtdOZy pSFMPqkD6KK7Ej7xZr/obUN43JXlKJY19psFEL/3xdIPc5O1pSyJOTaiq1cMNTI1 FEO2h6cDegyKQCHhpOV2/p0zL1yznGvW6Lvaqr3tDQbJzvOcJdWzqkNiuo9YUuT0 SCFmmGResxFKB25xJhc/l4/BetRWzLafH7IQPfHsSAoDKr6pGjL+Z6iVLqxIrtat LIEqcID8EzFAZOywHlSGOiLVfrhScLS8 -----END CERTIFICATE-----Generated at Sat May 31 16:50:45 2025 by rpki-client