$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json) Hash identifier: 0X18439o7n0PliSCm6g16MFu2DrRd20FIz0lkiI46m8= Subject key identifier: D5:61:CF:17:12:96:3D:29:1D:FA:11:58:78:AC:0B:B1:3F:97:94:09 Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Certificate serial: 074F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft Manifest number: 0746 Signing time: Fri 30 May 2025 21:53:54 +0000 Manifest this update: Fri 30 May 2025 21:53:54 +0000 Manifest next update: Fri 06 Jun 2025 21:53:54 +0000 Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: GA8aZ1azGKZU68ZplOsUVWXYtMM2vDWdigo+Lx0KDM4=) 2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: VX7tWpkB3IpeXdKnDIMHBHz09wmck5Wxazs1on6cWAs=) 3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: UtE0iQnooYxxq8F81zrRGsRO6qH6B3IIfoj4HCuUdUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED Validity Not Before: May 30 21:53:54 2025 GMT Not After : Jun 6 21:53:54 2025 GMT Subject: CN=683a28f2-cb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cb:d4:dc:87:2e:3e:6b:13:e5:d7:d5:38:0a: 69:41:1e:48:f1:c1:14:12:2c:23:db:7c:4e:ce:69: 4e:62:a4:7d:c2:9b:11:73:a3:49:4e:19:aa:7a:b1: fc:8e:52:49:84:da:2c:14:9d:48:18:59:06:63:f4: 98:32:1a:47:5b:23:03:9a:47:71:70:6e:39:85:b1: 4b:4b:63:d8:c6:83:95:e1:00:cd:45:09:76:0f:8d: a8:28:8f:06:dc:47:f7:ba:82:ee:4d:2f:2b:bf:77: f9:31:80:6c:9a:fd:3a:d4:05:a3:be:9f:ac:27:e2: 8e:d5:22:70:1b:07:12:c6:58:69:15:90:9f:51:47: ca:29:46:ed:ba:4b:c7:64:82:87:8d:f1:64:88:14: 4f:a9:5b:68:a0:67:a0:0c:11:94:fa:4d:b6:91:29: 42:7f:bf:72:b5:2e:bd:d9:5e:0f:4e:b8:1d:c4:60: 3d:b0:95:6d:4b:02:35:4f:c4:4f:84:54:fa:8b:92: e7:43:60:4f:eb:fa:55:94:bf:07:d8:4e:b1:17:d8: fb:28:37:80:4a:14:e7:4b:8d:11:6c:53:4b:c7:79: b6:c1:57:db:99:9f:0d:d1:4b:0c:7c:88:9a:78:d2: c6:e0:d7:68:14:f2:ab:13:a2:88:7b:2f:7e:a6:e2: 44:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:61:CF:17:12:96:3D:29:1D:FA:11:58:78:AC:0B:B1:3F:97:94:09 X509v3 Authority Key Identifier: keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:9f:db:2c:c4:f7:94:b0:6f:8c:ab:48:50:bb:7b:a0:78:ef: b2:a7:7a:79:7f:fd:85:91:74:e8:7c:3b:e7:f4:fb:9f:46:42: f2:97:3b:23:70:a4:36:89:12:fd:5c:8f:28:f8:5a:3d:ec:a9: 4e:9d:ed:14:0e:e4:23:b7:ad:89:64:6a:98:13:03:0a:7d:cf: 76:43:04:08:38:34:ce:74:6e:5e:78:c7:b3:9b:c1:2b:4e:49: 6e:43:6f:4f:7c:45:10:49:3d:ad:19:53:05:51:ea:e0:28:48: d0:77:ae:fa:73:a2:5a:6b:1c:a4:d4:a3:57:9c:71:50:20:65: 2a:61:cd:ae:14:e7:51:a1:75:fa:bb:fe:c8:66:fa:9c:dd:1b: ba:8b:b9:0c:62:3a:54:52:88:99:59:ed:58:96:7d:49:33:0d: af:a9:60:40:30:bb:36:d3:66:c3:e7:cc:4e:c8:9b:a3:60:3f: ee:fa:01:17:c9:91:8e:10:90:f1:ca:69:2e:9e:6a:66:5a:c6: 21:90:a7:15:d8:98:89:34:1d:48:df:ad:a1:e5:d4:76:68:ff: 69:86:f6:20:1e:08:f3:5a:65:9e:df:12:9f:1c:5d:5a:c0:98: 23:b9:58:02:46:b5:fb:57:27:e1:1b:ab:82:7b:46:1c:4d:1d: f6:58:e4:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy QjgzOUZCRUQwHhcNMjUwNTMwMjE1MzU0WhcNMjUwNjA2MjE1MzU0WjAYMRYwFAYD VQQDEw02ODNhMjhmMi1jYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9svU3IcuPmsT5dfVOAppQR5I8cEUEiwj23xOzmlOYqR9wpsRc6NJThmqerH8 jlJJhNosFJ1IGFkGY/SYMhpHWyMDmkdxcG45hbFLS2PYxoOV4QDNRQl2D42oKI8G 3Ef3uoLuTS8rv3f5MYBsmv061AWjvp+sJ+KO1SJwGwcSxlhpFZCfUUfKKUbtukvH ZIKHjfFkiBRPqVtooGegDBGU+k22kSlCf79ytS692V4PTrgdxGA9sJVtSwI1T8RP hFT6i5LnQ2BP6/pVlL8H2E6xF9j7KDeAShTnS40RbFNLx3m2wVfbmZ8N0UsMfIia eNLG4NdoFPKrE6KIey9+puJELQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVhzxcS lj0pHfoRWHisC7E/l5QJMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5 MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEn9ssxPeUsG+Mq0hQu3ugeO+yp3p5f/2FkXTofDvn9PufRkLylzsj cKQ2iRL9XI8o+Fo97KlOne0UDuQjt62JZGqYEwMKfc92QwQIODTOdG5eeMezm8Er TkluQ29PfEUQST2tGVMFUergKEjQd676c6Jaaxyk1KNXnHFQIGUqYc2uFOdRoXX6 u/7IZvqc3Ru6i7kMYjpUUoiZWe1Yln1JMw2vqWBAMLs202bD58xOyJujYD/u+gEX yZGOEJDxymkunmpmWsYhkKcV2JiJNB1I362h5dR2aP9phvYgHgjzWmWe3xKfHF1a wJgjuVgCRrX7VyfhG6uCe0YcTR32WOQA -----END CERTIFICATE-----Generated at Sat May 31 17:36:06 2025 by rpki-client