$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json) Hash identifier: DqCYYqMDdjcfZcxcIbwQYrkjqwGgRZ8SQCBgM3sB7cQ= Subject key identifier: DD:49:26:48:A6:0A:0F:BE:8E:B2:9D:30:9C:37:E8:46:A4:BE:59:9B Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft Manifest number: 75 Signing time: Sat 31 May 2025 06:29:08 +0000 Manifest this update: Sat 31 May 2025 06:29:08 +0000 Manifest next update: Sat 07 Jun 2025 06:29:08 +0000 Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: GhXxYg9X9uWK379XAIp31smHMysOqLMuFWOIoAXOmKo=) 2: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: ipUtH6de1n3QDXNmS4idd62IMEQfE9S8Kl6BBzpD9nQ=) 3: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: ofbztl5uVlglZWvlUxP/w/vzUs13H0jw290VgxrDPX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Validity Not Before: May 31 06:29:08 2025 GMT Not After : Jun 7 06:29:08 2025 GMT Subject: CN=683aa1b4-bd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:93:00:46:af:3e:a6:79:74:84:76:23:58:b4: bc:fd:d6:63:f7:05:39:51:88:de:57:fd:bb:61:3a: df:9d:29:9b:b1:71:8b:ff:78:16:c0:04:ca:54:91: ba:77:72:63:a0:9b:e0:06:13:eb:1a:cb:ba:74:b3: c6:c9:dc:8e:3c:59:55:b1:ea:88:71:b5:7a:71:88: e3:9c:a8:2d:ac:36:32:f4:4d:29:ff:48:f1:52:f1: 6c:1e:d1:69:46:ef:c7:a4:fc:7b:43:fd:3c:f2:1f: 68:07:e6:5e:34:c8:6d:57:ca:aa:48:a6:b0:87:3b: a9:72:b7:37:9a:6d:d0:2b:8e:08:64:20:35:a9:fd: 38:64:0b:46:e7:d9:5d:dd:20:63:17:13:d3:81:1d: 08:39:83:6b:b6:de:26:c1:36:3e:29:58:2d:9b:a6: 2e:11:2b:fb:37:fb:8b:dc:31:d3:75:66:04:5a:f8: b7:23:8e:2e:47:8d:df:0a:f4:65:d5:be:13:88:87: ce:ec:5e:68:76:6e:7d:7c:f0:2d:e3:82:0f:47:48: 10:8e:1c:ae:7e:3d:49:40:85:65:49:b8:bf:50:bf: bf:02:83:f5:0c:ed:3c:f1:1f:5e:66:65:53:4c:a4: 7a:fb:35:29:55:85:ab:3b:70:0c:9a:9e:0a:56:5e: 76:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:49:26:48:A6:0A:0F:BE:8E:B2:9D:30:9C:37:E8:46:A4:BE:59:9B X509v3 Authority Key Identifier: keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:84:ed:9e:1f:c2:3f:47:fe:df:48:a3:ba:a6:c3:59:b6:0a: f3:f2:5c:4a:c7:48:3c:7a:4a:01:35:c9:85:2e:39:3e:28:33: 2d:85:b5:50:1b:dd:31:22:a2:3a:3a:4b:c6:0c:99:83:6e:cc: b4:c9:d6:c7:48:29:c5:93:73:5d:0e:c5:2d:a9:d5:65:ad:6d: a5:13:33:f2:48:7d:0c:e7:3b:bf:b4:d7:f7:8c:d2:52:54:0f: 0f:f1:9e:ef:05:62:db:21:40:6b:fc:92:ab:3d:bf:09:ab:88: 97:80:2e:ab:f9:cf:d0:7b:ed:9c:63:13:52:86:dc:85:68:ad: 21:c7:3f:2d:50:94:d6:51:7c:66:b6:6a:a1:c3:ae:c5:a5:32: 13:f1:54:c1:72:af:80:83:32:e0:ba:4f:b1:e3:d4:2a:7e:8b: 8f:68:89:45:68:ae:08:de:79:17:70:f0:fd:f0:e7:cb:54:e5: 83:ef:66:b2:bc:bf:d4:b2:84:da:92:16:da:27:62:62:06:a2: 0b:54:0d:c9:4f:fe:d2:d1:7a:64:2e:5e:fb:bf:18:02:52:ec: 99:5f:0a:62:f5:2c:c5:8e:09:23:33:d2:dd:1b:42:2c:22:36: fe:f6:71:5d:7d:ef:84:dc:9c:5f:ee:36:be:0e:89:01:54:18: 03:c3:90:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODA0NzExMC8GA1UEBRMoODg0OEFBQ0RGMjk1MTMwM0U3MDk4RjQxOUQ4Q0EwMDQy Mjg5MEM2OTAeFw0yNTA1MzEwNjI5MDhaFw0yNTA2MDcwNjI5MDhaMBgxFjAUBgNV BAMTDTY4M2FhMWI0LWJkMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlkwBGrz6meXSEdiNYtLz91mP3BTlRiN5X/bthOt+dKZuxcYv/eBbABMpUkbp3 cmOgm+AGE+say7p0s8bJ3I48WVWx6ohxtXpxiOOcqC2sNjL0TSn/SPFS8Wwe0WlG 78ek/HtD/TzyH2gH5l40yG1XyqpIprCHO6lytzeabdArjghkIDWp/ThkC0bn2V3d IGMXE9OBHQg5g2u23ibBNj4pWC2bpi4RK/s3+4vcMdN1ZgRa+Lcjji5Hjd8K9GXV vhOIh87sXmh2bn188C3jgg9HSBCOHK5+PUlAhWVJuL9Qv78Cg/UM7TzxH15mZVNM pHr7NSlVhas7cAyangpWXnabAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3UkmSKYK D76Osp0wnDfoRqS+WZswHwYDVR0jBBgwFoAUiEiqzfKVEwPnCY9BnYygBCKJDGkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MDQ3LzM0NEEwMUEyOUIx NTExRUY4NkVCMzc0NkM0RjlBRTAyL2lFaXF6ZktWRXdQbkNZOUJuWXlnQkNLSkRH ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUVpcXpmS1ZFd1BuQ1k5Qm5ZeWdCQ0tKREdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MDQ3LzM0NEEwMUEyOUIxNTExRUY4NkVCMzc0NkM0RjlBRTAyL2lFaXF6ZktWRXdQ bkNZOUJuWXlnQkNLSkRHay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAECE7Z4fwj9H/t9Io7qmw1m2CvPyXErHSDx6SgE1yYUuOT4oMy2FtVAb 3TEiojo6S8YMmYNuzLTJ1sdIKcWTc10OxS2p1WWtbaUTM/JIfQznO7+01/eM0lJU Dw/xnu8FYtshQGv8kqs9vwmriJeALqv5z9B77ZxjE1KG3IVorSHHPy1QlNZRfGa2 aqHDrsWlMhPxVMFyr4CDMuC6T7Hj1Cp+i49oiUVorgjeeRdw8P3w58tU5YPvZrK8 v9SyhNqSFtonYmIGogtUDclP/tLRemQuXvu/GAJS7JlfCmL1LMWOCSMz0t0bQiwi Nv72cV1974TcnF/uNr4OiQFUGAPDkAo= -----END CERTIFICATE-----Generated at Sat May 31 17:48:45 2025 by rpki-client