$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: WahZEVsMpOwBiG6/4Ik+/WPUts2o0MTdQ+Fp3EzR64Q= Subject key identifier: BB:6D:11:80:69:71:95:57:2C:9E:29:0A:F4:0F:BF:44:8C:E6:F4:D0 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 0987 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 0978 Signing time: Fri 30 May 2025 21:01:27 +0000 Manifest this update: Fri 30 May 2025 21:01:26 +0000 Manifest next update: Fri 06 Jun 2025 21:01:26 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: n2vLBcViC+ongkv+d7fdKkISahB6OMS2IXTLYAR7Lkg=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: 8JSwEQed2eJqn9OytcIj9IctVhOahjE7HP6K7LQO8mE=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: rFSplheoWDm+5MPYS0jTevwHFfJ593Fp0RQ1ghGpvEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2439 (0x987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: May 30 21:01:26 2025 GMT Not After : Jun 6 21:01:26 2025 GMT Subject: CN=683a1ca6-f724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:f5:fd:67:6d:da:f4:76:be:2a:7b:34:10: f3:52:39:7d:53:2d:63:33:f7:d0:a2:b4:d3:aa:c2: dd:ca:9e:ff:c5:ba:63:27:15:17:8c:aa:f0:06:5d: 39:66:07:c8:f1:9f:32:9f:d0:8a:46:f5:17:06:28: a9:d9:d8:80:d4:0c:95:c0:c7:2d:c9:7a:a4:2e:22: 20:53:1c:06:8d:7b:16:eb:ea:f4:74:5b:27:5b:43: 43:fb:f5:59:bd:9e:d9:45:34:3e:8b:d7:07:ad:e9: fb:cb:ef:af:81:c4:08:ca:2b:6b:38:27:de:53:36: 4b:74:8b:0b:ec:0e:10:dd:9f:39:91:a2:4f:ad:98: 32:aa:24:19:72:60:7f:6f:ab:54:76:19:25:c3:a6: c9:7f:06:51:a0:d2:6f:67:50:56:f6:e1:63:d6:af: 4e:a9:78:6d:be:8f:d6:0a:9e:6e:9c:f9:a3:3d:87: 4e:f7:1f:72:20:79:67:17:b2:49:fa:0e:6c:c2:59: 67:f1:8c:4b:54:b3:27:93:ed:6b:7b:6c:a8:af:f6: b7:66:3e:21:f6:5b:17:73:2a:e0:ec:d5:48:29:07: e6:86:a2:a6:24:73:2b:03:2f:f7:2e:07:f4:88:fe: 92:a1:5c:d5:8c:c2:8e:e0:eb:a6:e1:12:5a:b8:aa: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6D:11:80:69:71:95:57:2C:9E:29:0A:F4:0F:BF:44:8C:E6:F4:D0 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:4b:c0:5b:9e:02:f5:9c:af:69:de:5b:07:05:ff:63:04:e3: 22:9d:aa:66:68:28:43:0f:dc:a0:19:97:a8:e3:13:e4:41:e3: 01:05:5f:6d:72:b1:71:bc:b1:fc:e7:55:b1:91:c3:93:f8:ce: b2:4d:b4:a0:80:4d:10:d9:fd:3b:9a:73:55:c2:6e:fc:58:04: f9:60:0f:d1:c0:97:53:c5:b9:d3:35:5a:6e:f9:f9:a3:8c:6a: 57:64:b8:26:94:b8:e0:72:87:2a:0a:55:81:ad:42:e6:32:b8: ca:3a:de:c9:4f:b0:2d:5a:a7:f1:e6:a4:9b:d9:14:75:e3:78: f9:e0:02:ae:c7:20:59:9f:bb:1b:45:76:e1:12:50:f4:0b:ac: 14:b3:16:cd:13:0e:61:29:8c:3c:e2:13:f0:3c:c9:7d:77:f9: 15:f6:11:49:d1:e4:eb:ed:e5:d2:3b:8d:3a:17:af:3b:94:fb: 59:4e:6e:20:1f:9d:24:75:d0:2d:3d:53:63:f9:38:9e:e0:92: f1:9e:e3:a1:db:ed:ab:6b:c7:7f:e5:75:43:5d:2c:8f:cc:01: fe:4e:f9:05:8f:0d:ba:29:65:37:a7:3e:08:65:bb:1c:15:f0: c3:53:25:15:e5:b2:ac:e6:f9:bb:cb:4b:df:fb:eb:d2:75:8b: ce:16:75:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjUwNTMwMjEwMTI2WhcNMjUwNjA2MjEwMTI2WjAYMRYwFAYD VQQDEw02ODNhMWNhNi1mNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlj31/Wdt2vR2vip7NBDzUjl9Uy1jM/fQorTTqsLdyp7/xbpjJxUXjKrwBl05 ZgfI8Z8yn9CKRvUXBiip2diA1AyVwMctyXqkLiIgUxwGjXsW6+r0dFsnW0ND+/VZ vZ7ZRTQ+i9cHren7y++vgcQIyitrOCfeUzZLdIsL7A4Q3Z85kaJPrZgyqiQZcmB/ b6tUdhklw6bJfwZRoNJvZ1BW9uFj1q9OqXhtvo/WCp5unPmjPYdO9x9yIHlnF7JJ +g5swlln8YxLVLMnk+1re2yor/a3Zj4h9lsXcyrg7NVIKQfmhqKmJHMrAy/3Lgf0 iP6SoVzVjMKO4Oum4RJauKopGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLttEYBp cZVXLJ4pCvQPv0SM5vTQMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4S8BbngL1nK9p3lsHBf9jBOMinapmaChDD9ygGZeo4xPkQeMBBV9t crFxvLH851WxkcOT+M6yTbSggE0Q2f07mnNVwm78WAT5YA/RwJdTxbnTNVpu+fmj jGpXZLgmlLjgcocqClWBrULmMrjKOt7JT7AtWqfx5qSb2RR143j54AKuxyBZn7sb RXbhElD0C6wUsxbNEw5hKYw84hPwPMl9d/kV9hFJ0eTr7eXSO406F687lPtZTm4g H50kddAtPVNj+Tie4JLxnuOh2+2ra8d/5XVDXSyPzAH+TvkFjw26KWU3pz4IZbsc FfDDUyUV5bKs5vm7y0vf++vSdYvOFnUB -----END CERTIFICATE-----Generated at Sat May 31 17:07:44 2025 by rpki-client