$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: EtrKeStqaZ9CH2ZgEDEPDcIjQiDA/MwG1j5mBIxxpvM= Subject key identifier: F9:C7:99:DB:C4:4B:61:B6:B0:EB:08:FA:24:EF:A2:41:36:17:B9:F8 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 01DA Signing time: Sat 31 May 2025 02:30:41 +0000 Manifest this update: Sat 31 May 2025 02:30:41 +0000 Manifest next update: Sat 07 Jun 2025 02:30:41 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: uUHH9nEfGQ/uReond4UvEUe3fVSGn3sOCkX6tAy5S30=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: zXr6NOZcCRqEcE9Pgk6RR5qOsx1G0XavR+U4MW0E+MQ=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: DV9Gdp3YkASaDfgSFkYwRK6BKaUQSr3ziC7H6K89rT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: May 31 02:30:41 2025 GMT Not After : Jun 7 02:30:41 2025 GMT Subject: CN=683a69d1-6a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:23:b1:74:56:cd:5a:d6:ec:34:8e:d6:c0: 17:ce:c5:7f:44:de:f1:31:00:b3:be:63:ad:f8:cc: 4d:c8:87:07:76:35:9e:d5:bb:c1:4d:1b:6d:c3:2e: 0a:3c:09:64:ed:9c:bc:a6:cf:3e:01:c2:62:b7:78: 7b:f0:5d:92:43:e8:f3:83:5c:a5:d0:10:a9:de:02: 9c:a4:25:64:1b:71:b3:a6:0d:1f:62:ff:a7:7d:a7: f7:1f:56:91:ad:c7:b3:a6:58:aa:99:38:8e:ce:52: 71:20:6b:4b:cd:08:3a:3f:89:74:ef:85:69:24:53: 0c:e4:fb:8b:b7:66:a0:fe:bb:e5:c8:ef:ab:9a:ed: 76:de:09:e3:53:52:a0:d2:a1:a5:6d:26:94:82:be: 83:ef:ff:46:cb:3c:4b:38:05:93:79:4a:d3:1d:79: f4:09:fa:75:68:3c:0c:17:66:68:0c:89:e5:c8:ad: 5f:0f:dc:75:7f:18:a8:6c:e4:ac:d3:35:51:4e:93: 09:30:c3:16:a8:51:3b:03:f3:58:d2:ac:a6:eb:e0: b5:7f:8e:e9:ad:86:e0:12:f3:34:1c:db:b4:99:21: 1d:a0:32:3c:a7:a4:a6:83:a2:ca:8a:e5:6f:8c:41: 64:a8:2f:2d:e8:47:52:c1:c9:b3:c2:60:d2:ea:19: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C7:99:DB:C4:4B:61:B6:B0:EB:08:FA:24:EF:A2:41:36:17:B9:F8 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:80:b2:96:41:4f:03:65:0e:f0:19:6d:90:fd:1a:79:0a:71: d3:0b:01:55:31:b2:3c:f3:b6:77:d8:90:34:49:b1:91:78:2e: cf:a0:d4:5b:5b:0a:8f:ff:e3:4d:ae:6a:fc:60:1a:16:07:3c: ed:c3:e6:8c:34:d8:48:91:3e:89:7a:d2:d6:7f:02:7c:22:a3: bf:8d:b3:d1:84:d3:35:55:39:7b:35:c4:f3:12:2a:6a:42:ac: 1c:07:16:5a:14:dd:26:c4:ac:4e:75:d6:bb:ad:5b:d3:b7:d7: cb:c7:12:92:40:20:d9:80:66:56:3a:3c:37:90:01:89:2b:b9: f6:f0:21:58:36:7b:a1:e3:ca:11:24:70:40:b8:48:20:1e:74: cc:a8:cc:0d:6b:0b:1a:2d:67:a8:63:fa:6f:73:51:e3:f5:5f: 88:ba:e1:31:9a:2f:b5:3f:05:27:e4:01:01:9f:15:81:75:22: c4:29:e4:df:1c:39:00:35:af:42:65:c1:b4:cc:1b:6a:b7:3d: 42:72:22:a7:f3:57:56:93:6b:ab:8e:e7:99:ea:20:7d:ab:b8: d5:c6:85:c7:2e:e1:ea:e1:9d:fa:96:fb:4a:02:36:de:fc:8c: 7c:ee:ba:74:41:48:a8:41:8f:ac:4e:e4:8b:91:a3:c4:45:34: 97:ec:b7:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUwNTMxMDIzMDQxWhcNMjUwNjA3MDIzMDQxWjAYMRYwFAYD VQQDEw02ODNhNjlkMS02YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kQjsXRWzVrW7DSO1sAXzsV/RN7xMQCzvmOt+MxNyIcHdjWe1bvBTRttwy4K PAlk7Zy8ps8+AcJit3h78F2SQ+jzg1yl0BCp3gKcpCVkG3Gzpg0fYv+nfaf3H1aR rcezpliqmTiOzlJxIGtLzQg6P4l074VpJFMM5PuLt2ag/rvlyO+rmu123gnjU1Kg 0qGlbSaUgr6D7/9GyzxLOAWTeUrTHXn0Cfp1aDwMF2ZoDInlyK1fD9x1fxiobOSs 0zVRTpMJMMMWqFE7A/NY0qym6+C1f47prYbgEvM0HNu0mSEdoDI8p6Smg6LKiuVv jEFkqC8t6EdSwcmzwmDS6hkWuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnHmdvE S2G2sOsI+iTvokE2F7n4MB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKgLKWQU8DZQ7wGW2Q/Rp5CnHTCwFVMbI887Z32JA0SbGReC7PoNRb WwqP/+NNrmr8YBoWBzztw+aMNNhIkT6JetLWfwJ8IqO/jbPRhNM1VTl7NcTzEipq QqwcBxZaFN0mxKxOdda7rVvTt9fLxxKSQCDZgGZWOjw3kAGJK7n28CFYNnuh48oR JHBAuEggHnTMqMwNawsaLWeoY/pvc1Hj9V+IuuExmi+1PwUn5AEBnxWBdSLEKeTf HDkANa9CZcG0zBtqtz1CciKn81dWk2urjueZ6iB9q7jVxoXHLuHq4Z36lvtKAjbe /Ix87rp0QUioQY+sTuSLkaPERTSX7Lc1 -----END CERTIFICATE-----Generated at Sat May 31 15:33:54 2025 by rpki-client