$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft File: Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json) Hash identifier: QAL0dotl75dlkkWIbprdc0LdJaX1kqBerSr7BKZGg/M= Subject key identifier: B3:6C:2B:A8:65:DC:8E:B2:82:AE:EB:A2:0E:CD:B6:7E:08:C9:8E:E4 Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft Manifest number: 0322 Signing time: Tue 03 Jun 2025 01:26:12 +0000 Manifest this update: Tue 03 Jun 2025 01:26:11 +0000 Manifest next update: Tue 10 Jun 2025 01:26:11 +0000 Files and hashes: 1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: 5qDakWwP1IoHmrQomHbXmaUlwwAxykAnGbwD6p7Ao54=) 2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Validity Not Before: Jun 3 01:26:11 2025 GMT Not After : Jun 10 01:26:11 2025 GMT Subject: CN=683e4f34-e3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:ae:c0:ef:03:73:bb:29:ac:b4:42:9a:a7: 8f:04:be:2a:ef:c9:0b:eb:fe:c6:7b:53:67:70:a0: 62:6f:59:80:cb:26:1d:5b:60:ce:9e:4f:24:99:6f: 8a:d8:d2:85:02:f3:cd:bd:51:e2:97:fd:ec:a5:1c: 4a:a7:d5:81:1b:a6:68:72:54:e8:b6:32:04:3e:a3: 57:d2:c5:28:bd:3a:0a:9e:d3:37:cd:26:42:1b:74: 16:29:9f:51:d8:8d:95:d3:7b:19:f1:ac:62:a9:a6: bb:4f:0d:7a:e4:d8:87:d1:67:fe:d4:d5:93:7b:cb: f2:e3:c1:94:4a:06:c5:e8:fe:04:81:b4:ba:c2:e1: c4:4c:df:2b:f2:49:75:82:18:91:1b:d1:77:33:88: c6:0a:ef:6a:b7:4d:c6:a9:a0:a2:10:b7:e6:4e:de: 00:de:f1:59:32:3b:66:81:51:d4:58:99:3b:6b:56: 15:b4:7a:f7:92:f8:35:a8:f9:8e:fa:d7:d4:00:e4: 92:39:cc:38:96:b5:4d:3b:23:2e:22:93:e8:01:76: 92:18:90:84:46:fb:05:08:6b:26:40:66:51:b4:56: e5:82:89:5e:86:f4:8c:fd:cf:e2:ff:cf:28:f1:db: 03:42:04:9e:9f:05:e1:5c:8e:04:d0:12:88:81:68: bd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6C:2B:A8:65:DC:8E:B2:82:AE:EB:A2:0E:CD:B6:7E:08:C9:8E:E4 X509v3 Authority Key Identifier: keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:dc:50:f3:fe:d4:a6:b3:13:a4:ab:9e:e7:43:1b:ee:49:e0: 46:5f:74:07:c1:b9:6d:8a:16:58:9c:e5:7a:9b:84:d0:74:18: 4a:48:0b:a0:2d:da:a3:89:a2:83:c6:99:29:fa:c8:8c:b2:1e: 8c:c4:15:d2:ac:84:2b:1b:78:2f:f3:2a:6d:0e:70:a2:22:9a: 04:91:ec:94:50:da:62:60:f5:05:a8:65:82:1f:4c:6b:3e:e5: c5:de:9f:b9:d2:03:dd:7c:cb:87:6c:85:c4:f9:ba:8a:a7:cb: 27:6b:1a:99:b9:bd:cd:7a:1e:04:73:f1:85:69:25:89:35:3e: a0:1e:ec:b9:7b:55:80:91:75:47:bd:7d:5e:69:b1:8f:56:50: 22:e7:ab:18:df:d7:1a:de:1e:2e:8e:5c:22:b3:88:dc:c9:5e: 30:9d:76:6f:d1:12:f8:c1:8c:11:93:23:70:ac:91:4b:44:56: 3d:14:f9:0a:70:27:4d:0b:ea:d2:4f:1f:42:56:47:eb:46:da: 93:0e:2a:17:68:0f:21:d6:ac:70:df:3d:b2:64:71:f2:06:ac: 0d:60:d6:bd:a4:51:ce:c2:3a:7d:c2:25:19:4d:7a:9f:d1:6c: 87:95:bb:90:73:07:75:77:f4:13:16:c0:c8:1d:28:23:75:52: c7:04:55:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDIyNkY3Mjg5RDRFMzdGRUNFMjI2MEM2NEQzQkNCQTdB QzAzMTVBNzUwHhcNMjUwNjAzMDEyNjExWhcNMjUwNjEwMDEyNjExWjAYMRYwFAYD VQQDEw02ODNlNGYzNC1lM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaWuwO8Dc7sprLRCmqePBL4q78kL6/7Ge1NncKBib1mAyyYdW2DOnk8kmW+K 2NKFAvPNvVHil/3spRxKp9WBG6ZoclTotjIEPqNX0sUovToKntM3zSZCG3QWKZ9R 2I2V03sZ8axiqaa7Tw165NiH0Wf+1NWTe8vy48GUSgbF6P4EgbS6wuHETN8r8kl1 ghiRG9F3M4jGCu9qt03GqaCiELfmTt4A3vFZMjtmgVHUWJk7a1YVtHr3kvg1qPmO +tfUAOSSOcw4lrVNOyMuIpPoAXaSGJCERvsFCGsmQGZRtFblgolehvSM/c/i/88o 8dsDQgSenwXhXI4E0BKIgWi92QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNsK6hl 3I6ygq7rog7Ntn4IyY7kMB8GA1UdIwQYMBaAFCJvconU43/s4iYMZNO8unrAMVp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CMTYxMzExOENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYtemlKZ3hrMDd5NmVzQXhX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ltOXlpZFRqZi16aUpneGswN3k2ZXNBeFduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzI2OS9CMTYxMzExOENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYt emlKZ3hrMDd5NmVzQXhXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM3FDz/tSmsxOkq57nQxvuSeBGX3QHwbltihZYnOV6m4TQdBhKSAug LdqjiaKDxpkp+siMsh6MxBXSrIQrG3gv8yptDnCiIpoEkeyUUNpiYPUFqGWCH0xr PuXF3p+50gPdfMuHbIXE+bqKp8snaxqZub3Neh4Ec/GFaSWJNT6gHuy5e1WAkXVH vX1eabGPVlAi56sY39ca3h4ujlwis4jcyV4wnXZv0RL4wYwRkyNwrJFLRFY9FPkK cCdNC+rSTx9CVkfrRtqTDioXaA8h1qxw3z2yZHHyBqwNYNa9pFHOwjp9wiUZTXqf 0WyHlbuQcwd1d/QTFsDIHSgjdVLHBFVi -----END CERTIFICATE-----Generated at Tue Jun 3 23:46:01 2025 by rpki-client