$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: J08NPTjnPknChr5Uw/y2MDjP5+3eeZpjzo4T99fZdcY= Subject key identifier: 4D:D0:67:D6:55:79:25:48:D1:3B:F2:82:2E:17:93:95:72:E9:CE:D1 Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: F0 Signing time: Sat 31 May 2025 04:56:09 +0000 Manifest this update: Sat 31 May 2025 04:56:08 +0000 Manifest next update: Sat 07 Jun 2025 04:56:08 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: ZGs0gc0RdjUxisRUKHNx3hbojxTAcCZB/VBCRoxDKWQ=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: Ed+WGj4YoSK8RoZY5/E6txkQiwmhNLhgRfvyu7U8cGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: May 31 04:56:08 2025 GMT Not After : Jun 7 04:56:08 2025 GMT Subject: CN=683a8be8-98a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:d4:78:93:ff:38:20:c8:6c:58:92:a8:82: 94:ad:26:0b:a1:cb:03:38:2e:ac:6a:86:c8:26:cf: 40:c3:c9:f8:7d:db:64:eb:2e:3f:70:32:b7:a0:27: 51:c6:1f:b2:50:60:97:d2:0f:cd:80:12:b4:a8:55: be:53:d2:2b:60:fd:ab:66:0b:00:e6:5e:6c:4f:c2: ac:6d:a4:52:3d:41:e3:e5:87:f6:e0:bb:a0:a2:c9: ff:5b:87:58:be:f8:f4:d8:6a:96:ab:be:45:9d:0a: 65:04:3d:37:06:ff:a5:9d:ac:35:5f:fd:81:7a:8f: a8:1c:df:b7:3a:93:f7:b9:52:14:3e:a2:1d:85:05: f2:a3:72:60:50:a9:7a:1f:7f:42:a8:86:6d:ca:78: c2:fc:b6:0d:ce:e0:65:69:56:f3:f5:6d:84:50:fd: 96:b4:d2:e0:29:6e:f5:87:cb:fd:aa:f5:be:1d:b9: a3:c4:13:60:36:1f:96:83:1b:51:bd:04:68:72:30: a1:4e:a0:22:ce:95:6f:3e:d2:a7:53:7a:72:56:af: d4:4a:95:9c:30:ce:bb:cd:0b:15:b1:98:19:e0:ee: 9a:63:62:00:98:15:e7:1e:cb:a4:3d:33:ca:bc:76: 09:f1:d0:49:53:59:e9:c2:5f:77:b5:8c:78:30:26: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D0:67:D6:55:79:25:48:D1:3B:F2:82:2E:17:93:95:72:E9:CE:D1 X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:35:3d:7a:12:a8:12:88:10:07:13:47:41:c2:f3:2c:ef:72: 0c:8f:fb:ec:c8:a0:54:26:71:f4:3a:f4:32:ff:77:71:75:b4: b7:67:a4:3c:11:60:f3:34:b4:09:80:90:f1:a0:7f:3d:d3:56: fb:b1:61:dd:4b:c3:76:e6:42:fb:06:b4:69:d5:de:05:5d:12: f0:60:cb:64:f1:b6:4a:aa:29:f1:80:ad:c7:23:f2:65:90:e0: 81:99:12:2e:26:1e:5c:83:c5:96:e4:ff:d9:89:f7:c4:ee:3a: 3a:b3:24:2a:fd:b5:d4:bc:6b:c1:fa:35:e9:05:a3:bf:0b:05: 84:3d:8c:a1:67:30:6d:09:6c:33:ee:26:3e:6c:5b:e5:20:3f: fb:cf:71:8d:a6:be:85:d4:6d:12:ca:3f:6c:fb:61:43:bf:db: b5:7b:3c:cb:b7:dc:ef:c1:c3:a2:ba:1d:5a:2e:da:1b:22:53: ac:32:ff:d1:7d:ec:d4:4a:3b:d8:1d:38:e4:34:ab:23:81:94: 2e:c8:23:99:5e:84:e9:ef:f9:e0:af:a6:59:b5:41:ce:89:48: 39:27:af:0c:a2:cc:35:7b:47:00:68:df:5b:46:6e:7f:e4:eb: 05:2c:a7:57:0c:b4:6d:d9:ed:79:97:53:6f:29:7d:94:5a:c8: 92:35:c7:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw QkMxNjgxMEMwHhcNMjUwNTMxMDQ1NjA4WhcNMjUwNjA3MDQ1NjA4WjAYMRYwFAYD VQQDEw02ODNhOGJlOC05OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2LUeJP/OCDIbFiSqIKUrSYLocsDOC6saobIJs9Aw8n4fdtk6y4/cDK3oCdR xh+yUGCX0g/NgBK0qFW+U9IrYP2rZgsA5l5sT8KsbaRSPUHj5Yf24Lugosn/W4dY vvj02GqWq75FnQplBD03Bv+lnaw1X/2Beo+oHN+3OpP3uVIUPqIdhQXyo3JgUKl6 H39CqIZtynjC/LYNzuBlaVbz9W2EUP2WtNLgKW71h8v9qvW+HbmjxBNgNh+WgxtR vQRocjChTqAizpVvPtKnU3pyVq/USpWcMM67zQsVsZgZ4O6aY2IAmBXnHsukPTPK vHYJ8dBJU1npwl93tYx4MCaAXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3QZ9ZV eSVI0Tvygi4Xk5Vy6c7RMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1 bTRlYlRjdXZCQ2tMd1dnUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnNT16EqgSiBAHE0dBwvMs73IMj/vsyKBUJnH0OvQy/3dxdbS3Z6Q8 EWDzNLQJgJDxoH8901b7sWHdS8N25kL7BrRp1d4FXRLwYMtk8bZKqinxgK3HI/Jl kOCBmRIuJh5cg8WW5P/ZiffE7jo6syQq/bXUvGvB+jXpBaO/CwWEPYyhZzBtCWwz 7iY+bFvlID/7z3GNpr6F1G0Syj9s+2FDv9u1ezzLt9zvwcOiuh1aLtobIlOsMv/R fezUSjvYHTjkNKsjgZQuyCOZXoTp7/ngr6ZZtUHOiUg5J68Mosw1e0cAaN9bRm5/ 5OsFLKdXDLRt2e15l1NvKX2UWsiSNcc+ -----END CERTIFICATE-----Generated at Sat May 31 16:31:28 2025 by rpki-client