$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: FEmN4SfhY/ciLvXSHisNzlN7IwEPtmvomUTP0oHM9Ws= Subject key identifier: 4D:99:39:47:1C:8E:B4:7C:AB:BD:73:2E:43:A5:F7:D3:12:10:26:86 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 0146 Signing time: Sat 31 May 2025 03:54:50 +0000 Manifest this update: Sat 31 May 2025 03:54:49 +0000 Manifest next update: Sat 07 Jun 2025 03:54:49 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: suOjzSfcM2Ih90gx7LoJkEK+AXRKQMMrsLjc4cJYm7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: May 31 03:54:49 2025 GMT Not After : Jun 7 03:54:49 2025 GMT Subject: CN=683a7d8a-2f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:95:02:b1:6b:b2:d5:8f:b0:28:09:1c:49: a0:fc:eb:48:7b:35:f4:8f:1b:ae:51:66:93:e3:b7: 0b:af:59:5c:d8:e9:99:56:d1:aa:a6:a8:53:65:17: a2:19:59:60:44:98:b6:88:dc:ae:fd:5e:9f:63:03: 78:86:43:70:91:4f:a0:bc:0a:d8:7d:28:a3:e3:18: d1:ad:75:72:5d:a7:d7:fc:be:71:b8:93:49:e0:ef: 15:7a:37:ff:9f:35:6c:a6:77:9b:1c:c8:c4:1c:9d: b8:1a:71:c1:ba:e6:54:7a:9f:6c:11:df:f0:bc:93: 7a:45:b4:c5:aa:16:d3:4c:99:fd:ab:48:b9:1d:dc: 20:e4:19:4b:8a:84:13:c5:78:ed:52:61:01:79:fc: 9d:d3:e1:74:95:43:68:73:2e:00:69:33:dc:0b:61: dd:07:9f:83:34:66:0c:5f:4a:36:5e:5f:2b:50:00: 61:51:34:ee:58:f4:bc:f0:b6:9a:3d:a9:53:42:84: f0:ed:99:a8:83:a4:7b:95:b5:df:cb:1c:b2:5a:36: fb:cf:23:55:44:18:de:ec:85:6e:43:e1:e9:57:d9: 55:07:d8:06:a2:47:ae:ae:be:f1:89:d1:05:f6:03: b5:ef:2e:95:0d:8c:e4:b7:cf:65:1f:93:96:1e:d2: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:99:39:47:1C:8E:B4:7C:AB:BD:73:2E:43:A5:F7:D3:12:10:26:86 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:f3:25:4a:1c:ec:72:cf:ba:8c:cd:4b:ea:40:78:f6:39:dc: ab:3a:25:f9:c9:9d:c7:89:cf:90:3f:2e:51:4a:b3:e2:d6:46: 18:4e:ad:93:a7:88:85:95:c4:60:f6:9a:10:94:1b:d6:62:85: 41:eb:bd:11:92:06:b1:fc:18:a0:28:fe:df:0b:b2:ef:08:20: f6:fa:24:db:93:d7:02:80:25:57:19:ef:e8:73:50:f5:1c:d5: f8:2f:6a:5c:2e:69:39:9a:4e:24:d6:0e:ba:7a:22:94:16:c4: 6f:87:0e:c5:af:2f:28:bb:ee:ec:3e:40:bf:c1:5b:89:0f:2b: f7:69:f5:10:d0:34:57:ba:a7:0c:59:b7:56:1d:81:e7:b9:a8: 10:88:65:26:b7:05:2c:01:42:f0:6c:a6:f2:26:e3:71:dd:a7: a2:21:46:78:d3:8e:81:bd:38:8e:f5:d2:08:55:38:b9:c8:99: 0b:0c:c0:1e:4a:5a:e4:ad:d1:0a:43:ea:25:06:70:6b:56:e6: 70:3e:2e:e4:14:c2:55:86:66:22:ea:61:01:49:db:47:24:58: 17:3a:04:4a:a9:db:bd:96:60:fc:d5:3d:74:f8:6b:e8:29:26: 25:d5:1d:2a:c9:b9:4b:59:bb:d9:79:81:25:12:47:cf:c1:98: 65:44:50:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjUwNTMxMDM1NDQ5WhcNMjUwNjA3MDM1NDQ5WjAYMRYwFAYD VQQDEw02ODNhN2Q4YS0yZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXeVArFrstWPsCgJHEmg/OtIezX0jxuuUWaT47cLr1lc2OmZVtGqpqhTZRei GVlgRJi2iNyu/V6fYwN4hkNwkU+gvArYfSij4xjRrXVyXafX/L5xuJNJ4O8Vejf/ nzVspnebHMjEHJ24GnHBuuZUep9sEd/wvJN6RbTFqhbTTJn9q0i5Hdwg5BlLioQT xXjtUmEBefyd0+F0lUNocy4AaTPcC2HdB5+DNGYMX0o2Xl8rUABhUTTuWPS88Laa PalTQoTw7Zmog6R7lbXfyxyyWjb7zyNVRBje7IVuQ+HpV9lVB9gGokeurr7xidEF 9gO17y6VDYzkt89lH5OWHtLmbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2ZOUcc jrR8q71zLkOl99MSECaGMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZ8yVKHOxyz7qMzUvqQHj2OdyrOiX5yZ3Hic+QPy5RSrPi1kYYTq2T p4iFlcRg9poQlBvWYoVB670Rkgax/BigKP7fC7LvCCD2+iTbk9cCgCVXGe/oc1D1 HNX4L2pcLmk5mk4k1g66eiKUFsRvhw7Fry8ou+7sPkC/wVuJDyv3afUQ0DRXuqcM WbdWHYHnuagQiGUmtwUsAULwbKbyJuNx3aeiIUZ4046BvTiO9dIIVTi5yJkLDMAe SlrkrdEKQ+olBnBrVuZwPi7kFMJVhmYi6mEBSdtHJFgXOgRKqdu9lmD81T10+Gvo KSYl1R0qyblLWbvZeYElEkfPwZhlRFB6 -----END CERTIFICATE-----Generated at Sat May 31 17:20:35 2025 by rpki-client