$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: ksTT/lODZs8qGm85+DEHE+CFe0F9C5Brw+NBFaGlXLg= Subject key identifier: FE:24:0D:8F:7A:A5:41:22:9D:62:57:BF:5D:14:EC:FE:A5:29:41:AF Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 0354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 0342 Signing time: Sat 31 May 2025 01:14:14 +0000 Manifest this update: Sat 31 May 2025 01:14:14 +0000 Manifest next update: Sat 07 Jun 2025 01:14:14 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: qHQrZipofrZAHETFMS+2Boj0QWCOWyHYu3kB8iqxFgg=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: May 31 01:14:14 2025 GMT Not After : Jun 7 01:14:14 2025 GMT Subject: CN=683a57e6-2dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:26:26:be:79:a6:5b:c3:ca:ca:4d:27:6a: 94:56:d6:b5:dd:a1:1b:fe:a3:a5:f9:af:06:db:06: 0b:b8:14:31:c9:06:6c:af:29:8d:dc:8f:38:3b:cc: b8:8e:97:76:74:8d:3d:cb:32:25:ef:e6:a6:1c:45: e0:03:b4:08:e4:ad:1e:e5:68:da:9c:16:98:92:2c: 0a:24:d5:eb:15:50:50:f4:ff:af:0d:6e:88:b9:cd: 84:4c:28:d3:f9:31:6c:71:58:51:f3:d5:2d:62:c0: dd:36:26:b1:72:45:97:48:52:08:5e:0e:aa:96:42: a9:63:ce:6f:5c:ce:3f:cf:c1:c8:61:4b:ed:ce:16: a0:2e:a1:5c:39:e1:2a:30:66:9f:98:f9:43:25:35: ce:18:13:18:ab:74:c6:21:0d:4e:ef:c3:8c:f1:12: e4:ca:22:f2:da:59:dd:52:a5:ca:21:bf:b2:af:bf: 7a:c5:f3:64:0f:95:30:f6:64:40:95:f4:9c:33:d4: 36:b6:0a:65:8d:9a:c6:11:7a:c0:19:18:c1:68:dc: 15:11:25:bb:ec:8f:ea:f1:48:e6:56:9c:47:42:37: 9e:bb:81:9f:3c:2f:77:29:96:d9:50:54:08:81:b8: 10:17:cd:50:20:7e:82:b5:f1:ac:fe:7f:56:10:e3: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:24:0D:8F:7A:A5:41:22:9D:62:57:BF:5D:14:EC:FE:A5:29:41:AF X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:33:d9:a5:da:72:eb:76:b9:03:94:d7:3c:8e:00:27:2a:3d: e8:80:3d:38:7b:37:f1:7c:31:2e:11:fd:e6:57:1c:cf:40:40: 38:d2:28:e1:ad:c4:5e:58:2b:5c:f3:0a:26:47:d2:23:ae:a2: 08:a4:76:cb:8c:3b:48:0e:48:6c:bd:6a:25:54:3c:01:20:f0: b3:c2:41:d7:a7:d8:eb:3a:b5:c4:d2:1e:cf:61:f2:c2:c5:29: cd:0d:bd:9b:e3:d0:59:81:bb:23:d9:f9:74:37:12:0c:88:be: 1f:1e:01:a4:02:96:7d:86:43:33:d5:f2:0b:61:c3:8d:7a:3b: 3d:36:71:64:a4:d2:b5:71:33:fd:8b:90:b2:d4:00:2d:71:c4: f4:61:ad:6f:32:8b:0b:5b:bd:82:63:17:0d:a8:f7:18:e6:c9: e0:45:1b:24:38:99:69:68:d1:b7:77:9e:28:77:c2:1e:fa:27: aa:ba:a3:0b:2c:09:e5:46:7d:2e:f7:ea:24:a7:5d:b6:12:7b: 98:bc:a0:d9:21:50:ba:8e:05:6b:70:b3:82:3f:7e:df:a7:1c: 22:59:19:8c:87:09:63:1b:08:75:40:96:34:20:8a:97:69:65: 34:e4:6c:a2:06:7a:61:5c:04:d8:d5:8c:98:ac:0e:7e:5d:c4: dd:69:cc:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwNTMxMDExNDE0WhcNMjUwNjA3MDExNDE0WjAYMRYwFAYD VQQDEw02ODNhNTdlNi0yZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyEmJr55plvDyspNJ2qUVta13aEb/qOl+a8G2wYLuBQxyQZsrymN3I84O8y4 jpd2dI09yzIl7+amHEXgA7QI5K0e5WjanBaYkiwKJNXrFVBQ9P+vDW6Iuc2ETCjT +TFscVhR89UtYsDdNiaxckWXSFIIXg6qlkKpY85vXM4/z8HIYUvtzhagLqFcOeEq MGafmPlDJTXOGBMYq3TGIQ1O78OM8RLkyiLy2lndUqXKIb+yr796xfNkD5Uw9mRA lfScM9Q2tgpljZrGEXrAGRjBaNwVESW77I/q8UjmVpxHQjeeu4GfPC93KZbZUFQI gbgQF81QIH6CtfGs/n9WEOM9IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4kDY96 pUEinWJXv10U7P6lKUGvMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACM9ml2nLrdrkDlNc8jgAnKj3ogD04ezfxfDEuEf3mVxzPQEA40ijh rcReWCtc8womR9IjrqIIpHbLjDtIDkhsvWolVDwBIPCzwkHXp9jrOrXE0h7PYfLC xSnNDb2b49BZgbsj2fl0NxIMiL4fHgGkApZ9hkMz1fILYcONejs9NnFkpNK1cTP9 i5Cy1AAtccT0Ya1vMosLW72CYxcNqPcY5sngRRskOJlpaNG3d54od8Ie+iequqML LAnlRn0u9+okp122EnuYvKDZIVC6jgVrcLOCP37fpxwiWRmMhwljGwh1QJY0IIqX aWU05GyiBnphXATY1YyYrA5+XcTdacxw -----END CERTIFICATE-----Generated at Sat May 31 17:22:07 2025 by rpki-client