$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: Ja9MjmseMJiCSx1fUwOeH9+oTiz6hgwrcltAawCf2LQ= Subject key identifier: 79:89:A0:30:19:86:48:7D:21:D9:7F:15:9A:11:4D:35:99:D9:39:EA Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 0101 Signing time: Sat 31 May 2025 04:47:48 +0000 Manifest this update: Sat 31 May 2025 04:47:48 +0000 Manifest next update: Sat 07 Jun 2025 04:47:48 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: 3xr2Tso72MxaZHVI+orCniq0320YCCNdF1x+JVQ5PPg=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: May 31 04:47:48 2025 GMT Not After : Jun 7 04:47:48 2025 GMT Subject: CN=683a89f4-4bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:b4:9d:46:fa:87:35:95:31:a2:1b:47:77: 9e:94:1b:3d:2b:4d:66:35:b3:24:fa:06:11:df:7b: 13:66:e7:75:fa:12:b9:26:24:6e:1e:88:6b:29:c2: c8:2e:da:51:a3:26:70:6d:f3:f5:4f:27:41:64:51: 1e:97:bc:49:2c:8b:9e:06:ba:e5:ee:09:ac:2d:58: b5:52:26:ab:9a:45:02:0a:25:f4:ae:fd:cb:45:1b: e2:9f:a8:cd:e1:a5:61:c7:14:c4:19:af:5c:d9:48: d9:e8:d9:57:ba:73:99:b1:17:15:ee:31:7a:c3:3c: 36:40:3f:20:b2:f8:70:be:0b:f7:6f:87:1b:fd:25: 46:de:a3:2a:b7:af:fc:e6:c4:47:b6:20:bd:12:71: d0:5b:3b:0e:51:24:e9:5e:ca:99:ef:aa:07:b3:59: 6c:18:9c:f8:85:5a:61:db:53:9a:51:e6:7e:11:fa: 3c:3f:71:6e:82:a8:94:72:f0:92:62:ec:ca:7a:7a: 5c:74:bd:e5:fa:0b:d9:35:2a:56:fa:ef:1d:55:53: 08:cc:60:1f:26:90:67:9a:6a:ed:aa:c3:67:b9:70: 4a:63:e9:d4:be:26:db:e9:e4:44:06:13:b7:24:c7: 57:0c:a5:96:0c:ae:36:e2:cf:32:fd:bd:db:57:9e: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:89:A0:30:19:86:48:7D:21:D9:7F:15:9A:11:4D:35:99:D9:39:EA X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9e:34:3f:45:fa:24:11:7a:93:0f:85:65:f6:b7:15:20:70: 85:b4:d1:0b:af:f8:13:2a:4e:e4:23:4a:3a:11:f5:8a:2b:7c: ec:0e:46:72:4b:94:64:66:41:26:4f:e6:ef:18:b6:80:b8:dd: 17:ab:eb:48:9f:a4:29:2e:d6:b8:a2:8d:e5:7b:cb:cf:f5:47: e1:05:b2:61:05:cc:c5:ec:11:32:ee:ea:db:b6:c5:27:93:d1: c5:d4:fa:84:e1:da:ae:8e:dd:b9:07:3b:14:90:3f:ae:b5:68: 40:ae:b9:a1:07:ee:72:14:65:90:b2:cd:15:d7:e1:a2:86:bb: 06:44:5d:79:01:a5:be:61:e2:2a:3e:55:5d:ca:7e:45:e3:01: 76:b7:72:22:94:d3:3f:48:78:03:ff:c0:6e:bc:6d:4a:4b:ba: b0:d2:dd:1c:e6:b7:49:80:fd:d9:62:65:35:73:0d:dd:23:9e: 08:d7:17:82:aa:c1:fe:57:40:2d:54:5f:0f:5a:74:f7:23:a4: ee:31:80:13:53:ef:ca:07:9a:71:13:40:c8:8f:02:2b:a7:5e: 81:84:69:e8:07:c1:ef:71:27:24:0c:dd:5f:73:ef:27:2f:cd: 86:3f:b7:af:c8:a2:72:48:ee:bb:c4:22:4c:ad:21:0c:57:a5: 3e:da:a6:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjUwNTMxMDQ0NzQ4WhcNMjUwNjA3MDQ0NzQ4WjAYMRYwFAYD VQQDEw02ODNhODlmNC00YmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKG0nUb6hzWVMaIbR3eelBs9K01mNbMk+gYR33sTZud1+hK5JiRuHohrKcLI LtpRoyZwbfP1TydBZFEel7xJLIueBrrl7gmsLVi1UiarmkUCCiX0rv3LRRvin6jN 4aVhxxTEGa9c2UjZ6NlXunOZsRcV7jF6wzw2QD8gsvhwvgv3b4cb/SVG3qMqt6/8 5sRHtiC9EnHQWzsOUSTpXsqZ76oHs1lsGJz4hVph21OaUeZ+Efo8P3FugqiUcvCS YuzKenpcdL3l+gvZNSpW+u8dVVMIzGAfJpBnmmrtqsNnuXBKY+nUvibb6eREBhO3 JMdXDKWWDK424s8y/b3bV57sXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmJoDAZ hkh9Idl/FZoRTTWZ2TnqMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAonjQ/RfokEXqTD4Vl9rcVIHCFtNELr/gTKk7kI0o6EfWKK3zsDkZy S5RkZkEmT+bvGLaAuN0Xq+tIn6QpLta4oo3le8vP9UfhBbJhBczF7BEy7urbtsUn k9HF1PqE4dqujt25BzsUkD+utWhArrmhB+5yFGWQss0V1+GihrsGRF15AaW+YeIq PlVdyn5F4wF2t3IilNM/SHgD/8BuvG1KS7qw0t0c5rdJgP3ZYmU1cw3dI54I1xeC qsH+V0AtVF8PWnT3I6TuMYATU+/KB5pxE0DIjwIrp16BhGnoB8HvcSckDN1fc+8n L82GP7evyKJySO67xCJMrSEMV6U+2qZB -----END CERTIFICATE-----Generated at Sat May 31 17:30:17 2025 by rpki-client