$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: SX4A5oVnmENO+cnuLHqzQXbisfhvV8euhRBTfVCagq0= Subject key identifier: 02:62:31:B8:00:37:D1:53:9A:A8:A9:99:A3:A1:0B:B1:80:67:C4:E7 Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 04EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 04E9 Signing time: Fri 30 May 2025 23:56:22 +0000 Manifest this update: Fri 30 May 2025 23:56:22 +0000 Manifest next update: Fri 06 Jun 2025 23:56:22 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: gdimgjrRiCN4zrcYDIyT1KCXKmruHia6vs7oaQwTWPc=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: May 30 23:56:22 2025 GMT Not After : Jun 6 23:56:22 2025 GMT Subject: CN=683a45a6-3581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:76:f5:4f:07:56:a4:70:69:25:f7:3a:c9: 49:09:6d:7f:7f:e8:83:94:25:4f:a1:e9:d6:db:48: 93:52:1e:07:00:7e:e4:66:c2:cb:5a:b8:dd:d8:49: eb:fb:1c:b2:82:d3:5b:61:bf:af:7d:46:a9:c4:ad: 2c:2c:02:88:fd:c6:b5:bc:6e:92:81:7a:63:ee:6e: d2:12:a1:30:42:fc:40:32:4f:d1:b3:f3:39:b7:0a: 3d:fb:64:01:e6:88:77:a4:8e:10:43:76:86:de:1c: ac:25:a6:99:9b:04:f9:b1:08:4a:63:5e:db:bc:d3: 6d:84:a2:f1:7e:17:56:03:4c:8d:85:a0:a3:5d:58: 86:d8:36:69:06:ae:54:4f:09:a6:4c:df:b0:69:b4: 9a:cd:82:d5:35:ac:a3:15:37:fa:25:02:bd:f4:be: eb:82:28:62:5f:78:36:af:42:29:ab:84:83:20:c2: 84:96:62:39:97:ab:9d:31:5e:9f:d3:1d:4f:77:21: 7f:7c:4b:0d:eb:be:4a:68:40:c0:67:87:5b:00:10: 47:15:b5:04:7b:b6:a6:6c:1f:10:bf:44:30:5f:10: 00:0a:a7:1e:77:a2:b2:b6:24:4a:79:4b:5c:dd:8d: d6:fb:45:90:37:15:87:4a:61:e3:76:22:6a:c8:58: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:62:31:B8:00:37:D1:53:9A:A8:A9:99:A3:A1:0B:B1:80:67:C4:E7 X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7f:78:42:37:07:f7:df:e0:bc:56:e2:25:3a:dc:c4:1a:aa: 3f:c4:de:4b:be:b4:78:1f:ea:fb:2d:3d:3c:61:53:1d:3e:20: 1e:ce:d0:14:14:56:a9:4a:4d:b8:65:2b:d7:19:84:5b:5e:25: 10:d5:cc:1d:23:b6:2c:2b:1e:8a:13:f1:23:8c:60:8d:a6:24: f8:b6:21:71:e8:b1:68:ec:f5:61:86:1f:73:55:e5:2b:50:45: aa:86:ac:1d:21:31:de:fe:c2:f9:d2:e7:aa:28:05:99:15:a4: ee:fd:a0:8a:ac:51:ad:c7:58:64:06:c8:a0:c0:af:2b:0b:e7: f3:4b:63:14:3e:c3:5c:1f:e6:55:6f:6d:a9:59:db:a7:ed:21: f4:98:49:1d:18:1d:23:a5:56:57:5c:34:84:cb:32:dd:21:42: 90:72:40:cc:8a:e3:8e:b0:6d:e0:00:5f:87:a7:6c:53:74:8f: b0:cc:43:55:e7:bb:a7:99:ca:6e:f3:a2:e4:44:28:94:9f:ad: 12:42:24:7d:b7:20:a0:8d:63:49:3b:ea:4b:20:9b:c6:9c:00: 0b:43:73:ae:a7:e9:75:99:a2:3a:f1:c5:6a:0b:59:55:59:bb: 36:7b:78:99:38:cf:e2:d7:3a:21:4e:62:74:f1:3c:68:06:bf: 9c:f8:60:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUwNTMwMjM1NjIyWhcNMjUwNjA2MjM1NjIyWjAYMRYwFAYD VQQDEw02ODNhNDVhNi0zNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueR29U8HVqRwaSX3OslJCW1/f+iDlCVPoenW20iTUh4HAH7kZsLLWrjd2Enr +xyygtNbYb+vfUapxK0sLAKI/ca1vG6SgXpj7m7SEqEwQvxAMk/Rs/M5two9+2QB 5oh3pI4QQ3aG3hysJaaZmwT5sQhKY17bvNNthKLxfhdWA0yNhaCjXViG2DZpBq5U TwmmTN+wabSazYLVNayjFTf6JQK99L7rgihiX3g2r0Ipq4SDIMKElmI5l6udMV6f 0x1PdyF/fEsN675KaEDAZ4dbABBHFbUEe7ambB8Qv0QwXxAACqced6KytiRKeUtc 3Y3W+0WQNxWHSmHjdiJqyFjtAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJiMbgA N9FTmqipmaOhC7GAZ8TnMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrf3hCNwf33+C8VuIlOtzEGqo/xN5LvrR4H+r7LT08YVMdPiAeztAU FFapSk24ZSvXGYRbXiUQ1cwdI7YsKx6KE/EjjGCNpiT4tiFx6LFo7PVhhh9zVeUr UEWqhqwdITHe/sL50ueqKAWZFaTu/aCKrFGtx1hkBsigwK8rC+fzS2MUPsNcH+ZV b22pWdun7SH0mEkdGB0jpVZXXDSEyzLdIUKQckDMiuOOsG3gAF+Hp2xTdI+wzENV 57unmcpu86LkRCiUn60SQiR9tyCgjWNJO+pLIJvGnAALQ3Oup+l1maI68cVqC1lV Wbs2e3iZOM/i1zohTmJ08TxoBr+c+GCD -----END CERTIFICATE-----Generated at Sat May 31 15:53:32 2025 by rpki-client