$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: Kxfioy3RmKhW5CnP1dUA2EFWu9vHLF1UGLOncZHcLu0= Subject key identifier: 30:0D:4D:95:3C:01:AB:2D:5B:DD:6C:9A:9C:96:B8:86:1C:7B:C3:E7 Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: 8D Signing time: Tue 03 Jun 2025 06:18:30 +0000 Manifest this update: Tue 03 Jun 2025 06:18:30 +0000 Manifest next update: Tue 10 Jun 2025 06:18:30 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: tC3E4x4EHOTWijLvYgRr7lAQkzM+iXMHcAKHvYnbIpk=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Jun 3 06:18:30 2025 GMT Not After : Jun 10 06:18:30 2025 GMT Subject: CN=683e93b6-8949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:ed:0a:cf:dc:3d:94:ce:d9:91:bf:cb:2a: ad:da:25:87:24:ef:c9:38:3b:68:79:83:b6:70:7f: 7b:7c:c5:bd:1e:1d:bb:cc:e2:36:f8:0d:82:aa:55: 69:22:08:96:0d:1c:0c:e7:7e:19:d5:b2:89:25:df: f6:c6:c5:6b:7f:24:4a:bf:12:86:96:71:0b:ff:0b: 98:a0:c7:7c:ca:bf:fc:e0:78:a9:25:2a:a6:7b:78: da:19:76:f6:ff:6e:50:13:0d:23:3e:6b:14:da:73: 73:91:90:28:39:81:a8:8b:c8:77:e6:0b:e7:63:9a: 2f:37:41:73:72:ce:ea:73:cc:fc:88:9f:2e:1f:68: 29:be:85:1e:56:21:98:92:64:84:b1:b2:54:6d:9a: 04:55:0a:da:d1:ec:73:92:62:87:fb:4d:4d:0f:91: 49:8c:7b:f7:ab:70:4d:7f:15:38:9c:ad:6f:d7:5b: 8f:7f:0f:46:98:bb:e8:67:94:ce:2c:cf:67:4b:40: 69:66:e9:70:55:40:d6:14:a4:d9:31:3a:c9:6d:42: 7c:2b:26:bd:3f:2e:b4:6a:f8:dc:3e:ba:0b:46:5d: f2:f4:54:98:ed:54:20:46:61:e9:03:7b:40:83:4b: 42:73:50:87:a4:62:10:c3:7f:df:ea:5d:96:aa:69: 9a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0D:4D:95:3C:01:AB:2D:5B:DD:6C:9A:9C:96:B8:86:1C:7B:C3:E7 X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e5:50:ed:a2:e4:bc:aa:9a:99:88:76:54:ea:ad:e5:d1:89: af:ee:ed:49:bb:69:d0:ff:84:e4:5c:c6:0d:92:91:0f:b3:62: c1:2c:14:74:dd:74:43:23:bd:75:d6:92:39:fa:98:11:62:29: 8f:dd:63:83:1d:1c:39:fb:35:35:95:87:e7:72:52:73:05:80: fc:8a:6e:c2:9b:4b:76:11:29:27:e8:85:0c:6e:79:ab:ac:76: 79:9b:b6:53:b6:c5:13:fc:92:77:d9:fb:c6:c4:55:41:66:87: b2:8e:ac:e2:4c:52:85:8a:89:4d:17:81:53:42:fb:c4:42:98: a6:50:fe:84:94:07:f6:61:2a:85:c9:57:a4:f5:ce:54:2d:e0: 1c:42:d6:1f:46:9f:5f:c1:85:e0:f9:6c:be:ba:9e:0c:5f:06: a6:39:43:36:72:99:23:cd:af:46:00:ae:65:3d:b7:29:c3:6f: f5:6a:0a:23:61:99:90:81:a8:39:2d:eb:13:da:6a:bd:80:37: 7a:f4:20:b3:81:a3:b2:a1:90:2e:2b:f1:78:28:aa:c9:54:87: 2b:0a:7e:4e:9e:f0:41:c1:61:43:12:ca:74:4e:03:c2:46:cb: 0b:64:e9:ef:0c:c2:5b:b2:43:e9:ff:ef:ed:10:61:ef:65:f5: b9:fa:e9:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDIyNTlGODcwOTZFNDBBREIzQzg0MTgwRTI4QjU2QzNF ODgyMkY2NTEwHhcNMjUwNjAzMDYxODMwWhcNMjUwNjEwMDYxODMwWjAYMRYwFAYD VQQDEw02ODNlOTNiNi04OTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIPtCs/cPZTO2ZG/yyqt2iWHJO/JODtoeYO2cH97fMW9Hh27zOI2+A2CqlVp IgiWDRwM534Z1bKJJd/2xsVrfyRKvxKGlnEL/wuYoMd8yr/84HipJSqme3jaGXb2 /25QEw0jPmsU2nNzkZAoOYGoi8h35gvnY5ovN0Fzcs7qc8z8iJ8uH2gpvoUeViGY kmSEsbJUbZoEVQra0exzkmKH+01ND5FJjHv3q3BNfxU4nK1v11uPfw9GmLvoZ5TO LM9nS0BpZulwVUDWFKTZMTrJbUJ8Kya9Py60avjcProLRl3y9FSY7VQgRmHpA3tA g0tCc1CHpGIQw3/f6l2WqmmaKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDANTZU8 AastW91smpyWuIYce8PnMB8GA1UdIwQYMBaAFCJZ+HCW5ArbPIQYDii1bD6IIvZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS8zQTlDOEE1NjZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0czhoQmdPS0xWc1BvZ2k5 bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTlsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS8zQTlDOEE1NjZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0 czhoQmdPS0xWc1BvZ2k5bEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH5VDtouS8qpqZiHZU6q3l0Ymv7u1Ju2nQ/4TkXMYNkpEPs2LBLBR0 3XRDI7111pI5+pgRYimP3WODHRw5+zU1lYfnclJzBYD8im7Cm0t2ESkn6IUMbnmr rHZ5m7ZTtsUT/JJ32fvGxFVBZoeyjqziTFKFiolNF4FTQvvEQpimUP6ElAf2YSqF yVek9c5ULeAcQtYfRp9fwYXg+Wy+up4MXwamOUM2cpkjza9GAK5lPbcpw2/1agoj YZmQgag5LesT2mq9gDd69CCzgaOyoZAuK/F4KKrJVIcrCn5OnvBBwWFDEsp0TgPC RssLZOnvDMJbskPp/+/tEGHvZfW5+unP -----END CERTIFICATE-----Generated at Wed Jun 4 00:06:50 2025 by rpki-client