$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json) Hash identifier: PAEhRi0+6IMq+e9RbfUHNCNzIRYi3E6yAcWq4w7pAlo= Subject key identifier: BE:7D:DC:8D:EB:FB:1D:B9:31:09:36:25:1F:A7:E3:D3:2E:87:E1:B5 Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft Manifest number: 86 Signing time: Sat 15 Feb 2025 07:47:48 +0000 Manifest this update: Sat 15 Feb 2025 07:47:47 +0000 Manifest next update: Sat 22 Feb 2025 07:47:47 +0000 Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: +RSXOdra95QrVKxs48jHVOltJ6u64aMsId8wRrZo6GE=) 2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: TmyUhAAOaU6CYroA57XlncbnofjVXGoZ5jM7LnuMB/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC Validity Not Before: Feb 15 07:47:47 2025 GMT Not After : Feb 22 07:47:47 2025 GMT Subject: CN=67b046a4-b82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:ab:b6:84:1c:0c:b1:6b:ac:ee:5a:29:1d: 5e:c8:d2:fd:7e:52:42:51:04:dc:af:51:8d:65:0e: 74:8f:41:52:fb:cc:5c:4e:c4:ba:70:34:a1:ae:b9: d1:27:24:00:ec:9e:48:ca:7a:8b:5b:af:2b:1a:45: 4e:59:7f:62:de:ca:45:82:06:28:b2:98:ea:33:db: 3d:26:39:a5:29:e6:c0:bf:d4:51:f8:6f:ef:50:b0: 84:f0:b0:6a:b5:e6:d2:29:42:85:70:92:c7:d9:bd: 0d:c6:2d:51:2f:49:22:1d:6c:bd:6c:f9:3b:ce:ee: 3c:bf:0a:6d:d7:f2:3c:0c:c8:db:ca:85:2c:8f:ed: a2:38:35:68:90:8a:c1:b2:57:dd:14:07:a0:14:ec: 0a:ee:e5:7e:46:61:31:6d:d0:5b:6c:34:3f:45:ac: 44:ba:7f:4f:86:bf:1c:2e:c7:63:cc:2b:3c:50:b8: dc:b6:fd:ea:f8:a8:e2:bb:78:38:a6:0f:f2:26:2c: 46:d8:6d:8d:b2:10:e7:e0:b3:1d:32:15:17:24:c5: bc:c1:3b:b3:6f:76:42:e5:c7:e2:88:07:7b:b5:78: 38:a8:20:5c:98:04:c3:66:2a:22:0c:69:2c:4e:c7: cf:bf:d3:69:e1:51:d2:f1:5f:74:df:43:d8:ee:86: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7D:DC:8D:EB:FB:1D:B9:31:09:36:25:1F:A7:E3:D3:2E:87:E1:B5 X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:01:58:16:ee:e6:91:d5:1d:ac:7e:66:d5:9c:5d:5f:0e:73: 44:83:6d:fe:e7:9d:ac:a3:42:02:28:fc:00:07:8a:c6:e1:99: 2f:65:05:03:3f:b0:d9:4a:b7:11:5c:af:2a:31:35:35:af:ae: 15:a2:e4:27:62:5c:71:c2:2e:b8:84:22:b3:1a:ce:ea:f8:8f: 8c:23:9d:3e:26:d0:24:e3:07:f5:cd:08:86:d2:ce:99:a1:05: 63:d1:8e:90:f9:09:56:da:17:ed:48:5b:94:05:34:e7:6e:72: c9:ab:97:a6:72:d3:ea:4b:21:3f:fd:cc:ea:1e:24:8f:0f:e2: e2:0d:88:d9:1f:f1:bd:ac:9a:17:7d:35:12:71:51:dc:8f:8f: f4:14:76:c4:dd:a8:0d:04:e9:6f:c9:39:96:cc:8c:54:ea:c4: 1d:1d:2c:5c:d3:41:93:62:a7:a4:1b:95:03:b8:56:6c:bd:63: ac:3a:7a:29:18:8c:6f:86:24:42:a8:a1:1a:4b:86:02:13:35: 99:95:94:3a:18:63:27:a8:03:8b:69:b5:04:84:bb:e9:3e:fd: a3:2b:2e:3b:d7:5f:e9:f5:c0:ac:0b:72:dc:e5:49:12:ab:58: 59:c1:96:70:92:45:4c:95:46:e0:9c:8e:54:d6:34:96:22:3d: 80:76:2e:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG OTQ2OEQ5NUEwHhcNMjUwMjE1MDc0NzQ3WhcNMjUwMjIyMDc0NzQ3WjAYMRYwFAYD VQQDEw02N2IwNDZhNC1iODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lCrtoQcDLFrrO5aKR1eyNL9flJCUQTcr1GNZQ50j0FS+8xcTsS6cDShrrnR JyQA7J5IynqLW68rGkVOWX9i3spFggYospjqM9s9JjmlKebAv9RR+G/vULCE8LBq tebSKUKFcJLH2b0Nxi1RL0kiHWy9bPk7zu48vwpt1/I8DMjbyoUsj+2iODVokIrB slfdFAegFOwK7uV+RmExbdBbbDQ/RaxEun9Phr8cLsdjzCs8ULjctv3q+Kjiu3g4 pg/yJixG2G2NshDn4LMdMhUXJMW8wTuzb3ZC5cfiiAd7tXg4qCBcmATDZioiDGks TsfPv9Np4VHS8V9030PY7oZwHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL593I3r +x25MQk2JR+n49Muh+G1MB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy85OUM3NDg4ODI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0Fj cmNNNUU0UDhxVzM1Um8yVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKAVgW7uaR1R2sfmbVnF1fDnNEg23+552so0ICKPwAB4rG4ZkvZQUD P7DZSrcRXK8qMTU1r64VouQnYlxxwi64hCKzGs7q+I+MI50+JtAk4wf1zQiG0s6Z oQVj0Y6Q+QlW2hftSFuUBTTnbnLJq5emctPqSyE//czqHiSPD+LiDYjZH/G9rJoX fTUScVHcj4/0FHbE3agNBOlvyTmWzIxU6sQdHSxc00GTYqekG5UDuFZsvWOsOnop GIxvhiRCqKEaS4YCEzWZlZQ6GGMnqAOLabUEhLvpPv2jKy4711/p9cCsC3Lc5UkS q1hZwZZwkkVMlUbgnI5U1jSWIj2Adi6T -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:05 2025 by rpki-client