$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json) Hash identifier: stMPoZ+1P63VF2i+EoHIvqNxsiwVkvES6WMZhfpi9EM= Subject key identifier: 78:29:8D:01:C9:56:B9:8A:EC:FB:AC:07:1D:09:B1:DF:4C:01:78:3C Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft Manifest number: 93 Signing time: Thu 13 Mar 2025 04:31:30 +0000 Manifest this update: Thu 13 Mar 2025 04:31:29 +0000 Manifest next update: Thu 20 Mar 2025 04:31:29 +0000 Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: y6eg6TwYZBVh7fMzQWnUO4idtZxGS70dpptzZeCo86w=) 2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: TmyUhAAOaU6CYroA57XlncbnofjVXGoZ5jM7LnuMB/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC Validity Not Before: Mar 13 04:31:29 2025 GMT Not After : Mar 20 04:31:29 2025 GMT Subject: CN=67d25fa2-4795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:fd:00:24:f9:95:5f:16:bb:1d:e0:51:42: 6e:2c:82:3e:7d:bb:01:b2:50:98:63:1d:ee:d0:e1: bf:20:d5:08:95:c5:12:59:35:bb:96:19:d3:f2:f2: 3d:a2:df:ea:9f:ea:c4:8b:84:22:90:5d:6e:5e:08: a3:90:f7:4a:4d:06:49:f4:49:f8:9b:6a:30:04:7f: ec:b2:13:7b:db:42:eb:86:6d:f1:3f:80:c9:e9:71: f3:65:30:f9:c6:4d:9d:6e:b7:f7:66:db:a4:d2:24: fc:a6:14:87:ca:42:3a:1f:af:83:05:c7:a5:da:3b: 9a:31:b1:7d:e2:fa:4b:bc:c8:d3:56:84:1d:3d:9a: ab:55:18:70:f9:c1:d5:31:7e:f0:d6:b3:1f:c0:ce: 5b:79:1d:41:56:25:15:f1:2d:fc:0b:a8:ac:74:ce: ed:d5:42:4f:fb:db:71:f7:b9:8d:03:6b:f8:42:9c: 99:b2:37:cd:22:2d:15:32:aa:18:91:00:f7:6a:60: ec:39:2c:ee:b6:1f:e7:01:76:25:f4:22:e3:af:ab: 61:00:c9:3b:5b:c9:be:0e:8a:1f:62:f0:f1:d4:a8: 82:e0:ed:0f:30:22:9c:ef:ea:fd:41:d0:c7:97:0f: 1e:89:09:41:ab:a2:44:bf:f9:53:4e:d4:25:81:75: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:29:8D:01:C9:56:B9:8A:EC:FB:AC:07:1D:09:B1:DF:4C:01:78:3C X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:6e:bf:46:ef:09:55:22:89:d8:b3:88:44:89:fd:9c:d4:e1: e9:f5:a3:06:c6:e1:54:e5:1d:c1:e7:2c:47:39:c5:e6:1c:d7: 35:e9:93:37:90:1e:52:23:da:a5:c7:2e:20:25:3e:c4:aa:ff: 28:9f:d5:c4:b5:3a:4b:c2:56:9b:7b:20:3a:e6:22:9c:de:4c: cb:32:93:79:66:af:3b:36:4a:19:a0:0b:66:c3:08:85:2e:cb: f6:48:c8:87:c2:c3:b3:da:90:29:dc:86:fa:f5:07:68:54:1d: 5b:23:e5:56:04:e9:5f:84:ca:1a:b2:4b:71:f3:62:fc:c2:02: 7e:7e:7d:25:a0:8f:ff:3d:5d:32:e5:55:77:57:c5:8f:a7:e8: 9e:60:bd:ec:8d:a9:9b:8b:55:3a:cd:e1:d2:98:94:5b:90:83: b6:be:5c:07:4f:e5:a6:36:f2:f2:75:42:f9:c2:ad:28:de:9c: dc:88:fd:d7:6a:87:26:75:cf:66:f7:9d:f1:4f:e5:a4:07:1a: 15:e5:d2:16:36:5e:0f:ee:d6:f7:de:90:84:47:97:58:41:c6: ad:85:d2:79:34:28:4a:e3:16:b7:fb:a6:ff:47:48:b7:94:49: b1:04:4e:eb:ea:e2:0b:6b:3f:f5:8b:74:12:98:55:76:e5:04: 6b:fc:28:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG OTQ2OEQ5NUEwHhcNMjUwMzEzMDQzMTI5WhcNMjUwMzIwMDQzMTI5WjAYMRYwFAYD VQQDEw02N2QyNWZhMi00Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXr9ACT5lV8Wux3gUUJuLII+fbsBslCYYx3u0OG/INUIlcUSWTW7lhnT8vI9 ot/qn+rEi4QikF1uXgijkPdKTQZJ9En4m2owBH/sshN720Lrhm3xP4DJ6XHzZTD5 xk2dbrf3Ztuk0iT8phSHykI6H6+DBcel2juaMbF94vpLvMjTVoQdPZqrVRhw+cHV MX7w1rMfwM5beR1BViUV8S38C6isdM7t1UJP+9tx97mNA2v4QpyZsjfNIi0VMqoY kQD3amDsOSzuth/nAXYl9CLjr6thAMk7W8m+DoofYvDx1KiC4O0PMCKc7+r9QdDH lw8eiQlBq6JEv/lTTtQlgXUkQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgpjQHJ VrmK7PusBx0Jsd9MAXg8MB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy85OUM3NDg4ODI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0Fj cmNNNUU0UDhxVzM1Um8yVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcbr9G7wlVIonYs4hEif2c1OHp9aMGxuFU5R3B5yxHOcXmHNc16ZM3 kB5SI9qlxy4gJT7Eqv8on9XEtTpLwlabeyA65iKc3kzLMpN5Zq87NkoZoAtmwwiF Lsv2SMiHwsOz2pAp3Ib69QdoVB1bI+VWBOlfhMoasktx82L8wgJ+fn0loI//PV0y 5VV3V8WPp+ieYL3sjambi1U6zeHSmJRbkIO2vlwHT+WmNvLydUL5wq0o3pzciP3X aocmdc9m953xT+WkBxoV5dIWNl4P7tb33pCER5dYQcathdJ5NChK4xa3+6b/R0i3 lEmxBE7r6uILaz/1i3QSmFV25QRr/CgZ -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:46 2025 by rpki-client