$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json) Hash identifier: pPJ/kqxIIHVt298MUU/VSV3gFnJCnpjw3PY3dFm52wQ= Subject key identifier: 54:F7:8F:3B:9B:27:B9:7C:1A:97:A3:AB:16:28:81:40:F9:C1:26:B9 Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft Manifest number: 05CF Signing time: Sat 10 May 2025 23:02:47 +0000 Manifest this update: Sat 10 May 2025 23:02:46 +0000 Manifest next update: Sat 17 May 2025 23:02:46 +0000 Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: MPljfqpSn6yIkKbtTtu/o42+4QYmtSEm1Lp85puh78Q=) 2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: IADvK+KgV5vnYxJ4wHU1Xtz8TSGee8Bm5ZckrfzrChM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: May 10 23:02:46 2025 GMT Not After : May 17 23:02:46 2025 GMT Subject: CN=681fdb17-ef6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:45:f5:f9:5e:2c:ae:a2:1a:30:40:9e:c5:31: e1:91:91:69:ee:32:c3:36:0f:3d:04:7a:aa:16:8d: 93:47:d7:16:00:ab:63:e7:06:86:30:74:bb:32:b7: ea:9c:d8:66:fd:66:08:2c:ab:bf:d2:fa:04:28:15: a6:77:27:4d:47:b6:08:41:f2:42:0e:79:2d:73:40: e8:ac:9e:a2:3c:bb:4b:e5:3b:f1:87:b7:21:b2:55: 0a:54:1b:5b:fd:76:b3:a9:2f:fb:4a:a2:6b:e4:17: 12:59:79:10:e0:f5:b6:17:49:c4:7e:f9:06:61:ac: 52:9b:d1:03:97:13:91:b1:2c:3e:9e:98:36:b1:6b: 45:a3:85:74:8a:d6:d8:f0:44:1c:3d:c4:39:9e:94: bd:19:40:4e:0a:62:19:ad:22:1a:f1:2c:0a:78:c0: e3:c2:98:55:35:34:f1:0a:e6:2c:6a:b9:cf:4a:5a: 39:a7:2a:ed:bd:51:ec:bf:00:d0:56:80:40:e2:37: 54:d2:57:9e:b5:50:f4:91:e2:bc:66:29:80:a8:70: 9f:dd:59:3a:e3:a1:dc:d6:82:c5:ac:31:cd:48:92: 34:fd:0f:ef:1a:85:56:40:9c:46:b4:3c:b4:c4:44: f6:a7:4b:25:3e:6d:70:dd:80:28:ec:96:e5:b6:ff: 00:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F7:8F:3B:9B:27:B9:7C:1A:97:A3:AB:16:28:81:40:F9:C1:26:B9 X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a7:1c:15:16:65:c0:31:2f:4d:ce:b7:9d:5e:9a:ac:80:d4: de:4e:76:7a:6f:79:1b:55:73:b9:3a:5d:61:3e:7b:dd:94:0d: e4:d5:c6:48:31:b1:3a:d1:8b:34:6d:c9:b5:9f:fa:14:38:12: 7a:a1:76:46:40:98:71:fa:39:05:b6:a4:00:74:f6:9d:a2:b5: e2:e7:a3:51:fa:91:b9:f6:74:c7:6e:14:eb:43:62:55:bb:3a: 33:d8:42:f4:e7:f0:7d:1a:87:e0:93:71:04:33:66:83:23:ad: f0:52:77:a4:55:ef:75:aa:a0:47:00:61:8a:cc:86:61:7e:c3: 43:15:6c:3a:da:05:bc:44:4b:f4:14:04:a9:88:0d:e6:21:c8: 8e:b2:06:c4:fe:74:4f:92:58:78:e1:40:3e:e0:c2:ef:06:90: f8:7a:a5:a7:57:8a:55:82:33:9d:70:50:bb:05:6c:9b:8f:c9: 06:09:8c:76:4b:c1:46:11:bb:fc:e6:8f:34:a8:1b:42:11:a6: 64:b4:fc:cd:d9:65:8e:ad:47:4c:68:24:94:83:68:e4:dc:fd: b1:3f:fc:c0:19:ef:ad:e9:b3:e4:51:ab:c2:fe:00:08:9f:d9: 59:26:6e:c2:87:f1:c6:7a:26:f9:38:3b:bc:4e:eb:aa:75:cb: 47:78:44:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjUwNTEwMjMwMjQ2WhcNMjUwNTE3MjMwMjQ2WjAYMRYwFAYD VQQDEw02ODFmZGIxNy1lZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kX1+V4srqIaMECexTHhkZFp7jLDNg89BHqqFo2TR9cWAKtj5waGMHS7Mrfq nNhm/WYILKu/0voEKBWmdydNR7YIQfJCDnktc0DorJ6iPLtL5Tvxh7chslUKVBtb /XazqS/7SqJr5BcSWXkQ4PW2F0nEfvkGYaxSm9EDlxORsSw+npg2sWtFo4V0itbY 8EQcPcQ5npS9GUBOCmIZrSIa8SwKeMDjwphVNTTxCuYsarnPSlo5pyrtvVHsvwDQ VoBA4jdU0leetVD0keK8ZimAqHCf3Vk646Hc1oLFrDHNSJI0/Q/vGoVWQJxGtDy0 xET2p0slPm1w3YAo7Jbltv8ApQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT3jzub J7l8GpejqxYogUD5wSa5MB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81 anRHemNqTkRGems0RW0zSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0pxwVFmXAMS9NzredXpqsgNTeTnZ6b3kbVXO5Ol1hPnvdlA3k1cZI MbE60Ys0bcm1n/oUOBJ6oXZGQJhx+jkFtqQAdPadorXi56NR+pG59nTHbhTrQ2JV uzoz2EL05/B9Gofgk3EEM2aDI63wUnekVe91qqBHAGGKzIZhfsNDFWw62gW8REv0 FASpiA3mIciOsgbE/nRPklh44UA+4MLvBpD4eqWnV4pVgjOdcFC7BWybj8kGCYx2 S8FGEbv85o80qBtCEaZktPzN2WWOrUdMaCSUg2jk3P2xP/zAGe+t6bPkUavC/gAI n9lZJm7Ch/HGeib5ODu8TuuqdctHeERL -----END CERTIFICATE-----Generated at Sun May 11 17:13:08 2025 by rpki-client