$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: pjfLChd75nx01T/Jr1fLSaANvyjpHAPcu3h/4udJq1c= Subject key identifier: A8:EB:73:6E:DA:BF:F7:E0:06:17:15:C9:26:8F:A3:C1:C5:7B:7D:3F Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 053A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 0536 Signing time: Fri 16 May 2025 23:44:21 +0000 Manifest this update: Fri 16 May 2025 23:44:20 +0000 Manifest next update: Fri 23 May 2025 23:44:20 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: 34muv+kTSxTm1dEpE/qGddADv6IvBKQnPCxTq7rUWd4=) 2: AE1E5A1AF61C11EBAB08AF17C4F9AE02.roa (hash: L6NkrUDLV6Dmkk8kbRWqS9urNPurijV7bD/FqK/kzIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 23:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: May 16 23:44:20 2025 GMT Not After : May 23 23:44:20 2025 GMT Subject: CN=6827cdd4-c8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:57:1b:2c:73:d7:22:4b:c2:6b:e6:00:30: e1:33:8a:73:3e:8c:86:b0:fb:ab:52:0c:aa:d1:a4: a9:74:fe:09:d1:98:bf:30:3f:ce:e8:fb:40:58:49: d3:5e:2e:bd:2a:e0:31:c1:b8:7f:ae:f5:37:8d:3a: 58:99:c2:1d:ec:76:b6:a8:40:82:b4:8b:0e:d9:fd: 10:27:57:bf:07:5f:05:69:cb:92:5d:01:0f:36:76: de:f1:01:01:d3:3d:38:bf:d9:bf:a5:c6:8e:70:27: 38:78:d1:cb:b3:18:51:bc:b3:7d:a0:f6:1c:3b:68: b8:29:5c:90:0f:43:37:1a:42:dd:f2:8c:44:3b:4f: 44:88:82:8c:6b:4f:59:fd:b9:02:b9:30:9c:05:b1: 0d:b3:6c:34:02:5e:8f:38:74:b4:04:fb:c8:a0:1f: c5:fd:cb:8b:07:c2:16:9f:f7:19:4d:58:5f:21:e8: 0e:06:7d:34:89:97:00:b4:2b:69:14:6b:d9:b7:bd: 52:c6:da:24:f3:0f:0f:7e:18:ee:aa:50:11:5c:61: 26:91:20:cf:38:2d:b7:6b:c6:f5:9f:45:8f:32:59: 6c:42:7d:d9:86:0b:f2:0a:54:c7:f0:38:08:9c:50: f8:c3:38:91:4f:5b:63:bb:8b:2b:31:33:05:83:e9: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EB:73:6E:DA:BF:F7:E0:06:17:15:C9:26:8F:A3:C1:C5:7B:7D:3F X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d3:b0:a1:a1:fe:de:c3:7b:d2:4d:e2:5b:24:cb:84:71:1d: 9e:25:c9:cc:88:42:35:38:93:19:24:7b:79:45:3f:71:bd:9a: a1:03:9d:a8:18:49:75:7a:ba:a7:27:92:87:af:6e:ca:66:d7: b3:f2:6c:fb:0e:7d:23:ee:e9:bb:0a:11:bb:67:15:04:d0:7c: 5e:64:39:a5:93:20:4e:5e:b8:a6:8a:54:1d:b3:ca:e4:59:10: f3:3b:e9:83:b3:79:11:35:23:d4:ca:6b:98:52:f9:ca:0d:a7: d8:be:67:72:df:aa:12:63:5b:e5:59:64:7e:48:54:6c:be:3c: 16:fd:f0:52:e0:05:c9:26:e9:5b:79:29:5a:bf:b0:a5:ad:ab: 20:7a:0b:6b:c3:d7:8b:99:4b:1f:16:e3:68:8e:51:25:5e:a9: 94:1e:5f:53:ca:04:1f:f4:69:4a:db:54:44:35:78:a9:39:de: 15:d1:5f:0e:af:f4:79:5a:0e:8e:2d:0a:33:be:52:0f:c3:ca: 93:34:25:5d:d1:4a:a4:d6:ed:ed:de:f0:17:b3:6b:bb:ca:28: a9:f0:fd:62:62:14:57:6a:51:1a:8d:e6:1b:1b:a1:9e:d2:1a: e5:64:df:7a:51:fe:3b:ab:37:4f:1f:2b:77:fc:c7:d1:47:e1: 6f:21:e9:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjUwNTE2MjM0NDIwWhcNMjUwNTIzMjM0NDIwWjAYMRYwFAYD VQQDEw02ODI3Y2RkNC1jOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJxXGyxz1yJLwmvmADDhM4pzPoyGsPurUgyq0aSpdP4J0Zi/MD/O6PtAWEnT Xi69KuAxwbh/rvU3jTpYmcId7Ha2qECCtIsO2f0QJ1e/B18FacuSXQEPNnbe8QEB 0z04v9m/pcaOcCc4eNHLsxhRvLN9oPYcO2i4KVyQD0M3GkLd8oxEO09EiIKMa09Z /bkCuTCcBbENs2w0Al6POHS0BPvIoB/F/cuLB8IWn/cZTVhfIegOBn00iZcAtCtp FGvZt71Sxtok8w8PfhjuqlARXGEmkSDPOC23a8b1n0WPMllsQn3ZhgvyClTH8DgI nFD4wziRT1tju4srMTMFg+lHlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjrc27a v/fgBhcVySaPo8HFe30/MB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR07Chof7ew3vSTeJbJMuEcR2eJcnMiEI1OJMZJHt5RT9xvZqhA52o GEl1erqnJ5KHr27KZtez8mz7Dn0j7um7ChG7ZxUE0HxeZDmlkyBOXrimilQds8rk WRDzO+mDs3kRNSPUymuYUvnKDafYvmdy36oSY1vlWWR+SFRsvjwW/fBS4AXJJulb eSlav7Clrasgegtrw9eLmUsfFuNojlElXqmUHl9TygQf9GlK21RENXipOd4V0V8O r/R5Wg6OLQozvlIPw8qTNCVd0Uqk1u3t3vAXs2u7yiip8P1iYhRXalEajeYbG6Ge 0hrlZN96Uf47qzdPHyt3/MfRR+FvIenq -----END CERTIFICATE-----Generated at Sat May 17 06:51:45 2025 by rpki-client