$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft File: fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json) Hash identifier: AYUiKw4mhLp82fQLI7SHZFSFYT0W0MLnh/VOrHcidDY= Subject key identifier: 0E:F8:6A:33:EF:9F:D9:35:66:46:65:61:3C:1A:AF:7F:60:7E:42:17 Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 06B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft Manifest number: 06AE Signing time: Mon 12 May 2025 21:57:42 +0000 Manifest this update: Mon 12 May 2025 21:57:41 +0000 Manifest next update: Mon 19 May 2025 21:57:41 +0000 Files and hashes: 1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: vJbcERSw6xH2Vw7kv03b55DHcwS5JXkhKVIxeUandag=) 2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: jMHgt7FvNkUCkLd7vYheLEj/MpewQSbVwisjvUIDov4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED, serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: May 12 21:57:41 2025 GMT Not After : May 19 21:57:41 2025 GMT Subject: CN=68226ed5-f95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:3e:70:d4:20:3e:d9:1a:c6:be:e0:bc:af: b3:34:ff:17:73:19:c2:b7:9b:f6:0a:c8:d7:e2:5a: f6:04:a9:69:60:38:69:e5:15:bf:9b:05:1f:f9:38: 13:f2:0d:5a:cb:d8:dd:88:f6:91:7c:7f:23:77:9e: 10:a1:43:89:23:d9:ea:e9:c8:6d:b2:ac:e8:0c:e8: 53:60:40:89:8e:91:50:c3:11:5d:e6:76:c8:1e:5b: ef:05:e0:03:0f:0c:73:f8:96:7f:be:5d:28:fd:27: 47:88:00:3b:fc:38:4f:e7:45:d6:a4:1c:e5:40:85: 1d:0c:92:e9:fe:88:0c:02:83:19:e2:2c:26:88:13: 87:c2:f8:ac:9f:ec:4a:6b:93:c4:ef:6e:af:02:c3: e5:99:40:cf:cd:3a:6e:8b:59:9d:5e:1c:63:c7:7e: b6:bc:a4:a1:51:7b:de:cb:b1:96:82:46:8f:c3:5d: fb:60:15:9b:c1:6c:a9:d6:fc:15:f3:e0:c4:42:db: 3c:5c:51:c3:5c:b8:60:3c:b7:34:e1:04:05:9a:18: 29:80:ea:82:9c:64:b3:78:e5:43:11:f1:dd:d7:25: 6a:a5:09:52:ae:72:ab:dd:10:29:27:47:a1:14:6e: 38:4d:2f:29:52:3f:14:85:4f:93:5b:9d:c6:f3:a0: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F8:6A:33:EF:9F:D9:35:66:46:65:61:3C:1A:AF:7F:60:7E:42:17 X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:6c:71:6e:77:d8:b2:3b:8d:21:71:c7:30:00:47:04:84:01: 18:40:dc:9c:69:65:c3:4b:a2:0a:ab:1d:99:8a:f2:af:f6:eb: 0f:e9:80:ae:d3:23:f2:fe:2e:d5:93:a4:db:69:a2:ff:54:9b: 7b:f9:31:a2:61:cc:56:bc:3b:be:86:ca:64:2d:12:83:21:c4: 1d:d8:2b:b1:1f:7c:66:17:b0:90:77:71:02:2b:7b:09:3e:40: c7:57:d2:a8:aa:df:4f:f1:2d:7f:d1:e3:e9:5a:66:4f:48:f0: ea:0d:0e:48:76:fa:e9:5f:f4:03:a2:a3:9b:eb:22:77:ed:43: 18:bf:87:96:94:e3:9f:59:b9:60:b1:7c:89:34:63:67:50:11: 26:78:22:76:a0:66:40:2c:48:57:6f:d8:7b:85:aa:91:97:6c: c4:14:97:d1:c0:05:e3:4a:e1:cf:38:9c:84:78:ef:f5:8f:98: e0:58:c6:20:ab:13:f0:20:f1:e6:7e:b9:2b:5b:75:c7:8d:0a: 77:8a:3a:1a:1c:8a:d6:52:64:57:da:1b:c3:bc:cd:39:42:2d: 09:9a:25:c2:8d:da:cc:a9:ec:b2:be:b2:aa:ba:5e:89:be:8a: d8:e2:8d:49:89:a5:41:2d:c0:71:12:14:df:64:78:e4:30:05: bd:a8:3a:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjUwNTEyMjE1NzQxWhcNMjUwNTE5MjE1NzQxWjAYMRYwFAYD VQQDEw02ODIyNmVkNS1mOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu60+cNQgPtkaxr7gvK+zNP8XcxnCt5v2CsjX4lr2BKlpYDhp5RW/mwUf+TgT 8g1ay9jdiPaRfH8jd54QoUOJI9nq6chtsqzoDOhTYECJjpFQwxFd5nbIHlvvBeAD Dwxz+JZ/vl0o/SdHiAA7/DhP50XWpBzlQIUdDJLp/ogMAoMZ4iwmiBOHwvisn+xK a5PE726vAsPlmUDPzTpui1mdXhxjx362vKShUXvey7GWgkaPw137YBWbwWyp1vwV 8+DEQts8XFHDXLhgPLc04QQFmhgpgOqCnGSzeOVDEfHd1yVqpQlSrnKr3RApJ0eh FG44TS8pUj8UhU+TW53G86AZAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA74ajPv n9k1ZkZlYTwar39gfkIXMB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDBFRC8wRUM5NEE4ODYyMjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5 UzBNcENuWW9PcmVfQzJTbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCbHFud9iyO40hcccwAEcEhAEYQNycaWXDS6IKqx2ZivKv9usP6YCu 0yPy/i7Vk6TbaaL/VJt7+TGiYcxWvDu+hspkLRKDIcQd2CuxH3xmF7CQd3ECK3sJ PkDHV9Koqt9P8S1/0ePpWmZPSPDqDQ5IdvrpX/QDoqOb6yJ37UMYv4eWlOOfWblg sXyJNGNnUBEmeCJ2oGZALEhXb9h7haqRl2zEFJfRwAXjSuHPOJyEeO/1j5jgWMYg qxPwIPHmfrkrW3XHjQp3ijoaHIrWUmRX2hvDvM05Qi0JmiXCjdrMqeyyvrKqul6J vorY4o1JiaVBLcBxEhTfZHjkMAW9qDod -----END CERTIFICATE-----Generated at Wed May 14 22:50:37 2025 by rpki-client