$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: mGMcFFNVP7kSsX1LNZ5WUx0Vg5hJEg4HbjkcajWFd8U= Subject key identifier: D8:D8:04:6C:08:8D:C5:38:DD:75:89:27:2C:7F:07:38:88:BB:88:79 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 14C0 Signing time: Thu 08 May 2025 16:58:15 +0000 Manifest this update: Thu 08 May 2025 16:58:14 +0000 Manifest next update: Thu 15 May 2025 16:58:14 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: PwLdPsQAFi1n/SNq8PUy3rwCWFMvQFWVQCH3ypS6Hm4=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: gzRITOkOOGrTx/TsBYiR/c3khv1Gc2m9Qh3FJnnq+g4=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: wDUkAV/G8nH6a42xA1jspBcH2CyrvgBJPhHTMVF0vF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 16:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5384 (0x1508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: May 8 16:58:14 2025 GMT Not After : May 15 16:58:14 2025 GMT Subject: CN=681ce2a7-9764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:ef:ea:14:da:6f:9a:b6:09:ca:f0:82:78: 68:18:1a:a1:6a:ef:c8:87:65:e6:5b:7a:99:53:b9: ce:fb:02:18:c5:7c:ae:09:f4:d4:05:ac:10:67:43: 5c:9c:1c:17:01:c5:dd:48:e1:e7:c0:e9:32:f9:bd: 6e:42:a1:e4:b8:89:f3:78:fc:62:97:45:85:42:a6: a8:9b:bc:8f:2d:4a:a2:87:49:6a:d4:2f:95:3c:0e: 83:19:33:ab:52:de:0b:52:73:75:46:8c:0d:7f:24: 1f:a3:1d:03:a7:1d:f2:8f:fe:49:87:c8:df:8f:78: c7:9a:bc:63:4e:b2:bf:92:7b:fc:01:ba:2f:49:d1: ed:e9:64:ef:57:3c:f5:c9:e7:96:2f:6a:f8:a8:45: 05:f0:a6:51:95:83:cc:53:cc:c3:f8:09:f3:57:10: 62:f1:92:54:ec:b2:a4:60:81:f9:86:58:a0:9b:8f: 28:b5:6f:db:43:cd:05:09:c4:82:cb:2c:fb:d0:9f: 74:64:b5:5d:6d:e3:49:82:0e:32:62:eb:8f:86:6c: ac:93:f9:1a:71:08:2a:2d:c9:07:59:78:15:c1:cb: 4d:a7:f8:ee:6b:69:58:28:1c:9a:d2:55:11:46:4e: c0:ee:f2:11:35:c7:fa:92:fa:72:47:cb:be:4c:4c: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D8:04:6C:08:8D:C5:38:DD:75:89:27:2C:7F:07:38:88:BB:88:79 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6b:fc:9d:7d:53:a6:69:55:a5:4b:95:98:01:06:38:bd:38: 3a:5a:2c:11:e0:78:94:9f:96:fe:ee:1e:81:d9:8b:c5:96:b3: d5:1a:78:32:12:0e:84:ae:6f:bf:e8:f6:ba:ff:f0:e9:91:9d: 60:27:05:51:04:cf:57:58:3b:5a:c8:55:7f:a0:82:f3:5c:54: 22:30:10:61:63:0a:08:e5:6b:f1:a6:99:21:aa:3f:f6:3c:e4: ba:5f:1c:16:99:86:14:d6:12:d7:91:a3:3f:9a:1e:53:b9:9c: cc:01:c7:11:bf:b6:05:8b:eb:62:c0:49:de:0a:fe:08:56:b5: b2:3a:10:ba:3a:40:d9:a8:44:75:89:45:f8:eb:3c:00:0e:9b: 69:69:3d:ac:ec:23:43:75:31:e2:6a:6d:1b:77:78:9e:b0:4c: da:13:18:81:53:ed:1e:a2:e8:cd:df:0a:62:db:df:d9:1f:18: d3:f9:71:c2:15:18:3b:c2:a7:83:03:ce:a9:9f:a8:72:7f:d8: 58:a9:5d:f5:0d:de:03:2a:8c:5c:78:80:e0:f8:f3:ac:d1:c3: 82:17:d2:cb:61:05:33:f9:dc:f5:ca:6b:6c:56:3d:90:09:5c: 28:d8:d0:c0:80:77:24:31:a8:e3:e5:5d:1c:96:6d:41:bd:b2: 0c:a9:a9:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwNTA4MTY1ODE0WhcNMjUwNTE1MTY1ODE0WjAYMRYwFAYD VQQDEw02ODFjZTJhNy05NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQzv6hTab5q2CcrwgnhoGBqhau/Ih2XmW3qZU7nO+wIYxXyuCfTUBawQZ0Nc nBwXAcXdSOHnwOky+b1uQqHkuInzePxil0WFQqaom7yPLUqih0lq1C+VPA6DGTOr Ut4LUnN1RowNfyQfox0Dpx3yj/5Jh8jfj3jHmrxjTrK/knv8AbovSdHt6WTvVzz1 yeeWL2r4qEUF8KZRlYPMU8zD+AnzVxBi8ZJU7LKkYIH5hligm48otW/bQ80FCcSC yyz70J90ZLVdbeNJgg4yYuuPhmysk/kacQgqLckHWXgVwctNp/jua2lYKBya0lUR Rk7A7vIRNcf6kvpyR8u+TEz7ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjYBGwI jcU43XWJJyx/BziIu4h5MB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsa/ydfVOmaVWlS5WYAQY4vTg6WiwR4HiUn5b+7h6B2YvFlrPVGngy Eg6Erm+/6Pa6//DpkZ1gJwVRBM9XWDtayFV/oILzXFQiMBBhYwoI5Wvxppkhqj/2 POS6XxwWmYYU1hLXkaM/mh5TuZzMAccRv7YFi+tiwEneCv4IVrWyOhC6OkDZqER1 iUX46zwADptpaT2s7CNDdTHiam0bd3iesEzaExiBU+0eoujN3wpi29/ZHxjT+XHC FRg7wqeDA86pn6hyf9hYqV31Dd4DKoxceIDg+POs0cOCF9LLYQUz+dz1ymtsVj2Q CVwo2NDAgHckMajj5V0clm1BvbIMqanD -----END CERTIFICATE-----Generated at Sat May 10 13:09:49 2025 by rpki-client