$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: QqhWG87FPI2IZAGuwJFmPBOKREM/ycfaqPlGKd/Tw3I= Subject key identifier: E5:55:46:57:13:FC:87:35:14:DE:D6:CD:58:F6:42:5F:73:8E:CB:40 Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 092E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0920 Signing time: Fri 16 May 2025 20:35:30 +0000 Manifest this update: Fri 16 May 2025 20:35:29 +0000 Manifest next update: Fri 23 May 2025 20:35:29 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: KHTur0o1JINAn1cICKSdd9RjVHU3WJ+nz2u9PL/3esE=) 2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: bw4sMGnKDiftNLfRmiZR5SdnMpNduWFQjTQlPL6jZYY=) 3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: FPAklaM71rdV3Mf7CFthJcOnotN1vw1BtN7p9xcPR+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: May 16 20:35:29 2025 GMT Not After : May 23 20:35:29 2025 GMT Subject: CN=6827a191-9bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5f:7b:8c:1c:32:92:a4:b6:53:d1:a5:90:f1: 42:b3:11:dd:98:b2:ee:73:e8:89:80:3b:91:42:8c: 6c:d0:f4:9f:ba:2d:cc:4e:12:0b:b7:6c:59:80:be: d6:86:c7:5f:43:d5:fe:77:87:e2:bc:70:a7:f4:a5: 59:44:92:5a:3b:26:e9:45:9e:aa:ad:74:46:27:63: 05:5e:7d:64:3d:91:c1:1d:55:16:30:2f:cc:b5:40: 9c:7a:64:70:e9:37:39:e3:a4:23:95:28:b2:26:95: 7f:30:05:e0:48:b0:bd:07:92:f7:de:ad:d3:b9:56: 6c:62:11:7e:e0:63:bf:0f:20:d3:e8:b8:33:57:23: d1:1e:7f:9f:b3:36:1b:2b:03:81:db:2b:9f:96:83: 5a:cc:37:ba:31:ff:11:bd:f6:78:21:93:0b:3d:52: ec:ba:4d:08:fd:47:c3:0a:31:78:2f:b4:09:63:13: 1c:1e:bc:f4:d6:1e:64:85:cf:8d:c4:f2:64:98:19: b7:ad:ff:83:98:2c:bd:73:41:38:ff:2b:a1:e0:00: 8e:db:53:69:2b:57:5b:2c:59:84:f3:9e:12:f8:f6: ff:ad:37:40:f3:b5:69:93:ce:82:a1:ee:37:f1:6e: 40:d0:2f:13:21:03:ae:63:64:61:6d:98:f4:c5:16: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:55:46:57:13:FC:87:35:14:DE:D6:CD:58:F6:42:5F:73:8E:CB:40 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:c6:ac:b8:51:7e:ca:42:9f:a2:f3:32:b0:85:c0:53:77:1f: 79:e7:29:0e:3e:5f:da:f9:72:21:6e:bb:a9:1d:87:78:b2:0f: 86:01:a9:09:b4:d1:2e:e1:57:42:9f:3e:29:c9:0e:db:a5:84: b9:fa:f4:bc:5c:60:84:56:3e:2e:4b:14:b5:52:01:42:a4:9c: 71:3b:9b:99:d3:18:e2:ca:53:3b:56:2c:a7:37:63:bd:3f:8f: b6:dc:96:ed:17:e7:e1:22:40:4d:1b:23:05:62:24:5a:b7:c5: c5:58:84:7b:db:c9:80:5c:fd:18:b8:b8:76:03:61:d1:3d:3b: 43:66:5c:1d:fd:39:c7:f2:6c:c1:c0:df:83:62:ed:ab:52:85: 1c:21:31:3f:f8:3e:27:33:b9:d2:cb:bb:0a:ec:6e:3e:98:25: dd:43:27:59:8f:3d:76:a0:37:6c:ce:74:63:2d:ea:53:26:ae: 3e:3e:a6:4b:08:26:ab:21:f0:d5:cc:bd:38:43:2e:8d:65:19: e0:4f:fc:0c:23:db:fc:de:fe:ca:32:f8:07:f2:ac:a7:40:4a: 71:3b:ec:a2:0e:df:99:73:46:ad:72:8b:44:d1:bf:b2:09:c4: f4:9e:a6:52:07:1a:8d:e3:60:92:20:a0:62:34:70:92:f3:ef: 8b:e0:02:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUwNTE2MjAzNTI5WhcNMjUwNTIzMjAzNTI5WjAYMRYwFAYD VQQDEw02ODI3YTE5MS05YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6l97jBwykqS2U9GlkPFCsxHdmLLuc+iJgDuRQoxs0PSfui3MThILt2xZgL7W hsdfQ9X+d4fivHCn9KVZRJJaOybpRZ6qrXRGJ2MFXn1kPZHBHVUWMC/MtUCcemRw 6Tc546QjlSiyJpV/MAXgSLC9B5L33q3TuVZsYhF+4GO/DyDT6LgzVyPRHn+fszYb KwOB2yufloNazDe6Mf8RvfZ4IZMLPVLsuk0I/UfDCjF4L7QJYxMcHrz01h5khc+N xPJkmBm3rf+DmCy9c0E4/yuh4ACO21NpK1dbLFmE854S+Pb/rTdA87Vpk86Coe43 8W5A0C8TIQOuY2RhbZj0xRYR8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVVRlcT /Ic1FN7WzVj2Ql9zjstAMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyxqy4UX7KQp+i8zKwhcBTdx955ykOPl/a+XIhbrupHYd4sg+GAakJ tNEu4VdCnz4pyQ7bpYS5+vS8XGCEVj4uSxS1UgFCpJxxO5uZ0xjiylM7ViynN2O9 P4+23JbtF+fhIkBNGyMFYiRat8XFWIR728mAXP0YuLh2A2HRPTtDZlwd/TnH8mzB wN+DYu2rUoUcITE/+D4nM7nSy7sK7G4+mCXdQydZjz12oDdsznRjLepTJq4+PqZL CCarIfDVzL04Qy6NZRngT/wMI9v83v7KMvgH8qynQEpxO+yiDt+Zc0atcotE0b+y CcT0nqZSBxqN42CSIKBiNHCS8++L4AIk -----END CERTIFICATE-----Generated at Fri May 16 22:47:31 2025 by rpki-client