$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft File: v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json) Hash identifier: PNIw8nRyMHOxmzLNW5D/UwTB1+kF6kKpHltdlpvHwdE= Subject key identifier: A2:42:9F:7A:3D:41:9F:05:FE:2E:12:F1:26:8F:D9:E1:8A:EE:C1:B5 Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF Certificate issuer: /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft Manifest number: 34B1 Signing time: Sat 10 May 2025 14:15:55 +0000 Manifest this update: Sat 10 May 2025 14:15:54 +0000 Manifest next update: Sat 17 May 2025 14:15:54 +0000 Files and hashes: 1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: tyIoT4Lm9n9Pq6zvQnSz1a/qJZR77r8rI16tW0rHgBs=) 2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: EcHgJTBJZVSZcmyoGTsJf6lDzdXZarLLw4Yz9Tt75wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91401C4, serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Validity Not Before: May 10 14:15:54 2025 GMT Not After : May 17 14:15:54 2025 GMT Subject: CN=681f5f9a-5493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:d1:4d:d1:89:81:c1:4e:86:e2:04:e6:76: 4f:93:d3:92:15:cd:f2:57:03:7e:13:a3:38:28:e4: 11:ea:76:16:0c:64:68:e7:f8:bf:39:32:3f:22:81: e2:7b:5c:d1:c3:48:ad:8e:af:8b:71:59:f7:19:27: 28:fb:1b:fa:53:56:99:5e:d6:ea:ff:87:a4:a8:2c: 36:11:3a:17:dd:20:00:12:09:a9:18:5e:3e:f3:15: fb:84:27:be:9c:f9:f0:2b:05:3a:7e:bf:de:35:13: 5e:84:98:bc:7b:ba:56:1d:7b:51:d0:3a:93:f5:11: d8:94:2f:a6:63:d2:d3:17:07:0b:57:a4:e4:d9:60: 91:f5:9b:70:7b:57:1e:01:54:2a:64:63:15:76:ce: 17:38:45:6b:35:d2:5e:4c:d2:b5:89:ef:d0:0a:24: ab:5e:a0:d9:ed:90:50:9b:72:12:bd:b4:9b:19:d6: a0:de:e7:26:fb:63:1f:bd:fe:99:8a:7d:8d:e6:02: 29:44:30:d8:12:74:c7:35:73:1f:88:9d:33:fd:de: 5b:5a:35:9a:e2:7e:d9:2f:fd:50:ed:85:18:c9:32: 5c:00:de:16:12:bb:77:1a:3b:d8:06:78:b4:6b:a2: 29:1b:0a:f0:b0:0a:46:6f:b8:df:93:b0:ad:b3:d5: 48:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:42:9F:7A:3D:41:9F:05:FE:2E:12:F1:26:8F:D9:E1:8A:EE:C1:B5 X509v3 Authority Key Identifier: keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bd:ff:85:ad:fd:4e:7b:67:dc:d6:5a:76:7f:18:7f:0d:6f: b8:5b:69:20:9e:ef:69:57:86:f9:98:aa:8c:55:6d:0b:97:62: 78:0e:bb:4f:ea:01:f0:d4:07:fc:a8:68:0c:1e:13:17:d2:1b: ff:55:2a:54:1d:96:25:52:bf:fd:90:a5:ca:a6:99:d5:ee:9b: 4a:69:80:01:7a:eb:70:a7:ae:32:f3:11:d6:f1:21:cd:ad:45: e5:62:17:af:e4:e3:4f:d7:c6:f1:b9:95:ff:44:bd:f2:74:28: 18:6b:6e:e3:c3:98:74:1f:23:cd:8c:8c:01:bf:4c:d2:88:51: e7:10:36:79:03:38:4a:c2:ef:c2:f9:05:67:0b:fb:bd:d8:be: 9f:c5:2c:51:6a:2c:7c:ac:25:81:9a:89:41:eb:e4:fc:21:87: 00:0b:81:ca:c4:2e:0d:09:38:17:aa:e5:f6:3f:c6:a6:38:b5: 0a:6f:fc:d5:04:e3:62:35:1a:88:68:50:1f:58:38:29:10:69: ef:11:d6:22:0d:1c:83:4f:aa:76:45:73:3e:fd:05:e6:9a:7a: e0:1c:51:73:1e:e6:ed:c1:14:77:33:d3:2f:fc:cb:5d:95:00: 93:c5:e5:2b:5c:61:22:c4:dc:a3:1a:2e:0b:1a:0f:8d:24:09: 7d:e6:3f:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAxQzQxMTAvBgNVBAUTKEJGN0JDQUYxOTA5QzEwQkNGRUEwRDhFN0Q0NUQ4MjU0 RjI2OUM2QkYwHhcNMjUwNTEwMTQxNTU0WhcNMjUwNTE3MTQxNTU0WjAYMRYwFAYD VQQDEw02ODFmNWY5YS01NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRrRTdGJgcFOhuIE5nZPk9OSFc3yVwN+E6M4KOQR6nYWDGRo5/i/OTI/IoHi e1zRw0itjq+LcVn3GSco+xv6U1aZXtbq/4ekqCw2EToX3SAAEgmpGF4+8xX7hCe+ nPnwKwU6fr/eNRNehJi8e7pWHXtR0DqT9RHYlC+mY9LTFwcLV6Tk2WCR9Ztwe1ce AVQqZGMVds4XOEVrNdJeTNK1ie/QCiSrXqDZ7ZBQm3ISvbSbGdag3ucm+2Mfvf6Z in2N5gIpRDDYEnTHNXMfiJ0z/d5bWjWa4n7ZL/1Q7YUYyTJcAN4WErt3GjvYBni0 a6IpGwrwsApGb7jfk7Cts9VI9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJCn3o9 QZ8F/i4S8SaP2eGK7sG1MB8GA1UdIwQYMBaAFL97yvGQnBC8/qDY59RdglTyaca/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDFDNC8yQjJCM0M5RTFE NjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VMei1vTmpuMUYyQ1ZQSnB4 cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Yzdks4WkNjRUx6LW9Oam4xRjJDVlBKcHhyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDFDNC8yQjJCM0M5RTFENjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VM ei1vTmpuMUYyQ1ZQSnB4cjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbvf+Frf1Oe2fc1lp2fxh/DW+4W2kgnu9pV4b5mKqMVW0Ll2J4DrtP 6gHw1Af8qGgMHhMX0hv/VSpUHZYlUr/9kKXKppnV7ptKaYABeutwp64y8xHW8SHN rUXlYhev5ONP18bxuZX/RL3ydCgYa27jw5h0HyPNjIwBv0zSiFHnEDZ5AzhKwu/C +QVnC/u92L6fxSxRaix8rCWBmolB6+T8IYcAC4HKxC4NCTgXquX2P8amOLUKb/zV BONiNRqIaFAfWDgpEGnvEdYiDRyDT6p2RXM+/QXmmnrgHFFzHubtwRR3M9Mv/Mtd lQCTxeUrXGEixNyjGi4LGg+NJAl95j8N -----END CERTIFICATE-----Generated at Mon May 12 04:23:23 2025 by rpki-client