$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: i59iGq0kpepcQLn/uKOKrUjB2JzyGZ8YMDfJsEpiOmo= Subject key identifier: E9:1A:97:3B:F0:DD:57:A5:47:C7:A3:56:18:D8:55:CB:B6:ED:D4:01 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 07DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 07D0 Signing time: Mon 12 May 2025 20:51:34 +0000 Manifest this update: Mon 12 May 2025 20:51:33 +0000 Manifest next update: Mon 19 May 2025 20:51:33 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: 5+RRSGF6+ozSWHjiYzHYYZZtvsyEnpVmqpxmB1yHaTc=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: CyHrVj1UIxTmkHUnWq5JYlTSppmsSZAZAIYgcE9IyY4=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: 3Hi3qHebz75olBYvl7sFul5/x4z+usSMAu2fmKYpx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2015 (0x7df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: May 12 20:51:33 2025 GMT Not After : May 19 20:51:33 2025 GMT Subject: CN=68225f56-05be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:4e:7b:ee:49:41:11:95:03:8b:40:01:4d: e3:f9:57:24:40:ff:43:bf:9c:ea:39:a6:5c:28:db: 62:77:45:7c:55:8e:80:32:25:c4:3f:b9:fd:a1:9c: 5e:f2:d1:04:20:af:da:b8:29:25:2b:3b:ac:8b:db: 7f:4b:32:24:e5:11:3a:be:0d:b1:f8:3b:1c:60:d5: d7:20:17:65:61:14:78:e9:00:96:f7:08:7b:7f:5e: 5b:66:29:33:99:7f:9b:dc:c9:1a:f4:93:c6:56:07: ee:d5:c3:af:fc:6b:06:2d:bd:69:5b:63:03:60:7c: 00:a8:42:ef:df:4d:d5:30:60:e1:1c:5f:62:fb:4d: ce:75:69:1a:de:83:35:f0:6b:a5:81:42:f2:40:ba: c2:03:a4:0d:79:d4:b8:fd:5f:85:08:b7:83:b6:1d: 9a:7e:59:bd:dc:e5:e9:1c:9c:16:12:fa:48:71:ed: 21:3f:1a:fd:13:39:37:fb:66:db:f4:7b:d9:fb:9e: 15:de:f4:62:ad:31:ae:24:bf:14:55:e2:c5:4f:b5: 9a:39:50:80:f7:49:f8:57:9c:be:35:c9:7a:91:20: dc:fe:e2:80:1b:bf:98:8a:ea:fe:6e:a3:bd:d0:59: 38:35:15:1a:af:f2:cf:0c:76:90:e3:fa:e1:b1:60: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1A:97:3B:F0:DD:57:A5:47:C7:A3:56:18:D8:55:CB:B6:ED:D4:01 X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c8:57:4f:95:c5:cc:0d:b2:ff:99:ac:74:46:59:d2:3d:a9: 16:eb:dd:d9:9e:56:d8:f6:91:f9:1f:5a:79:8e:4e:c2:11:d9: 4d:fb:f1:35:03:fd:25:d1:5f:f0:0d:fe:13:ae:80:03:8b:ce: 28:a8:7a:c6:6a:f5:0d:a2:6f:da:e4:a6:f6:34:98:ae:ee:76: 51:82:fe:2f:5e:0b:33:4f:f1:46:4e:60:6b:58:95:24:9c:bc: d3:3f:d3:d6:cb:f6:24:f6:6e:40:22:35:be:8f:49:dc:99:e1: 8c:9a:a8:cc:46:0a:19:a3:2c:2f:27:eb:de:77:b7:41:07:ca: 9c:88:20:65:7d:6e:6e:08:78:1d:c6:17:2d:f8:f8:a6:06:77: 87:30:ba:27:39:de:05:9a:6c:54:e0:79:35:e4:b7:e9:69:9a: 54:7c:24:ec:54:a9:4c:14:30:80:cb:99:e8:69:ba:41:7a:30: 8b:8c:d7:50:96:eb:39:b2:ee:99:41:bf:ef:ae:c9:bd:d5:64: 6b:45:1c:fc:41:06:ca:6a:8f:81:4b:fe:ef:c4:3c:b4:f6:fe: be:ac:79:41:d6:da:a0:75:0b:20:b3:86:4f:73:35:6d:a7:47: 82:f4:77:2f:72:ab:b9:b3:bb:f0:70:b9:d7:fe:43:e8:bf:13: e4:9d:11:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjUwNTEyMjA1MTMzWhcNMjUwNTE5MjA1MTMzWjAYMRYwFAYD VQQDEw02ODIyNWY1Ni0wNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj1Oe+5JQRGVA4tAAU3j+VckQP9Dv5zqOaZcKNtid0V8VY6AMiXEP7n9oZxe 8tEEIK/auCklKzusi9t/SzIk5RE6vg2x+DscYNXXIBdlYRR46QCW9wh7f15bZikz mX+b3Mka9JPGVgfu1cOv/GsGLb1pW2MDYHwAqELv303VMGDhHF9i+03OdWka3oM1 8GulgULyQLrCA6QNedS4/V+FCLeDth2aflm93OXpHJwWEvpIce0hPxr9Ezk3+2bb 9HvZ+54V3vRirTGuJL8UVeLFT7WaOVCA90n4V5y+Ncl6kSDc/uKAG7+Yiur+bqO9 0Fk4NRUar/LPDHaQ4/rhsWBbRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkalzvw 3VelR8ejVhjYVcu27dQBMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQyFdPlcXMDbL/max0RlnSPakW693ZnlbY9pH5H1p5jk7CEdlN+/E1 A/0l0V/wDf4TroADi84oqHrGavUNom/a5Kb2NJiu7nZRgv4vXgszT/FGTmBrWJUk nLzTP9PWy/Yk9m5AIjW+j0ncmeGMmqjMRgoZoywvJ+ved7dBB8qciCBlfW5uCHgd xhct+PimBneHMLonOd4FmmxU4Hk15LfpaZpUfCTsVKlMFDCAy5noabpBejCLjNdQ lus5su6ZQb/vrsm91WRrRRz8QQbKao+BS/7vxDy09v6+rHlB1tqgdQsgs4ZPczVt p0eC9Hcvcqu5s7vwcLnX/kPovxPknREY -----END CERTIFICATE-----Generated at Wed May 14 16:11:14 2025 by rpki-client