$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json) Hash identifier: Amz1b6ss8NiScu/QCssnazsPQS657/HXILzFPGQ/Nxo= Subject key identifier: 78:A3:99:3B:45:C9:92:EC:DF:32:A3:52:B9:44:AC:8A:EC:81:33:49 Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Certificate serial: 0819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft Manifest number: 07CC Signing time: Mon 12 May 2025 21:10:39 +0000 Manifest this update: Mon 12 May 2025 21:10:39 +0000 Manifest next update: Mon 19 May 2025 21:10:38 +0000 Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: Kj25ldg0+cK6+e1JFvHFQnOW4SIfSWNs1BfxNEf7k5Q=) 2: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: vVJ4ZPcH3lbEogl2hIa71k4678GTw2JTT698EnTX0sk=) 3: C597607628F711F087AC6985C4F9AE02.roa (hash: 73mTLcezdboIlDJbkedCr3eiAJip+rCVW9e5+L5FgdI=) 4: 206D4F4C28F811F0B56A5686C4F9AE02.roa (hash: UXHVHg7kDbBQVdK+MUKPvXF3V6iz5PHH/pNqHyWft9I=) 5: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: L6v9N1lps3HT+4hWevJV8kUzpnpP386yo30tBD8aoeQ=) 6: 0ACEF76441DC11ECBDB44C82C4F9AE02.roa (hash: yYpvf9p+wsM6J9X86nR8OoM5Locu4ULTbYADmSrh3ns=) 7: 50379A94992611EC94DB646EC4F9AE02.roa (hash: UQSilDbz/hE2pQQ6qsVZpBDsORWehlq7xmMJwgsCEF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2073 (0x819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Validity Not Before: May 12 21:10:39 2025 GMT Not After : May 19 21:10:38 2025 GMT Subject: CN=682263cf-ed32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:5d:bb:96:d5:23:32:5c:c7:68:00:f5:cc: 18:ad:44:e7:88:df:4a:f2:18:ac:6f:1a:55:44:f3: b0:3b:b0:8b:11:09:39:be:17:98:4f:65:d4:25:c8: 25:b7:ca:03:80:bc:ea:7f:e8:ac:e8:43:ba:70:65: 94:1e:40:4d:cd:87:1e:54:a5:db:f1:eb:79:05:10: 56:20:be:65:c7:4d:5b:2a:bf:c1:61:69:97:ea:be: 35:df:ab:28:d1:ff:a2:80:23:35:22:0c:22:f8:5b: 58:13:0c:f6:3e:5b:b7:18:d0:54:1f:bd:9e:f3:90: dc:d5:5a:26:44:ac:1f:8b:41:0d:ef:35:56:57:ef: 92:c1:22:40:14:41:b6:dd:df:fc:b9:92:41:bf:e0: 40:b2:ce:05:6e:8b:19:c2:69:24:5e:38:e6:0f:d8: 99:65:3c:db:16:09:ea:c2:fc:2a:6d:89:17:e9:cf: 81:81:35:05:34:15:10:35:26:69:be:28:1c:b4:5e: b1:98:80:76:59:32:06:15:cc:a9:0a:0d:a4:f3:c8: b6:df:8c:da:3f:ae:60:86:a9:f9:4a:93:98:6e:83: b8:7a:4b:6c:1d:4e:62:3b:e9:61:bc:47:9c:40:be: b4:d4:5f:a9:3b:c7:99:3b:29:e3:df:73:bc:63:d8: 63:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A3:99:3B:45:C9:92:EC:DF:32:A3:52:B9:44:AC:8A:EC:81:33:49 X509v3 Authority Key Identifier: keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:65:41:18:9c:e4:1e:9b:d3:a8:e3:55:6e:a6:cb:f2:51:6e: 4e:eb:8b:ac:13:5a:ed:bc:04:73:f8:cf:3a:df:98:2b:ce:86: 05:e9:26:5d:66:c6:6e:14:8f:3b:6c:fa:22:7d:62:19:bb:37: 75:71:26:6a:49:19:44:75:a1:29:2f:e7:53:a9:72:da:c8:52: 19:b6:00:8f:b5:0e:79:0c:d4:d3:f3:51:ea:d2:16:15:b0:89: dc:e4:6f:6b:47:e3:67:21:44:98:3f:5f:74:9f:7b:1f:dd:ff: 93:7e:2f:dd:62:25:e6:38:82:7d:9d:8b:2c:c3:37:b6:2a:9d: a4:df:b3:ba:2d:61:3e:42:47:48:33:1c:5d:7d:d1:64:64:87: 20:c9:af:e1:c0:e2:b2:3c:38:f1:6a:59:62:87:24:1c:70:32: 15:d9:0b:fa:2d:99:48:8e:7d:4b:53:39:8a:5d:73:f2:2f:af: 5c:e2:9a:90:e1:d0:fe:48:d4:8b:b0:f2:a8:23:89:45:a1:a6: 43:fd:8b:dc:ca:0a:b1:16:33:3e:cd:38:46:83:7a:2d:20:bf: 25:fc:25:06:28:c0:b2:40:64:37:66:19:63:82:f2:ab:f4:da: 88:a3:84:71:cc:2f:6f:ff:01:74:f0:b0:77:cd:6c:cf:73:67: 84:fa:b4:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5 RDQyREIxOTgwHhcNMjUwNTEyMjExMDM5WhcNMjUwNTE5MjExMDM4WjAYMRYwFAYD VQQDEw02ODIyNjNjZi1lZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKNdu5bVIzJcx2gA9cwYrUTniN9K8hisbxpVRPOwO7CLEQk5vheYT2XUJcgl t8oDgLzqf+is6EO6cGWUHkBNzYceVKXb8et5BRBWIL5lx01bKr/BYWmX6r4136so 0f+igCM1Igwi+FtYEwz2Plu3GNBUH72e85Dc1VomRKwfi0EN7zVWV++SwSJAFEG2 3d/8uZJBv+BAss4FbosZwmkkXjjmD9iZZTzbFgnqwvwqbYkX6c+BgTUFNBUQNSZp vigctF6xmIB2WTIGFcypCg2k88i234zaP65ghqn5SpOYboO4ektsHU5iO+lhvEec QL601F+pO8eZOynj33O8Y9hjFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHijmTtF yZLs3zKjUrlErIrsgTNJMB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTBBNC9ERDQ3MzY5ODBDMzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRz VUNBM29KQ2ZUTUdkUXRzWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpZUEYnOQem9Oo41VupsvyUW5O64usE1rtvARz+M8635grzoYF6SZd ZsZuFI87bPoifWIZuzd1cSZqSRlEdaEpL+dTqXLayFIZtgCPtQ55DNTT81Hq0hYV sInc5G9rR+NnIUSYP190n3sf3f+Tfi/dYiXmOIJ9nYsswze2Kp2k37O6LWE+QkdI MxxdfdFkZIcgya/hwOKyPDjxallihyQccDIV2Qv6LZlIjn1LUzmKXXPyL69c4pqQ 4dD+SNSLsPKoI4lFoaZD/YvcygqxFjM+zThGg3otIL8l/CUGKMCyQGQ3ZhljgvKr 9NqIo4RxzC9v/wF08LB3zWzPc2eE+rS5 -----END CERTIFICATE-----Generated at Wed May 14 21:07:38 2025 by rpki-client