$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: 0Uk7NynqjGNz7t8siyutljYo2v1dTf1/NGJmTbdtGxE= Subject key identifier: 06:9A:0F:9D:5D:55:72:9F:ED:48:60:D0:65:F4:18:62:86:D2:DB:D4 Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 0450 Signing time: Sat 10 May 2025 23:47:41 +0000 Manifest this update: Sat 10 May 2025 23:47:41 +0000 Manifest next update: Sat 17 May 2025 23:47:41 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: QOoyfv9GrVbLO2jH0svqfaqJbFNlMnqdj5/pFLt+lcs=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: May 10 23:47:41 2025 GMT Not After : May 17 23:47:41 2025 GMT Subject: CN=681fe59d-5580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:f2:9c:ca:49:83:23:9b:92:98:a2:e4:7c: bc:43:35:61:89:d6:ec:07:a4:48:98:dd:82:86:0b: 0f:12:da:21:b2:02:a2:eb:41:82:31:1e:e4:c7:4b: db:81:1f:24:bf:61:d4:65:ff:63:50:ec:8a:1b:06: 4b:9c:15:e0:a1:6f:26:72:da:1c:93:17:b4:1d:2f: ed:88:28:4d:ba:fd:2c:ca:c3:82:4c:1f:a6:ac:00: a9:a3:78:91:ca:6e:76:6c:5c:83:bd:29:95:36:96: d5:69:ae:31:e6:ce:3a:76:aa:02:77:a0:97:58:45: 89:73:8a:47:17:c7:b2:94:c8:8a:db:bc:37:09:65: 29:b1:10:70:f7:35:31:6b:51:16:d3:71:63:94:a0: 8e:52:7d:7c:1a:ca:6b:70:61:6a:f9:10:74:68:88: 3d:3b:b5:cd:a8:69:5c:76:53:92:f9:70:83:48:82: 39:ad:1a:7c:b9:17:74:30:aa:9c:e4:30:1c:cf:c3: d5:67:98:52:36:da:fb:48:2a:24:5e:df:14:1b:55: 53:a3:61:05:08:22:ad:ce:86:d0:7f:4c:4e:d2:2f: a4:9e:97:83:df:d8:1c:a2:03:99:8e:f1:f5:52:52: 05:d8:e5:74:5e:89:e1:9d:ba:29:57:f1:41:ac:6b: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9A:0F:9D:5D:55:72:9F:ED:48:60:D0:65:F4:18:62:86:D2:DB:D4 X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:9f:33:45:88:ca:2e:44:95:44:b4:f8:f3:44:f6:e5:c5:37: 74:f8:92:d5:44:ee:cc:3d:87:7d:73:a1:a0:5e:d2:33:62:94: 4e:c4:42:3c:9f:0c:82:b9:e2:e2:f1:88:4d:fb:9f:83:ad:df: 5d:6e:14:79:a5:07:59:32:3d:ee:71:8a:41:43:fc:09:88:20: db:17:1f:1f:d4:a0:2b:db:4a:2b:56:fd:b6:0a:66:73:a8:9f: 47:56:8c:ab:01:86:58:1f:f5:7c:a8:86:e7:c9:56:34:f5:a3: 79:d5:5b:5f:29:0a:8d:10:34:67:12:fe:71:a6:e9:96:5e:09: dd:55:65:3a:1b:c4:fd:66:c1:e3:24:09:e5:44:58:7d:24:61: 08:48:db:4c:63:f3:c9:bc:42:b9:2f:5d:4b:8b:93:ab:64:cb: 8d:a9:e8:b0:c2:4c:d5:65:40:44:f3:11:79:8a:aa:8c:d7:c4: 8e:25:30:bd:3f:97:b7:64:7c:b7:a7:db:bc:41:03:42:4f:f9: 74:6e:bb:17:66:3c:23:23:86:a1:f4:ef:7c:77:ff:c4:a2:d8: 28:81:0b:5b:72:a8:74:20:54:86:b5:1e:d2:f3:42:f2:48:e5: ac:ec:9f:f7:8b:fd:fb:42:bf:28:d1:d2:19:48:57:a8:f8:c7: 5c:ff:9f:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjUwNTEwMjM0NzQxWhcNMjUwNTE3MjM0NzQxWjAYMRYwFAYD VQQDEw02ODFmZTU5ZC01NTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs3ynMpJgyObkpii5Hy8QzVhidbsB6RImN2ChgsPEtohsgKi60GCMR7kx0vb gR8kv2HUZf9jUOyKGwZLnBXgoW8mctockxe0HS/tiChNuv0sysOCTB+mrACpo3iR ym52bFyDvSmVNpbVaa4x5s46dqoCd6CXWEWJc4pHF8eylMiK27w3CWUpsRBw9zUx a1EW03FjlKCOUn18GsprcGFq+RB0aIg9O7XNqGlcdlOS+XCDSII5rRp8uRd0MKqc 5DAcz8PVZ5hSNtr7SCokXt8UG1VTo2EFCCKtzobQf0xO0i+knpeD39gcogOZjvH1 UlIF2OV0XonhnbopV/FBrGuW4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaaD51d VXKf7Uhg0GX0GGKG0tvUMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDnzNFiMouRJVEtPjzRPblxTd0+JLVRO7MPYd9c6GgXtIzYpROxEI8 nwyCueLi8YhN+5+Drd9dbhR5pQdZMj3ucYpBQ/wJiCDbFx8f1KAr20orVv22CmZz qJ9HVoyrAYZYH/V8qIbnyVY09aN51VtfKQqNEDRnEv5xpumWXgndVWU6G8T9ZsHj JAnlRFh9JGEISNtMY/PJvEK5L11Li5OrZMuNqeiwwkzVZUBE8xF5iqqM18SOJTC9 P5e3ZHy3p9u8QQNCT/l0brsXZjwjI4ah9O98d//EotgogQtbcqh0IFSGtR7S80Ly SOWs7J/3i/37Qr8o0dIZSFeo+Mdc/5/P -----END CERTIFICATE-----Generated at Mon May 12 19:03:39 2025 by rpki-client