$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft File: SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json) Hash identifier: sVChO5MB6p1o3YZm6a3Il9CeDSx98rPwc//WgbWyqzE= Subject key identifier: 3D:8C:37:4A:43:74:4C:80:DC:22:04:09:3F:C6:35:C7:82:55:C7:35 Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 Certificate issuer: /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft Manifest number: DE Signing time: Fri 09 May 2025 04:32:30 +0000 Manifest this update: Fri 09 May 2025 04:32:29 +0000 Manifest next update: Fri 16 May 2025 04:32:29 +0000 Files and hashes: 1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: 1+/8fg0bGALGfucTbVlQBSok8zPEJU+yX78DELRttOg=) 2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: 9VKla165NEuwDujrYh1FdBvK2ZH/U/K5NZJL+RjIV7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650EA, serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Validity Not Before: May 9 04:32:29 2025 GMT Not After : May 16 04:32:29 2025 GMT Subject: CN=681d855e-50c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:41:64:12:f5:6a:0b:ac:6b:46:f1:2b:06: 1c:1f:0a:fe:51:39:10:26:03:0a:a6:92:77:49:1c: 6e:8d:63:b2:d3:bc:f8:60:79:71:d3:69:3c:b9:b2: dd:81:7a:5f:4b:09:f8:75:94:19:9b:c4:53:dc:d4: 06:7f:52:34:ef:26:e3:e7:ac:25:fc:b7:99:b7:75: c1:a1:39:73:96:ce:3b:0e:56:3f:32:55:65:05:13: 73:79:f5:48:df:bb:82:df:7a:ab:6c:91:85:67:e2: 23:50:e6:2b:0e:8e:22:4c:40:fa:8b:6f:67:08:2f: fc:35:64:7e:44:77:d7:5a:72:bb:82:1f:e7:1c:05: ca:d5:a1:48:8c:37:9b:c2:8c:c0:a7:40:5a:35:91: 4f:24:d5:d8:a5:80:0d:96:11:d5:b7:96:af:d1:1f: de:2d:30:5d:32:11:3d:ea:a4:3c:53:d5:bf:96:59: 8b:aa:e0:7c:a5:59:2c:bc:e5:f5:3f:48:b9:b7:f3: ef:1b:aa:21:40:51:bf:07:39:0c:8f:1a:b6:7f:57: 65:71:79:2e:60:41:c4:8a:42:dd:50:dd:56:54:ee: 04:e6:02:d9:bf:68:0e:c5:64:59:39:02:97:25:9a: a2:aa:a6:8a:68:45:ec:7e:ef:b2:d4:c2:a4:e7:d9: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8C:37:4A:43:74:4C:80:DC:22:04:09:3F:C6:35:C7:82:55:C7:35 X509v3 Authority Key Identifier: keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ab:37:92:97:29:34:bb:ef:ce:38:5c:31:1e:33:26:56:3a: b6:48:77:0a:52:de:b8:d0:5c:b5:59:9b:ad:93:9c:ca:a1:59: 28:36:f1:97:d1:cb:69:e5:8f:24:79:05:11:aa:58:3e:4a:60: 25:18:00:7a:ab:27:1e:c9:37:de:47:13:e1:da:64:29:7a:a8: 1e:da:86:5c:ea:e3:c7:32:37:cd:db:d4:c2:ee:bf:cb:ff:bb: 59:3f:de:10:ea:24:d9:3f:25:52:20:b3:9e:3a:bd:b3:10:b1: 22:87:0b:fd:9c:db:d8:09:ab:4d:fb:35:22:00:6f:1d:4f:e8: 9b:03:83:45:8c:d3:67:c6:03:f2:83:a4:63:83:09:24:43:dc: 8a:52:c7:9a:90:71:1a:1d:c2:06:e3:52:c8:d3:68:2c:3d:b6: 34:e3:18:e1:08:da:e3:22:0e:c2:14:16:4f:8f:d5:95:db:a5: 2d:05:36:89:c1:42:1d:91:30:d0:ba:46:da:89:f3:bd:97:d0: da:7b:2d:c0:1d:0b:10:47:9b:99:17:cd:da:97:0d:ce:15:48: 30:90:54:ad:d5:3d:73:d5:74:20:ba:09:6c:ef:de:b6:20:26: 21:31:b3:ee:22:be:d9:64:58:bf:85:d6:de:00:50:f9:be:a3: 42:36:cc:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwRUExMTAvBgNVBAUTKDRCMjVCMTQ3MjBGMDQ0NEJCM0Q2NjhGOTYzNTg0MzU0 RjdGQUMyMTMwHhcNMjUwNTA5MDQzMjI5WhcNMjUwNTE2MDQzMjI5WjAYMRYwFAYD VQQDEw02ODFkODU1ZS01MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXJBZBL1agusa0bxKwYcHwr+UTkQJgMKppJ3SRxujWOy07z4YHlx02k8ubLd gXpfSwn4dZQZm8RT3NQGf1I07ybj56wl/LeZt3XBoTlzls47DlY/MlVlBRNzefVI 37uC33qrbJGFZ+IjUOYrDo4iTED6i29nCC/8NWR+RHfXWnK7gh/nHAXK1aFIjDeb wozAp0BaNZFPJNXYpYANlhHVt5av0R/eLTBdMhE96qQ8U9W/llmLquB8pVksvOX1 P0i5t/PvG6ohQFG/BzkMjxq2f1dlcXkuYEHEikLdUN1WVO4E5gLZv2gOxWRZOQKX JZqiqqaKaEXsfu+y1MKk59mB3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2MN0pD dEyA3CIECT/GNceCVcc1MB8GA1UdIwQYMBaAFEslsUcg8ERLs9Zo+WNYQ1T3+sIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBFQS81MjFEMUFEOEQ3 NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JFdXoxbWo1WTFoRFZQZjZ3 aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N5V3hSeUR3UkV1ejFtajVZMWhEVlBmNndoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTBFQS81MjFEMUFEOEQ3NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JF dXoxbWo1WTFoRFZQZjZ3aE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaqzeSlyk0u+/OOFwxHjMmVjq2SHcKUt640Fy1WZutk5zKoVkoNvGX 0ctp5Y8keQURqlg+SmAlGAB6qyceyTfeRxPh2mQpeqge2oZc6uPHMjfN29TC7r/L /7tZP94Q6iTZPyVSILOeOr2zELEihwv9nNvYCatN+zUiAG8dT+ibA4NFjNNnxgPy g6RjgwkkQ9yKUseakHEaHcIG41LI02gsPbY04xjhCNrjIg7CFBZPj9WV26UtBTaJ wUIdkTDQukbaifO9l9Daey3AHQsQR5uZF83alw3OFUgwkFSt1T1z1XQgugls7962 ICYhMbPuIr7ZZFi/hdbeAFD5vqNCNswr -----END CERTIFICATE-----Generated at Sun May 11 04:20:47 2025 by rpki-client