$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json) Hash identifier: zZNpRV4BBgoZO9IjyZN3KWX0vGd0ezzRweU2u/DirzU= Subject key identifier: B2:24:B9:E9:36:C8:1F:B6:F9:20:01:E3:9A:48:CB:35:77:7D:DB:3F Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Certificate serial: 11B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft Manifest number: 1199 Signing time: Mon 12 May 2025 17:09:06 +0000 Manifest this update: Mon 12 May 2025 17:09:06 +0000 Manifest next update: Mon 19 May 2025 17:09:06 +0000 Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: OfCixw70FVkAlrjPOIHGLcc3w9V7RLgasX/pThlyHtc=) 2: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=) 3: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=) 4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4534 (0x11b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Validity Not Before: May 12 17:09:06 2025 GMT Not After : May 19 17:09:06 2025 GMT Subject: CN=68222b32-1ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c5:cd:dd:26:5a:53:c4:a3:f5:d0:c3:c2:3c: f0:d1:34:b3:88:b4:3d:d4:17:f1:8f:90:07:f3:db: b0:50:c6:87:2b:d5:d2:c4:77:8d:02:b0:97:d2:78: ed:46:ab:2c:f9:3c:05:99:22:52:e4:90:1a:71:ff: af:b7:a1:20:82:e2:3e:61:99:81:47:f7:de:3a:b8: ae:dc:0a:88:16:67:24:3d:61:e5:98:7c:29:d6:fe: 0f:37:bc:33:e0:cc:65:e2:57:3a:f7:7f:b4:46:c2: 38:f8:ab:7a:78:67:4b:7c:aa:bd:fb:b5:a9:49:37: 5c:fb:e4:2e:39:61:15:e6:dc:84:bb:1b:b2:9b:2e: 68:a3:aa:39:3c:c5:54:73:1e:6b:b7:88:50:5e:6d: bf:7c:ed:d1:56:d0:4d:a5:eb:01:97:e0:0d:7a:61: c4:ac:f8:71:44:da:5b:22:e0:b6:0f:39:03:15:57: c9:66:c7:c9:e9:6a:dd:40:de:a8:32:b3:61:73:f2: a6:07:a7:d0:2a:c5:99:3b:c6:62:7b:04:d0:c8:96: 21:cc:fd:59:78:20:65:7b:f6:36:9b:a6:22:8d:f0: d1:67:95:6f:7d:a7:94:17:ec:32:f0:73:ab:1a:76: 61:b4:e8:6a:aa:c7:17:8a:8b:0e:20:92:ff:1b:f2: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:24:B9:E9:36:C8:1F:B6:F9:20:01:E3:9A:48:CB:35:77:7D:DB:3F X509v3 Authority Key Identifier: keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e9:ff:88:20:94:ac:c3:84:a7:91:a4:66:6c:48:84:08:33: fc:2f:6b:83:4b:dc:75:88:b8:8a:f6:40:b5:60:d1:7f:e5:3c: 40:ea:60:0a:a9:82:39:d6:99:61:9c:94:7a:07:8a:14:a5:73: 32:cf:4a:7b:83:45:4c:38:0e:8b:1b:55:51:77:ce:8b:47:59: 43:20:49:19:14:2e:67:8d:df:91:9e:2e:5c:53:bf:36:2e:a9: 27:0a:1b:26:2b:aa:d9:12:46:8a:58:cf:d9:48:92:f5:2a:13: a1:c3:5d:99:74:2c:30:99:59:17:4a:12:56:ff:ac:03:44:a4: 8b:59:dd:cb:fd:b1:be:a0:af:09:f1:a1:64:74:b6:5e:85:ba: 55:bd:ae:bf:26:26:e0:53:11:c5:3e:29:d8:f5:b5:c6:6f:20: 15:57:93:44:97:a5:50:7c:14:4d:c1:58:b1:45:33:b3:5d:88: b6:1d:dd:a2:1c:d3:40:34:bb:6c:4d:0a:90:b9:05:1d:83:a9: 5e:85:c2:be:9f:b4:bf:0b:7a:08:a3:ba:41:c6:4e:04:c3:22: 9d:3b:2e:9b:67:c6:7b:f9:f2:ba:55:e9:bc:76:31:69:bc:2d: 5c:a2:40:c1:08:2e:e5:d5:15:d0:af:79:27:30:71:ee:ff:ef: 77:2b:73:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG MEVDQjIwQTIwHhcNMjUwNTEyMTcwOTA2WhcNMjUwNTE5MTcwOTA2WjAYMRYwFAYD VQQDEw02ODIyMmIzMi0xZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sXN3SZaU8Sj9dDDwjzw0TSziLQ91Bfxj5AH89uwUMaHK9XSxHeNArCX0njt Rqss+TwFmSJS5JAacf+vt6EgguI+YZmBR/feOriu3AqIFmckPWHlmHwp1v4PN7wz 4Mxl4lc693+0RsI4+Kt6eGdLfKq9+7WpSTdc++QuOWEV5tyEuxuymy5oo6o5PMVU cx5rt4hQXm2/fO3RVtBNpesBl+ANemHErPhxRNpbIuC2DzkDFVfJZsfJ6WrdQN6o MrNhc/KmB6fQKsWZO8ZiewTQyJYhzP1ZeCBle/Y2m6YijfDRZ5VvfaeUF+wy8HOr GnZhtOhqqscXiosOIJL/G/IrSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIkuek2 yB+2+SAB45pIyzV3fds/MB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp6f+IIJSsw4SnkaRmbEiECDP8L2uDS9x1iLiK9kC1YNF/5TxA6mAK qYI51plhnJR6B4oUpXMyz0p7g0VMOA6LG1VRd86LR1lDIEkZFC5njd+Rni5cU782 LqknChsmK6rZEkaKWM/ZSJL1KhOhw12ZdCwwmVkXShJW/6wDRKSLWd3L/bG+oK8J 8aFkdLZehbpVva6/JibgUxHFPinY9bXGbyAVV5NEl6VQfBRNwVixRTOzXYi2Hd2i HNNANLtsTQqQuQUdg6lehcK+n7S/C3oIo7pBxk4EwyKdOy6bZ8Z7+fK6Vem8djFp vC1cokDBCC7l1RXQr3knMHHu/+93K3PL -----END CERTIFICATE-----Generated at Tue May 13 10:44:16 2025 by rpki-client