$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft File: 526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json) Hash identifier: lcpbTyfVosaMGA/7P2cIaSly0OWM/wx4DEkw4xqTKlU= Subject key identifier: 88:50:E0:72:D1:60:E2:6D:C9:40:CF:64:2C:9E:DC:E5:B1:49:9A:9C Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 37F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft Manifest number: 361B Signing time: Sat 10 May 2025 14:30:09 +0000 Manifest this update: Sat 10 May 2025 14:30:09 +0000 Manifest next update: Sat 17 May 2025 14:30:09 +0000 Files and hashes: 1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: VcoF+/FijpdakR512+s/gbEJZAPrtVpOdq5m7fhuboc=) 2: FBCF366C2CD711F08AC4A312C4F9AE02.roa (hash: CBfjRya9PXjtQ7qYGhfC0wcBmyC0lwxAV7a0wObFWmk=) 3: 2C1ADE1A35C811EEB06D6E4FC4F9AE02.roa (hash: Kb65CgSbpk+g+27O3L9YO/NalEccXczxBWE1egLtaM4=) 4: EA19E5B02CD811F08A3B9716C4F9AE02.roa (hash: u53oIYUiMJ0rA4gbsghNJqDgBzEHQAy6nZ7IeXXZIck=) 5: E01731A04A0511EFBE524A77C4F9AE02.roa (hash: ywzvrLxBT/Z7nPd3pBvdmtRanDDISy0oLSGMtPD+fnk=) 6: FD6654402CE811F09CFACA77C4F9AE02.roa (hash: qR0vgVsthXSQ06r0wB61gunfbPLyFy3vjQySYEWQxgg=) 7: 1B8CEF10160F11F0BC8CF16EC4F9AE02.roa (hash: Atw8mYr719QL2buAs4N+u5Fvkp0vLbC2BST8Rr2vnds=) 8: 5C696C684ABB11EFB64F1B36C4F9AE02.roa (hash: DpJlRaFGhxdvGqVu7m9VIpzHXrpSWXkrTNeb5efv6ao=) 9: 6B9538F223DD11EF81EBB933C4F9AE02.roa (hash: Qqy4u5Du4YJjLwWpq0dlcmlkR6uc3a3M7nv191S71u8=) 10: D677B8F8E46B11EFB0037B77C4F9AE02.roa (hash: K4F5g57zFJUCifiiu4f79X8f4i1nu9uazXLtGfM7eKU=) 11: 9EA1CDAAFBF611EEAEFDCB0CC4F9AE02.roa (hash: 4ynLb0Ypopkzl8emElYUHjGvnOkE64cL4WqzPSTgtgo=) 12: 2AFAC78029B311F0AF325E4AC4F9AE02.roa (hash: 0hIgW5CG8iPnwbJI81kYoFtj1lu0dvTdP0H3VWyhfX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14322 (0x37f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: May 10 14:30:09 2025 GMT Not After : May 17 14:30:09 2025 GMT Subject: CN=681f62f1-3341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:7f:68:a6:9c:7a:fb:29:c9:ac:08:0c:22: 88:2f:54:8a:a5:3e:03:68:34:3c:77:89:4f:a4:84: 87:4b:ad:df:10:99:be:64:5a:fb:3d:14:43:e6:ec: d6:e6:f6:5c:19:8c:f4:15:a7:e8:5d:05:46:3f:c2: c2:dc:2b:f7:ef:ab:80:6a:18:82:4d:68:1f:8f:e5: ef:e0:ee:1f:b5:3f:06:30:e9:d5:8c:9d:5e:ca:b5: 7e:68:ca:b5:7d:49:01:a0:13:79:3b:67:19:f7:ae: 2d:7f:4c:a1:60:d2:e1:c5:7a:98:ed:99:48:92:00: 12:d8:e1:82:1e:25:4d:d4:a9:13:66:5e:88:6a:e4: 7a:36:5a:15:45:18:dc:3e:76:a9:aa:bc:01:f1:f5: 91:b8:a4:77:2a:99:af:e5:f9:c8:3f:97:60:07:c7: bc:2f:f7:ca:1e:c5:53:c1:ba:ef:f8:e8:90:38:2a: 76:68:f5:6c:59:46:fb:f5:ae:0a:a4:69:fa:70:0b: 46:47:56:52:3a:21:9c:23:85:ee:b6:52:c3:5f:69: a0:96:e8:e6:ae:c8:97:a3:df:ef:7f:cc:c8:23:6b: 76:46:94:11:65:d1:bf:cc:e5:0f:56:b3:8d:72:ea: aa:14:c6:ae:1d:9e:d3:1d:4d:02:be:7e:df:39:8e: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:50:E0:72:D1:60:E2:6D:C9:40:CF:64:2C:9E:DC:E5:B1:49:9A:9C X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:f3:58:fa:03:89:af:0b:0c:86:8f:f6:de:4f:50:6b:d1:9a: e4:f2:f7:e7:33:be:82:cd:c6:a2:0c:99:f7:ed:35:e8:0a:7c: 16:93:e5:ab:85:2d:aa:a0:eb:c2:cf:af:4a:0d:31:ad:ea:0d: a8:3f:f5:23:fc:7b:6c:89:96:e3:2d:a8:b8:eb:f5:9f:0b:ed: 05:36:cc:cf:b8:98:8d:7b:a6:ed:dd:b9:61:0d:04:e9:d4:ba: 46:c9:bb:dd:4f:3b:b2:b1:4c:bf:7a:bd:2c:d0:e6:89:51:e3: 10:8a:10:6a:2c:89:c6:53:65:c6:55:8b:88:1b:56:a9:01:de: ec:65:7e:b5:6f:40:32:d3:75:21:a5:e4:8a:4b:9c:5b:54:68: 1e:93:39:f2:e3:39:4e:08:aa:1f:af:aa:c9:54:1a:c1:fd:ac: ec:dc:41:e3:5b:56:d8:a5:c6:20:d9:ba:20:54:36:41:84:a0: e6:bf:d5:a2:e4:7e:73:9c:19:69:c5:3f:1d:d5:d7:5c:a3:1c: f6:29:5e:58:91:f8:e1:52:be:9d:0c:0c:00:50:4a:76:91:fa: 45:7f:c6:8e:28:8a:56:bf:a3:11:7c:d7:8d:e7:04:93:1e:bd: f7:91:bd:27:6b:8b:c9:8b:d5:85:78:58:dd:db:db:24:7c:54: 0e:0b:29:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICN/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwNTEwMTQzMDA5WhcNMjUwNTE3MTQzMDA5WjAYMRYwFAYD VQQDEw02ODFmNjJmMS0zMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFx/aKacevspyawIDCKIL1SKpT4DaDQ8d4lPpISHS63fEJm+ZFr7PRRD5uzW 5vZcGYz0FafoXQVGP8LC3Cv376uAahiCTWgfj+Xv4O4ftT8GMOnVjJ1eyrV+aMq1 fUkBoBN5O2cZ964tf0yhYNLhxXqY7ZlIkgAS2OGCHiVN1KkTZl6IauR6NloVRRjc PnapqrwB8fWRuKR3Kpmv5fnIP5dgB8e8L/fKHsVTwbrv+OiQOCp2aPVsWUb79a4K pGn6cAtGR1ZSOiGcI4XutlLDX2mglujmrsiXo9/vf8zII2t2RpQRZdG/zOUPVrON cuqqFMauHZ7THU0Cvn7fOY5UtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhQ4HLR YOJtyUDPZCye3OWxSZqcMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzgzQi9FNEUxMEI0QTFEODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNI NHBCNWVEUS1tdG5kSWY0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO81j6A4mvCwyGj/beT1Br0Zrk8vfnM76CzcaiDJn37TXoCnwWk+Wr hS2qoOvCz69KDTGt6g2oP/Uj/HtsiZbjLai46/WfC+0FNszPuJiNe6bt3blhDQTp 1LpGybvdTzuysUy/er0s0OaJUeMQihBqLInGU2XGVYuIG1apAd7sZX61b0Ay03Uh peSKS5xbVGgekzny4zlOCKofr6rJVBrB/azs3EHjW1bYpcYg2bogVDZBhKDmv9Wi 5H5znBlpxT8d1ddcoxz2KV5YkfjhUr6dDAwAUEp2kfpFf8aOKIpWv6MRfNeN5wST Hr33kb0na4vJi9WFeFjd29skfFQOCykB -----END CERTIFICATE-----Generated at Sun May 11 10:16:19 2025 by rpki-client