$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft File: 91FDq1voML6TvNd20zKw_Vt4fjs.mft (raw, json) Hash identifier: eq3u2iQzn2pxLj9a9/2IJOBA8WnpYJJfXJdM8xeU0TQ= Subject key identifier: 83:A9:B2:0B:E7:91:17:21:28:C1:4F:2E:67:7A:69:4E:3E:4D:92:DA Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft Manifest number: 07C5 Signing time: Sat 10 May 2025 20:46:45 +0000 Manifest this update: Sat 10 May 2025 20:46:45 +0000 Manifest next update: Sat 17 May 2025 20:46:45 +0000 Files and hashes: 1: 91FDq1voML6TvNd20zKw_Vt4fjs.crl (hash: J7nxgVPUf5fE1QGMlTbI1hYEtt9nlVrb9N+wrZCEr7k=) 2: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (hash: KTuuAh3AHOrZB4qBHVBME28/yKLVl99NGNpmQ7xayeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717C0, serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Validity Not Before: May 10 20:46:45 2025 GMT Not After : May 17 20:46:45 2025 GMT Subject: CN=681fbb35-89ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:2b:55:15:77:95:37:77:c7:6e:c8:2a:17: 75:3c:43:63:66:6e:df:87:cb:59:34:23:5b:db:83: bc:60:87:e6:a1:e1:0c:dd:4e:7b:53:f9:b8:3d:85: ad:e0:9d:16:58:03:23:99:96:8f:a4:af:72:20:fe: 34:da:15:90:ca:44:9e:48:26:dd:64:8d:ff:51:53: 85:9a:91:9a:61:cb:67:7f:9b:f0:b8:13:15:d6:85: f5:35:2e:f6:bc:b0:95:75:5f:74:a4:45:78:8a:14: 68:67:f8:67:57:27:7e:cd:18:55:91:5a:f4:6c:8c: 5f:b0:b5:3c:12:b9:a8:36:81:cb:f3:c7:f1:7f:17: 5e:7f:3d:68:a7:7a:4c:0e:16:c8:43:64:7a:57:09: 25:d1:dd:ed:65:7c:63:22:0f:82:36:42:1a:be:f1: 95:49:7a:9e:40:06:2d:9d:d9:86:0f:52:16:8e:1f: 38:b0:44:44:d7:2a:9e:26:6a:02:48:8d:ff:75:ab: 2f:26:d4:b5:f6:5c:ec:75:2d:92:fa:84:b1:59:66: fd:ce:bb:74:5c:74:70:09:ba:37:a5:62:1a:1b:ee: 20:82:53:a6:ac:fd:32:dd:d0:ee:26:cf:42:9a:be: 2a:0a:2f:51:e5:86:53:36:09:41:01:58:b2:fe:18: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A9:B2:0B:E7:91:17:21:28:C1:4F:2E:67:7A:69:4E:3E:4D:92:DA X509v3 Authority Key Identifier: keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:77:0d:ca:c3:c8:82:b0:22:ed:ba:a3:09:01:2b:4c:e4:2f: ae:15:af:ac:79:f5:e2:33:2a:12:e7:6d:2e:c6:1e:4f:95:d2: 65:f3:52:f0:b1:ae:db:1d:cd:48:d2:c2:dc:0c:1c:7b:e4:96: b4:b9:52:d6:99:af:39:f9:a1:23:98:82:bf:fd:c7:c8:b2:5c: a3:c2:d6:8d:3a:ce:36:f3:0f:25:68:e0:c2:8d:78:ee:3b:ec: 24:63:b2:68:e8:7f:05:b7:f9:a5:98:73:10:ba:d7:9d:9d:71: b1:83:9b:37:17:6f:5b:1c:5f:bc:b2:81:5b:a3:71:2b:ee:73: 49:24:54:6b:4b:90:57:2a:d4:d3:41:b0:2e:ee:1c:8a:53:58: cc:53:f2:73:17:69:b7:11:d5:1c:a7:b6:0a:41:44:6f:38:a7: f6:a0:48:ef:10:da:da:49:45:f0:15:f1:7e:80:76:5f:a0:00: 43:5c:b1:37:07:59:52:a0:40:90:51:7e:b2:e7:25:fe:4f:fe: 95:e5:58:ef:45:72:e6:c1:30:c1:7e:7f:15:38:27:c2:ce:87: 09:64:5f:fb:35:cd:a2:ee:8e:35:f9:dc:32:8b:bb:32:22:aa: e4:16:e5:4b:00:c4:a8:25:31:67:de:94:50:5b:6b:5f:be:3c: 4a:6b:ec:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE NUI3ODdFM0IwHhcNMjUwNTEwMjA0NjQ1WhcNMjUwNTE3MjA0NjQ1WjAYMRYwFAYD VQQDEw02ODFmYmIzNS04OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1okrVRV3lTd3x27IKhd1PENjZm7fh8tZNCNb24O8YIfmoeEM3U57U/m4PYWt 4J0WWAMjmZaPpK9yIP402hWQykSeSCbdZI3/UVOFmpGaYctnf5vwuBMV1oX1NS72 vLCVdV90pEV4ihRoZ/hnVyd+zRhVkVr0bIxfsLU8ErmoNoHL88fxfxdefz1op3pM DhbIQ2R6Vwkl0d3tZXxjIg+CNkIavvGVSXqeQAYtndmGD1IWjh84sERE1yqeJmoC SI3/dasvJtS19lzsdS2S+oSxWWb9zrt0XHRwCbo3pWIaG+4gglOmrP0y3dDuJs9C mr4qCi9R5YZTNglBAViy/hif4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOpsgvn kRchKMFPLmd6aU4+TZLaMB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdDMC8wMThFQkU1OEYzMUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01M NlR2TmQyMHpLd19WdDRmanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvdw3Kw8iCsCLtuqMJAStM5C+uFa+sefXiMyoS520uxh5PldJl81Lw sa7bHc1I0sLcDBx75Ja0uVLWma85+aEjmIK//cfIslyjwtaNOs428w8laODCjXju O+wkY7Jo6H8Ft/mlmHMQutednXGxg5s3F29bHF+8soFbo3Er7nNJJFRrS5BXKtTT QbAu7hyKU1jMU/JzF2m3EdUcp7YKQURvOKf2oEjvENraSUXwFfF+gHZfoABDXLE3 B1lSoECQUX6y5yX+T/6V5VjvRXLmwTDBfn8VOCfCzocJZF/7Nc2i7o41+dwyi7sy IqrkFuVLAMSoJTFn3pRQW2tfvjxKa+z6 -----END CERTIFICATE-----Generated at Sun May 11 12:37:33 2025 by rpki-client