$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: ZxhYbxS/jiAVSx40wHRmY42ympLEJge2Gr2KxPPkzVY= Subject key identifier: 2B:A2:21:1C:A0:A9:10:12:78:64:5E:A3:FA:A8:38:A7:A4:61:67:24 Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 1802 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 17F1 Signing time: Sun 04 May 2025 16:27:43 +0000 Manifest this update: Sun 04 May 2025 16:27:43 +0000 Manifest next update: Sun 11 May 2025 16:27:43 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: LrY9kfsRe75PEFdtpUhG41+xwtwG786pI4AI+NdnK3M=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: 9kSGBDbvCLlzspfA0Gzs2ktHLSvcGxJ7fb3N5eg2SV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6146 (0x1802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: May 4 16:27:43 2025 GMT Not After : May 11 16:27:43 2025 GMT Subject: CN=6817957f-bd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:da:78:05:5f:f0:83:8b:c9:15:02:f5:5c: de:6f:e8:c4:87:81:d0:16:cd:91:7c:7b:b3:4c:2b: 91:c4:bd:b0:b3:ac:2f:0a:1a:9d:f4:4f:11:3d:73: f8:ce:cd:35:b2:5f:89:ac:d2:ad:23:e6:07:16:b6: 80:97:8c:75:4b:81:17:2f:ae:d8:07:fc:6d:bf:4f: 81:79:0f:39:f6:d2:15:57:e5:1a:2a:3c:78:0a:32: 51:65:44:e8:e9:67:9e:ee:63:18:d1:f7:98:23:32: 97:77:87:f0:05:91:52:48:7f:32:d5:10:99:2d:74: ad:79:f3:ed:cd:1d:02:df:9f:98:2a:63:61:6e:98: 13:04:51:9e:13:8f:61:02:01:13:7b:58:2b:c2:62: 8b:89:fb:af:7a:24:ae:f0:3d:ef:0c:7c:3c:01:be: 06:fc:87:d0:37:e9:41:02:1d:93:22:69:24:db:64: 4d:99:56:98:df:17:42:07:c3:5b:61:c0:9a:b5:f5: c7:67:97:63:b3:ab:6c:a5:f9:1e:d0:42:87:b2:66: aa:f8:57:4f:bf:8a:0e:a5:df:77:10:25:0b:e9:1b: b2:15:7f:ac:94:ac:4a:58:78:31:7d:5a:42:3b:06: 16:b6:80:2a:43:ca:ba:be:75:55:96:1c:99:5c:73: eb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A2:21:1C:A0:A9:10:12:78:64:5E:A3:FA:A8:38:A7:A4:61:67:24 X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:fc:7a:2e:98:b8:bf:03:d1:b1:7a:e1:5a:72:f5:70:df:86: 45:13:a7:86:11:ae:d7:bc:de:c3:5b:d0:bc:d2:c7:ae:ad:03: bf:44:33:6c:d1:3f:08:53:12:6a:88:a7:e3:51:f8:8a:05:3e: 09:73:f0:ae:cc:a9:cf:1b:72:d5:50:8c:c2:0a:83:cd:3a:c5: 04:5f:24:5b:9b:cf:5b:a1:88:82:e7:f1:fb:fd:c6:a9:d6:0a: 20:42:52:71:ed:52:58:69:e3:1b:57:eb:5a:01:7c:b6:4f:bd: 3a:69:9d:32:6e:34:0c:d8:b1:44:a6:73:eb:a4:de:81:68:93: 0f:60:b1:10:bf:bc:d0:7d:4d:b3:8f:80:a7:3c:3f:e3:f1:27: 5c:20:2a:81:eb:9e:98:ec:ee:eb:9f:71:57:c4:25:ff:1d:7c: ff:cd:c4:7f:2b:2b:e0:21:02:bf:6c:ba:bb:88:6c:e3:a5:e5: fd:89:e1:ed:b8:7b:4b:a3:64:c1:ac:f4:fd:e9:2b:e0:ed:5c: f3:af:b4:68:b2:3a:c2:0e:69:63:90:84:bd:53:6c:b0:3d:b8: cd:1e:b4:c3:b4:f9:92:ae:cb:da:53:dc:b1:7b:09:42:5f:f7: b1:e7:ab:3f:35:13:58:c3:16:c5:8a:03:31:0e:c8:32:ac:78: f7:8f:6b:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjUwNTA0MTYyNzQzWhcNMjUwNTExMTYyNzQzWjAYMRYwFAYD VQQDEw02ODE3OTU3Zi1iZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+DaeAVf8IOLyRUC9Vzeb+jEh4HQFs2RfHuzTCuRxL2ws6wvChqd9E8RPXP4 zs01sl+JrNKtI+YHFraAl4x1S4EXL67YB/xtv0+BeQ859tIVV+UaKjx4CjJRZUTo 6Wee7mMY0feYIzKXd4fwBZFSSH8y1RCZLXStefPtzR0C35+YKmNhbpgTBFGeE49h AgETe1grwmKLifuveiSu8D3vDHw8Ab4G/IfQN+lBAh2TImkk22RNmVaY3xdCB8Nb YcCatfXHZ5djs6tspfke0EKHsmaq+FdPv4oOpd93ECUL6RuyFX+slKxKWHgxfVpC OwYWtoAqQ8q6vnVVlhyZXHPr0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuiIRyg qRASeGReo/qoOKekYWckMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh/HoumLi/A9GxeuFacvVw34ZFE6eGEa7XvN7DW9C80seurQO/RDNs 0T8IUxJqiKfjUfiKBT4Jc/CuzKnPG3LVUIzCCoPNOsUEXyRbm89boYiC5/H7/cap 1gogQlJx7VJYaeMbV+taAXy2T706aZ0ybjQM2LFEpnPrpN6BaJMPYLEQv7zQfU2z j4CnPD/j8SdcICqB656Y7O7rn3FXxCX/HXz/zcR/KyvgIQK/bLq7iGzjpeX9ieHt uHtLo2TBrPT96Svg7Vzzr7RosjrCDmljkIS9U2ywPbjNHrTDtPmSrsvaU9yxewlC X/ex56s/NRNYwxbFigMxDsgyrHj3j2tq -----END CERTIFICATE-----Generated at Mon May 5 15:14:37 2025 by rpki-client