$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft File: U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json) Hash identifier: e2bSLOR8IRI7l5TCLTewzWh7KWe+t10wqjesFjNEHHA= Subject key identifier: 9E:12:E2:D8:95:F2:5D:5F:46:13:DE:F0:A2:E6:05:05:A7:49:82:17 Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft Manifest number: 61 Signing time: Tue 13 May 2025 06:20:31 +0000 Manifest this update: Tue 13 May 2025 06:20:30 +0000 Manifest next update: Tue 20 May 2025 06:20:30 +0000 Files and hashes: 1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: mA/ThrJMnRbvxSv6mhH5ecOGOaxTEE0HVO7fw9ZenUg=) 2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: May 13 06:20:30 2025 GMT Not After : May 20 06:20:30 2025 GMT Subject: CN=6822e4ae-473d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:75:61:e4:27:65:5c:56:f0:20:14:40:df: ea:c1:6c:15:91:35:80:ef:71:86:66:71:ff:e5:42: 50:f4:d9:9b:74:50:8c:97:24:1c:c4:33:b2:7b:17: 15:6d:18:ee:86:73:f2:b8:16:6f:59:b0:93:20:57: 59:ea:34:63:b6:86:ac:87:36:fd:25:2a:21:26:27: 80:27:9a:b1:99:de:80:8f:8f:c6:51:d7:6c:c0:a1: a8:db:bb:03:87:d8:7d:73:d7:4f:a8:6a:22:3c:b3: a7:b9:a4:1a:2a:45:c6:de:46:ee:a4:4a:3e:bf:b6: f9:56:29:33:3e:61:c8:41:b9:de:b1:05:39:ee:55: 0d:05:5f:0c:57:70:84:d6:17:84:08:86:06:94:43: 0e:3d:15:da:40:d8:47:8b:ce:4f:31:d4:e5:f5:3d: 16:0e:77:25:be:fc:0d:5d:5f:7e:0f:bc:50:f5:5c: 8f:7a:9c:45:5b:57:ef:5f:11:1d:11:d4:a0:03:00: 5a:c1:68:24:af:d1:15:2c:e5:51:4d:dd:ac:80:d6: 1e:56:94:f9:d8:d5:7e:9b:6f:6b:5b:4c:e8:5c:7d: 5e:4e:bb:93:dd:4c:a7:88:b3:32:d9:38:11:76:70: 41:88:85:77:3d:83:c9:0d:f7:56:ed:1f:8a:22:d3: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:12:E2:D8:95:F2:5D:5F:46:13:DE:F0:A2:E6:05:05:A7:49:82:17 X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:1a:5a:66:b4:e8:52:28:c8:1f:07:2a:00:e1:cc:22:99:53: 67:1e:3d:16:36:79:aa:16:80:74:b4:d4:0f:49:e3:7e:1d:51: 2a:66:6a:d4:96:b7:be:53:ae:a4:dc:d9:40:92:31:d6:21:fb: be:ef:d0:5c:06:0e:e4:90:7f:2f:53:82:75:39:a1:e0:30:f9: 20:4b:23:90:ff:73:ab:62:3e:31:0b:07:e3:c1:1c:17:b2:44: fc:55:07:0d:c1:b1:7b:28:d8:5a:73:eb:cf:d7:44:ab:12:3d: 4f:9d:f4:21:2b:12:ab:ef:98:4d:cb:d8:86:3b:13:46:90:df: 61:73:3b:05:94:30:6c:b5:b7:27:2b:99:d1:d0:bf:b2:f1:c8: 74:56:83:eb:c7:ad:d5:da:30:b6:49:71:28:32:d3:47:32:86: fd:25:9c:bd:e5:07:d2:26:db:23:97:dd:ad:bb:3b:1d:ee:be: de:84:8e:4e:88:05:2c:1d:fa:98:b6:f3:a8:be:49:4b:12:0b: a7:dc:2c:a1:9a:93:4c:e2:c2:e1:35:9a:32:69:03:ba:cb:d7: cf:36:43:8d:c8:8c:44:af:04:ce:03:7d:32:13:6c:41:42:78: 10:2f:61:12:63:c7:3d:cd:5d:3e:7e:6d:2b:56:4c:6f:b2:1d: a4:fc:2a:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODFENTExMC8GA1UEBRMoNTM0NEQ2QkIzN0VBMENDMzkxRDEyNDIwN0FEOTk1RkNE NzdCOUU5NTAeFw0yNTA1MTMwNjIwMzBaFw0yNTA1MjAwNjIwMzBaMBgxFjAUBgNV BAMTDTY4MjJlNGFlLTQ3M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6g3Vh5CdlXFbwIBRA3+rBbBWRNYDvcYZmcf/lQlD02Zt0UIyXJBzEM7J7FxVt GO6Gc/K4Fm9ZsJMgV1nqNGO2hqyHNv0lKiEmJ4AnmrGZ3oCPj8ZR12zAoajbuwOH 2H1z10+oaiI8s6e5pBoqRcbeRu6kSj6/tvlWKTM+YchBud6xBTnuVQ0FXwxXcITW F4QIhgaUQw49FdpA2EeLzk8x1OX1PRYOdyW+/A1dX34PvFD1XI96nEVbV+9fER0R 1KADAFrBaCSv0RUs5VFN3ayA1h5WlPnY1X6bb2tbTOhcfV5Ou5PdTKeIszLZOBF2 cEGIhXc9g8kN91btH4oi01fXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnhLi2JXy XV9GE97wouYFBadJghcwHwYDVR0jBBgwFoAUU0TWuzfqDMOR0SQgetmV/Nd7npUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MUQ1LzY2NURCN0M2QTdD MDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25w VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTBUV3V6ZnFETU9SMFNRZ2V0bVZfTmQ3bnBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MUQ1LzY2NURCN0M2QTdDMDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1P UjBTUWdldG1WX05kN25wVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANIaWma06FIoyB8HKgDhzCKZU2cePRY2eaoWgHS01A9J434dUSpmatSW t75TrqTc2UCSMdYh+77v0FwGDuSQfy9TgnU5oeAw+SBLI5D/c6tiPjELB+PBHBey RPxVBw3BsXso2Fpz68/XRKsSPU+d9CErEqvvmE3L2IY7E0aQ32FzOwWUMGy1tycr mdHQv7LxyHRWg+vHrdXaMLZJcSgy00cyhv0lnL3lB9Im2yOX3a27Ox3uvt6Ejk6I BSwd+pi286i+SUsSC6fcLKGak0ziwuE1mjJpA7rL1882Q43IjESvBM4DfTITbEFC eBAvYRJjxz3NXT5+bStWTG+yHaT8Ks4= -----END CERTIFICATE-----Generated at Tue May 13 21:57:11 2025 by rpki-client