$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft File: _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json) Hash identifier: sHXsVBsfrB9sEFhihKIWeYlkVd5GDANpxSgwMT18bpY= Subject key identifier: 67:04:EB:98:C1:9A:D9:58:83:63:7D:7B:C2:EF:65:B3:6A:CD:5C:3B Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Certificate serial: 1EA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft Manifest number: 1E96 Signing time: Mon 12 May 2025 16:00:39 +0000 Manifest this update: Mon 12 May 2025 16:00:39 +0000 Manifest next update: Mon 19 May 2025 16:00:39 +0000 Files and hashes: 1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: 85Lqav8l4xgUQABLb3Pzu99dd+Eo9EgmYZx1EPGASfM=) 2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: JNpFgM+KWXtVAKMLIECfprcazoPzZ95joJw//lWOa/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7840 (0x1ea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Validity Not Before: May 12 16:00:39 2025 GMT Not After : May 19 16:00:39 2025 GMT Subject: CN=68221b27-97f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:f0:6c:91:89:bd:b9:39:b4:44:c8:bf:1d: 48:4f:83:c0:cb:a8:8a:8e:be:37:41:3f:f4:72:d2: 02:b9:4e:7d:a2:2d:25:bd:5d:60:0c:2a:30:54:9d: c2:18:a5:f0:99:a1:95:a5:72:e9:f7:95:9a:79:25: 96:5c:84:df:8b:ab:f5:f1:a8:9b:48:fc:0c:ae:52: 99:32:20:6c:72:c8:3b:27:a6:7a:b0:8b:9a:1c:d1: bd:a3:0a:ab:30:9c:ae:fe:56:59:da:3a:ed:6b:81: b2:18:14:1c:5b:b0:a9:dc:13:61:5c:dd:40:2f:23: e4:81:d5:1b:59:6a:cc:d9:ea:5f:93:c3:30:f5:bd: 28:a0:6e:80:85:ec:95:40:10:ca:e5:b8:a1:88:b9: 8d:33:81:d4:41:cf:5f:20:c0:67:5d:e6:f7:6c:ab: a3:70:b1:a3:f4:ea:1d:fc:39:34:d8:ce:49:13:8c: 3e:71:86:85:62:84:39:0e:bb:89:b1:d3:70:33:82: f4:20:e2:a3:dc:28:f5:04:9e:44:a0:25:e3:79:e4: 18:e5:b6:67:11:25:03:0e:71:7d:9c:59:6a:52:c3: 14:ab:c6:84:90:82:24:d9:7e:85:3f:74:3e:25:32: e7:5f:b9:d5:28:95:40:f5:f2:92:8d:82:36:d4:98: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:04:EB:98:C1:9A:D9:58:83:63:7D:7B:C2:EF:65:B3:6A:CD:5C:3B X509v3 Authority Key Identifier: keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5b:1f:1a:ec:47:74:28:e2:1d:42:c4:18:67:eb:3f:2a:96: 12:ca:3a:16:fd:e1:b9:fc:2c:56:3f:bf:2d:c1:85:b3:6a:eb: ab:15:9b:86:ee:ab:52:f0:20:7e:61:d0:1d:c3:b1:9d:37:95: f4:7f:b0:74:f4:f7:2f:2f:1a:9c:c1:87:0d:f4:87:dd:e0:13: 26:4e:ab:8c:ba:c8:67:1e:12:13:91:d5:e3:1d:7c:4c:d4:e0: b5:78:66:38:2b:a9:09:88:b9:60:73:9a:35:52:26:b3:e2:98: 9f:64:15:e6:5f:62:3c:c7:c1:6a:48:ce:f4:ba:bd:10:44:45: 76:73:94:68:05:7a:31:d3:c4:0f:f0:5c:ae:13:5f:3b:9b:3b: 2d:b6:11:10:07:ff:ba:f1:3f:46:1b:5f:89:14:b8:c9:e7:6d: c0:4b:e3:e7:e6:3c:9e:6f:f2:3a:86:61:45:6b:ab:cc:48:0c: 90:3b:43:96:85:ec:a3:8d:b2:1e:40:8c:71:48:a0:a1:8e:ae: 18:9e:a7:d1:a1:ba:1f:bf:16:e2:b6:99:57:76:f0:65:3a:b0: 52:af:92:1e:c9:54:e5:a0:a9:c4:e2:c8:b4:36:ff:85:26:a4: 75:40:b8:87:da:59:7f:3d:26:51:d4:48:4e:44:00:5f:94:73: e1:88:2f:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0RjgxMTAvBgNVBAUTKEZERkQxNjZDQzUxRDlFM0FCNzQ5NjQwNzRCNkU2NDk0 Njc0RTJGNkUwHhcNMjUwNTEyMTYwMDM5WhcNMjUwNTE5MTYwMDM5WjAYMRYwFAYD VQQDEw02ODIyMWIyNy05N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw13wbJGJvbk5tETIvx1IT4PAy6iKjr43QT/0ctICuU59oi0lvV1gDCowVJ3C GKXwmaGVpXLp95WaeSWWXITfi6v18aibSPwMrlKZMiBscsg7J6Z6sIuaHNG9owqr MJyu/lZZ2jrta4GyGBQcW7Cp3BNhXN1ALyPkgdUbWWrM2epfk8Mw9b0ooG6AheyV QBDK5bihiLmNM4HUQc9fIMBnXeb3bKujcLGj9Ood/Dk02M5JE4w+cYaFYoQ5DruJ sdNwM4L0IOKj3Cj1BJ5EoCXjeeQY5bZnESUDDnF9nFlqUsMUq8aEkIIk2X6FP3Q+ JTLnX7nVKJVA9fKSjYI21JiALQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcE65jB mtlYg2N9e8LvZbNqzVw7MB8GA1UdIwQYMBaAFP39FmzFHZ46t0lkB0tuZJRnTi9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRGOC8yMjhBRDNFQTZC MzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5qcTNTV1FIUzI1a2xHZE9M MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mMFdiTVVkbmpxM1NXUUhTMjVrbEdkT0wyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRGOC8yMjhBRDNFQTZCMzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5q cTNTV1FIUzI1a2xHZE9MMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeWx8a7Ed0KOIdQsQYZ+s/KpYSyjoW/eG5/CxWP78twYWzauurFZuG 7qtS8CB+YdAdw7GdN5X0f7B09PcvLxqcwYcN9Ifd4BMmTquMushnHhITkdXjHXxM 1OC1eGY4K6kJiLlgc5o1Uiaz4pifZBXmX2I8x8FqSM70ur0QREV2c5RoBXox08QP 8FyuE187mzstthEQB/+68T9GG1+JFLjJ523AS+Pn5jyeb/I6hmFFa6vMSAyQO0OW heyjjbIeQIxxSKChjq4YnqfRobofvxbitplXdvBlOrBSr5IeyVTloKnE4si0Nv+F JqR1QLiH2ll/PSZR1EhORABflHPhiC+J -----END CERTIFICATE-----Generated at Tue May 13 03:44:36 2025 by rpki-client