$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: 6DAp0Qm6ZYAaYCDp69NmpAbEDgGvsxD7WPt8Jl83DFI= Subject key identifier: 97:10:72:EB:7D:C9:D8:67:1F:5B:B2:A5:CD:74:E6:91:7C:E5:75:33 Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 016C Signing time: Thu 15 May 2025 03:16:08 +0000 Manifest this update: Thu 15 May 2025 03:16:08 +0000 Manifest next update: Thu 22 May 2025 03:16:08 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: Yhb1odtNQF17uVSWvgl0d4Wc2NLukP8DpxLTJicSJGk=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: pZ0jtDypa9zbTRVdqPzNYcOmaqaH3zak3MFxphvTBnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: May 15 03:16:08 2025 GMT Not After : May 22 03:16:08 2025 GMT Subject: CN=68255c78-d8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:fd:d7:86:3e:18:b2:a2:d6:73:1e:95:98: a4:c3:60:b9:05:0e:3a:d0:fd:5d:67:95:7b:58:02: d1:df:f6:8f:da:ca:30:bc:ef:3f:18:e6:94:fb:36: 3b:03:eb:7c:9c:b1:12:fb:0d:7d:12:7c:f3:2f:fe: 29:85:b9:a4:c9:b4:47:c0:a5:45:69:7a:fa:34:e1: 01:2a:bc:03:8b:f8:54:db:7f:65:20:17:b9:da:69: a6:08:4f:7a:0d:83:18:d2:d1:92:8c:48:c6:ff:d5: 41:fb:01:54:51:43:22:ac:cd:e1:8a:85:c2:50:86: 9e:7d:3c:8d:37:ac:72:76:15:53:0f:76:3d:fc:e2: e5:aa:c6:65:70:67:58:b7:a6:c9:71:ee:27:d4:66: 6f:9e:29:b6:ff:a4:eb:23:d3:f3:6c:06:30:e5:b5: 6d:14:3b:fb:0b:9e:29:97:74:35:ad:4a:08:04:fe: e6:05:69:60:15:41:c6:5a:ce:98:1b:9f:31:45:38: c7:cc:61:32:84:fd:bb:59:c2:48:5e:bf:bf:26:43: c3:f4:80:b9:0a:d6:51:dc:93:c3:5c:43:2f:15:1e: 90:b3:5d:2d:ef:58:a7:16:b9:b5:5f:3c:43:ae:e3: ae:17:95:fc:c7:45:5a:21:b8:3f:e1:10:5c:07:22: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:10:72:EB:7D:C9:D8:67:1F:5B:B2:A5:CD:74:E6:91:7C:E5:75:33 X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:05:d4:f7:b4:24:89:65:94:91:3c:b1:a5:bb:b1:86:93:bf: 42:92:09:bf:de:07:d2:dc:f8:a8:2c:e3:9a:36:56:6f:eb:ba: b6:25:4e:a3:25:8c:0a:7b:5f:0b:97:44:03:fa:02:9b:23:11: 03:ed:31:57:cb:15:7c:e4:03:b8:07:f8:0a:a7:ff:34:74:b6: ef:e2:2d:54:05:9c:b7:d4:b0:c3:03:c7:25:75:a9:44:00:9c: 3f:01:d2:e9:7c:16:f7:1a:e4:fa:73:da:cb:d3:75:52:25:c4: 16:84:f2:ef:11:88:22:c2:3a:93:5e:13:8e:74:8b:59:46:cb: 8b:e8:38:e7:cb:5b:d9:57:83:5d:2a:57:88:14:0e:d1:49:f1: d9:4f:69:bb:c0:c2:89:0e:92:66:33:d1:10:e1:24:03:98:00: f7:3f:ea:bd:53:82:e7:68:3d:ec:1f:e4:c4:c9:53:33:bc:79: 67:60:6b:6a:bd:56:ee:b0:d8:aa:8d:fc:22:34:23:09:82:1d: f6:3f:f3:7c:eb:ea:c5:d6:7c:b3:a2:d0:66:a1:f3:3b:ad:d4: 93:17:52:03:54:ea:e0:cb:c2:0b:ba:4a:b4:1d:1c:d6:30:13: de:44:fb:dc:e1:7f:13:03:73:8a:de:83:72:7c:19:c9:fb:98: e0:8a:69:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjUwNTE1MDMxNjA4WhcNMjUwNTIyMDMxNjA4WjAYMRYwFAYD VQQDEw02ODI1NWM3OC1kOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1F7914Y+GLKi1nMelZikw2C5BQ460P1dZ5V7WALR3/aP2sowvO8/GOaU+zY7 A+t8nLES+w19EnzzL/4phbmkybRHwKVFaXr6NOEBKrwDi/hU239lIBe52mmmCE96 DYMY0tGSjEjG/9VB+wFUUUMirM3hioXCUIaefTyNN6xydhVTD3Y9/OLlqsZlcGdY t6bJce4n1GZvnim2/6TrI9PzbAYw5bVtFDv7C54pl3Q1rUoIBP7mBWlgFUHGWs6Y G58xRTjHzGEyhP27WcJIXr+/JkPD9IC5CtZR3JPDXEMvFR6Qs10t71inFrm1XzxD ruOuF5X8x0VaIbg/4RBcByJuBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcQcut9 ydhnH1uypc105pF85XUzMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApBdT3tCSJZZSRPLGlu7GGk79Ckgm/3gfS3PioLOOaNlZv67q2JU6j JYwKe18Ll0QD+gKbIxED7TFXyxV85AO4B/gKp/80dLbv4i1UBZy31LDDA8cldalE AJw/AdLpfBb3GuT6c9rL03VSJcQWhPLvEYgiwjqTXhOOdItZRsuL6Djny1vZV4Nd KleIFA7RSfHZT2m7wMKJDpJmM9EQ4SQDmAD3P+q9U4LnaD3sH+TEyVMzvHlnYGtq vVbusNiqjfwiNCMJgh32P/N86+rF1nyzotBmofM7rdSTF1IDVOrgy8ILukq0HRzW MBPeRPvc4X8TA3OK3oNyfBnJ+5jgimnw -----END CERTIFICATE-----Generated at Fri May 16 14:57:29 2025 by rpki-client