$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft File: 47jqsa6RbflaLVWue7e7eaULSuc.mft (raw, json) Hash identifier: OvvCR2d26725CBK/+F0hQSstUbl/FGr0UN5cc2Sn8nA= Subject key identifier: E9:6D:6D:5F:D7:BF:C7:D1:C7:10:CD:BE:8B:CA:B9:CF:61:B8:51:6C Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 Certificate issuer: /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Certificate serial: 0730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft Manifest number: 072A Signing time: Mon 12 May 2025 21:34:31 +0000 Manifest this update: Mon 12 May 2025 21:34:30 +0000 Manifest next update: Mon 19 May 2025 21:34:30 +0000 Files and hashes: 1: 47jqsa6RbflaLVWue7e7eaULSuc.crl (hash: WmgjioAuKxsqEuZWIqaWxMpzy+ZKXQplH7mhUu+DsGU=) 2: D2E2417A2F7211EB80969C22C4F9AE02.roa (hash: xD5zoFxi5V/haijCFX+sW8lJO7TZJGfn2t06N67wG1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1840 (0x730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B591, serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Validity Not Before: May 12 21:34:30 2025 GMT Not After : May 19 21:34:30 2025 GMT Subject: CN=68226967-dbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:00:3c:95:e7:55:ef:b7:d6:7f:68:fa:e8: 61:28:38:f7:4c:73:54:64:ed:7b:1c:4a:94:e8:1f: 80:24:07:02:31:57:61:96:5d:10:07:b5:2c:92:a0: 06:ee:90:fe:f2:7b:35:8b:cc:8e:6e:22:6c:eb:da: e6:2b:b0:fa:c1:44:5f:3d:13:79:11:bc:0f:6d:c9: 1b:62:bb:17:e0:3c:a7:ad:6b:26:fb:d3:72:8b:76: 25:75:fa:35:1c:d2:2d:96:17:4a:bb:eb:5e:56:db: 63:af:87:34:db:95:c4:c9:ac:fb:b4:0d:8a:e5:1e: 74:11:88:7e:63:78:cf:7c:e9:19:02:32:84:32:36: 34:69:5c:08:d5:e6:70:8c:a4:7f:63:0c:fa:dc:0d: 8a:46:ec:c9:32:26:2c:34:ec:88:a5:0c:f1:a0:f8: e4:97:da:0b:cf:dc:bb:f4:e6:f7:2d:44:11:28:3a: 9f:75:e3:0a:d3:53:5f:bf:b7:85:5c:e1:2e:88:a8: 33:bf:ff:2b:03:ea:4e:66:f7:40:5a:9b:fe:70:f4: a2:eb:2e:ac:da:8b:bd:5c:ef:47:5f:88:1c:b7:28: ad:fd:fc:72:e1:2e:71:ac:e7:89:07:69:54:db:2d: f9:22:66:16:20:3a:97:35:7d:41:04:37:ec:64:18: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6D:6D:5F:D7:BF:C7:D1:C7:10:CD:BE:8B:CA:B9:CF:61:B8:51:6C X509v3 Authority Key Identifier: keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:1d:83:bd:d1:89:b2:dd:b6:3d:6c:b8:ec:4c:f6:39:ce:46: c2:8b:55:f6:22:82:23:34:2f:71:46:0b:44:67:a6:bc:6e:cd: 19:c8:ac:ce:47:4a:28:a1:78:ce:dd:1b:e2:33:18:5f:59:40: 21:58:c5:d6:e2:5c:7e:9f:9d:4b:50:5e:68:f0:84:f1:45:e5: b4:0c:e8:b2:fc:e8:7a:52:2a:db:9d:8d:80:fa:bf:cc:e9:0b: 56:7b:ec:78:e6:48:bb:f7:34:8d:9c:c8:f4:bb:06:f3:22:79: d9:f5:22:48:3c:6c:db:28:fd:d9:80:55:f8:6f:7e:34:0a:00: 6b:00:9b:56:1e:f7:35:a3:a0:1f:82:47:94:b1:52:dd:64:fd: f5:3e:19:73:c5:13:00:da:cb:4b:50:0f:a1:dc:a8:12:91:ca: f2:3b:34:0e:d5:d6:11:5b:22:d4:8c:38:24:02:9b:3b:3e:4c: ba:86:18:c9:ee:6f:1c:a9:74:49:0c:4c:01:b0:21:42:4e:28: ef:1b:9d:42:77:1b:12:ce:63:99:43:1e:f8:b9:e9:d5:8b:f4: c3:0c:b0:e8:60:2d:94:ab:da:35:c6:95:f1:03:17:b1:06:f7: ee:a7:64:43:a0:f7:11:4a:be:f0:58:35:48:e1:a5:e3:69:be: c4:d0:c6:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1OTExMTAvBgNVBAUTKEUzQjhFQUIxQUU5MTZERjk1QTJENTVBRTdCQjdCQjc5 QTUwQjRBRTcwHhcNMjUwNTEyMjEzNDMwWhcNMjUwNTE5MjEzNDMwWjAYMRYwFAYD VQQDEw02ODIyNjk2Ny1kYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoYAPJXnVe+31n9o+uhhKDj3THNUZO17HEqU6B+AJAcCMVdhll0QB7UskqAG 7pD+8ns1i8yObiJs69rmK7D6wURfPRN5EbwPbckbYrsX4DynrWsm+9Nyi3Yldfo1 HNItlhdKu+teVttjr4c025XEyaz7tA2K5R50EYh+Y3jPfOkZAjKEMjY0aVwI1eZw jKR/Ywz63A2KRuzJMiYsNOyIpQzxoPjkl9oLz9y79Ob3LUQRKDqfdeMK01Nfv7eF XOEuiKgzv/8rA+pOZvdAWpv+cPSi6y6s2ou9XO9HX4gctyit/fxy4S5xrOeJB2lU 2y35ImYWIDqXNX1BBDfsZBi/SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOltbV/X v8fRxxDNvovKuc9huFFsMB8GA1UdIwQYMBaAFOO46rGukW35Wi1Vrnu3u3mlC0rn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjU5MS9EMjMzQzY0NjJG NzExMUVCQjZFRDNFMjJDNEY5QUUwMi80N2pxc2E2UmJmbGFMVld1ZTdlN2VhVUxT dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3anFzYTZSYmZsYUxWV3VlN2U3ZWFVTFN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjU5MS9EMjMzQzY0NjJGNzExMUVCQjZFRDNFMjJDNEY5QUUwMi80N2pxc2E2UmJm bGFMVld1ZTdlN2VhVUxTdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApHYO90Ymy3bY9bLjsTPY5zkbCi1X2IoIjNC9xRgtEZ6a8bs0ZyKzO R0oooXjO3RviMxhfWUAhWMXW4lx+n51LUF5o8ITxReW0DOiy/Oh6UirbnY2A+r/M 6QtWe+x45ki79zSNnMj0uwbzInnZ9SJIPGzbKP3ZgFX4b340CgBrAJtWHvc1o6Af gkeUsVLdZP31PhlzxRMA2stLUA+h3KgSkcryOzQO1dYRWyLUjDgkAps7Pky6hhjJ 7m8cqXRJDEwBsCFCTijvG51CdxsSzmOZQx74uenVi/TDDLDoYC2Uq9o1xpXxAxex Bvfup2RDoPcRSr7wWDVI4aXjab7E0MZY -----END CERTIFICATE-----Generated at Wed May 14 17:28:03 2025 by rpki-client