$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: 3yNk7PkdEpbEdTZ1+2f7SOOIuySZRPNVXkgCQ9BViTg= Subject key identifier: D5:D4:77:C7:93:2E:CE:ED:1E:44:72:89:33:D3:DE:CC:93:3F:8C:9C Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: E6 Signing time: Tue 13 May 2025 04:38:16 +0000 Manifest this update: Tue 13 May 2025 04:38:15 +0000 Manifest next update: Tue 20 May 2025 04:38:15 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: kMFM573ijO41abBqmZdRaC1NP4eJwSJXw7NBn14b1T0=) 2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: ojSPB0ISIGRw3cOfBtrECwI7sYrCbgl9SiZcYTomn1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: May 13 04:38:15 2025 GMT Not After : May 20 04:38:15 2025 GMT Subject: CN=6822ccb7-03ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:e8:a3:0a:74:0d:d6:81:d9:0d:a4:0b:11: 3a:ad:0a:51:01:f8:7e:fe:a5:ae:a6:9a:96:01:d0: e3:15:e0:eb:6c:70:4d:e6:db:5e:55:5c:f9:d6:e3: 27:a4:fc:20:df:3a:e8:c8:96:77:91:5a:c5:42:d2: fd:ae:74:63:14:cc:37:80:a1:85:2c:86:28:99:ff: 9e:10:a8:32:87:dd:8b:4d:22:c6:ef:6c:06:b4:17: 7d:71:c7:44:7a:88:d7:25:f5:0b:84:60:f0:ff:d2: 3e:36:86:fa:87:77:c2:43:06:24:07:89:f5:c8:13: 06:8c:86:3e:de:a6:4c:a3:59:17:a7:db:ce:18:ca: 51:7a:9d:e2:fd:f2:f3:e4:b9:ea:24:de:dc:96:da: 24:75:7c:35:dd:0b:6f:0b:15:b8:d9:b0:8f:5e:d6: ad:10:85:af:7b:fe:23:6e:fe:93:3c:d4:e7:e2:3f: 57:af:e7:ac:f8:e5:93:f7:b1:c6:0a:5d:9d:0f:88: a9:6a:0f:53:a5:5f:d4:4b:d8:1d:d6:cf:db:e0:ec: 70:11:2f:9f:8b:eb:a0:5f:e7:66:92:ab:43:44:8b: da:a9:7a:51:06:09:79:90:64:6e:f3:2a:28:51:d6: e5:dd:08:bf:b2:1d:24:10:c7:b3:b5:69:c8:22:e5: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D4:77:C7:93:2E:CE:ED:1E:44:72:89:33:D3:DE:CC:93:3F:8C:9C X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a1:e5:b1:b8:db:66:46:50:a8:70:fb:26:96:08:d4:03:f2: 22:7f:4e:4b:c0:8b:cd:dc:ff:c1:c4:7d:5e:e2:01:d3:8d:d4: e7:fa:41:c9:61:81:6d:f0:8b:a1:ea:54:6c:7c:c3:17:fe:3c: 2e:25:35:f6:b6:04:f4:d3:e6:cd:55:37:82:35:d6:a1:0f:cc: 7d:98:ad:6d:25:19:8a:cf:d2:79:00:fa:32:27:ff:81:01:15: 3e:83:46:79:4e:f2:72:3f:14:60:6d:e1:4f:1e:b8:f8:bd:aa: 15:30:1a:c9:70:56:2f:81:77:50:37:ab:5b:b7:05:3f:a5:fa: af:fa:7b:cb:3f:f0:7f:f7:8b:7f:a9:b5:d7:e7:6e:f6:dc:b8: 63:af:da:ac:9e:ec:c1:72:17:d4:00:1e:70:44:67:f8:ef:82: 84:47:70:7c:74:7f:8b:25:46:95:1e:c9:6b:50:36:1e:ba:8f: 81:66:46:1f:19:5a:a0:2b:c4:74:cb:89:de:8f:c6:dc:e7:67: 61:d2:16:ba:37:55:63:f3:67:62:72:1a:50:f8:9a:ce:66:fb: 52:89:75:91:8a:df:e5:38:eb:c7:06:f3:5a:65:0b:da:fc:e1: 9d:50:03:65:91:ec:3e:41:24:88:2c:d0:7a:79:98:fb:68:09: f7:72:37:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE QUQ5MUI0MDYwHhcNMjUwNTEzMDQzODE1WhcNMjUwNTIwMDQzODE1WjAYMRYwFAYD VQQDEw02ODIyY2NiNy0wM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytjoowp0DdaB2Q2kCxE6rQpRAfh+/qWuppqWAdDjFeDrbHBN5tteVVz51uMn pPwg3zroyJZ3kVrFQtL9rnRjFMw3gKGFLIYomf+eEKgyh92LTSLG72wGtBd9ccdE eojXJfULhGDw/9I+Nob6h3fCQwYkB4n1yBMGjIY+3qZMo1kXp9vOGMpRep3i/fLz 5LnqJN7cltokdXw13QtvCxW42bCPXtatEIWve/4jbv6TPNTn4j9Xr+es+OWT97HG Cl2dD4ipag9TpV/US9gd1s/b4OxwES+fi+ugX+dmkqtDRIvaqXpRBgl5kGRu8yoo Udbl3Qi/sh0kEMeztWnIIuVfHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXUd8eT Ls7tHkRyiTPT3syTP4ycMB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0 ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow NVk1ZFRCODduUkxhMlJ0QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjoeWxuNtmRlCocPsmlgjUA/Iif05LwIvN3P/BxH1e4gHTjdTn+kHJ YYFt8Iuh6lRsfMMX/jwuJTX2tgT00+bNVTeCNdahD8x9mK1tJRmKz9J5APoyJ/+B ARU+g0Z5TvJyPxRgbeFPHrj4vaoVMBrJcFYvgXdQN6tbtwU/pfqv+nvLP/B/94t/ qbXX52723Lhjr9qsnuzBchfUAB5wRGf474KER3B8dH+LJUaVHslrUDYeuo+BZkYf GVqgK8R0y4nej8bc52dh0ha6N1Vj82dichpQ+JrOZvtSiXWRit/lOOvHBvNaZQva /OGdUANlkew+QSSILNB6eZj7aAn3cjei -----END CERTIFICATE-----Generated at Wed May 14 20:43:42 2025 by rpki-client