$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: Sfxd1v7LbCU9Kmm5qg3tVsavp/vRpG2N/wJVPJX6S+k= Subject key identifier: 7C:97:DC:9B:96:B6:02:12:5E:6B:6A:CB:21:D2:2C:F7:F7:BD:B0:A5 Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 0399 Signing time: Sun 11 May 2025 00:22:24 +0000 Manifest this update: Sun 11 May 2025 00:22:24 +0000 Manifest next update: Sun 18 May 2025 00:22:24 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: 4G+FZgTFBg0YYHM8Vz6OCq6VHNWm286WwECsF86nRpo=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: M3aykX0j4vteJ7Aeu69jjSSSHCYOZs36DtkdcU8NJ0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Validity Not Before: May 11 00:22:24 2025 GMT Not After : May 18 00:22:24 2025 GMT Subject: CN=681fedc0-18d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:57:e8:8e:9c:4d:3a:b1:d7:2d:fc:cd:09: 6c:0b:79:06:76:e8:0b:c3:2a:c9:98:de:c6:0a:2d: f4:40:79:a6:ef:d0:cf:b3:02:a3:e9:b0:4d:c6:24: 16:ba:c4:e0:75:cb:4f:ed:f6:77:05:a9:92:f1:66: 2a:c7:d5:8f:77:00:f4:9a:ba:76:87:cc:5e:f5:5c: 17:3e:9e:20:04:fa:e4:d7:9f:7d:4a:88:a2:5f:76: 6d:29:42:1b:5d:61:1b:d1:33:b2:2c:f6:b2:b4:03: cb:d6:c3:a0:b2:b8:14:60:cd:8a:aa:cf:4f:42:f2: 46:be:52:e5:43:d5:1f:07:19:b9:17:cc:d3:e2:87: a6:f4:f9:b1:a2:0c:c1:76:18:3f:c8:6a:6a:1d:8e: 46:e2:af:54:75:3a:16:53:89:34:89:b0:7b:71:7b: d7:fa:5c:5b:a7:1f:7f:e8:a2:ee:a1:8f:6a:d8:82: 84:7e:5c:42:bd:0e:df:65:cd:b2:db:73:c0:45:a0: 03:58:68:97:e5:76:33:77:24:fb:f1:0a:fd:cd:80: 4b:1d:0e:a2:06:11:1b:c0:82:0c:58:e7:a6:2a:ef: 78:14:b5:cb:77:be:44:34:20:b0:46:97:ee:19:fa: e6:3b:12:da:16:7b:c3:68:77:25:af:2a:39:46:17: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:97:DC:9B:96:B6:02:12:5E:6B:6A:CB:21:D2:2C:F7:F7:BD:B0:A5 X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:bc:31:0d:2f:20:19:19:4c:84:98:b4:fd:98:f7:1a:4f:9e: 8e:87:bc:78:05:5c:f3:7a:61:5f:9d:fa:66:1f:35:ba:f0:25: 33:83:d5:1c:c2:1b:13:a3:19:2a:6e:be:3d:55:05:9f:57:8f: ce:e1:19:81:57:e5:15:fe:9b:5b:51:40:a2:e7:a9:88:a3:c2: 49:f8:e8:08:e7:85:a2:44:e9:e9:5c:03:d5:52:89:9e:b9:db: 94:69:f6:8a:6e:40:92:ee:b8:89:0e:99:62:90:1d:46:80:fd: 21:af:8e:77:8e:3b:7b:9a:39:54:fa:cc:e8:1d:8a:dc:7b:46: f3:c3:01:64:ee:23:99:de:f3:9d:f1:02:b1:04:13:df:64:81: ae:c9:d6:02:9d:d2:9b:5f:0f:b8:ba:19:c7:b3:92:c3:6c:c5: 4e:c9:11:71:51:35:2c:ae:19:15:06:84:8e:32:ef:ca:1c:b7: 6d:d8:08:db:e7:ee:1e:70:0b:3f:f3:df:38:3b:d4:72:99:09: eb:b2:90:49:8a:20:72:25:b8:38:40:fd:80:1f:81:85:58:f2: fc:5c:d4:1d:2c:48:f0:3b:7a:49:1d:40:a7:bd:fb:74:a8:7a: 7e:90:74:22:f6:40:6f:e7:0e:b4:28:a3:12:b0:a2:5e:d4:45: 02:7f:a1:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjUwNTExMDAyMjI0WhcNMjUwNTE4MDAyMjI0WjAYMRYwFAYD VQQDEw02ODFmZWRjMC0xOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxatX6I6cTTqx1y38zQlsC3kGdugLwyrJmN7GCi30QHmm79DPswKj6bBNxiQW usTgdctP7fZ3BamS8WYqx9WPdwD0mrp2h8xe9VwXPp4gBPrk1599SoiiX3ZtKUIb XWEb0TOyLPaytAPL1sOgsrgUYM2Kqs9PQvJGvlLlQ9UfBxm5F8zT4oem9PmxogzB dhg/yGpqHY5G4q9UdToWU4k0ibB7cXvX+lxbpx9/6KLuoY9q2IKEflxCvQ7fZc2y 23PARaADWGiX5XYzdyT78Qr9zYBLHQ6iBhEbwIIMWOemKu94FLXLd75ENCCwRpfu GfrmOxLaFnvDaHclryo5RhdnGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyX3JuW tgISXmtqyyHSLPf3vbClMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVvDENLyAZGUyEmLT9mPcaT56Oh7x4BVzzemFfnfpmHzW68CUzg9Uc whsToxkqbr49VQWfV4/O4RmBV+UV/ptbUUCi56mIo8JJ+OgI54WiROnpXAPVUome uduUafaKbkCS7riJDplikB1GgP0hr453jjt7mjlU+szoHYrce0bzwwFk7iOZ3vOd 8QKxBBPfZIGuydYCndKbXw+4uhnHs5LDbMVOyRFxUTUsrhkVBoSOMu/KHLdt2Ajb 5+4ecAs/8984O9RymQnrspBJiiByJbg4QP2AH4GFWPL8XNQdLEjwO3pJHUCnvft0 qHp+kHQi9kBv5w60KKMSsKJe1EUCf6EM -----END CERTIFICATE-----Generated at Mon May 12 19:10:10 2025 by rpki-client