$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: tiQO8zsmlsceKO68MDNb2TzKAYrkAnBVnj/t1jwMiRk= Subject key identifier: 08:D0:C7:39:48:09:00:7B:7B:98:95:2B:75:90:B8:11:D8:22:F5:7E Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 04AF Signing time: Thu 15 May 2025 00:00:26 +0000 Manifest this update: Thu 15 May 2025 00:00:26 +0000 Manifest next update: Thu 22 May 2025 00:00:26 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: Q3Oce45skkUjirfN+J93zaI96bRsXVqJ/okZ9aKL0Yk=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: fImPoQjcCGEMtVaG0vXMRn+nIx0n4x6cFQDmdGHL2YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: May 15 00:00:26 2025 GMT Not After : May 22 00:00:26 2025 GMT Subject: CN=68252e9a-da1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:f6:24:38:70:cf:e0:95:d0:4d:9b:72:16: 7c:68:86:f2:12:08:a7:70:dc:33:09:e0:d2:7f:fc: d9:10:b4:fa:e0:29:0a:4c:4a:26:fc:6c:01:a6:ea: 40:4c:1e:a6:71:66:94:50:ab:96:0e:3f:12:93:43: 4a:8d:dc:d5:65:79:72:1b:d9:01:b9:a8:40:d9:39: 82:2f:47:0c:44:1d:12:8e:3e:d8:c1:49:ee:66:4c: 53:90:7b:34:fa:e4:e5:9c:a5:57:a0:8d:51:cc:f9: ff:3e:7b:bd:ef:8a:3e:87:d0:f1:27:e4:ef:dd:0f: 55:ac:f8:cd:62:a4:b5:df:62:01:61:d0:aa:60:ef: 77:9e:5d:b6:c5:87:5c:0a:24:04:d9:a3:fe:29:20: ef:97:3d:a7:e4:fc:ff:58:be:6c:31:f5:aa:e6:68: 5a:42:0b:c4:e1:ae:ee:74:6c:d9:e9:99:fe:b3:c4: 25:13:ec:9d:d9:fb:bb:5c:1f:77:db:66:8f:95:8d: a1:f8:7b:ad:83:08:3e:be:31:4a:62:5b:dd:07:ea: dc:f5:2f:a3:43:36:6f:2c:a9:bb:d4:da:85:cb:72: a5:5d:4b:25:3f:9e:31:d2:2d:f9:c2:06:ab:f7:3d: a9:c0:0d:a0:d6:d2:f4:06:79:fd:84:4d:e7:47:2d: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D0:C7:39:48:09:00:7B:7B:98:95:2B:75:90:B8:11:D8:22:F5:7E X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:4b:fd:96:80:b5:ee:1c:48:5c:85:0f:b8:e1:00:51:c9:c9: 06:d8:64:ce:40:76:e6:d9:33:23:ef:44:29:b5:64:ac:92:de: e8:d7:77:d3:b9:40:ee:f4:47:e1:d8:60:8c:11:28:2d:e0:f0: da:a7:54:ca:89:66:c3:bc:70:d0:6d:84:51:39:4e:a5:d7:98: 18:0c:d1:1c:8c:b5:31:37:9c:2b:32:c4:6f:33:9f:97:8f:88: 62:09:f4:7d:5f:7a:3d:9c:77:ce:60:7b:7a:aa:8a:ae:e4:ed: 13:a0:d1:33:5c:22:3a:36:fb:b9:20:c3:ad:d2:e9:31:e7:1a: 93:7c:ca:88:3c:41:a1:34:46:17:c0:ed:56:1f:c4:12:c7:2b: 65:4a:a6:ad:0f:88:23:31:43:ea:3b:c0:62:df:21:87:d0:9d: 86:2d:a2:bb:ef:0b:75:38:d2:f1:56:dc:71:44:15:e0:cb:6d: 1d:fe:f3:75:c1:57:17:88:b5:7b:b9:65:27:9b:6c:31:9a:24: cb:e4:59:af:9c:a0:40:25:e7:33:ba:a9:c2:67:49:e3:56:fd: 4c:2b:64:80:8c:7e:52:03:32:de:3b:1f:d9:c7:34:9d:23:ea: b6:cc:c0:9e:03:ea:38:48:2d:f0:c3:88:9d:16:56:ba:72:55: 85:41:c9:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjUwNTE1MDAwMDI2WhcNMjUwNTIyMDAwMDI2WjAYMRYwFAYD VQQDEw02ODI1MmU5YS1kYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn72JDhwz+CV0E2bchZ8aIbyEgincNwzCeDSf/zZELT64CkKTEom/GwBpupA TB6mcWaUUKuWDj8Sk0NKjdzVZXlyG9kBuahA2TmCL0cMRB0Sjj7YwUnuZkxTkHs0 +uTlnKVXoI1RzPn/Pnu974o+h9DxJ+Tv3Q9VrPjNYqS132IBYdCqYO93nl22xYdc CiQE2aP+KSDvlz2n5Pz/WL5sMfWq5mhaQgvE4a7udGzZ6Zn+s8QlE+yd2fu7XB93 22aPlY2h+Hutgwg+vjFKYlvdB+rc9S+jQzZvLKm71NqFy3KlXUslP54x0i35wgar 9z2pwA2g1tL0Bnn9hE3nRy17gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjQxzlI CQB7e5iVK3WQuBHYIvV+MB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVS/2WgLXuHEhchQ+44QBRyckG2GTOQHbm2TMj70QptWSskt7o13fT uUDu9Efh2GCMESgt4PDap1TKiWbDvHDQbYRROU6l15gYDNEcjLUxN5wrMsRvM5+X j4hiCfR9X3o9nHfOYHt6qoqu5O0ToNEzXCI6Nvu5IMOt0ukx5xqTfMqIPEGhNEYX wO1WH8QSxytlSqatD4gjMUPqO8Bi3yGH0J2GLaK77wt1ONLxVtxxRBXgy20d/vN1 wVcXiLV7uWUnm2wxmiTL5FmvnKBAJeczuqnCZ0njVv1MK2SAjH5SAzLeOx/ZxzSd I+q2zMCeA+o4SC3ww4idFla6clWFQcl/ -----END CERTIFICATE-----Generated at Fri May 16 02:23:49 2025 by rpki-client