$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json) Hash identifier: U9B9Qm8qniR4YF2AbLvl3NkonsJyq3VdK7S7XVyiTAs= Subject key identifier: C2:FA:BE:BE:E3:B9:9B:2E:94:7B:B1:9C:18:47:E8:C9:5F:CB:7B:1F Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft Manifest number: 46 Signing time: Tue 13 May 2025 06:36:24 +0000 Manifest this update: Tue 13 May 2025 06:36:24 +0000 Manifest next update: Tue 20 May 2025 06:36:24 +0000 Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: Pg4DU970S6iQcyoeMwr/u6Ig6lcUAwiaJ+airtyaSJc=) 2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: HaAP7uUg1XzzgFWY/CdSRARMCuA2gGNyuumYnBvV1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Validity Not Before: May 13 06:36:24 2025 GMT Not After : May 20 06:36:24 2025 GMT Subject: CN=6822e868-8d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:99:04:24:bf:26:83:e0:b0:cb:ff:1d:bc:b1: d1:bd:81:cb:99:1b:92:9c:5d:7d:cb:82:e9:f1:8d: ff:ba:27:20:54:5c:8f:fd:92:7a:7a:7a:4c:de:58: f3:8e:a9:14:80:dd:50:a7:0f:2d:91:12:51:49:c7: 62:28:02:7a:ae:40:9a:0b:e1:11:53:61:db:cc:3f: fb:ec:24:41:3d:f9:19:83:25:02:f9:99:1c:66:d5: 32:28:16:85:a6:9e:0b:bc:77:16:ae:00:2c:91:70: 90:00:ee:c0:3e:9c:83:37:fa:50:05:fe:e3:0b:9a: 3c:86:70:d7:a9:8f:ff:1a:0b:65:3b:04:70:c6:e6: b5:e4:7a:c3:14:39:ea:36:ae:24:27:c6:c9:94:f7: ff:8f:7e:c4:88:5f:d4:24:96:89:70:08:50:26:cf: 1b:b2:fc:f5:5b:35:75:d3:e2:c4:5a:58:71:80:54: 2a:25:11:76:b8:a6:1a:ae:da:0e:d2:c2:87:d1:92: f0:f0:c9:8c:1e:55:05:85:0d:62:cf:ba:5d:6c:17: 85:f0:4a:b2:41:ef:1b:eb:f0:3b:92:34:e7:f7:92: 3f:93:b8:04:e3:0f:72:da:90:82:42:4c:31:29:60: 53:e2:67:5d:13:98:39:ac:fe:47:43:a3:b7:03:59: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FA:BE:BE:E3:B9:9B:2E:94:7B:B1:9C:18:47:E8:C9:5F:CB:7B:1F X509v3 Authority Key Identifier: keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e2:d7:57:38:01:45:e5:fa:f3:7b:83:01:06:65:b5:68:84: e7:5a:eb:c9:ac:f8:df:99:d2:87:7c:77:f5:c8:20:1b:86:3e: 5b:71:f4:77:d3:79:bc:99:6e:ce:9f:76:bd:95:b1:ba:e9:41: 53:96:c0:85:52:89:a9:df:c7:e0:71:0b:5d:8b:a0:6e:40:b0: 0f:8b:97:e8:18:3a:fc:25:44:ab:3d:1d:52:b2:5f:9f:5d:ca: dd:c1:38:83:ea:01:ae:d2:14:53:7b:4b:66:2b:68:22:6b:a7: 05:6c:b4:36:af:79:fd:5f:30:fc:a0:27:c1:bb:f4:e7:60:d8: b7:8d:81:87:54:ba:42:e3:69:45:46:51:79:48:d8:97:6d:70: 11:ee:33:47:52:a7:73:a8:75:7a:3e:02:a5:7b:c1:91:60:7a: b7:c6:b2:c0:9e:4b:b2:47:48:99:48:54:67:36:dd:44:29:3d: ff:1c:71:12:18:a2:54:53:6f:de:2a:e1:2e:55:0c:8a:a7:7d: 69:f5:3b:f7:7c:02:0e:49:9c:af:c2:fb:66:06:4e:01:51:d8: ad:e6:35:70:c6:4b:e2:47:e9:58:97:05:c8:d7:3e:ed:a1:e0: 63:52:4b:fa:bd:f1:5c:ae:09:a0:50:8e:45:e4:0c:aa:35:cd: 91:10:d2:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoQUU3M0I3MDU0OEZGNDIyRUQwMkQ1OUQxQ0EyNTc5M0Ew NUU5RTQyQTAeFw0yNTA1MTMwNjM2MjRaFw0yNTA1MjAwNjM2MjRaMBgxFjAUBgNV BAMTDTY4MjJlODY4LThkNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvmQQkvyaD4LDL/x28sdG9gcuZG5KcXX3Lgunxjf+6JyBUXI/9knp6ekzeWPOO qRSA3VCnDy2RElFJx2IoAnquQJoL4RFTYdvMP/vsJEE9+RmDJQL5mRxm1TIoFoWm ngu8dxauACyRcJAA7sA+nIM3+lAF/uMLmjyGcNepj/8aC2U7BHDG5rXkesMUOeo2 riQnxsmU9/+PfsSIX9QklolwCFAmzxuy/PVbNXXT4sRaWHGAVColEXa4phqu2g7S wofRkvDwyYweVQWFDWLPul1sF4XwSrJB7xvr8DuSNOf3kj+TuATjD3LakIJCTDEp YFPiZ10TmDms/kdDo7cDWZMjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwvq+vuO5 my6Ue7GcGEfoyV/Lex8wHwYDVR0jBBgwFoAUrnO3BUj/Qi7QLVnRyiV5OgXp5Cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzUwMTA5ODc2Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcm5PM0JVal9RaTdRTFZuUnlpVjVPZ1hwNUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzUwMTA5ODc2Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3 UUxWblJ5aVY1T2dYcDVDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXi11c4AUXl+vN7gwEGZbVohOda68ms+N+Z0od8d/XIIBuGPltx9HfT ebyZbs6fdr2VsbrpQVOWwIVSianfx+BxC12LoG5AsA+Ll+gYOvwlRKs9HVKyX59d yt3BOIPqAa7SFFN7S2YraCJrpwVstDavef1fMPygJ8G79Odg2LeNgYdUukLjaUVG UXlI2JdtcBHuM0dSp3OodXo+AqV7wZFgerfGssCeS7JHSJlIVGc23UQpPf8ccRIY olRTb94q4S5VDIqnfWn1O/d8Ag5JnK/C+2YGTgFR2K3mNXDGS+JH6ViXBcjXPu2h 4GNSS/q98VyuCaBQjkXkDKo1zZEQ0og= -----END CERTIFICATE-----Generated at Tue May 13 11:20:13 2025 by rpki-client