$ rpki-client -vvf rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft File: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft (raw, json) Hash identifier: vJ2VRDJHkto26uCRvvyZZyfiR15vEVAKOcG7Cbytvmg= Subject key identifier: BA:9B:FD:D2:C5:1A:A7:5A:F8:FA:7A:AE:61:22:80:CD:E7:74:D9:4A Authority key identifier: 46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B Certificate issuer: /CN=A91982FB/serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B Certificate serial: 0525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft Manifest number: 051C Signing time: Sun 04 May 2025 23:12:59 +0000 Manifest this update: Sun 04 May 2025 23:12:59 +0000 Manifest next update: Sun 11 May 2025 23:12:59 +0000 Files and hashes: 1: RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl (hash: bWFT87umaPAz88zNEqXsfwAGor97xNYxuQezoy8wnNs=) 2: 0006ED8263DD11EC9A50031BC4F9AE02.roa (hash: wRribXkCp4s0JF1oTM02hSLF0pchc7JmKUBHKJxUnUY=) 3: D249CE5EFE8911EBA7BEB564C4F9AE02.roa (hash: Kl/jYxUXqCil/0G6LuLn2peWneSNh/bHX1vc6KhRG0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982FB, serialNumber=4649B249E426C2B8FAAFF62F2790F2E67B00FC5B Validity Not Before: May 4 23:12:59 2025 GMT Not After : May 11 23:12:59 2025 GMT Subject: CN=6817f47b-6afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:db:21:bd:83:70:a8:21:d9:d3:da:58:19:c6: 8e:6d:db:b9:90:7e:14:08:03:bf:90:b3:70:96:58: 00:42:83:7d:32:26:6a:55:76:5f:c9:47:13:b9:21: ad:39:7e:a9:fd:7c:b7:31:0d:27:cd:4e:5e:45:c4: c9:e5:42:3f:fd:13:82:32:ac:09:b0:9f:f3:8a:84: f5:58:ae:29:5b:93:3d:d2:0e:a1:2f:c5:94:16:f7: 33:aa:f4:11:39:5f:2f:2e:e3:a6:e2:73:7d:5e:b7: 6a:d0:b2:8d:6a:59:40:05:c3:6f:bf:bc:84:a4:6d: 91:91:7e:31:9e:ac:01:fa:81:35:8f:b3:65:ca:e9: 1e:64:e1:56:14:cc:69:2d:69:6e:2b:e5:08:c7:43: 66:f4:75:97:66:2a:53:bd:ff:39:37:f0:32:14:76: c7:6d:85:17:6f:3f:cd:49:68:07:5b:21:a5:41:1f: 85:d2:17:6e:cc:93:50:79:bf:ac:cc:12:4b:b1:b1: 4e:ca:6c:3e:a5:b0:65:8f:37:7c:2c:72:ea:74:c3: 46:3e:5f:6f:4d:51:a7:1a:c7:2c:c2:e8:0f:10:e0: ae:86:63:fe:4f:35:3f:01:35:83:34:b6:f1:75:b3: 11:4a:4c:c9:d3:ad:05:85:13:d2:5a:41:e8:05:bf: e2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:FD:D2:C5:1A:A7:5A:F8:FA:7A:AE:61:22:80:CD:E7:74:D9:4A X509v3 Authority Key Identifier: keyid:46:49:B2:49:E4:26:C2:B8:FA:AF:F6:2F:27:90:F2:E6:7B:00:FC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982FB/994D6DA6FE8711EBB9FA7263C4F9AE02/RkmySeQmwrj6r_YvJ5Dy5nsA_Fs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cc:25:b0:ff:7f:da:8b:3b:9e:34:eb:6e:cf:04:bc:c0:b2: 28:d9:21:96:06:09:14:95:d9:9b:c2:2f:0d:1f:08:56:d2:00: 76:db:43:12:77:9f:85:9d:7c:3c:9c:f1:b9:46:4c:d6:5e:c7: d4:0b:be:3d:fa:73:86:fd:28:5e:3c:e0:15:b8:e1:8c:33:b1: 8d:48:fc:f7:5c:ae:3a:63:53:fb:b8:38:94:11:90:88:bb:93: 7e:55:4f:85:d5:16:3a:63:2a:34:a0:af:30:f7:91:3a:c5:db: 89:ce:ee:cd:60:ee:e9:15:09:eb:63:65:f9:4a:53:8d:8f:b9: f0:05:0c:be:dc:c7:2d:b7:c7:c3:5c:c9:2f:32:e9:37:d3:d4: da:8f:e9:d6:aa:45:41:7b:d8:27:6a:4b:c7:bf:c8:e1:90:4e: 9e:42:47:e3:e5:cf:69:a7:39:03:1f:f4:73:c0:a3:15:d3:42: fb:3c:fe:72:a9:18:c9:0e:de:46:48:84:58:f3:d2:db:5e:ea: ba:18:d3:c0:04:b6:c5:c6:dd:13:c4:47:80:85:3b:94:29:bc: 97:3f:14:9c:f0:36:e8:97:f3:b5:0f:eb:eb:29:92:48:31:b8: 4b:75:71:87:1f:74:fd:b6:4c:05:01:8b:c6:22:e3:aa:3a:09: 3e:77:21:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRkIxMTAvBgNVBAUTKDQ2NDlCMjQ5RTQyNkMyQjhGQUFGRjYyRjI3OTBGMkU2 N0IwMEZDNUIwHhcNMjUwNTA0MjMxMjU5WhcNMjUwNTExMjMxMjU5WjAYMRYwFAYD VQQDEw02ODE3ZjQ3Yi02YWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dshvYNwqCHZ09pYGcaObdu5kH4UCAO/kLNwllgAQoN9MiZqVXZfyUcTuSGt OX6p/Xy3MQ0nzU5eRcTJ5UI//ROCMqwJsJ/zioT1WK4pW5M90g6hL8WUFvczqvQR OV8vLuOm4nN9Xrdq0LKNallABcNvv7yEpG2RkX4xnqwB+oE1j7NlyukeZOFWFMxp LWluK+UIx0Nm9HWXZipTvf85N/AyFHbHbYUXbz/NSWgHWyGlQR+F0hduzJNQeb+s zBJLsbFOymw+pbBljzd8LHLqdMNGPl9vTVGnGscswugPEOCuhmP+TzU/ATWDNLbx dbMRSkzJ060FhRPSWkHoBb/ilQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqb/dLF Gqda+Pp6rmEigM3ndNlKMB8GA1UdIwQYMBaAFEZJsknkJsK4+q/2LyeQ8uZ7APxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJGQi85OTRENkRBNkZF ODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdyajZyX1l2SjVEeTVuc0Ff RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JrbXlTZVFtd3JqNnJfWXZKNUR5NW5zQV9Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJGQi85OTRENkRBNkZFODcxMUVCQjlGQTcyNjNDNEY5QUUwMi9Sa215U2VRbXdy ajZyX1l2SjVEeTVuc0FfRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdzCWw/3/aizueNOtuzwS8wLIo2SGWBgkUldmbwi8NHwhW0gB220MS d5+FnXw8nPG5RkzWXsfUC749+nOG/ShePOAVuOGMM7GNSPz3XK46Y1P7uDiUEZCI u5N+VU+F1RY6Yyo0oK8w95E6xduJzu7NYO7pFQnrY2X5SlONj7nwBQy+3Mctt8fD XMkvMuk309Taj+nWqkVBe9gnakvHv8jhkE6eQkfj5c9ppzkDH/RzwKMV00L7PP5y qRjJDt5GSIRY89LbXuq6GNPABLbFxt0TxEeAhTuUKbyXPxSc8Dbol/O1D+vrKZJI MbhLdXGHH3T9tkwFAYvGIuOqOgk+dyF8 -----END CERTIFICATE-----Generated at Mon May 5 03:29:15 2025 by rpki-client