$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: 9V9L0KSLWisabhTraRJvgIG/ePROH8vIIMVXaXAFRMo= Subject key identifier: 68:16:B1:7D:B2:E5:5F:1B:72:85:A9:5F:1A:EB:0F:0D:57:D0:A2:E1 Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: D3 Signing time: Sun 11 May 2025 04:31:06 +0000 Manifest this update: Sun 11 May 2025 04:31:05 +0000 Manifest next update: Sun 18 May 2025 04:31:05 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: NvkXbHi2SWJBpR5n3EdqfGBJU/l93OyCFhQeOR5WVjI=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: oDkekcVc24g24l9w3pqtjUZRiCpSkPIIazs9r2Z2ZIs=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 66xBTvofN0kw93P5VictZxaCnVByR33mxLgf2xLdWgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: May 11 04:31:05 2025 GMT Not After : May 18 04:31:05 2025 GMT Subject: CN=68202809-60c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:01:e3:01:3f:0a:cc:04:70:4b:0b:2e:1a: 0a:97:bf:2a:f5:4f:4c:09:c5:65:7f:33:1e:68:97: 05:0b:a2:6d:ec:12:ae:e8:9a:2a:ae:88:12:a9:ce: aa:cb:36:df:c2:5b:59:ae:02:e4:50:d8:74:a0:84: 0e:e5:b4:0e:61:3e:28:71:f7:75:62:8c:17:d1:3a: 71:86:3d:27:6f:2b:f8:77:f1:80:93:d4:20:a7:42: 01:ad:c4:08:5e:c2:95:fe:07:5c:e8:f3:d8:79:39: fd:f5:36:de:d8:a4:b6:4f:89:a0:ae:a0:a7:78:7d: ee:41:93:70:be:ea:c1:94:b0:ec:46:85:b6:63:7b: d9:cf:c8:2b:09:36:b2:3c:d9:ef:13:2f:04:e5:ec: 84:cc:53:ae:09:44:f6:32:87:71:4d:2e:e6:fb:67: 7d:59:1d:63:8e:3d:3d:7a:e4:d8:f3:7c:e4:d9:22: fa:08:07:53:39:d3:1c:41:e3:f9:16:5b:e5:51:05: b1:7d:fc:64:f5:05:e1:4c:e4:b9:75:9a:9e:96:1e: d0:df:64:bb:76:3d:0d:18:36:13:40:7b:ea:4d:ae: 21:a6:cf:5b:16:f3:58:3e:f3:18:c7:4f:0d:71:a3: 3d:52:00:6c:82:e9:3b:99:23:1d:a4:f8:fb:a0:26: 61:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:16:B1:7D:B2:E5:5F:1B:72:85:A9:5F:1A:EB:0F:0D:57:D0:A2:E1 X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ee:69:23:b7:e2:eb:67:8e:21:e0:c5:48:c6:63:a6:0e:cb: 28:e4:9b:48:d0:4a:fa:50:74:75:42:b0:ee:70:63:6d:f2:43: dd:83:9a:65:cf:17:59:46:91:47:5d:6c:b5:dc:0d:17:84:9a: aa:39:2c:0f:c5:fa:ec:fc:e4:ee:c4:ad:c0:9a:3e:e8:55:e2: 70:67:10:1a:4b:4c:66:99:59:5b:ee:54:da:05:d6:25:52:6a: 54:f5:4d:9c:74:b6:89:35:39:6a:b9:28:c3:e1:85:c5:98:f2: 50:ac:c2:a3:6e:18:a7:77:2a:a4:cc:bf:64:d3:0e:45:b3:69: e2:ed:30:d8:fa:3c:bf:54:86:df:b3:24:3c:0e:46:71:b2:49: 82:a6:74:76:22:a9:9e:73:b0:1e:4e:e3:9b:3c:b7:aa:8b:c0: 02:c0:75:c8:b3:62:88:aa:b2:72:a3:af:1c:7c:ef:53:8e:d3: 20:18:45:9c:b4:d2:26:38:e4:36:68:cd:7b:d1:fc:87:87:b1: c1:45:4e:2e:ac:c2:5b:b2:28:93:04:57:2f:ee:47:e9:9e:66: ba:fd:2f:c1:53:26:0f:6a:c8:d4:ee:48:0a:a4:a8:60:be:e6: ba:01:0a:d9:ae:ee:3a:14:af:ca:57:fa:c4:2a:4c:b8:4e:7c: 4d:34:0b:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwNTExMDQzMTA1WhcNMjUwNTE4MDQzMTA1WjAYMRYwFAYD VQQDEw02ODIwMjgwOS02MGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtggB4wE/CswEcEsLLhoKl78q9U9MCcVlfzMeaJcFC6Jt7BKu6JoqrogSqc6q yzbfwltZrgLkUNh0oIQO5bQOYT4ocfd1YowX0Tpxhj0nbyv4d/GAk9Qgp0IBrcQI XsKV/gdc6PPYeTn99Tbe2KS2T4mgrqCneH3uQZNwvurBlLDsRoW2Y3vZz8grCTay PNnvEy8E5eyEzFOuCUT2ModxTS7m+2d9WR1jjj09euTY83zk2SL6CAdTOdMcQeP5 FlvlUQWxffxk9QXhTOS5dZqelh7Q32S7dj0NGDYTQHvqTa4hps9bFvNYPvMYx08N caM9UgBsguk7mSMdpPj7oCZhowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgWsX2y 5V8bcoWpXxrrDw1X0KLhMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP7mkjt+LrZ44h4MVIxmOmDsso5JtI0Er6UHR1QrDucGNt8kPdg5pl zxdZRpFHXWy13A0XhJqqOSwPxfrs/OTuxK3Amj7oVeJwZxAaS0xmmVlb7lTaBdYl UmpU9U2cdLaJNTlquSjD4YXFmPJQrMKjbhindyqkzL9k0w5Fs2ni7TDY+jy/VIbf syQ8DkZxskmCpnR2Iqmec7AeTuObPLeqi8ACwHXIs2KIqrJyo68cfO9TjtMgGEWc tNImOOQ2aM170fyHh7HBRU4urMJbsiiTBFcv7kfpnma6/S/BUyYPasjU7kgKpKhg vua6AQrZru46FK/KV/rEKky4TnxNNAtK -----END CERTIFICATE-----Generated at Mon May 12 21:48:32 2025 by rpki-client