$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft File: rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json) Hash identifier: 9Aad7E+Bl+CyLGqjPy9qIbRrCAsv5QT2hzV/AKyGw48= Subject key identifier: 72:12:FD:CF:DF:FB:67:5B:90:0E:91:48:42:62:36:9F:41:E6:25:93 Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1 Certificate issuer: /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1 Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft Manifest number: 07B4 Signing time: Mon 12 May 2025 20:57:49 +0000 Manifest this update: Mon 12 May 2025 20:57:49 +0000 Manifest next update: Mon 19 May 2025 20:57:49 +0000 Files and hashes: 1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: 2epqIg8EM4PRmJ4hE6T8aE5PFQwO9BfsKZKSyZKQsPc=) 2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: KyOkY9VA3J/3sBokvUHuRFKP5fmOGmjv1+iHz+yAeU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1 Validity Not Before: May 12 20:57:49 2025 GMT Not After : May 19 20:57:49 2025 GMT Subject: CN=682260cd-6b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b2:d1:76:66:63:38:18:84:71:d7:78:b4:51: 27:27:84:fe:9a:b1:aa:45:c5:d1:76:64:a8:fc:f0: d6:61:3f:4c:25:9b:ad:c8:80:93:40:b5:62:41:d9: c1:b7:05:0e:74:f7:0d:8f:a5:b7:3a:ad:db:63:9d: 8d:5e:3e:9f:87:e6:51:1d:17:4d:7b:f6:85:f3:8c: 4b:c4:b5:4c:8c:a9:f6:fa:1e:ce:75:5e:e3:9b:00: f7:cf:e0:7e:68:96:00:d4:45:d4:2b:35:a6:24:b7: 37:8c:39:19:37:a4:e4:e2:61:63:74:02:f0:b4:c8: fd:7b:d5:ca:90:93:0d:a9:38:f5:8e:fc:5c:38:a4: 3e:b0:ca:b6:03:75:f4:38:ec:85:1e:0a:b0:6b:67: bb:eb:fd:4e:b5:07:82:96:db:4d:c0:fe:08:7f:f4: 74:4d:02:ee:91:07:66:4c:ca:25:12:45:a7:1e:c6: 0c:8c:d1:47:c8:6d:c3:f1:34:57:13:d4:9b:e8:2a: 17:77:be:8c:03:76:a8:80:0a:61:ef:0b:bd:99:29: 20:70:e1:8c:2e:06:38:d7:0d:1e:dd:d7:50:89:c4: 93:68:4a:61:f4:94:1e:d7:36:fe:8a:9f:46:23:c6: 42:3e:da:29:8e:7c:f8:9e:12:b0:59:20:72:df:bd: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:12:FD:CF:DF:FB:67:5B:90:0E:91:48:42:62:36:9F:41:E6:25:93 X509v3 Authority Key Identifier: keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:5a:a5:28:3b:0a:c5:70:33:70:59:80:16:4d:2e:35:67:95: 6b:27:5c:06:2b:89:7e:c1:07:23:29:fc:36:1b:c1:b9:8c:d3: 62:d0:08:a1:22:71:42:c3:bb:dd:ed:d7:36:c2:f2:f8:f4:8d: 9b:a6:73:74:79:b7:e2:8e:d5:50:97:6d:69:4d:ea:ce:ca:09: 20:4a:9e:f7:3b:ea:0d:2e:ca:69:22:34:f0:89:02:b0:2d:58: 55:b8:fa:bb:20:e2:6a:16:2a:5a:dc:82:52:e5:f9:d3:d4:92: 38:d4:7b:3d:6b:fd:a4:72:25:e6:c7:e5:9c:11:a7:47:28:84: 71:40:5c:69:33:37:e3:27:91:cd:27:03:a4:ab:e7:bf:3f:fb: 5b:51:51:3e:c4:30:16:7e:0d:c6:2c:72:99:48:74:55:30:99: b2:a2:e9:fe:ff:19:d5:12:58:49:0b:7b:ea:13:26:9c:e3:64: 44:0e:37:b4:f4:4b:ce:a2:7f:47:d8:a4:a2:3f:b6:01:af:cd: 08:be:d5:b2:d8:02:7e:2b:d3:ea:fa:1d:16:cc:b3:55:0b:8d: 35:6e:a9:19:c1:e2:fb:80:e4:c2:75:86:85:61:72:90:33:18: ee:63:b5:69:77:64:70:57:13:f2:89:a1:32:80:49:c9:06:0a: a7:1e:e8:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0RDExMTAvBgNVBAUTKEFDQTEyRkQ3REJCMjgzRjMyQ0RENzNDRkNFQ0YwNUQz Q0I5QTg4QTEwHhcNMjUwNTEyMjA1NzQ5WhcNMjUwNTE5MjA1NzQ5WjAYMRYwFAYD VQQDEw02ODIyNjBjZC02YjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LLRdmZjOBiEcdd4tFEnJ4T+mrGqRcXRdmSo/PDWYT9MJZutyICTQLViQdnB twUOdPcNj6W3Oq3bY52NXj6fh+ZRHRdNe/aF84xLxLVMjKn2+h7OdV7jmwD3z+B+ aJYA1EXUKzWmJLc3jDkZN6Tk4mFjdALwtMj9e9XKkJMNqTj1jvxcOKQ+sMq2A3X0 OOyFHgqwa2e76/1OtQeClttNwP4If/R0TQLukQdmTMolEkWnHsYMjNFHyG3D8TRX E9Sb6CoXd76MA3aogAph7wu9mSkgcOGMLgY41w0e3ddQicSTaEph9JQe1zb+ip9G I8ZCPtopjnz4nhKwWSBy372wWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIS/c/f +2dbkA6RSEJiNp9B5iWTMB8GA1UdIwQYMBaAFKyhL9fbsoPzLN1zz87PBdPLmoih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTREMS83QkQyMUFGRUY5 N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdfTXMzWFBQenM4RjA4dWFp S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLRXYxOXV5Z19NczNYUFB6czhGMDh1YWlLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTREMS83QkQyMUFGRUY5N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdf TXMzWFBQenM4RjA4dWFpS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEWqUoOwrFcDNwWYAWTS41Z5VrJ1wGK4l+wQcjKfw2G8G5jNNi0Aih InFCw7vd7dc2wvL49I2bpnN0ebfijtVQl21pTerOygkgSp73O+oNLsppIjTwiQKw LVhVuPq7IOJqFipa3IJS5fnT1JI41Hs9a/2kciXmx+WcEadHKIRxQFxpMzfjJ5HN JwOkq+e/P/tbUVE+xDAWfg3GLHKZSHRVMJmyoun+/xnVElhJC3vqEyac42REDje0 9EvOon9H2KSiP7YBr80IvtWy2AJ+K9Pq+h0WzLNVC401bqkZweL7gOTCdYaFYXKQ MxjuY7Vpd2RwVxPyiaEygEnJBgqnHui7 -----END CERTIFICATE-----Generated at Tue May 13 11:09:19 2025 by rpki-client