$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft File: 91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json) Hash identifier: xcLIRZ7Oi5ZKWQjVdubBesLbBTm2na4ATMgxr6CaVtU= Subject key identifier: 6F:9B:D1:32:31:98:49:2F:78:A6:27:1F:7D:93:ED:EE:EF:7E:4A:2E Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 Certificate issuer: /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft Manifest number: 0195 Signing time: Thu 15 May 2025 02:54:48 +0000 Manifest this update: Thu 15 May 2025 02:54:47 +0000 Manifest next update: Thu 22 May 2025 02:54:47 +0000 Files and hashes: 1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: 9HzFun6rSpBphJZkst4Wbjd9Byb6+k2fORxJJNMoyNU=) 2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: sO+2+/cvQ7fG/IUMq+A+e08x9da5+jbIe5T9qmjARBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Validity Not Before: May 15 02:54:47 2025 GMT Not After : May 22 02:54:47 2025 GMT Subject: CN=68255778-c106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:60:36:64:55:62:31:f4:66:2e:06:02:1f:77: ee:4e:13:bc:b8:15:27:91:d3:4e:5e:c4:78:ce:30: 26:e3:f8:b1:e9:28:25:a9:68:08:16:3e:b1:9f:18: bd:ba:66:c7:4a:b6:11:2e:c0:f2:6b:7d:66:e0:6e: 7f:7d:c5:75:fa:8a:28:a2:ca:bc:9a:36:be:c6:a5: 6c:93:aa:b3:76:72:0c:46:a4:57:3e:52:e2:35:8f: 27:ce:bd:82:b6:7d:a6:4c:f3:e6:c2:fb:a8:7a:b6: 14:a3:e0:62:70:8a:29:1d:c0:77:f9:d4:52:62:7b: 4f:21:cb:45:55:59:0a:8e:39:72:28:f1:d9:1b:da: df:ff:90:4c:ec:a0:10:a1:ad:b1:07:f1:95:93:c8: 4f:07:d7:2d:47:19:90:8c:27:47:72:b5:c1:a1:71: b5:e9:0c:6e:7a:63:59:a0:80:82:e9:c9:b3:40:d6: 7f:05:b5:cc:78:13:53:d8:5e:58:01:4a:18:9e:51: cc:6b:98:03:22:68:df:9f:82:55:cb:c0:24:c2:5f: ff:57:b0:bb:04:c3:c4:17:a9:25:d4:bf:9b:43:1e: c7:5e:b1:08:87:ef:2a:9e:28:2e:ba:b0:82:37:40: 62:2d:2c:4e:9e:16:3e:1c:e5:87:43:59:d0:45:67: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9B:D1:32:31:98:49:2F:78:A6:27:1F:7D:93:ED:EE:EF:7E:4A:2E X509v3 Authority Key Identifier: keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:82:f7:1b:27:18:26:c4:0f:a3:ba:90:56:92:76:41:42:9e: f5:9a:ba:03:7c:da:b9:8d:52:a8:a9:63:52:ed:d9:c0:80:47: a6:1f:44:b6:6b:5f:a9:ab:a8:7c:c9:6d:43:fd:c8:5c:46:b8: 88:15:8a:4f:c3:34:be:91:33:99:6d:ec:19:f7:55:20:c1:92: d1:62:6f:7a:63:04:0d:cb:b6:08:ec:8b:fa:a8:cf:30:eb:5b: 56:90:ec:a3:c6:10:65:b4:c5:22:ed:8e:e8:5a:ad:e7:a2:aa: 43:dd:6d:55:a4:77:91:d2:c7:ef:40:9e:8b:ca:4d:fb:68:74: 5b:d5:9c:fd:67:eb:36:ec:26:45:6a:2a:16:f3:fb:31:85:8c: b9:09:68:86:75:1e:7f:a4:35:da:3d:b5:a5:0f:da:ff:70:ff: 4a:fb:50:57:3a:0e:f9:99:42:34:ef:13:8f:dd:36:4a:4b:55: 42:1f:44:4f:94:9a:78:19:3e:b0:a7:91:82:4a:c3:fa:24:ee: 3e:99:a1:dd:00:bd:e3:7b:5e:27:7c:08:f4:94:c9:23:e1:e3: 0b:3f:4c:ad:bb:47:34:5f:ae:34:2f:02:e7:02:16:0d:7f:22: 41:0a:2a:57:d1:d8:65:64:8a:45:a9:ee:a7:46:ad:3a:5f:6d: 08:a6:32:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4 QjIzQjQwMzMwHhcNMjUwNTE1MDI1NDQ3WhcNMjUwNTIyMDI1NDQ3WjAYMRYwFAYD VQQDEw02ODI1NTc3OC1jMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mA2ZFViMfRmLgYCH3fuThO8uBUnkdNOXsR4zjAm4/ix6SglqWgIFj6xnxi9 umbHSrYRLsDya31m4G5/fcV1+oooosq8mja+xqVsk6qzdnIMRqRXPlLiNY8nzr2C tn2mTPPmwvuoerYUo+BicIopHcB3+dRSYntPIctFVVkKjjlyKPHZG9rf/5BM7KAQ oa2xB/GVk8hPB9ctRxmQjCdHcrXBoXG16QxuemNZoICC6cmzQNZ/BbXMeBNT2F5Y AUoYnlHMa5gDImjfn4JVy8Akwl//V7C7BMPEF6kl1L+bQx7HXrEIh+8qniguurCC N0BiLSxOnhY+HOWHQ1nQRWc4cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+b0TIx mEkveKYnH32T7e7vfkouMB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5 OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3 R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0gvcbJxgmxA+jupBWknZBQp71mroDfNq5jVKoqWNS7dnAgEemH0S2 a1+pq6h8yW1D/chcRriIFYpPwzS+kTOZbewZ91UgwZLRYm96YwQNy7YI7Iv6qM8w 61tWkOyjxhBltMUi7Y7oWq3noqpD3W1VpHeR0sfvQJ6Lyk37aHRb1Zz9Z+s27CZF aioW8/sxhYy5CWiGdR5/pDXaPbWlD9r/cP9K+1BXOg75mUI07xOP3TZKS1VCH0RP lJp4GT6wp5GCSsP6JO4+maHdAL3je14nfAj0lMkj4eMLP0ytu0c0X640LwLnAhYN fyJBCipX0dhlZIpFqe6nRq06X20IpjKs -----END CERTIFICATE-----Generated at Sat May 17 02:37:21 2025 by rpki-client