$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: jq4oFodpZf61D3XzFJPnDxQEUFFtv82S5u7qxCNkluU= Subject key identifier: A3:9A:C8:C7:D2:5B:61:42:06:3F:80:0A:CA:A8:39:37:34:DF:7D:8E Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 01D4 Signing time: Thu 15 May 2025 02:25:36 +0000 Manifest this update: Thu 15 May 2025 02:25:35 +0000 Manifest next update: Thu 22 May 2025 02:25:35 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: nHepOLsN7NLEOYKPzbSx9E1thmTx3vDROPbp4nNt9E4=) 2: 0FBB769A5DDB11EEAEEA437DC4F9AE02.roa (hash: uKjzis/CrgsSg2LUM/lsbZTCdaGZHhh4O1b0+pc2P3M=) 3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: wCL8taH4LIUOWXKWcvReDaNZ3+NnYlOsUT+x4rsuWPo=) 4: DE56B490143611EEAB1A5D73C4F9AE02.roa (hash: 3IVp9MXxKURZzAWVcJ2+aQ10UWSD+/QnsDWHqJYEcQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: May 15 02:25:35 2025 GMT Not After : May 22 02:25:35 2025 GMT Subject: CN=682550a0-0101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:9c:6f:d5:0d:ba:03:f7:b2:79:02:1b:bb: 44:d3:ce:32:64:ab:ab:2e:ef:be:21:be:99:01:2f: 96:50:02:14:d9:55:33:99:44:90:cd:05:4e:e1:b6: e7:ca:1d:26:28:ae:fb:3f:33:5c:fd:0a:3d:bb:59: f2:da:a2:7a:67:51:af:6e:58:ba:49:59:28:b4:bd: 9c:57:65:ed:1c:2e:bd:4d:e8:d6:6d:91:45:26:97: 93:65:c6:f2:99:91:d8:20:2e:1b:33:37:73:fb:bd: 5f:29:97:b6:12:cd:5a:48:70:2a:46:2f:d8:38:0b: a5:b9:57:7d:c6:13:a6:0a:18:75:61:64:84:b0:50: 76:4a:55:e5:5b:c9:cd:07:19:e2:ba:65:d0:59:6a: f4:d6:b8:08:f2:5d:e8:6e:99:39:06:55:bf:bf:78: 45:92:c2:91:b6:be:c7:43:27:c0:a3:25:93:22:44: 4e:7e:c2:d5:13:66:24:63:33:a0:c2:60:e6:a6:63: ff:8c:63:cf:4e:a7:62:cd:5e:30:ba:b6:72:7b:4a: 04:94:fc:85:80:51:5b:2c:e2:f4:9b:69:2e:26:87: 2e:35:59:d7:dd:96:5a:ff:1b:ad:75:6f:50:9b:5a: a6:6c:14:13:b6:25:33:3b:12:9d:c8:07:d5:53:79: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9A:C8:C7:D2:5B:61:42:06:3F:80:0A:CA:A8:39:37:34:DF:7D:8E X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9e:b3:fa:03:3e:02:3d:ab:91:0f:10:1d:1a:d7:d1:01:fd: 48:29:1c:bc:e6:91:ae:f2:36:dc:ed:76:75:4f:8c:36:43:df: aa:cf:f0:66:19:26:09:d1:75:a4:a9:83:91:9e:a1:88:0d:2d: 1d:eb:d5:0a:e6:83:c9:9e:5f:00:b1:2c:4f:de:ca:a3:d5:5d: d5:3d:8e:84:22:7f:42:31:af:70:de:41:d9:4b:b9:52:dd:c5: e1:03:b1:90:c2:89:f7:9a:cf:5e:ff:9a:00:7c:0d:c3:b7:af: 05:28:b5:f8:4e:c5:f9:a5:d5:ac:2a:f9:6c:c5:ed:43:f1:b5: 1c:60:e6:10:e8:61:6a:b4:f5:92:ce:d7:7e:8c:c2:c3:67:ae: f3:70:80:ad:60:89:89:04:3e:ef:f5:65:8d:f6:e5:0c:6b:48: b6:8e:a7:37:66:cc:e2:b4:57:ee:3a:8a:b6:40:32:8d:bd:cc: 6f:fc:97:be:2e:58:45:06:d5:f6:0b:86:2b:64:c4:24:b9:35: 17:d4:4b:e0:88:a2:49:84:22:23:8a:62:8f:da:d5:9c:f3:7e: 40:ab:fe:1b:ce:69:7a:69:1c:61:90:88:c3:5a:17:9d:29:15: 76:6a:b3:b0:7f:8b:5f:76:5a:02:04:db:1c:d1:71:e8:75:17: a7:eb:a9:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUwNTE1MDIyNTM1WhcNMjUwNTIyMDIyNTM1WjAYMRYwFAYD VQQDEw02ODI1NTBhMC0wMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpycb9UNugP3snkCG7tE084yZKurLu++Ib6ZAS+WUAIU2VUzmUSQzQVO4bbn yh0mKK77PzNc/Qo9u1ny2qJ6Z1Gvbli6SVkotL2cV2XtHC69TejWbZFFJpeTZcby mZHYIC4bMzdz+71fKZe2Es1aSHAqRi/YOAuluVd9xhOmChh1YWSEsFB2SlXlW8nN BxniumXQWWr01rgI8l3obpk5BlW/v3hFksKRtr7HQyfAoyWTIkROfsLVE2YkYzOg wmDmpmP/jGPPTqdizV4wurZye0oElPyFgFFbLOL0m2kuJocuNVnX3ZZa/xutdW9Q m1qmbBQTtiUzOxKdyAfVU3lfewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOayMfS W2FCBj+ACsqoOTc0332OMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9nrP6Az4CPauRDxAdGtfRAf1IKRy85pGu8jbc7XZ1T4w2Q9+qz/Bm GSYJ0XWkqYORnqGIDS0d69UK5oPJnl8AsSxP3sqj1V3VPY6EIn9CMa9w3kHZS7lS 3cXhA7GQwon3ms9e/5oAfA3Dt68FKLX4TsX5pdWsKvlsxe1D8bUcYOYQ6GFqtPWS ztd+jMLDZ67zcICtYImJBD7v9WWN9uUMa0i2jqc3ZszitFfuOoq2QDKNvcxv/Je+ LlhFBtX2C4YrZMQkuTUX1EvgiKJJhCIjimKP2tWc835Aq/4bzml6aRxhkIjDWhed KRV2arOwf4tfdloCBNsc0XHodRen66nR -----END CERTIFICATE-----Generated at Fri May 16 12:06:32 2025 by rpki-client