$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json) Hash identifier: O/ujMQGsFdQ7oTTCnNFp36HID7ZlL+FH2es1xwSK4PU= Subject key identifier: 57:CF:2E:53:37:50:A8:DC:64:74:A7:CD:D3:9A:D2:CD:95:3E:89:F8 Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft Manifest number: 30 Signing time: Sun 11 May 2025 06:23:40 +0000 Manifest this update: Sun 11 May 2025 06:23:39 +0000 Manifest next update: Sun 18 May 2025 06:23:39 +0000 Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: 2iQIzDcRHjx0pytTcq1W3b9IDHK/01oVO1pf0Ps7qUw=) 2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=) 3: F449A3FCE9C811EF9972A934C4F9AE02.roa (hash: 7MwfNHRXASMEn22ZfT4zj9oG/ZQKY9GDP1pjifjdSXI=) 4: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Validity Not Before: May 11 06:23:39 2025 GMT Not After : May 18 06:23:39 2025 GMT Subject: CN=6820426c-25eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:ba:28:c1:07:ea:2c:73:f0:5d:bb:88:f3: 9f:ad:ea:44:d8:f2:af:b6:f6:90:ad:83:89:a4:07: 7c:b7:69:cd:8a:1d:d9:45:57:a5:3b:51:3b:02:1e: 78:68:b6:56:d9:ea:20:ad:92:ad:de:81:50:2e:14: e8:eb:eb:fb:68:8e:5d:f4:26:d5:c3:6c:1d:e6:b2: d6:f0:e5:6c:a4:74:de:4f:04:a4:c8:e7:f5:88:ad: 99:d8:2f:73:d9:cd:d4:67:32:80:f7:61:fe:b3:34: 2d:87:b7:e8:90:f6:c8:d4:c2:5b:a8:17:3a:48:30: ec:b3:7f:43:70:67:17:80:ea:18:fe:d1:4c:c7:ab: a3:11:b5:b0:d7:e4:21:93:98:38:70:5a:5e:cf:22: 5d:54:77:d9:28:64:1d:84:ff:03:7d:00:e1:b9:3e: da:1b:fb:b1:37:12:ba:9c:fa:ff:a2:1f:90:58:26: 70:54:5c:b1:62:fc:bb:ab:1d:80:8c:e6:9c:c0:15: a9:59:3d:c3:8e:32:a6:b0:0e:8b:0c:68:2c:8a:3a: eb:b3:98:42:07:e2:f8:3d:c3:2d:46:ed:11:eb:03: 4a:fc:14:3d:87:a7:94:43:76:93:8d:b2:18:4c:3e: 52:0b:18:47:25:1f:68:a4:f9:b7:44:0a:7e:29:c3: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CF:2E:53:37:50:A8:DC:64:74:A7:CD:D3:9A:D2:CD:95:3E:89:F8 X509v3 Authority Key Identifier: keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e6:dc:44:64:46:be:66:c7:c5:0e:5e:a7:cb:cb:d6:5b:b4: 8f:5c:90:20:fe:66:c7:ce:0b:a8:d5:77:a3:5c:d2:0b:8d:a5: 01:68:71:e2:12:6c:90:fc:f8:dd:87:19:d5:8d:eb:e2:e9:08: ca:c4:ca:b3:55:03:c5:12:a8:f9:af:e8:61:51:dd:7d:60:39: 6d:2f:bf:c2:77:5b:fb:b4:98:bb:17:fd:a0:68:71:85:d6:c7: a2:7d:9e:97:02:d1:b0:fa:8a:f2:7f:99:7d:e0:f4:60:10:87: 6d:15:e0:ff:a5:e0:a0:50:24:a8:07:0d:26:4c:11:bf:a8:40: 4e:5a:da:b0:ea:a4:e9:f9:53:68:92:ff:7d:00:e3:e7:5b:fa: b1:bc:5c:39:41:b4:ce:94:8e:9a:f4:74:44:58:d5:62:87:90: 88:c2:dd:ea:88:22:2c:77:cc:65:58:85:76:d9:0a:ce:8b:34: ea:2d:b9:7b:f7:df:45:72:cc:8f:8a:11:eb:6f:7e:14:dd:80: 96:ed:60:e9:1b:20:04:1f:73:2f:3c:d8:43:a6:d0:8b:d5:41: 16:96:95:66:e9:9b:cd:d2:86:d2:e3:20:3a:2d:8a:c8:0d:e0: 44:10:69:0a:71:2d:91:c3:d5:06:9d:02:bb:48:91:c5:1d:98: 7d:30:3b:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MEEyRTExMC8GA1UEBRMoNkEzRUY2NzE4MkRCQjBGNkNDRjNDQTQxMzc4QzAxMTk4 MDZBRTlCRDAeFw0yNTA1MTEwNjIzMzlaFw0yNTA1MTgwNjIzMzlaMBgxFjAUBgNV BAMTDTY4MjA0MjZjLTI1ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmbLoowQfqLHPwXbuI85+t6kTY8q+29pCtg4mkB3y3ac2KHdlFV6U7UTsCHnho tlbZ6iCtkq3egVAuFOjr6/tojl30JtXDbB3mstbw5WykdN5PBKTI5/WIrZnYL3PZ zdRnMoD3Yf6zNC2Ht+iQ9sjUwluoFzpIMOyzf0NwZxeA6hj+0UzHq6MRtbDX5CGT mDhwWl7PIl1Ud9koZB2E/wN9AOG5Ptob+7E3Erqc+v+iH5BYJnBUXLFi/LurHYCM 5pzAFalZPcOOMqawDosMaCyKOuuzmEIH4vg9wy1G7RHrA0r8FD2Hp5RDdpONshhM PlILGEclH2ik+bdECn4pw6k7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV88uUzdQ qNxkdKfN05rSzZU+ifgwHwYDVR0jBBgwFoAUaj72cYLbsPbM88pBN4wBGYBq6b0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwQTJFL0M4MzZDN0IyRTkw QjExRUY4MjE4NTgyNEM0RjlBRTAyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZi MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWo3MmNZTGJzUGJNODhwQk40d0JHWUJxNmIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw QTJFL0M4MzZDN0IyRTkwQjExRUY4MjE4NTgyNEM0RjlBRTAyL2FqNzJjWUxic1Bi TTg4cEJONHdCR1lCcTZiMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADvm3ERkRr5mx8UOXqfLy9ZbtI9ckCD+ZsfOC6jVd6Nc0guNpQFoceIS bJD8+N2HGdWN6+LpCMrEyrNVA8USqPmv6GFR3X1gOW0vv8J3W/u0mLsX/aBocYXW x6J9npcC0bD6ivJ/mX3g9GAQh20V4P+l4KBQJKgHDSZMEb+oQE5a2rDqpOn5U2iS /30A4+db+rG8XDlBtM6Ujpr0dERY1WKHkIjC3eqIIix3zGVYhXbZCs6LNOotuXv3 30VyzI+KEetvfhTdgJbtYOkbIAQfcy882EOm0IvVQRaWlWbpm83ShtLjIDotisgN 4EQQaQpxLZHD1QadArtIkcUdmH0wO40= -----END CERTIFICATE-----Generated at Sun May 11 09:30:35 2025 by rpki-client