$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json) Hash identifier: 4rLOlRV8uyYEDpwX99wTsOLANowUJAvvWJFi87iTfio= Subject key identifier: 75:28:AF:D3:DB:AC:F6:C9:7E:AA:27:51:15:33:CC:FA:FD:73:D1:C4 Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Certificate serial: 0775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft Manifest number: 0770 Signing time: Sat 10 May 2025 21:09:16 +0000 Manifest this update: Sat 10 May 2025 21:09:16 +0000 Manifest next update: Sat 17 May 2025 21:09:15 +0000 Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: QRfy0LhIApZ0aIuvxo0YYhHKD+2twpiEro4yl9xCG3Q=) 2: A3205106142511EB8FED0427C4F9AE02.roa (hash: VDZMZq0ravcenOYyOeGNgLAMJ2KdcwQBXJSf2fEc5SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1909 (0x775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Validity Not Before: May 10 21:09:16 2025 GMT Not After : May 17 21:09:15 2025 GMT Subject: CN=681fc07c-3d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:df:a2:f5:3c:13:b8:e7:e6:97:f5:76:a9: 47:73:d1:b2:c2:b8:7f:d4:7a:19:0c:46:f1:e4:19: 61:b9:aa:18:e1:b0:a3:3b:dd:2f:92:12:49:08:91: 39:8e:41:e2:bb:54:5f:21:b9:b7:fe:40:30:4a:dc: a1:4a:f4:10:bd:b6:bb:7c:ff:16:eb:9f:97:01:80: 4f:31:bc:4f:c1:dd:de:cd:65:17:e9:7a:23:ee:00: 22:a0:4c:d9:3f:05:d8:4a:25:a9:67:70:5b:cb:45: 18:22:43:d1:c1:88:53:c0:fa:7d:c5:47:b6:52:4a: b4:53:51:7f:67:4e:95:31:03:45:8d:57:30:c5:96: ee:2b:c7:38:67:64:47:7b:61:26:d4:90:54:87:62: 14:68:22:d4:95:f3:7c:15:fd:78:b6:c4:f3:a6:91: f8:27:31:8d:d7:ea:73:69:5a:ba:b9:47:68:c0:80: 6c:a3:4f:10:9d:f0:c7:f5:e9:9a:c0:58:59:bd:17: 76:c2:a4:f8:52:e4:b3:5d:9e:39:f1:77:b3:51:68: ce:e1:03:cd:8f:84:be:30:91:99:f2:4d:9c:e6:3a: ce:09:6c:b2:cb:01:ff:f2:3f:15:21:55:ac:be:f4: e9:da:98:80:61:97:6f:fc:79:2d:fb:c0:ef:ab:c7: 66:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:28:AF:D3:DB:AC:F6:C9:7E:AA:27:51:15:33:CC:FA:FD:73:D1:C4 X509v3 Authority Key Identifier: keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:88:b9:07:53:67:d1:a7:67:6c:bd:d3:77:3a:a3:eb:62:1b: f3:e9:bd:d8:76:fc:c8:dd:f9:52:96:1b:23:ae:cd:9c:de:08: ad:41:f4:89:9f:89:7f:50:3a:10:d7:dc:1c:e2:7f:c3:b0:1d: a0:25:47:df:4d:e5:2a:0c:6c:ab:af:20:ec:8c:0a:6a:35:e3: 22:28:04:b2:f1:72:94:3e:c8:24:74:58:6c:6b:c0:ac:13:e2: 21:62:95:e7:13:24:7c:3f:63:a7:4c:84:6a:10:f0:17:61:2b: d5:96:4b:d3:47:a2:35:ab:16:ad:00:3f:f3:66:46:7d:0b:8f: 37:86:7f:94:c8:b8:73:c6:45:26:5d:ef:08:8a:fc:91:9b:d9: 84:f4:c4:ee:75:ee:be:0a:92:56:ab:b6:6a:58:7a:2d:1d:39: a0:73:f1:eb:a4:bb:4e:75:00:91:2b:b0:d3:e8:d8:ab:5f:a4: 5c:e0:f4:45:33:65:5d:a2:be:ee:a5:0b:1d:cb:81:6b:a1:ef: 0d:15:91:54:2f:d5:fb:83:05:f7:14:b6:11:62:39:ac:85:b0: a9:8a:be:cd:7a:f7:f5:7a:26:9d:b0:db:24:30:a7:43:63:b0: 49:be:3e:21:a9:e9:88:e4:df:d8:f4:f9:97:84:f4:c8:a1:89: 49:be:1f:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz REU1OTFFQ0IwHhcNMjUwNTEwMjEwOTE2WhcNMjUwNTE3MjEwOTE1WjAYMRYwFAYD VQQDEw02ODFmYzA3Yy0zZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDHfovU8E7jn5pf1dqlHc9Gywrh/1HoZDEbx5BlhuaoY4bCjO90vkhJJCJE5 jkHiu1RfIbm3/kAwStyhSvQQvba7fP8W65+XAYBPMbxPwd3ezWUX6Xoj7gAioEzZ PwXYSiWpZ3Bby0UYIkPRwYhTwPp9xUe2Ukq0U1F/Z06VMQNFjVcwxZbuK8c4Z2RH e2Em1JBUh2IUaCLUlfN8Ff14tsTzppH4JzGN1+pzaVq6uUdowIBso08QnfDH9ema wFhZvRd2wqT4UuSzXZ458XezUWjO4QPNj4S+MJGZ8k2c5jrOCWyyywH/8j8VIVWs vvTp2piAYZdv/Hkt+8Dvq8dmjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUor9Pb rPbJfqonURUzzPr9c9HEMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0 MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjg0RS9FOTA1RENCMDE0MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhk TjdMQ3NiRjZBYm85NVpIc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfiLkHU2fRp2dsvdN3OqPrYhvz6b3YdvzI3flSlhsjrs2c3gitQfSJ n4l/UDoQ19wc4n/DsB2gJUffTeUqDGyrryDsjApqNeMiKASy8XKUPsgkdFhsa8Cs E+IhYpXnEyR8P2OnTIRqEPAXYSvVlkvTR6I1qxatAD/zZkZ9C483hn+UyLhzxkUm Xe8IivyRm9mE9MTude6+CpJWq7ZqWHotHTmgc/HrpLtOdQCRK7DT6NirX6Rc4PRF M2Vdor7upQsdy4Froe8NFZFUL9X7gwX3FLYRYjmshbCpir7Nevf1eiadsNskMKdD Y7BJvj4hqemI5N/Y9PmXhPTIoYlJvh89 -----END CERTIFICATE-----Generated at Mon May 12 07:09:06 2025 by rpki-client