$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: 7JswBVwFIEiuI9M3/+QgwyqMBhdyCUzLNjMTzZf1KdE= Subject key identifier: 5F:82:3D:B9:67:C1:E6:91:1D:93:44:C2:0E:8C:22:D2:AC:67:EB:D5 Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 041E Signing time: Mon 05 May 2025 00:01:16 +0000 Manifest this update: Mon 05 May 2025 00:01:16 +0000 Manifest next update: Mon 12 May 2025 00:01:16 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: 4NTdXcxHOotaeQDYhECwajJZUWpOKKCxUYAuhaW3a+s=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: /+PqdcGfeQGq1JSsbPZ7utBGw8SAzSRzzxhLFAim1J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: May 5 00:01:16 2025 GMT Not After : May 12 00:01:16 2025 GMT Subject: CN=6817ffcc-212d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:aa:b2:76:86:44:1e:38:d1:27:96:24:a5: de:81:50:0a:d7:09:71:6f:fb:53:df:de:54:05:64: 82:be:11:f0:e7:9f:30:26:34:c8:e6:b7:16:44:17: 3c:68:aa:a1:c0:34:03:2d:a7:31:3c:e3:bd:12:5c: a9:95:ff:38:d4:45:e7:42:1a:cd:37:c6:4c:2e:30: 9c:1d:ed:b2:c3:dd:39:f8:f7:89:d3:05:be:06:e2: 00:e7:a1:7d:cf:7b:fe:e8:90:7a:96:39:1f:5d:c1: 22:b2:05:00:9e:70:23:90:80:c6:5a:78:fd:9f:2e: 15:8a:4f:60:0f:0a:ac:8c:cc:f1:c5:0f:d7:55:23: ad:ec:47:ef:d5:d7:3c:fb:0f:85:e5:1e:92:1c:5a: e0:e3:f4:cd:e0:75:5c:dc:c0:33:74:7d:76:1c:27: 07:bb:b4:ce:3f:64:a2:68:7d:6d:e9:8b:94:85:14: 05:a6:21:de:78:e5:70:9b:fb:5d:db:94:bd:13:44: 4b:60:79:0a:d8:af:f7:1e:cd:93:ce:c0:97:5a:92: db:94:f1:34:78:bf:33:08:46:07:c8:aa:67:21:d3: f5:6a:2e:cb:4d:b9:c9:5a:0f:41:4e:d4:f0:5b:95: ce:40:d2:90:77:fe:33:1d:9c:95:54:56:ee:ba:db: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:82:3D:B9:67:C1:E6:91:1D:93:44:C2:0E:8C:22:D2:AC:67:EB:D5 X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:4e:57:57:7b:eb:10:fe:42:c7:fe:f7:ab:0a:dc:f4:0c:f7: 98:de:44:3c:8a:2e:dd:d6:cd:5e:3c:63:3b:7f:ab:49:9d:59: 20:d5:f1:8e:37:6e:ef:fc:03:81:8e:2d:b2:b7:ec:41:b3:5a: d4:ea:7b:30:57:e4:8f:c3:06:12:55:ce:d0:ce:1c:5d:f9:1b: 08:79:6e:95:43:0d:ae:e5:0c:b5:ff:1f:c2:8b:83:2d:99:8f: 51:18:a2:6f:dc:65:bd:25:aa:a4:0b:8a:aa:93:40:86:e9:0b: 48:8b:8b:18:6c:78:29:c0:0b:bb:ed:03:5e:90:db:ee:7d:1c: 4a:85:65:7d:03:f2:a9:a8:7c:ec:dd:43:dc:99:17:ff:7d:db: a3:23:a9:d3:78:2c:45:cb:f9:8f:1f:0e:5d:eb:e5:39:2d:63: 9a:22:e9:a0:e1:b9:aa:84:fa:3d:c9:89:01:a5:19:4f:27:bd: d5:1c:45:fe:00:5c:9d:b8:ea:42:6c:08:5c:45:50:ad:6e:89: 98:64:7f:70:ed:83:e4:c7:87:be:4d:e3:53:ee:59:b4:5d:b5: a7:3f:a4:98:42:37:da:47:57:34:bb:73:fe:80:3a:4e:fb:17: 81:bc:e0:08:bb:4e:41:3a:3c:69:79:eb:af:c6:1e:03:72:76: fa:5c:bf:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjUwNTA1MDAwMTE2WhcNMjUwNTEyMDAwMTE2WjAYMRYwFAYD VQQDEw02ODE3ZmZjYy0yMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHmqsnaGRB440SeWJKXegVAK1wlxb/tT395UBWSCvhHw558wJjTI5rcWRBc8 aKqhwDQDLacxPOO9Elyplf841EXnQhrNN8ZMLjCcHe2yw905+PeJ0wW+BuIA56F9 z3v+6JB6ljkfXcEisgUAnnAjkIDGWnj9ny4Vik9gDwqsjMzxxQ/XVSOt7Efv1dc8 +w+F5R6SHFrg4/TN4HVc3MAzdH12HCcHu7TOP2SiaH1t6YuUhRQFpiHeeOVwm/td 25S9E0RLYHkK2K/3Hs2TzsCXWpLblPE0eL8zCEYHyKpnIdP1ai7LTbnJWg9BTtTw W5XOQNKQd/4zHZyVVFbuutvARwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+CPbln weaRHZNEwg6MItKsZ+vVMB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0TldXe+sQ/kLH/verCtz0DPeY3kQ8ii7d1s1ePGM7f6tJnVkg1fGO N27v/AOBji2yt+xBs1rU6nswV+SPwwYSVc7Qzhxd+RsIeW6VQw2u5Qy1/x/Ci4Mt mY9RGKJv3GW9JaqkC4qqk0CG6QtIi4sYbHgpwAu77QNekNvufRxKhWV9A/KpqHzs 3UPcmRf/fdujI6nTeCxFy/mPHw5d6+U5LWOaIumg4bmqhPo9yYkBpRlPJ73VHEX+ AFyduOpCbAhcRVCtbomYZH9w7YPkx4e+TeNT7lm0XbWnP6SYQjfaR1c0u3P+gDpO +xeBvOAIu05BOjxpeeuvxh4Dcnb6XL+s -----END CERTIFICATE-----Generated at Mon May 5 06:56:11 2025 by rpki-client