$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json) Hash identifier: 9J3zGZ8e+clT59W4B8SG9mHrVk2+Q8RyjrbBFZv4n+w= Subject key identifier: 1F:85:C1:F5:2E:00:B0:8D:A5:63:6F:62:69:9D:EE:AC:FB:46:11:C2 Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft Manifest number: 01F2 Signing time: Fri 09 May 2025 01:48:52 +0000 Manifest this update: Fri 09 May 2025 01:48:52 +0000 Manifest next update: Fri 16 May 2025 01:48:52 +0000 Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: RBiiM41RHzQ+jicqebER9RtfOQgf2ClwDvxhbWHOkZg=) 2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: Bpmtc+dst8i9fWSSTK2qFRlGSZiBtVfIZ/yU5akTF90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 01:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: May 9 01:48:52 2025 GMT Not After : May 16 01:48:52 2025 GMT Subject: CN=681d5f04-f0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:51:94:01:88:ba:6a:a6:92:19:83:ef:3a: 24:78:a7:73:ce:30:1c:2b:81:c3:b9:c8:2c:b2:c7: 4e:32:b9:7f:99:5d:d8:94:f3:f8:e8:b4:13:aa:74: 44:b8:82:b4:03:2d:bd:83:d2:ea:06:db:56:c6:b2: f4:3b:e5:51:d7:10:43:8e:c0:00:85:fd:39:35:8f: 1e:49:1c:8b:92:3f:28:16:52:43:f4:66:78:dd:70: 8b:46:97:45:75:3d:cb:c1:cc:9a:1e:20:6c:af:04: a8:be:e5:93:39:2a:5e:6e:dc:63:a3:b3:4b:e6:bb: 23:1b:be:7c:39:a5:9a:43:8b:63:65:9b:31:25:34: 75:82:cb:de:ce:11:bb:bf:e6:d1:ac:0b:5f:a5:d6: 97:f7:b7:31:39:f9:23:86:3f:b9:45:7f:0a:24:95: f8:f5:e8:9a:f3:87:7f:ae:17:f6:4d:55:2e:a9:ac: 60:c8:3e:f3:4d:2b:3b:f2:c3:b0:73:bb:fa:95:38: d7:de:ce:63:2f:bb:16:08:57:38:a1:be:d5:04:34: ad:45:85:8f:1d:ac:de:c1:69:8f:42:ca:a7:b6:ea: 33:7e:c6:bc:33:5f:10:00:f0:ef:9b:86:5b:41:46: c5:6a:7e:bc:20:55:b5:04:5a:16:db:01:ec:3c:67: 28:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:C1:F5:2E:00:B0:8D:A5:63:6F:62:69:9D:EE:AC:FB:46:11:C2 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f0:89:5a:ef:f6:15:f0:c3:c1:b0:0b:3b:87:bb:c0:b4:a1: d7:d6:ed:82:0a:cb:52:c6:6b:98:db:20:4c:9a:4a:93:1f:c3: 58:30:dd:be:df:04:50:6f:65:b2:e7:5e:63:d9:e1:c6:85:30: ab:7f:5a:1b:35:a7:cb:83:a3:d0:76:e4:18:52:7e:56:c2:4d: 27:0d:5c:f4:6a:f6:93:33:ff:c7:9b:bd:5a:79:90:a1:80:7f: 67:28:49:12:2d:39:7e:db:da:1d:bf:8d:68:e0:8c:67:8d:cd: d6:7e:98:20:49:1a:d4:97:15:ca:b0:0d:4b:07:14:29:7e:02: dc:73:d6:94:84:90:1d:1c:62:6c:45:66:82:19:78:08:46:54: 50:ae:b5:7d:c8:90:2d:13:5d:05:b9:af:dd:af:95:9f:7d:e6: 78:8b:8e:f3:66:f4:1d:d9:57:61:79:00:b0:28:8e:63:df:f4: 9e:4a:b9:1a:b8:f9:c5:da:af:1f:92:b4:ea:9d:e0:9a:11:db: 0a:55:c0:68:74:88:f6:12:89:3c:ec:7d:9c:e4:22:41:dc:24: 3c:80:f7:43:d4:36:14:9d:60:fe:f5:33:b6:2c:9f:d5:94:0a: 2c:a5:2f:f9:e3:52:2a:11:3d:0f:9f:b7:b1:0c:25:5a:d7:b2: 54:68:8e:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjUwNTA5MDE0ODUyWhcNMjUwNTE2MDE0ODUyWjAYMRYwFAYD VQQDEw02ODFkNWYwNC1mMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtdRlAGIumqmkhmD7zokeKdzzjAcK4HDucgsssdOMrl/mV3YlPP46LQTqnRE uIK0Ay29g9LqBttWxrL0O+VR1xBDjsAAhf05NY8eSRyLkj8oFlJD9GZ43XCLRpdF dT3LwcyaHiBsrwSovuWTOSpebtxjo7NL5rsjG758OaWaQ4tjZZsxJTR1gsvezhG7 v+bRrAtfpdaX97cxOfkjhj+5RX8KJJX49eia84d/rhf2TVUuqaxgyD7zTSs78sOw c7v6lTjX3s5jL7sWCFc4ob7VBDStRYWPHazewWmPQsqntuozfsa8M18QAPDvm4Zb QUbFan68IFW1BFoW2wHsPGcopwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+FwfUu ALCNpWNvYmmd7qz7RhHCMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t OWozbWdfUWtKSUpBLTNJcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL8Ila7/YV8MPBsAs7h7vAtKHX1u2CCstSxmuY2yBMmkqTH8NYMN2+ 3wRQb2Wy515j2eHGhTCrf1obNafLg6PQduQYUn5Wwk0nDVz0avaTM//Hm71aeZCh gH9nKEkSLTl+29odv41o4Ixnjc3WfpggSRrUlxXKsA1LBxQpfgLcc9aUhJAdHGJs RWaCGXgIRlRQrrV9yJAtE10Fua/dr5WffeZ4i47zZvQd2VdheQCwKI5j3/SeSrka uPnF2q8fkrTqneCaEdsKVcBodIj2Eok87H2c5CJB3CQ8gPdD1DYUnWD+9TO2LJ/V lAospS/541IqET0Pn7exDCVa17JUaI7O -----END CERTIFICATE-----Generated at Sat May 10 19:20:57 2025 by rpki-client