$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft File: pVqOdK-92uYpENDGe6Ip1p4eyXg.mft (raw, json) Hash identifier: vDBEU5cnWGb+C31pLf+JNMqkdSZIYuZMpRCEta6tI/s= Subject key identifier: 75:0D:FC:86:D9:BB:E9:BC:F0:56:7A:C0:63:87:12:61:C6:E7:8E:66 Authority key identifier: A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78 Certificate issuer: /CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978 Certificate serial: 0700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft Manifest number: 06FF Signing time: Mon 12 May 2025 21:42:50 +0000 Manifest this update: Mon 12 May 2025 21:42:49 +0000 Manifest next update: Mon 19 May 2025 21:42:49 +0000 Files and hashes: 1: pVqOdK-92uYpENDGe6Ip1p4eyXg.crl (hash: xs2Q9GIRFx/60yLi1AVpQD6vuN7fc6n7BHn0UliAwn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FC6, serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978 Validity Not Before: May 12 21:42:49 2025 GMT Not After : May 19 21:42:49 2025 GMT Subject: CN=68226b5a-7b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:18:48:9f:2e:f4:fa:e3:d2:ca:e0:1a:27: 2e:db:31:98:43:59:c9:80:ca:5e:29:dc:8e:26:87: 38:a8:2d:0d:a3:6a:e7:54:bc:67:c5:e8:b3:88:86: b3:93:19:cd:71:ae:ec:1f:6e:6b:2a:e8:c8:8d:5e: 0d:55:ad:eb:a7:da:7e:37:e5:79:dc:f9:15:6e:fc: ff:47:8e:24:dc:9b:de:1b:51:b2:fb:c9:99:7d:78: 05:0e:a6:fc:5f:fd:8b:6c:c6:a5:02:90:07:68:9d: e5:49:a3:25:d4:86:2c:f1:42:ea:e7:e9:e7:5b:c2: d7:f3:58:11:91:a2:b3:27:02:32:09:66:f0:e8:fc: 07:6d:84:50:e4:5d:74:89:e3:24:a7:6b:b3:eb:55: 0d:0d:ce:e3:bd:19:70:86:c5:1f:0e:a9:95:a0:46: 19:04:9c:0f:e3:cd:db:4f:55:27:54:29:98:06:df: 87:67:76:11:4b:fc:a5:2b:b3:e2:cc:89:64:24:f5: 10:76:fc:56:d3:c9:8d:a7:68:14:40:15:a3:4b:90: 59:4b:09:39:bd:d2:70:49:90:4e:2f:d6:71:aa:30: 84:22:0a:94:d1:4c:0a:99:1a:95:13:0b:33:59:2d: 2e:da:c7:27:cc:3a:d9:6f:6f:af:05:be:82:7c:95: 9d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0D:FC:86:D9:BB:E9:BC:F0:56:7A:C0:63:87:12:61:C6:E7:8E:66 X509v3 Authority Key Identifier: keyid:A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:33:15:d8:1a:58:aa:84:71:e2:6c:99:7e:1d:a3:9b:9d:14: 89:b4:32:13:2f:a1:dc:c2:5d:da:20:55:a7:54:43:53:69:b1: 3d:e5:26:e8:19:0b:e6:5a:31:94:e9:74:0d:47:08:26:50:87: 1f:07:a6:16:50:6f:c3:32:aa:0b:30:11:90:fd:30:63:90:db: b4:99:22:cc:a0:c6:5c:c1:58:b8:10:90:47:4e:94:a9:82:09: 15:e9:de:df:48:b3:52:01:59:3d:13:b8:3b:67:55:d6:80:cb: 61:2d:ae:8f:c4:65:30:ef:3b:04:9a:74:83:d7:a5:c6:a1:90: 3d:63:91:0f:6b:82:c2:9c:9d:19:58:37:8f:16:ec:8a:c9:fe: 87:ce:27:d7:32:54:63:84:d4:a6:6d:1f:1a:b7:b6:a0:79:4d: 99:e1:c0:fd:51:df:e5:6c:b5:29:e2:08:57:6c:7c:ed:7d:1d: 3f:52:ae:3b:8b:cf:5a:bd:41:22:4e:10:da:e8:09:97:6b:b3: a9:cd:48:d9:13:03:ed:5c:56:44:b2:e7:12:cb:75:f2:be:31: 04:6e:ec:a1:b8:5d:50:21:72:c1:90:11:39:2e:9c:3d:23:32: 87:aa:b4:d8:81:67:a1:74:6d:b1:2c:cc:57:37:08:18:4e:2a: e2:a0:31:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGQzYxMTAvBgNVBAUTKEE1NUE4RTc0QUZCRERBRTYyOTEwRDBDNjdCQTIyOUQ2 OUUxRUM5NzgwHhcNMjUwNTEyMjE0MjQ5WhcNMjUwNTE5MjE0MjQ5WjAYMRYwFAYD VQQDEw02ODIyNmI1YS03YjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudEYSJ8u9Prj0srgGicu2zGYQ1nJgMpeKdyOJoc4qC0No2rnVLxnxeiziIaz kxnNca7sH25rKujIjV4NVa3rp9p+N+V53PkVbvz/R44k3JveG1Gy+8mZfXgFDqb8 X/2LbMalApAHaJ3lSaMl1IYs8ULq5+nnW8LX81gRkaKzJwIyCWbw6PwHbYRQ5F10 ieMkp2uz61UNDc7jvRlwhsUfDqmVoEYZBJwP483bT1UnVCmYBt+HZ3YRS/ylK7Pi zIlkJPUQdvxW08mNp2gUQBWjS5BZSwk5vdJwSZBOL9ZxqjCEIgqU0UwKmRqVEwsz WS0u2scnzDrZb2+vBb6CfJWdQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUN/IbZ u+m88FZ6wGOHEmHG545mMB8GA1UdIwQYMBaAFKVajnSvvdrmKRDQxnuiKdaeHsl4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZDNi8wMTlDMDI3RTNG NjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1WXBFTkRHZTZJcDFwNGV5 WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BWcU9kSy05MnVZcEVOREdlNklwMXA0ZXlYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZDNi8wMTlDMDI3RTNGNjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1 WXBFTkRHZTZJcDFwNGV5WGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaMxXYGliqhHHibJl+HaObnRSJtDITL6Hcwl3aIFWnVENTabE95Sbo GQvmWjGU6XQNRwgmUIcfB6YWUG/DMqoLMBGQ/TBjkNu0mSLMoMZcwVi4EJBHTpSp ggkV6d7fSLNSAVk9E7g7Z1XWgMthLa6PxGUw7zsEmnSD16XGoZA9Y5EPa4LCnJ0Z WDePFuyKyf6HzifXMlRjhNSmbR8at7ageU2Z4cD9Ud/lbLUp4ghXbHztfR0/Uq47 i89avUEiThDa6AmXa7OpzUjZEwPtXFZEsucSy3XyvjEEbuyhuF1QIXLBkBE5Lpw9 IzKHqrTYgWehdG2xLMxXNwgYTirioDE6 -----END CERTIFICATE-----Generated at Wed May 14 17:17:41 2025 by rpki-client