$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft File: R_rmMixRsd0CJJdveh0rkibQkOo.mft (raw, json) Hash identifier: nmuSTKhwp9hHWrgl/aLCg8aGJRO1nOy6sUEfZwT+/hY= Subject key identifier: FE:85:C4:FC:4E:87:70:90:39:DD:C4:94:0F:FC:06:2E:29:A0:6C:2E Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft Manifest number: 88 Signing time: Sat 03 May 2025 05:56:16 +0000 Manifest this update: Sat 03 May 2025 05:56:16 +0000 Manifest next update: Sat 10 May 2025 05:56:16 +0000 Files and hashes: 1: R_rmMixRsd0CJJdveh0rkibQkOo.crl (hash: OOXG6ec9FPgrW/TI0BMLpFz4dxvO2nKo8q8GE61H4bE=) 2: 7564FD08603311EFA997483AC4F9AE02.roa (hash: HFz/JkiJ7FywTlxdWS5kUZ1e9chUuimXs5JC+tbt340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A657F, serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Validity Not Before: May 3 05:56:16 2025 GMT Not After : May 10 05:56:16 2025 GMT Subject: CN=6815b000-4f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:43:9c:3c:2a:89:ba:3e:84:d6:e7:81:62: 4f:cb:88:cc:5c:04:8b:79:54:eb:46:bf:97:8f:62: 9a:1d:63:16:4c:04:34:8e:b7:14:4e:a6:66:bb:1c: 58:48:c4:5c:85:cd:83:66:e1:b5:47:dd:ef:4e:7d: ba:8c:8f:9e:47:ec:23:fa:14:05:1d:18:2e:a9:27: ab:b5:fb:a0:d4:ca:0f:01:33:22:05:02:32:7c:5c: 41:ba:59:87:19:6d:fb:68:6e:36:0f:8f:7b:5e:8a: 24:b3:a7:4a:a1:30:e3:41:95:4b:1a:8e:52:c1:d6: 69:96:03:3b:fe:38:c4:ba:de:2e:53:70:5c:13:8f: 27:b6:3a:20:cd:75:c6:16:1e:b1:46:14:b8:c1:43: 7c:73:7a:ca:95:93:b9:1e:a9:b4:a1:e7:77:be:f5: 02:5b:7d:e8:91:a8:8e:15:4f:79:c6:77:67:bf:19: 10:2c:a6:72:b5:8d:31:8c:d8:ee:8c:2d:ab:06:d6: 5a:d1:e6:32:e9:e1:85:03:cf:6a:ea:e4:a4:3b:b7: 8b:d1:ad:77:82:a9:d0:00:33:88:b9:4e:77:fa:dc: 92:38:d5:bd:d8:87:4a:bc:f0:4b:58:ac:aa:ab:6b: c3:79:31:98:63:56:5f:82:d9:1a:eb:76:6e:87:dd: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:85:C4:FC:4E:87:70:90:39:DD:C4:94:0F:FC:06:2E:29:A0:6C:2E X509v3 Authority Key Identifier: keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:9e:9b:e6:f2:83:d8:6d:48:f2:1b:77:be:7f:fc:ef:23:77: ef:8b:67:16:1c:4a:7a:90:37:63:1b:23:9c:7b:10:eb:eb:1c: 8b:c1:1d:df:58:f8:26:0f:8a:72:f6:36:ff:5c:ed:4c:84:65: 53:89:31:83:58:b0:66:4e:5a:40:ca:63:3d:e2:6e:f5:58:32: f7:09:f6:a9:b4:8a:e5:86:1e:36:15:c9:2d:dc:01:0c:ec:d5: 7b:a6:c7:b2:d4:7c:e2:03:f4:b7:70:29:0a:e4:3b:52:a3:49: 05:c2:55:da:8a:04:77:67:e7:9d:08:3f:79:23:47:98:99:73: 40:a0:b2:b0:ab:3b:3e:d3:fd:0f:65:a0:8e:38:3c:98:68:ae: 25:5c:25:cb:a5:78:01:a0:4a:90:d7:2f:f7:1e:d6:a7:c8:3f: 08:e4:2d:d7:23:9d:15:77:19:13:8e:90:1f:5c:10:40:44:57: b1:c5:01:3d:f5:23:bd:ae:a3:79:8a:89:66:1c:d5:92:34:a9: 93:31:0f:38:60:3a:60:50:ab:44:52:5b:fb:45:dc:09:13:c1: 89:5d:cb:79:56:54:cb:fc:c3:39:d8:00:9c:43:b4:82:88:f7: 5c:9c:42:b6:31:10:56:32:03:1e:ba:40:f0:33:b1:5c:2e:d6: 8b:30:40:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1N0YxMTAvBgNVBAUTKDQ3RkFFNjMyMkM1MUIxREQwMjI0OTc2RjdBMUQyQjky MjZEMDkwRUEwHhcNMjUwNTAzMDU1NjE2WhcNMjUwNTEwMDU1NjE2WjAYMRYwFAYD VQQDEw02ODE1YjAwMC00ZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlJDnDwqibo+hNbngWJPy4jMXASLeVTrRr+Xj2KaHWMWTAQ0jrcUTqZmuxxY SMRchc2DZuG1R93vTn26jI+eR+wj+hQFHRguqSertfug1MoPATMiBQIyfFxBulmH GW37aG42D497Xooks6dKoTDjQZVLGo5SwdZplgM7/jjEut4uU3BcE48ntjogzXXG Fh6xRhS4wUN8c3rKlZO5Hqm0oed3vvUCW33okaiOFU95xndnvxkQLKZytY0xjNju jC2rBtZa0eYy6eGFA89q6uSkO7eL0a13gqnQADOIuU53+tySONW92IdKvPBLWKyq q2vDeTGYY1Zfgtka63Zuh93WzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6FxPxO h3CQOd3ElA/8Bi4poGwuMB8GA1UdIwQYMBaAFEf65jIsUbHdAiSXb3odK5Im0JDq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU3Ri9FOTRCQ0M0ODYw MzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNkMENKSmR2ZWgwcmtpYlFr T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jfcm1NaXhSc2QwQ0pKZHZlaDBya2liUWtPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU3Ri9FOTRCQ0M0ODYwMzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNk MENKSmR2ZWgwcmtpYlFrT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2npvm8oPYbUjyG3e+f/zvI3fvi2cWHEp6kDdjGyOcexDr6xyLwR3f WPgmD4py9jb/XO1MhGVTiTGDWLBmTlpAymM94m71WDL3CfaptIrlhh42Fckt3AEM 7NV7psey1HziA/S3cCkK5DtSo0kFwlXaigR3Z+edCD95I0eYmXNAoLKwqzs+0/0P ZaCOODyYaK4lXCXLpXgBoEqQ1y/3HtanyD8I5C3XI50VdxkTjpAfXBBARFexxQE9 9SO9rqN5iolmHNWSNKmTMQ84YDpgUKtEUlv7RdwJE8GJXct5VlTL/MM52ACcQ7SC iPdcnEK2MRBWMgMeukDwM7FcLtaLMEB7 -----END CERTIFICATE-----Generated at Mon May 5 02:57:24 2025 by rpki-client