$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: cY5bplcljmJr6agRt3dz+CgrM86cfYukLAJR3BcMmvg= Subject key identifier: 3B:B8:7B:1F:55:98:38:76:F8:01:F9:27:2B:DD:C5:79:CF:AE:4A:CF Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 012D Signing time: Sun 11 May 2025 03:28:25 +0000 Manifest this update: Sun 11 May 2025 03:28:25 +0000 Manifest next update: Sun 18 May 2025 03:28:25 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: V+7rhEWUv8Krkc0oQctnMi8IZvvFs0Hmz2jzG01kML0=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: qDjDjx/58q+LWkw/PFVn1wwvsxzD4HwajEOfZNh5ZU0=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: bQFYc9TGCv39aWTUTfzRcDtHtMAg4CgWesOizIV+Kko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: May 11 03:28:25 2025 GMT Not After : May 18 03:28:25 2025 GMT Subject: CN=68201959-8cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:ef:9c:66:68:80:12:c5:e0:f5:09:57:46: 2f:db:5a:14:44:62:79:bc:d9:99:22:cb:a8:90:a7: 60:4f:f6:8a:48:b2:19:d4:a7:6f:f0:b1:4b:8d:0e: 45:8a:13:9e:d0:0a:eb:c9:02:a1:1d:f2:c0:09:f2: c8:74:d5:61:18:dd:18:52:73:a8:09:2c:04:a0:41: 58:9f:4a:2f:89:d9:73:61:ac:91:03:02:6e:92:ab: f3:73:90:09:7c:28:0c:09:72:7e:9b:f1:7b:e5:47: c0:0d:8d:75:c8:35:a8:7d:f7:8b:0f:39:48:75:da: 43:a3:d0:b8:69:cc:e3:02:07:81:0c:72:e4:a7:fd: 82:f0:d9:fa:fd:cf:89:6f:ca:2c:64:ac:7f:41:be: 0f:e0:8f:c8:97:1f:ed:2f:ea:d8:3d:c1:25:49:0b: d8:6a:7a:f9:6b:57:c9:12:ed:f3:d0:ba:a3:cd:bb: 31:2f:a0:36:4e:0d:db:90:3f:81:97:2b:93:fa:8b: 01:9d:da:b9:d3:b6:a8:04:1e:16:68:b3:c4:d8:19: c2:91:d6:9f:32:18:4f:d1:5b:71:d8:78:70:96:2f: f1:8d:af:78:4a:23:b3:fe:ed:89:54:f0:91:1b:c8: 17:30:21:91:a4:83:a2:c0:0b:2e:26:47:b5:ef:fd: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B8:7B:1F:55:98:38:76:F8:01:F9:27:2B:DD:C5:79:CF:AE:4A:CF X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bb:32:52:8e:a6:63:93:73:4e:58:4b:53:5c:ae:31:9a:ea: ce:0a:42:bc:1a:6c:e2:4e:d4:f3:e4:c2:2a:e4:a6:b1:fe:2a: 12:f0:5e:06:78:c7:08:e3:90:cf:e9:27:55:9e:88:f2:9d:00: d3:fc:af:15:71:db:12:de:0f:af:f5:09:01:f6:29:70:72:9b: a6:28:ff:ab:8b:00:34:48:80:89:37:3e:80:49:90:15:b5:b3: 29:9e:8d:ce:03:c6:b6:f9:39:60:3c:6f:05:e4:7b:06:15:73: cc:f0:8d:a3:a1:10:c4:57:d6:34:de:1e:f2:15:07:b0:ee:01: ee:da:be:e9:22:4c:ed:3f:0d:57:97:21:44:87:b7:bc:7a:cc: 2f:ef:bb:41:4e:49:61:66:d0:ee:15:d2:0e:10:ef:93:71:26: 22:f3:58:77:bb:f7:33:fb:0a:ac:c5:95:8e:5d:cf:46:7b:88: 49:cc:cf:75:5e:98:47:94:eb:24:0c:e1:6b:b6:87:05:54:a1: 2c:2a:02:a8:01:d2:02:b2:37:44:23:ea:b4:e1:11:95:f7:93: b6:41:3d:5f:ec:88:d2:76:6f:e0:de:ef:e0:42:8e:5b:ab:03: a6:c8:40:98:7c:0f:45:71:7e:1f:14:0d:a5:1f:b6:6a:ef:48: 0c:31:12:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjUwNTExMDMyODI1WhcNMjUwNTE4MDMyODI1WjAYMRYwFAYD VQQDEw02ODIwMTk1OS04Y2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw07vnGZogBLF4PUJV0Yv21oURGJ5vNmZIsuokKdgT/aKSLIZ1Kdv8LFLjQ5F ihOe0ArryQKhHfLACfLIdNVhGN0YUnOoCSwEoEFYn0ovidlzYayRAwJukqvzc5AJ fCgMCXJ+m/F75UfADY11yDWoffeLDzlIddpDo9C4aczjAgeBDHLkp/2C8Nn6/c+J b8osZKx/Qb4P4I/Ilx/tL+rYPcElSQvYanr5a1fJEu3z0LqjzbsxL6A2Tg3bkD+B lyuT+osBndq507aoBB4WaLPE2BnCkdafMhhP0Vtx2Hhwli/xja94SiOz/u2JVPCR G8gXMCGRpIOiwAsuJke17/2WDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDu4ex9V mDh2+AH5JyvdxXnPrkrPMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbuzJSjqZjk3NOWEtTXK4xmurOCkK8GmziTtTz5MIq5Kax/ioS8F4G eMcI45DP6SdVnojynQDT/K8VcdsS3g+v9QkB9ilwcpumKP+riwA0SICJNz6ASZAV tbMpno3OA8a2+TlgPG8F5HsGFXPM8I2joRDEV9Y03h7yFQew7gHu2r7pIkztPw1X lyFEh7e8eswv77tBTklhZtDuFdIOEO+TcSYi81h3u/cz+wqsxZWOXc9Ge4hJzM91 XphHlOskDOFrtocFVKEsKgKoAdICsjdEI+q04RGV95O2QT1f7IjSdm/g3u/gQo5b qwOmyECYfA9FcX4fFA2lH7Zq70gMMRJU -----END CERTIFICATE-----Generated at Mon May 12 21:36:06 2025 by rpki-client