$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json) Hash identifier: bGQRHX7h8dTWXWg+zSebuRmNBg9dOiRHTJyhP54584o= Subject key identifier: EE:42:94:C0:7A:45:30:C9:45:49:AA:79:05:A6:62:36:22:71:C2:E2 Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft Manifest number: 05C7 Signing time: Sat 10 May 2025 22:40:00 +0000 Manifest this update: Sat 10 May 2025 22:40:00 +0000 Manifest next update: Sat 17 May 2025 22:40:00 +0000 Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: V3+5wOzZoZVrjJSVV0pBLNsY73qExbtcc/YEjycKl64=) 2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: ei3bKZ/cpLIRgTqV0pdjcmnxhOkz7g6PWIVeDuQtGq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8 Validity Not Before: May 10 22:40:00 2025 GMT Not After : May 17 22:40:00 2025 GMT Subject: CN=681fd5c0-5337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:73:11:35:5f:5c:44:df:f6:b9:1b:ea:7f: 9a:a6:58:53:61:ca:51:2b:4b:61:79:18:ea:db:a4: 0a:d0:e4:27:d4:9e:ba:7d:c2:e7:5e:f5:de:3c:72: 19:b6:dc:40:f8:78:14:1a:ad:ca:a2:a0:e5:7b:b6: 84:12:07:4f:c4:67:07:56:3a:0f:58:d3:e5:c6:15: 9c:1b:0a:4c:63:84:a9:f4:90:01:15:35:32:ed:29: a7:06:86:bc:14:dd:6e:7e:44:86:7b:11:54:62:a0: 1e:e5:fb:8a:9b:b0:ee:5f:07:f2:5b:64:a4:26:70: bd:9b:eb:82:04:a3:d0:d8:18:9f:cf:c2:60:3a:ab: 8f:c4:99:07:83:59:b0:e0:7d:de:e4:d7:fc:b5:22: 3c:7a:f9:25:a6:01:99:8d:29:c7:6a:5a:c2:4f:3c: f4:15:dd:3b:91:58:ae:d4:32:2d:ef:b3:f5:ff:4e: fe:0b:b3:ad:d4:7d:31:e9:80:63:24:77:82:a4:f2: a6:f7:07:0e:f6:15:67:29:d2:a1:42:82:48:c4:33: b6:9a:cf:31:54:72:c7:74:27:ae:7b:e3:ad:3e:c7: d6:56:cb:d9:8b:e6:7a:7a:8c:78:b5:00:c2:85:30: 98:c2:68:43:4f:6f:ab:0e:56:39:cf:ce:0a:c7:83: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:42:94:C0:7A:45:30:C9:45:49:AA:79:05:A6:62:36:22:71:C2:E2 X509v3 Authority Key Identifier: keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0b:94:9b:9e:1f:05:27:11:80:31:39:b5:41:6d:0e:89:de: a3:96:35:60:11:c2:3d:d7:ed:85:91:44:23:ad:30:e4:c9:70: 4b:84:bc:9e:ba:e7:15:99:c6:d2:3c:d4:80:1d:ee:72:d1:01: 94:af:da:f7:08:c5:51:18:5e:79:76:e0:69:57:ff:90:f0:72: 0d:c7:15:04:fd:cb:d2:d7:96:8d:d8:03:89:db:15:a5:6e:74: ac:e3:35:4f:3e:2c:71:78:34:9d:d0:c3:bc:1c:8f:29:b6:7a: f2:ca:3d:99:e9:48:1e:d1:cb:3a:92:eb:9f:4d:d2:3f:cf:6e: 54:b4:d9:18:5c:ba:cc:f6:b7:86:2f:3f:e8:04:72:a4:80:47: 09:44:db:dd:4f:1e:90:35:64:07:51:ce:f7:c7:cf:bd:88:9f: a2:6c:c2:ac:e0:6b:28:a6:48:96:e9:fb:0d:e3:23:14:72:61: 77:c9:b8:5f:a5:e4:f7:e9:e2:4b:2e:88:86:38:67:26:02:3d: 9b:c4:85:9c:18:57:01:61:97:7c:dc:d6:d3:2a:eb:2f:2d:28: 5b:71:0a:94:62:d4:83:27:10:aa:19:80:b6:be:cf:4a:d3:12: 25:2d:c3:6c:fb:d9:ed:c8:13:33:fe:00:57:bf:db:6d:e0:6d: de:ca:36:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGMkQxMTAvBgNVBAUTKEFGRUVGN0EyRjgzMUE5NzU1QjEzQjM3RUI2RTlCOTFE ODFFOEE5RTgwHhcNMjUwNTEwMjI0MDAwWhcNMjUwNTE3MjI0MDAwWjAYMRYwFAYD VQQDEw02ODFmZDVjMC01MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrtzETVfXETf9rkb6n+aplhTYcpRK0theRjq26QK0OQn1J66fcLnXvXePHIZ ttxA+HgUGq3KoqDle7aEEgdPxGcHVjoPWNPlxhWcGwpMY4Sp9JABFTUy7SmnBoa8 FN1ufkSGexFUYqAe5fuKm7DuXwfyW2SkJnC9m+uCBKPQ2Bifz8JgOquPxJkHg1mw 4H3e5Nf8tSI8evklpgGZjSnHalrCTzz0Fd07kViu1DIt77P1/07+C7Ot1H0x6YBj JHeCpPKm9wcO9hVnKdKhQoJIxDO2ms8xVHLHdCeue+OtPsfWVsvZi+Z6eox4tQDC hTCYwmhDT2+rDlY5z84Kx4OZJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5ClMB6 RTDJRUmqeQWmYjYiccLiMB8GA1UdIwQYMBaAFK/u96L4Mal1WxOzfrbpuR2B6Kno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC9GRDg2MEY2OEJD NkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFYVmJFN04tdHVtNUhZSG9x ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItNzNvdmd4cVhWYkU3Ti10dW01SFlIb3FlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkYyRC9GRDg2MEY2OEJDNkUxMUVCQjhDNjQ4NTRDNEY5QUUwMi9yLTczb3ZneHFY VmJFN04tdHVtNUhZSG9xZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbC5Sbnh8FJxGAMTm1QW0Oid6jljVgEcI91+2FkUQjrTDkyXBLhLye uucVmcbSPNSAHe5y0QGUr9r3CMVRGF55duBpV/+Q8HINxxUE/cvS15aN2AOJ2xWl bnSs4zVPPixxeDSd0MO8HI8ptnryyj2Z6Uge0cs6kuufTdI/z25UtNkYXLrM9reG Lz/oBHKkgEcJRNvdTx6QNWQHUc73x8+9iJ+ibMKs4GsopkiW6fsN4yMUcmF3ybhf peT36eJLLoiGOGcmAj2bxIWcGFcBYZd83NbTKusvLShbcQqUYtSDJxCqGYC2vs9K 0xIlLcNs+9ntyBMz/gBXv9tt4G3eyjZj -----END CERTIFICATE-----Generated at Mon May 12 12:56:10 2025 by rpki-client