$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json) Hash identifier: 1Yh3RndtB2CrKZJBzCunEF7KkQmeTDw8zFDQmZ1kWM4= Subject key identifier: 35:BE:D1:4E:15:F8:13:E6:C5:BD:8E:1A:11:05:9B:3D:B8:07:C7:F8 Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft Manifest number: 01F5 Signing time: Thu 15 May 2025 02:03:36 +0000 Manifest this update: Thu 15 May 2025 02:03:36 +0000 Manifest next update: Thu 22 May 2025 02:03:36 +0000 Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: CVHcOFu/6X4NBHTjDJM/p652o8d+oEQ+bpdMVuG+6wI=) 2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: IaOYa65tPNoGSKOth9OBnqEo5IgGVd7ufuneStp8ah8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Validity Not Before: May 15 02:03:36 2025 GMT Not After : May 22 02:03:36 2025 GMT Subject: CN=68254b78-4b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e0:d1:e5:3e:ec:c1:71:91:08:a2:b6:9c:d9: 0d:2b:5a:a1:f5:73:33:1b:04:38:3a:18:b9:8e:b0: dd:0c:0d:4a:27:9d:1d:d1:08:97:16:c7:91:c0:b0: c5:7d:aa:f1:ef:1d:60:72:ef:2e:1f:07:d2:d2:c8: 9e:a2:d8:60:05:12:3a:e6:2c:db:05:ea:c9:cb:21: 47:37:a9:e9:10:28:c4:ba:31:52:c6:91:d5:07:39: 0a:55:29:57:4c:28:db:56:0c:5f:cb:3b:47:50:07: 4a:1b:cb:41:e3:93:a6:11:68:b4:24:7b:62:3b:71: bb:3c:b1:4c:fb:be:fc:31:42:23:eb:aa:5a:60:eb: 0c:91:33:55:9a:32:32:03:e1:ee:4d:3a:6b:cd:97: b5:6a:7b:ad:95:58:0e:3c:2e:d0:fd:c1:5a:3c:69: 88:8a:9b:69:ff:d6:dd:0a:96:cd:52:87:68:42:cd: cc:43:d6:9d:18:7e:d4:14:2f:af:b9:3b:f1:5b:3d: b6:9f:52:ff:70:7b:2b:07:8c:04:e4:85:6e:ae:69: 6d:e6:06:01:ae:54:33:ed:38:ba:ba:4c:a8:b8:c1: 70:49:b5:5d:dd:51:5f:f8:e4:18:60:53:be:04:a1: 6a:a2:7f:37:61:03:32:bf:a0:6d:6b:66:9a:91:3a: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BE:D1:4E:15:F8:13:E6:C5:BD:8E:1A:11:05:9B:3D:B8:07:C7:F8 X509v3 Authority Key Identifier: keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:30:ee:ca:36:18:58:0d:1d:ee:41:36:8b:2a:06:f6:85:47: a0:c5:33:4a:49:70:24:60:a1:b0:3b:d8:65:bc:2c:a9:d7:9f: e2:da:d2:6f:45:59:56:97:30:bc:31:8b:e3:a1:b8:47:7e:79: 37:ba:ed:dd:3a:cb:15:6a:a0:cb:dc:b9:e8:8f:be:d3:ad:1b: b0:f6:ac:43:f7:b0:cc:77:c8:55:43:29:5b:20:f4:55:c7:82: ca:46:92:ce:a6:cb:53:01:c0:12:ec:c8:89:2f:b5:08:da:eb: 14:b6:99:4a:85:8e:85:06:41:a2:31:e1:77:29:c2:1b:a5:d1: 69:93:38:1d:d3:f0:6f:8a:b5:a1:38:e7:bb:74:10:94:d1:89: bc:f2:50:ef:08:8c:56:c7:35:a1:ef:98:f0:47:03:95:36:11: 9a:e6:64:7c:82:a8:0c:bd:d7:78:0e:ef:8b:01:37:c6:16:a9: 87:7b:12:a5:77:95:89:6a:1b:05:36:a4:6b:ed:83:f6:93:64: 4e:79:0a:1d:34:52:62:52:f1:b2:c9:24:93:5d:da:81:01:3e: 5c:fa:6e:82:19:23:89:c6:71:4c:31:82:a9:86:4d:a1:38:a6: 1d:02:de:96:c4:5a:9d:dc:fa:98:e7:83:5f:96:fe:f2:8e:56: d0:32:a7:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB NEJDQUFGMzgwHhcNMjUwNTE1MDIwMzM2WhcNMjUwNTIyMDIwMzM2WjAYMRYwFAYD VQQDEw02ODI1NGI3OC00YjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzODR5T7swXGRCKK2nNkNK1qh9XMzGwQ4Ohi5jrDdDA1KJ50d0QiXFseRwLDF farx7x1gcu8uHwfS0sieothgBRI65izbBerJyyFHN6npECjEujFSxpHVBzkKVSlX TCjbVgxfyztHUAdKG8tB45OmEWi0JHtiO3G7PLFM+778MUIj66paYOsMkTNVmjIy A+HuTTprzZe1anutlVgOPC7Q/cFaPGmIiptp/9bdCpbNUodoQs3MQ9adGH7UFC+v uTvxWz22n1L/cHsrB4wE5IVurmlt5gYBrlQz7Ti6ukyouMFwSbVd3VFf+OQYYFO+ BKFqon83YQMyv6Bta2aakTpnHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDW+0U4V +BPmxb2OGhEFmz24B8f4MB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQ3NS82QjY1ODJGMjNFRjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVa NFZRekpCTnVBdTZrdktyemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdMO7KNhhYDR3uQTaLKgb2hUegxTNKSXAkYKGwO9hlvCyp15/i2tJv RVlWlzC8MYvjobhHfnk3uu3dOssVaqDL3Lnoj77TrRuw9qxD97DMd8hVQylbIPRV x4LKRpLOpstTAcAS7MiJL7UI2usUtplKhY6FBkGiMeF3KcIbpdFpkzgd0/BvirWh OOe7dBCU0Ym88lDvCIxWxzWh75jwRwOVNhGa5mR8gqgMvdd4Du+LATfGFqmHexKl d5WJahsFNqRr7YP2k2ROeQodNFJiUvGyySSTXdqBAT5c+m6CGSOJxnFMMYKphk2h OKYdAt6WxFqd3PqY54Nflv7yjlbQMqdp -----END CERTIFICATE-----Generated at Fri May 16 21:24:35 2025 by rpki-client