$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: U+ygg0Odmye8N3wwyzaCyu3KypU0cK1Wu3AxBWeo0uM= Subject key identifier: AD:7B:A6:5D:26:88:01:1A:F0:42:5B:B1:98:51:BE:77:84:97:28:73 Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 4E Signing time: Sat 03 May 2025 06:44:54 +0000 Manifest this update: Sat 03 May 2025 06:44:54 +0000 Manifest next update: Sat 10 May 2025 06:44:54 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: 5sHxg5qKiCHxVE+1tRJIekiModzcWrGw3vpQXkONZH8=) 2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=) 3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: May 3 06:44:54 2025 GMT Not After : May 10 06:44:54 2025 GMT Subject: CN=6815bb66-3398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:e6:c7:8b:17:26:cd:89:d8:38:09:3f:cf: 7d:3f:7c:32:f0:72:00:2d:1b:5c:51:1e:e4:ef:36: 06:f7:dd:ce:1b:59:06:5e:27:c0:2a:98:b4:20:8f: 80:4a:f8:c8:99:df:58:b3:77:7f:5f:ae:57:78:0b: ea:f6:50:57:d6:d6:26:6b:8e:3b:5b:4d:82:8e:81: 17:df:40:a3:3e:df:79:e7:8e:6c:83:33:10:32:3f: be:af:e9:e1:e9:85:86:9d:8e:8e:b5:42:65:04:3a: 6c:c0:e6:56:4b:32:14:7d:bd:03:7c:aa:43:14:82: 4f:b9:a1:4b:50:7b:40:1c:86:19:fc:19:8c:df:7e: a5:3b:72:d9:aa:13:d9:f3:16:83:ac:bf:7c:5c:7c: c7:d9:d2:c1:db:23:e3:74:c1:ce:76:7b:34:49:36: d5:e3:e9:74:88:06:8a:62:a7:9d:30:42:72:f4:77: c8:2c:b0:cb:fc:3c:bb:ed:5f:fd:83:dc:7f:b4:67: 5e:96:fe:c6:d0:8a:35:71:b4:53:f4:76:2b:c0:26: d5:05:89:e8:be:34:21:f8:72:42:87:ab:43:35:4d: 8d:0f:5a:04:0f:4d:5c:7e:a2:e5:03:b8:9b:17:6a: b6:38:49:a4:3b:2b:3c:a8:46:68:ce:aa:4d:c3:41: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7B:A6:5D:26:88:01:1A:F0:42:5B:B1:98:51:BE:77:84:97:28:73 X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d6:7b:3a:1e:de:c3:fb:f8:4c:00:ef:f9:e3:10:c0:77:67: 50:cd:ea:5a:70:ef:59:75:0a:4c:6c:65:5b:07:41:37:6e:bc: de:b9:b4:2d:5e:96:31:7f:5b:3f:06:a0:c6:24:88:e0:6d:a4: 84:fc:c1:a8:2d:a6:0f:4c:65:7c:e5:ef:ad:ab:3c:04:90:9a: aa:af:da:b6:88:e3:db:44:ee:0d:7e:ae:42:32:a1:73:fb:d7: 16:56:68:f4:6f:2b:41:7d:8d:63:4e:38:51:1d:b2:71:b9:ef: 6a:0a:80:37:4f:7c:f7:4a:c7:0b:f0:ae:14:58:b0:8a:f0:ae: 92:d6:fa:a5:bf:d1:bc:37:fa:56:8c:7d:44:a7:1f:fb:4e:a6: 86:d2:d7:9e:01:34:ef:d2:1d:0a:fe:bc:4c:2e:e4:3a:51:f8: f8:2f:43:54:ad:f5:4c:83:97:32:e2:b4:51:76:de:dd:93:e7: 17:b7:d5:2e:14:75:10:c1:75:14:5f:db:6b:e5:58:46:b4:59: 72:69:90:28:c4:77:b7:22:09:2d:a5:bc:f3:7f:f4:0d:74:0b: d9:1d:01:c2:b7:7b:81:89:65:80:6c:df:9d:87:25:2b:c0:7b: 7e:98:b5:f0:32:76:d5:b6:cd:7d:5c:25:d8:55:59:4d:4e:3e: 6f:92:97:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OEI2NzExMC8GA1UEBRMoRDQ1OUQyNjc1MjUyMzRBMDUzNUVDMzhEOENDQzg5OTAx OTRERTE4OTAeFw0yNTA1MDMwNjQ0NTRaFw0yNTA1MTAwNjQ0NTRaMBgxFjAUBgNV BAMTDTY4MTViYjY2LTMzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwJObHixcmzYnYOAk/z30/fDLwcgAtG1xRHuTvNgb33c4bWQZeJ8AqmLQgj4BK +MiZ31izd39frld4C+r2UFfW1iZrjjtbTYKOgRffQKM+33nnjmyDMxAyP76v6eHp hYadjo61QmUEOmzA5lZLMhR9vQN8qkMUgk+5oUtQe0Achhn8GYzffqU7ctmqE9nz FoOsv3xcfMfZ0sHbI+N0wc52ezRJNtXj6XSIBopip50wQnL0d8gssMv8PLvtX/2D 3H+0Z16W/sbQijVxtFP0divAJtUFiei+NCH4ckKHq0M1TY0PWgQPTVx+ouUDuJsX arY4SaQ7KzyoRmjOqk3DQUGJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrXumXSaI ARrwQluxmFG+d4SXKHMwHwYDVR0jBBgwFoAU1FnSZ1JSNKBTXsONjMyJkBlN4Ykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4QjY3LzJGQTAwRDNFQzZB QTExRUY4NEZCMEQwREM0RjlBRTAyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUZuU1oxSlNOS0JUWHNPTmpNeUprQmxONFlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 QjY3LzJGQTAwRDNFQzZBQTExRUY4NEZCMEQwREM0RjlBRTAyLzFGblNaMUpTTktC VFhzT05qTXlKa0JsTjRZay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfWezoe3sP7+EwA7/njEMB3Z1DN6lpw71l1CkxsZVsHQTduvN65tC1e ljF/Wz8GoMYkiOBtpIT8wagtpg9MZXzl762rPASQmqqv2raI49tE7g1+rkIyoXP7 1xZWaPRvK0F9jWNOOFEdsnG572oKgDdPfPdKxwvwrhRYsIrwrpLW+qW/0bw3+laM fUSnH/tOpobS154BNO/SHQr+vEwu5DpR+PgvQ1St9UyDlzLitFF23t2T5xe31S4U dRDBdRRf22vlWEa0WXJpkCjEd7ciCS2lvPN/9A10C9kdAcK3e4GJZYBs352HJSvA e36YtfAydtW2zX1cJdhVWU1OPm+Sl5A= -----END CERTIFICATE-----Generated at Mon May 5 03:28:45 2025 by rpki-client