$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json) Hash identifier: KwMrt/YhYqFi/UirmhNLHfxeOzYcAWMnpF1y4Rcg0+0= Subject key identifier: E0:8A:96:07:73:F1:C5:F6:77:17:78:3F:B4:34:5E:59:91:98:23:96 Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 072B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft Manifest number: 0726 Signing time: Fri 16 May 2025 22:05:57 +0000 Manifest this update: Fri 16 May 2025 22:05:57 +0000 Manifest next update: Fri 23 May 2025 22:05:57 +0000 Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: cb+YeiLuTIv4Bbn1JwwrEgxYsr1yVAwcrcuOzaDhs0o=) 2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: qziDfsPw/gmvbvNR9GeSBAN/K4Vo5CvfMXXnhzWlgBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: May 16 22:05:57 2025 GMT Not After : May 23 22:05:57 2025 GMT Subject: CN=6827b6c5-01de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:52:fe:5a:c5:3f:40:dc:28:02:20:73:81: b7:87:45:5a:c8:14:60:15:27:5a:0b:70:a7:38:69: 61:3d:8a:77:cc:0e:ff:3c:41:67:6e:bc:a8:e3:8f: 83:01:2c:d4:ca:b3:b9:2a:55:02:ab:04:7a:09:79: ed:4f:f1:39:af:b0:23:22:dc:ae:4d:88:92:23:d5: 36:43:3a:8f:d9:90:5e:f3:a5:cc:ae:31:5a:6d:2b: 76:b9:b9:60:4d:3f:c1:5c:78:61:48:af:e6:34:f6: 5f:b1:02:bc:7c:4b:d4:a5:f3:2c:11:b8:a2:20:1b: ef:dd:98:e2:f2:95:a7:81:5e:86:34:bf:53:b4:46: 65:22:5a:76:b7:7d:b2:3f:5a:aa:3e:26:38:e1:f3: 68:15:01:c4:07:fc:59:54:c3:4f:cc:df:83:42:25: f9:9e:50:d9:ea:3e:8b:ab:83:ce:c5:f8:1a:4d:46: 49:86:a1:06:e9:00:a4:4c:59:bd:b5:0f:55:44:58: 44:9c:23:cd:c3:9d:2f:fc:37:78:5b:3a:db:a9:82: d8:3b:b8:7a:da:2e:2e:1f:39:aa:f9:cc:12:22:99: 2e:a3:2a:a1:0a:6c:88:7b:0b:4f:50:0d:7d:1c:04: 9f:f4:e2:54:be:d5:61:f7:9e:5f:b3:a2:ed:fd:1d: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8A:96:07:73:F1:C5:F6:77:17:78:3F:B4:34:5E:59:91:98:23:96 X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:83:69:6c:c5:1e:f1:15:a6:e3:a0:b7:aa:4e:d1:5b:ce:63: 3a:9b:e0:34:3f:41:54:22:9a:3c:e1:59:68:da:d4:5f:8c:c2: 4a:c9:dc:9a:b8:7f:29:d1:87:91:31:ef:de:c9:f6:3d:52:52: 90:8d:c8:89:e0:39:e6:b9:58:1a:7a:36:27:67:b4:7a:d3:19: 22:8a:fd:e1:f6:53:9e:87:87:9d:44:30:8c:a5:ca:e7:71:0f: b2:09:f2:d0:2e:1c:9a:c8:8d:5c:ce:1d:5a:b4:b0:eb:1f:bd: b2:81:01:dd:07:3c:42:5d:cb:4e:7d:c3:41:fd:d8:3f:8a:73: 77:c5:55:c6:d4:60:80:fc:a8:11:ed:3d:da:0e:58:98:95:af: e1:b2:68:78:4b:ba:01:23:a2:6a:18:8a:d5:5c:1e:1f:2a:70: 19:a0:66:25:47:56:c0:36:9a:c7:8b:0b:75:1d:5e:09:ea:4b: 26:f6:32:96:8c:37:d1:1b:59:87:16:f9:8e:aa:51:b1:03:ca: 76:78:0a:6e:6a:b2:76:cb:60:05:55:52:2c:6a:cf:50:75:9b: a2:7c:9f:bd:40:cb:f8:86:1a:90:9c:26:a5:ff:35:77:78:16: a5:67:35:b0:66:b5:67:1e:9e:60:21:ff:83:52:1e:c0:1b:1f: ec:7b:84:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjUwNTE2MjIwNTU3WhcNMjUwNTIzMjIwNTU3WjAYMRYwFAYD VQQDEw02ODI3YjZjNS0wMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoxS/lrFP0DcKAIgc4G3h0VayBRgFSdaC3CnOGlhPYp3zA7/PEFnbryo44+D ASzUyrO5KlUCqwR6CXntT/E5r7AjItyuTYiSI9U2QzqP2ZBe86XMrjFabSt2ublg TT/BXHhhSK/mNPZfsQK8fEvUpfMsEbiiIBvv3Zji8pWngV6GNL9TtEZlIlp2t32y P1qqPiY44fNoFQHEB/xZVMNPzN+DQiX5nlDZ6j6Lq4POxfgaTUZJhqEG6QCkTFm9 tQ9VRFhEnCPNw50v/Dd4WzrbqYLYO7h62i4uHzmq+cwSIpkuoyqhCmyIewtPUA19 HASf9OJUvtVh955fs6Lt/R1HuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCKlgdz 8cX2dxd4P7Q0XlmRmCOWMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/g2lsxR7xFabjoLeqTtFbzmM6m+A0P0FUIpo84Vlo2tRfjMJKydya uH8p0YeRMe/eyfY9UlKQjciJ4DnmuVgaejYnZ7R60xkiiv3h9lOeh4edRDCMpcrn cQ+yCfLQLhyayI1czh1atLDrH72ygQHdBzxCXctOfcNB/dg/inN3xVXG1GCA/KgR 7T3aDliYla/hsmh4S7oBI6JqGIrVXB4fKnAZoGYlR1bANprHiwt1HV4J6ksm9jKW jDfRG1mHFvmOqlGxA8p2eApuarJ2y2AFVVIsas9QdZuifJ+9QMv4hhqQnCal/zV3 eBalZzWwZrVnHp5gIf+DUh7AGx/se4Ry -----END CERTIFICATE-----Generated at Sat May 17 12:47:06 2025 by rpki-client