$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft File: MJoqNkM0qd26Sm1EBB15pdMrr6s.mft (raw, json) Hash identifier: k5OqXPM5jNKKTbfHJkc088OSi0g/5u9e7xC55r8AXEk= Subject key identifier: F3:FF:BD:2F:E2:6D:50:42:B0:F2:59:09:0D:79:E5:9E:AA:F8:44:8F Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB Certificate issuer: /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft Manifest number: 02B4 Signing time: Tue 13 May 2025 01:15:35 +0000 Manifest this update: Tue 13 May 2025 01:15:34 +0000 Manifest next update: Tue 20 May 2025 01:15:34 +0000 Files and hashes: 1: MJoqNkM0qd26Sm1EBB15pdMrr6s.crl (hash: fMTY9jz62v3qCZCmIVQc4ZrZSyErDN36ehdhRcjsDvo=) 2: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (hash: O9VH081pE8F9Lw59kLD8OKGix93beOfAyf1mf+VTITU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC100, serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB Validity Not Before: May 13 01:15:34 2025 GMT Not After : May 20 01:15:34 2025 GMT Subject: CN=68229d36-4d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:ae:1a:77:19:06:e5:5b:e8:33:e4:76:d1: 5c:c7:b6:9f:54:da:c0:f5:9e:c7:a0:c1:71:88:cf: 71:a2:dd:cf:30:7a:71:bf:73:4b:ea:a0:e5:de:41: 52:93:97:d0:8b:ec:a5:89:cb:e7:96:3d:62:1a:34: 37:ff:58:7d:b2:87:f7:83:c4:27:ca:99:b2:2a:00: bc:4d:98:49:93:56:a2:1f:45:da:01:d7:b1:e1:24: 29:94:13:ac:5c:de:a1:fb:5d:0f:29:93:49:4f:34: 24:61:0a:26:83:49:b0:15:78:c6:65:cd:ae:30:cd: d0:c5:c6:18:80:4d:a4:82:39:aa:53:00:02:c6:7d: a5:30:aa:e5:31:29:7d:67:54:13:ae:37:3e:82:56: 78:fc:12:e7:ad:a5:7f:0f:2f:a7:12:d4:b2:fa:fc: 64:14:e9:e7:6b:52:41:aa:54:12:d1:50:10:8d:5a: 32:8d:32:d0:d9:94:ab:eb:37:4d:84:94:ac:97:cc: b3:95:22:90:ec:db:95:4a:04:74:98:d7:35:5e:fb: 5b:8a:44:4a:a6:29:81:fd:9a:7d:97:df:17:b7:f6: 24:6d:68:c8:99:50:16:8f:a0:87:27:c9:a6:19:4e: 2d:3c:65:17:ac:9a:62:f9:ae:e9:cd:33:14:49:e1: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FF:BD:2F:E2:6D:50:42:B0:F2:59:09:0D:79:E5:9E:AA:F8:44:8F X509v3 Authority Key Identifier: keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:08:da:fe:e1:4e:32:b1:5d:b6:fa:3c:ae:f6:49:ae:1a:7c: 20:61:f6:f9:eb:80:71:42:20:01:42:2c:69:76:b6:56:20:1a: b4:f2:88:12:fb:e5:10:9c:5a:09:ae:00:76:76:cd:dc:72:fe: 53:4c:f9:3c:bc:dc:92:78:70:b1:bc:8e:fd:33:db:bd:03:b9: 0c:e9:58:c5:33:b4:9b:06:07:f2:86:23:ee:95:b7:fb:82:12: 34:5e:0f:7c:84:94:93:5d:f7:4c:49:66:67:ad:6a:36:36:ac: 56:d2:0d:9f:53:ee:c6:e9:7d:41:1e:e3:24:31:d0:b5:a1:33: f5:d9:8a:56:3c:f2:7d:44:81:c0:01:7e:7f:41:96:c4:32:f9: 3e:76:8d:9f:2e:a4:85:19:b4:2d:59:b4:73:01:3c:66:92:41: 3b:f2:aa:17:93:ac:83:7a:67:7f:4f:8f:8c:0b:c2:9c:22:9f: 32:4f:04:ed:fc:54:b2:1f:41:38:a2:9b:b7:13:5e:4c:3a:12: 07:52:48:99:c6:90:f6:99:53:22:4c:81:94:64:6d:c6:46:fb: 8a:df:df:6d:57:3c:a1:5d:db:e9:53:23:6d:92:bc:ba:2c:04: 81:5b:61:f9:af:21:11:ec:a1:53:45:3e:42:89:38:f9:92:ff: 68:97:b6:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMxMDAxMTAvBgNVBAUTKDMwOUEyQTM2NDMzNEE5RERCQTRBNkQ0NDA0MUQ3OUE1 RDMyQkFGQUIwHhcNMjUwNTEzMDExNTM0WhcNMjUwNTIwMDExNTM0WjAYMRYwFAYD VQQDEw02ODIyOWQzNi00ZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvieuGncZBuVb6DPkdtFcx7afVNrA9Z7HoMFxiM9xot3PMHpxv3NL6qDl3kFS k5fQi+ylicvnlj1iGjQ3/1h9sof3g8QnypmyKgC8TZhJk1aiH0XaAdex4SQplBOs XN6h+10PKZNJTzQkYQomg0mwFXjGZc2uMM3QxcYYgE2kgjmqUwACxn2lMKrlMSl9 Z1QTrjc+glZ4/BLnraV/Dy+nEtSy+vxkFOnna1JBqlQS0VAQjVoyjTLQ2ZSr6zdN hJSsl8yzlSKQ7NuVSgR0mNc1XvtbikRKpimB/Zp9l98Xt/YkbWjImVAWj6CHJ8mm GU4tPGUXrJpi+a7pzTMUSeGyqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPP/vS/i bVBCsPJZCQ155Z6q+ESPMB8GA1UdIwQYMBaAFDCaKjZDNKndukptRAQdeaXTK6+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEwMC9FNDNEQzVDQUYy QkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFkMjZTbTFFQkIxNXBkTXJy NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Kb3FOa00wcWQyNlNtMUVCQjE1cGRNcnI2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzEwMC9FNDNEQzVDQUYyQkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFk MjZTbTFFQkIxNXBkTXJyNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXCNr+4U4ysV22+jyu9kmuGnwgYfb564BxQiABQixpdrZWIBq08ogS ++UQnFoJrgB2ds3ccv5TTPk8vNySeHCxvI79M9u9A7kM6VjFM7SbBgfyhiPulbf7 ghI0Xg98hJSTXfdMSWZnrWo2NqxW0g2fU+7G6X1BHuMkMdC1oTP12YpWPPJ9RIHA AX5/QZbEMvk+do2fLqSFGbQtWbRzATxmkkE78qoXk6yDemd/T4+MC8KcIp8yTwTt /FSyH0E4opu3E15MOhIHUkiZxpD2mVMiTIGUZG3GRvuK399tVzyhXdvpUyNtkry6 LASBW2H5ryER7KFTRT5CiTj5kv9ol7Ys -----END CERTIFICATE-----Generated at Tue May 13 04:49:26 2025 by rpki-client