$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json) Hash identifier: NtP3OXBO+95vFhF9XZzEfZ6NOvZwFflN4rAaPoKAGos= Subject key identifier: F3:09:EF:13:DE:7C:75:B7:1D:8A:99:93:7D:FA:21:A2:4B:64:EF:D7 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft Manifest number: BD Signing time: Thu 15 May 2025 05:12:24 +0000 Manifest this update: Thu 15 May 2025 05:12:23 +0000 Manifest next update: Thu 22 May 2025 05:12:23 +0000 Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: epShnyZXFwKFf22IbvWnCDHBEKmueHvq/tJvRxkJuCg=) 2: A6517530169211EFAB613573C4F9AE02.roa (hash: Zxzeh4q4VkESn3Z7raXtN0Zp81DqVYf4hpDfFCFFI9k=) 3: 3A888D52169211EFA5AAE55DC4F9AE02.roa (hash: y5vzdVwz2vO4UUjqXhgJrAbkJMOOhUCaiYsAl7OwvQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: May 15 05:12:23 2025 GMT Not After : May 22 05:12:23 2025 GMT Subject: CN=682577b7-1c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:69:8c:6e:b1:e3:6b:5b:dc:1a:74:9d:10: 32:86:b8:bb:42:11:df:fa:a2:b3:35:86:51:78:fb: de:34:fe:71:e5:72:5a:ad:58:fe:e0:3d:c5:c7:5c: b6:88:b1:8b:d9:33:45:cd:22:2b:d4:72:76:ad:61: 5b:90:f0:eb:50:b4:a9:18:56:d5:8a:20:81:a5:63: d5:38:06:47:28:48:07:06:86:69:42:bc:29:20:5e: e2:6c:68:86:a5:7d:f3:ba:7a:3e:69:7e:43:50:56: 40:d5:80:36:40:4a:d8:19:4e:75:db:32:24:5f:2a: 0e:a7:4e:5a:0b:7d:87:31:64:25:c6:c3:8c:37:7a: 4a:e1:b4:4e:39:7f:d3:b5:4f:ac:db:f0:d1:12:4c: 96:27:ae:9a:de:47:ce:ce:47:bb:78:12:82:ec:33: 21:34:10:0b:ad:50:45:1e:c1:16:04:c7:fc:bd:ac: fc:dc:d3:19:2c:de:ad:2f:67:29:8c:0a:e4:13:07: bf:2e:0c:a3:8c:43:ec:fa:63:ea:52:76:39:0f:c4: a4:5b:cf:b7:56:fc:0e:d3:5b:99:12:80:7c:46:cb: c9:ce:d0:aa:dc:20:fb:96:8a:4e:6b:d8:89:08:09: b0:61:72:d2:00:8b:aa:91:87:16:77:9a:ea:1b:f5: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:09:EF:13:DE:7C:75:B7:1D:8A:99:93:7D:FA:21:A2:4B:64:EF:D7 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:91:10:cb:78:a7:35:f9:49:3c:9c:25:56:c2:ae:9e:03:62: f9:45:84:24:e6:0c:a2:97:a1:06:e1:5f:62:1d:f1:e2:52:09: e2:27:3a:fc:ab:2b:eb:0f:bc:c3:43:9c:ff:43:00:b5:10:84: c7:bc:7f:4f:36:a9:13:44:da:20:b9:59:5f:3a:46:0e:84:c6: c0:3b:a2:c9:83:4b:5e:38:ea:67:45:13:1e:5d:a2:02:9e:00: 0c:92:93:90:f1:ce:60:99:8a:21:bd:01:9e:18:19:54:b9:90: b4:e9:f5:7c:34:c7:02:59:57:0c:21:d9:eb:8d:74:f9:93:82: f9:6f:d5:52:b4:36:ad:09:21:3a:a9:b3:ef:ac:b7:23:38:c6: 80:6b:7f:af:0a:1d:df:0d:c9:8e:3c:d8:19:07:3c:d4:c4:19: 79:93:47:3f:19:7e:15:d0:9c:fe:8b:45:d2:51:11:bc:c9:50: 7a:0f:b4:5b:9d:35:54:ae:19:0e:5e:70:7e:7b:9d:46:c6:1a: e1:cc:e0:43:f5:8c:35:3e:b7:10:19:09:67:a0:29:ce:b9:8c: 2b:c8:61:c5:8e:72:5b:8c:d4:a4:1a:65:6d:14:90:e2:ce:df: 6c:d3:07:a8:5a:4e:c3:73:6d:2f:66:3b:ad:1c:ae:ba:f7:ae: 02:e9:d7:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwNTE1MDUxMjIzWhcNMjUwNTIyMDUxMjIzWjAYMRYwFAYD VQQDEw02ODI1NzdiNy0xYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyElpjG6x42tb3Bp0nRAyhri7QhHf+qKzNYZRePveNP5x5XJarVj+4D3Fx1y2 iLGL2TNFzSIr1HJ2rWFbkPDrULSpGFbViiCBpWPVOAZHKEgHBoZpQrwpIF7ibGiG pX3zuno+aX5DUFZA1YA2QErYGU512zIkXyoOp05aC32HMWQlxsOMN3pK4bROOX/T tU+s2/DREkyWJ66a3kfOzke7eBKC7DMhNBALrVBFHsEWBMf8vaz83NMZLN6tL2cp jArkEwe/LgyjjEPs+mPqUnY5D8SkW8+3VvwO01uZEoB8RsvJztCq3CD7lopOa9iJ CAmwYXLSAIuqkYcWd5rqG/WY5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMJ7xPe fHW3HYqZk336IaJLZO/XMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF OF9QUFVaTDlOTEVsb0F2eHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWkRDLeKc1+Uk8nCVWwq6eA2L5RYQk5gyil6EG4V9iHfHiUgniJzr8 qyvrD7zDQ5z/QwC1EITHvH9PNqkTRNoguVlfOkYOhMbAO6LJg0teOOpnRRMeXaIC ngAMkpOQ8c5gmYohvQGeGBlUuZC06fV8NMcCWVcMIdnrjXT5k4L5b9VStDatCSE6 qbPvrLcjOMaAa3+vCh3fDcmOPNgZBzzUxBl5k0c/GX4V0Jz+i0XSURG8yVB6D7Rb nTVUrhkOXnB+e51GxhrhzOBD9Yw1PrcQGQlnoCnOuYwryGHFjnJbjNSkGmVtFJDi zt9s0weoWk7Dc20vZjutHK66964C6ddd -----END CERTIFICATE-----Generated at Fri May 16 09:50:36 2025 by rpki-client