$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: obXqwomYCQMGrb9VNpY+jTA8WFr3J0y88tnWsR1ukNA= Subject key identifier: 89:9E:94:22:63:33:D3:8B:1F:75:A8:16:78:56:F3:10:D5:40:50:6D Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 0491 Signing time: Wed 14 May 2025 15:57:38 +0000 Manifest this update: Wed 14 May 2025 15:57:37 +0000 Manifest next update: Wed 21 May 2025 15:57:37 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: Rw5ICv404maiYN4I67mBUs2r6MKF+kWW0C/tJOmDsUs=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: May 14 15:57:37 2025 GMT Not After : May 21 15:57:37 2025 GMT Subject: CN=6824bd72-715b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:45:3d:40:8f:55:03:50:74:5e:13:05:34: 3a:bb:eb:bd:38:23:22:92:f8:dc:0a:2b:0c:ff:7d: 14:67:f5:d8:5a:81:c2:28:10:aa:19:0c:b2:16:c9: e2:63:20:42:61:70:a9:01:86:48:cb:b7:14:9e:2d: 0c:c6:ed:35:5e:2d:95:be:93:cf:40:fe:c3:c3:5b: be:ea:cb:a4:83:94:b0:fb:f8:d7:7b:46:f9:28:39: 7b:74:30:22:8e:c8:69:3c:96:fd:a6:69:92:78:4b: 74:53:8c:19:e9:58:1c:cf:41:92:dc:e0:3a:44:bd: 57:d2:9f:cb:e8:55:91:f0:00:fa:24:f2:c0:8d:13: 91:52:d0:70:e8:f3:31:c0:27:f9:ef:79:92:40:b4: be:98:0b:58:54:68:3d:73:77:be:0a:f9:4b:7e:5f: c3:9d:7f:c2:e2:a0:da:d4:35:ac:f1:a1:c6:02:e5: 1c:ba:6a:a5:90:5d:13:d9:c7:4e:a3:ef:3b:7c:bf: 82:2a:d0:76:13:86:81:be:15:7e:fa:7f:29:36:e5: 94:d1:6f:78:95:bf:f4:23:1b:30:8d:88:df:1d:19: dd:a3:3b:99:8a:22:b5:22:60:13:04:25:bc:a5:d4: d1:40:6f:d5:93:b3:ec:f7:1d:08:88:f6:5e:c1:f9: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:94:22:63:33:D3:8B:1F:75:A8:16:78:56:F3:10:D5:40:50:6D X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:53:05:4e:ed:ca:b8:26:bd:60:26:ff:f5:8e:47:09:5f:8d: 21:c6:01:25:ba:b6:dc:74:2d:ab:49:1d:72:46:16:ce:b2:a9: 63:dc:e5:93:7c:e7:eb:8d:dc:99:09:c4:11:fd:be:e4:60:fa: 56:0e:08:02:7d:d9:76:2c:73:d3:ee:3b:5f:6c:9a:f8:66:af: c7:10:22:78:04:2d:aa:76:b6:44:15:c6:4d:70:d1:9f:e8:77: 77:2c:ef:30:ff:34:5f:e1:cf:21:a6:d8:00:20:7f:c5:05:b0: 81:b1:18:58:87:c2:27:74:c6:d4:b7:22:50:57:36:e6:a7:c1: 2f:a7:09:e5:5d:29:41:2a:a5:71:6f:a0:15:89:74:ee:3c:1b: 58:c8:9e:a4:62:c5:ee:4b:96:0c:7d:c1:26:17:1a:5c:a5:38: 53:28:9c:b9:33:80:dc:ab:e7:a7:51:9b:b3:4a:cb:58:3c:83: 75:20:39:5d:8d:0b:c2:76:29:bb:a0:a1:c2:97:55:18:cd:7c: 58:d3:6e:4e:8a:77:19:ce:7e:ae:54:d7:21:32:bc:6a:1a:b2: f3:ed:f3:12:82:47:74:2f:66:77:a5:aa:b8:78:75:72:0f:f7: 15:0e:1d:df:10:ff:4a:a9:18:f0:e1:06:b0:50:0d:1f:d5:d1: c5:f5:20:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjUwNTE0MTU1NzM3WhcNMjUwNTIxMTU1NzM3WjAYMRYwFAYD VQQDEw02ODI0YmQ3Mi03MTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtpFPUCPVQNQdF4TBTQ6u+u9OCMikvjcCisM/30UZ/XYWoHCKBCqGQyyFsni YyBCYXCpAYZIy7cUni0Mxu01Xi2VvpPPQP7Dw1u+6sukg5Sw+/jXe0b5KDl7dDAi jshpPJb9pmmSeEt0U4wZ6Vgcz0GS3OA6RL1X0p/L6FWR8AD6JPLAjRORUtBw6PMx wCf573mSQLS+mAtYVGg9c3e+CvlLfl/DnX/C4qDa1DWs8aHGAuUcumqlkF0T2cdO o+87fL+CKtB2E4aBvhV++n8pNuWU0W94lb/0IxswjYjfHRndozuZiiK1ImATBCW8 pdTRQG/Vk7Ps9x0IiPZewfnPHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImelCJj M9OLH3WoFnhW8xDVQFBtMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATUwVO7cq4Jr1gJv/1jkcJX40hxgElurbcdC2rSR1yRhbOsqlj3OWT fOfrjdyZCcQR/b7kYPpWDggCfdl2LHPT7jtfbJr4Zq/HECJ4BC2qdrZEFcZNcNGf 6Hd3LO8w/zRf4c8hptgAIH/FBbCBsRhYh8IndMbUtyJQVzbmp8EvpwnlXSlBKqVx b6AViXTuPBtYyJ6kYsXuS5YMfcEmFxpcpThTKJy5M4Dcq+enUZuzSstYPIN1IDld jQvCdim7oKHCl1UYzXxY025OincZzn6uVNchMrxqGrLz7fMSgkd0L2Z3paq4eHVy D/cVDh3fEP9KqRjw4QawUA0f1dHF9SBL -----END CERTIFICATE-----Generated at Wed May 14 22:11:15 2025 by rpki-client