$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: zAQCYDTurRVE29H1otNF7x92uwcZrOZKAR8twizjhkY= Subject key identifier: 76:35:6C:24:7F:07:B1:22:0F:C1:5C:51:B0:5D:A4:9F:87:A8:B7:D4 Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 01EE Signing time: Tue 13 May 2025 01:54:08 +0000 Manifest this update: Tue 13 May 2025 01:54:07 +0000 Manifest next update: Tue 20 May 2025 01:54:07 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: kb/bbZVmfGkghq1zm1AQZMj0ADwFzfAVgsjMaS0H7N4=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: xvgbQt4eEZhtv3D2xw3qg4iJxZwYxghUdqa6K5JPB6M=) 3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: xErCMLXYoA0hL6AVT+7fD9OFndfuVCyqiiQ1j2stZZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: May 13 01:54:07 2025 GMT Not After : May 20 01:54:07 2025 GMT Subject: CN=6822a640-e838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:03:5d:a4:fe:cf:4f:bc:d7:ca:37:5f:66: 76:dc:52:7d:10:e2:4b:d7:14:0b:72:81:67:b6:ab: 14:28:e3:02:b2:00:48:d0:d4:a6:83:5b:4f:ec:0c: fa:dd:62:ea:0b:23:4a:57:36:a7:bf:94:62:59:cc: 6c:43:48:b5:37:33:a9:36:32:bc:40:90:1f:b2:74: 1b:23:9a:5c:04:ff:68:b9:ea:bf:b1:f8:c6:73:2b: 16:ee:23:29:66:f7:92:3a:dd:e8:dd:9d:a5:09:94: f1:a0:d6:34:75:9e:40:02:9a:90:5c:79:bf:ca:55: 16:c8:ef:7d:30:6c:38:5f:29:3d:f0:28:69:86:a3: 8c:7b:59:02:87:a4:86:26:d5:fa:c8:8c:84:b9:13: 34:83:85:27:3b:d4:ad:76:1f:bd:05:04:a0:1a:6b: 87:60:b9:5d:c6:b2:91:89:48:83:19:34:7f:83:91: bf:f3:a0:88:e9:67:ea:11:69:9c:a9:51:b7:60:b6: a0:d9:07:f6:68:17:1f:c8:62:37:b6:cd:e0:37:c2: 9f:5b:cb:41:a0:a6:35:4e:9d:f8:a5:d6:43:3e:02: 40:9a:15:6b:13:94:3d:55:c8:5e:9c:5c:6a:8d:0f: 9a:92:08:a6:48:68:07:71:39:0d:49:d7:38:51:28: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:35:6C:24:7F:07:B1:22:0F:C1:5C:51:B0:5D:A4:9F:87:A8:B7:D4 X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:01:e4:60:d5:5d:f5:00:ef:1d:17:33:4e:5d:5a:18:ed:07: c0:dd:19:0e:33:c7:13:10:9b:5b:ce:bd:68:35:03:3d:db:24: 81:ce:a2:09:b9:b3:83:57:68:05:86:eb:ce:1a:e3:45:36:7f: 88:83:0e:3c:c7:8f:5d:76:fb:ce:4b:f7:f4:c0:5f:3f:84:af: ad:5d:0a:0e:ce:d6:00:33:26:8c:41:87:73:46:27:27:80:24: 45:c2:6e:f9:47:56:1b:80:3e:e3:b3:20:9c:39:1b:86:64:c0: 5e:ca:0b:95:56:20:f9:ba:b2:12:dc:b5:12:4f:4e:e1:85:91: 5c:d4:7a:54:89:15:41:a0:90:24:c1:79:2d:6f:d1:25:bb:76: 73:84:8d:d6:2c:dc:d5:39:13:b2:9e:5c:6a:d3:b1:00:85:99: 2d:8e:bb:b5:7f:7b:ae:f8:2f:a5:6a:59:39:c9:f7:0b:4e:a2: cb:de:87:5b:d5:f7:d3:70:45:c8:31:4a:5b:07:1d:a2:ed:13: 4d:a4:ba:d7:a0:6f:ff:7e:56:f4:28:75:0e:70:12:cd:f5:16: 99:86:60:7e:a2:ed:07:9d:62:3d:db:2f:4d:b1:56:08:f0:c5: 7a:0f:3c:81:c1:d7:5d:30:0d:41:90:bc:03:fb:32:c4:ce:80: bc:90:80:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjUwNTEzMDE1NDA3WhcNMjUwNTIwMDE1NDA3WjAYMRYwFAYD VQQDEw02ODIyYTY0MC1lODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlkDXaT+z0+818o3X2Z23FJ9EOJL1xQLcoFntqsUKOMCsgBI0NSmg1tP7Az6 3WLqCyNKVzanv5RiWcxsQ0i1NzOpNjK8QJAfsnQbI5pcBP9oueq/sfjGcysW7iMp ZveSOt3o3Z2lCZTxoNY0dZ5AApqQXHm/ylUWyO99MGw4Xyk98ChphqOMe1kCh6SG JtX6yIyEuRM0g4UnO9Stdh+9BQSgGmuHYLldxrKRiUiDGTR/g5G/86CI6WfqEWmc qVG3YLag2Qf2aBcfyGI3ts3gN8KfW8tBoKY1Tp34pdZDPgJAmhVrE5Q9VchenFxq jQ+akgimSGgHcTkNSdc4USiIpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHY1bCR/ B7EiD8FcUbBdpJ+HqLfUMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5AeRg1V31AO8dFzNOXVoY7QfA3RkOM8cTEJtbzr1oNQM92ySBzqIJ ubODV2gFhuvOGuNFNn+Igw48x49ddvvOS/f0wF8/hK+tXQoOztYAMyaMQYdzRicn gCRFwm75R1YbgD7jsyCcORuGZMBeyguVViD5urIS3LUST07hhZFc1HpUiRVBoJAk wXktb9Elu3ZzhI3WLNzVOROynlxq07EAhZktjru1f3uu+C+lalk5yfcLTqLL3odb 1ffTcEXIMUpbBx2i7RNNpLrXoG//flb0KHUOcBLN9RaZhmB+ou0HnWI92y9NsVYI 8MV6DzyBwdddMA1BkLwD+zLEzoC8kIBj -----END CERTIFICATE-----Generated at Wed May 14 01:10:08 2025 by rpki-client