$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: VkKzGPoyJyDbW8idDbY2mL4rB3iQjkYcsOkRrAb7FVg= Subject key identifier: E1:77:DE:E6:02:34:03:D8:20:FA:00:33:8F:EF:DE:6C:FC:4A:1B:63 Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 03B7 Signing time: Thu 15 May 2025 00:44:27 +0000 Manifest this update: Thu 15 May 2025 00:44:27 +0000 Manifest next update: Thu 22 May 2025 00:44:27 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: 4u3+MJCjqxHTL4lUgVkKWXM9r+uCSj7IY53b33wmFX4=) 2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=) 3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: May 15 00:44:27 2025 GMT Not After : May 22 00:44:27 2025 GMT Subject: CN=682538eb-101a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:99:13:5f:2e:79:de:42:a0:be:a6:63:f6:b3: 6c:7a:b2:1c:6f:8f:0c:14:2a:4b:ab:89:cb:5f:96: 3f:08:23:20:a3:3a:63:7f:cd:ca:52:db:fd:1f:c1: 29:ce:d8:19:f2:ab:2e:b0:a9:38:7e:05:29:30:d2: cb:1f:fd:1e:b7:de:8b:9f:b7:27:45:d7:9f:da:96: e9:ab:6f:46:08:f9:df:7c:e1:5b:e6:40:52:4e:0c: 67:f9:78:b6:90:12:20:e0:b2:9b:f7:51:9a:e7:96: 78:22:96:6d:35:48:e5:61:17:fa:b7:ab:6b:ee:d9: e6:10:ea:5b:e8:18:db:8c:6c:37:cf:b1:2a:32:04: a7:a5:c6:9b:51:c1:92:87:17:46:94:ff:f6:66:4b: f3:cd:83:d7:81:48:cb:6b:0a:07:6b:27:9d:6d:ae: 54:fb:ee:7e:30:e7:40:35:82:e8:2b:df:40:82:e5: 38:2c:f2:f7:c4:d7:61:21:0f:7f:69:4a:a3:dd:2f: 3e:89:c7:24:26:ff:e3:58:bc:78:30:98:5b:79:ec: 49:e5:ad:ac:3b:2c:36:2f:18:27:8b:c2:a8:05:c1: 34:31:33:fd:3f:0a:3b:3d:05:8a:ed:4e:36:1b:18: 63:ef:47:d3:2f:73:0b:da:07:ca:64:e8:c8:0e:0e: 95:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:77:DE:E6:02:34:03:D8:20:FA:00:33:8F:EF:DE:6C:FC:4A:1B:63 X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:58:a1:49:70:9c:63:af:1b:1c:10:f5:ee:fc:95:63:36:98: 06:14:0f:aa:70:2d:bb:f2:3c:f0:1d:fe:56:9e:b6:02:4d:ca: 3f:94:80:aa:60:90:ce:4f:b2:52:62:4f:d3:c9:c4:1e:9a:9c: cc:06:7b:d4:4d:c0:97:05:d4:20:de:26:5d:9f:7e:b4:b6:2d: 18:87:6a:76:92:b6:d0:a8:e6:71:31:23:8d:92:07:f1:bf:4f: 04:96:b2:a6:6d:88:42:aa:27:60:6f:9d:3f:a6:9a:4f:ad:68: 99:9b:fd:a7:5f:e7:71:40:de:9f:67:97:70:cc:b3:f0:92:c6: 8c:6b:98:87:12:24:19:d6:cb:50:36:f7:a1:1e:33:8b:ea:58: 35:e5:2f:4b:c0:c3:c7:7d:5b:2a:55:95:e9:58:4b:58:8a:8c: b4:2c:cc:c6:13:25:3b:9f:ff:7a:fa:3a:38:c0:a5:14:f5:ae: fb:0a:42:34:9d:65:86:ef:b9:60:21:e4:ea:3e:74:9d:07:2a: 2c:81:74:d6:56:34:b7:56:04:c1:82:aa:3d:ba:28:9c:2b:3d: ca:0b:db:1b:23:88:7c:1f:b5:34:7c:ac:7b:f9:e7:d8:38:18: e1:80:be:b8:c3:fe:5d:b7:82:b9:eb:33:fc:18:2f:44:1e:e6: 5c:61:4e:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjUwNTE1MDA0NDI3WhcNMjUwNTIyMDA0NDI3WjAYMRYwFAYD VQQDEw02ODI1MzhlYi0xMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ZkTXy553kKgvqZj9rNserIcb48MFCpLq4nLX5Y/CCMgozpjf83KUtv9H8Ep ztgZ8qsusKk4fgUpMNLLH/0et96Ln7cnRdef2pbpq29GCPnffOFb5kBSTgxn+Xi2 kBIg4LKb91Ga55Z4IpZtNUjlYRf6t6tr7tnmEOpb6BjbjGw3z7EqMgSnpcabUcGS hxdGlP/2ZkvzzYPXgUjLawoHayedba5U++5+MOdANYLoK99AguU4LPL3xNdhIQ9/ aUqj3S8+icckJv/jWLx4MJhbeexJ5a2sOyw2Lxgni8KoBcE0MTP9Pwo7PQWK7U42 Gxhj70fTL3ML2gfKZOjIDg6V1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOF33uYC NAPYIPoAM4/v3mz8ShtjMB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoWKFJcJxjrxscEPXu/JVjNpgGFA+qcC278jzwHf5WnrYCTco/lICq YJDOT7JSYk/TycQempzMBnvUTcCXBdQg3iZdn360ti0Yh2p2krbQqOZxMSONkgfx v08ElrKmbYhCqidgb50/pppPrWiZm/2nX+dxQN6fZ5dwzLPwksaMa5iHEiQZ1stQ NvehHjOL6lg15S9LwMPHfVsqVZXpWEtYioy0LMzGEyU7n/96+jo4wKUU9a77CkI0 nWWG77lgIeTqPnSdByosgXTWVjS3VgTBgqo9uiicKz3KC9sbI4h8H7U0fKx7+efY OBjhgL64w/5dt4K56zP8GC9EHuZcYU75 -----END CERTIFICATE-----Generated at Thu May 15 14:55:10 2025 by rpki-client