$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: qJnV10J6O0x7UAnFKZsGpgXg4tFZb8I53nt1eSeTZEk= Subject key identifier: F6:9E:0E:8B:39:A1:FA:27:B7:52:33:76:D3:21:24:19:E1:EA:C6:04 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: 017C Signing time: Tue 13 May 2025 03:00:11 +0000 Manifest this update: Tue 13 May 2025 03:00:11 +0000 Manifest next update: Tue 20 May 2025 03:00:11 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: 0FpXoUJC8je1DQzPvhGRyBq0GOj2ygI9OJQ4CkuVWjA=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: XDKLEB0Itrm1xWCw6e4E/02jNXmBNEL6rySB0+zkMHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: May 13 03:00:11 2025 GMT Not After : May 20 03:00:11 2025 GMT Subject: CN=6822b5bb-7c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:da:c5:c9:30:2d:ca:ed:89:1e:37:66:e3: 5b:99:b5:72:be:46:cd:7b:5c:bc:63:a1:2e:19:39: 0c:a2:55:98:0d:f9:9c:c6:f2:58:81:c3:35:a2:37: cf:6d:8a:c1:66:d7:fa:a9:fb:fd:b1:0f:34:b7:32: 28:50:f5:be:ed:48:0e:f1:c3:9f:d9:c0:f3:ae:c2: b0:c6:89:1f:0f:70:4c:72:92:0e:3c:d8:e2:dd:03: 38:f3:ac:0e:ae:26:ef:ed:0c:f6:12:0e:19:c5:2e: 54:84:d3:bb:ae:a7:24:7b:a7:1c:32:ab:33:e9:08: bf:a7:9f:74:72:8a:a5:15:11:cd:d0:cf:0d:14:b6: 67:a1:a6:30:0e:8c:4a:1d:85:7e:46:98:d7:cf:6c: 3a:63:d9:91:78:8d:9c:8d:ff:34:fb:18:41:55:5e: d8:ef:60:39:67:b8:99:71:85:b9:d7:26:4a:b0:e1: 07:98:c7:3a:84:de:72:99:63:9b:8a:08:7c:8d:e6: 77:e0:13:2c:f9:fa:ca:56:6c:35:a9:46:5a:a6:7b: e3:cb:bc:d7:ef:a9:97:36:be:ce:0b:cc:ac:e9:5d: c8:08:d1:07:30:5f:9c:68:33:de:e5:9e:04:d1:0e: 79:27:a9:04:02:f4:89:c0:f1:f4:93:0c:28:cf:16: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9E:0E:8B:39:A1:FA:27:B7:52:33:76:D3:21:24:19:E1:EA:C6:04 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f5:0e:4d:19:cb:4d:65:77:76:bd:4e:f2:3b:2e:63:9e:0c: 49:ef:e2:f8:16:2e:eb:f1:f8:b3:0b:47:da:49:f5:dd:cf:a1: cb:4b:d7:c7:bc:e7:56:42:0f:09:0f:fd:5e:b7:d9:17:98:2b: 15:d5:73:0d:81:42:07:66:43:9b:c2:f8:93:74:0f:42:13:4b: 43:13:5a:b8:ac:6b:c0:a7:3f:bb:51:80:52:ac:d7:15:e0:e3: 77:91:bc:75:b6:ea:3c:e1:c4:7e:a6:20:e9:75:d5:e9:a9:aa: b9:76:f2:b8:5b:cc:c5:72:1d:15:95:9b:c3:f2:41:03:6a:b5: ad:c2:99:c0:05:aa:85:68:8e:fa:d7:ca:af:3a:e9:4b:ee:42: 47:e4:87:0b:d3:85:f2:de:8b:6f:e2:a3:d3:9d:18:6e:7e:a0: a7:be:62:6f:be:9a:2a:88:69:cc:1d:94:1a:c9:ee:c0:2b:30: 25:d1:d0:4f:f9:97:89:48:4b:a1:91:18:01:90:53:cc:04:9c: ea:1e:ed:01:de:8d:02:77:ee:96:23:d6:8c:b5:a7:5b:1f:c0: 84:b2:58:af:7a:81:03:cb:77:ae:9d:ef:1f:bd:75:26:ad:4b: ca:e2:c9:a7:de:22:de:5d:a7:e4:64:72:76:26:a0:92:ba:e0: b0:71:14:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjUwNTEzMDMwMDExWhcNMjUwNTIwMDMwMDExWjAYMRYwFAYD VQQDEw02ODIyYjViYi03YzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXraxckwLcrtiR43ZuNbmbVyvkbNe1y8Y6EuGTkMolWYDfmcxvJYgcM1ojfP bYrBZtf6qfv9sQ80tzIoUPW+7UgO8cOf2cDzrsKwxokfD3BMcpIOPNji3QM486wO ribv7Qz2Eg4ZxS5UhNO7rqcke6ccMqsz6Qi/p590coqlFRHN0M8NFLZnoaYwDoxK HYV+RpjXz2w6Y9mReI2cjf80+xhBVV7Y72A5Z7iZcYW51yZKsOEHmMc6hN5ymWOb igh8jeZ34BMs+frKVmw1qUZapnvjy7zX76mXNr7OC8ys6V3ICNEHMF+caDPe5Z4E 0Q55J6kEAvSJwPH0kwwozxZXewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaeDos5 ofont1IzdtMhJBnh6sYEMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR9Q5NGctNZXd2vU7yOy5jngxJ7+L4Fi7r8fizC0faSfXdz6HLS9fH vOdWQg8JD/1et9kXmCsV1XMNgUIHZkObwviTdA9CE0tDE1q4rGvApz+7UYBSrNcV 4ON3kbx1tuo84cR+piDpddXpqaq5dvK4W8zFch0VlZvD8kEDarWtwpnABaqFaI76 18qvOulL7kJH5IcL04Xy3otv4qPTnRhufqCnvmJvvpoqiGnMHZQaye7AKzAl0dBP +ZeJSEuhkRgBkFPMBJzqHu0B3o0Cd+6WI9aMtadbH8CEsliveoEDy3eune8fvXUm rUvK4smn3iLeXafkZHJ2JqCSuuCwcRTk -----END CERTIFICATE-----Generated at Wed May 14 11:46:15 2025 by rpki-client