$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: Fbl6dbtmfj9HWBI6Ajy1Z13cVlX25RYqzMSJQb7eC8g= Subject key identifier: D8:DD:C7:C0:17:13:7E:AF:9D:61:86:EC:0A:43:F1:77:00:1A:16:A5 Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 0382 Signing time: Wed 07 May 2025 00:44:07 +0000 Manifest this update: Wed 07 May 2025 00:44:07 +0000 Manifest next update: Wed 14 May 2025 00:44:07 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: mxESLIO+jBAiYz3dZnpP3zmeHXzA7Rwa2nSStCdf8mA=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: eYkm574zXfPZBssf+KqgdlPvB8riPVJCVgCP7O8B6S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: May 7 00:44:07 2025 GMT Not After : May 14 00:44:07 2025 GMT Subject: CN=681aacd7-cb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:35:5b:5d:95:f8:3c:65:00:54:be:86:ae: 74:e9:26:9a:24:a7:dc:ac:24:d4:fa:4e:83:88:48: 0b:cb:17:c9:bd:5b:99:9a:87:a8:be:2e:0d:0f:de: 60:d7:04:17:0e:9b:06:2a:21:de:4b:0e:c4:62:cf: 32:e1:eb:b9:63:a5:ac:a2:8c:62:81:8a:c1:64:13: 30:48:d2:a3:3e:af:21:3c:37:04:50:3e:56:7a:49: c2:77:b3:b8:1c:ce:30:83:5f:fe:c9:30:0d:59:78: 8a:49:90:fb:14:1f:eb:d2:33:df:99:d2:26:81:35: 95:fb:bd:4d:a1:21:cd:c4:bd:43:2b:03:df:8c:ff: 97:c9:78:64:90:ca:9f:ef:91:26:56:9b:38:a4:70: 5d:2f:2f:9e:7a:95:4c:ff:56:1e:a2:91:84:b0:ba: b8:33:c1:78:58:34:4b:e2:ee:9e:10:35:6a:43:f3: 7d:bb:3e:9c:ce:77:4f:35:e0:62:a8:36:23:5f:15: 33:13:70:7a:99:b3:bd:d2:08:7e:3d:a9:68:b3:c2: 27:e3:20:b1:14:5a:57:ce:fa:7c:8b:2a:a1:36:6e: fd:86:f3:7c:f5:3f:b3:3e:46:cf:88:b6:cc:8b:dc: f3:fb:c5:69:e3:52:40:88:5b:7e:93:5c:a0:db:df: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DD:C7:C0:17:13:7E:AF:9D:61:86:EC:0A:43:F1:77:00:1A:16:A5 X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:60:f5:13:86:7f:bc:38:bb:bf:1d:85:08:d7:1a:22:04:0a: 55:b4:0e:50:64:37:2d:3c:0b:0b:01:72:0e:7e:a3:f4:1d:e0: 40:de:97:76:32:84:41:56:dd:a6:07:a6:f3:42:69:e6:0a:13: 63:0b:64:af:4d:1f:ff:e6:df:ab:64:06:73:0f:06:44:fb:21: 93:2a:68:ec:2f:c5:2f:f4:8f:6a:a2:59:52:8c:d5:2e:10:d7: 00:66:eb:09:cc:ed:cb:3d:6e:18:9e:ca:74:a9:1d:60:29:40: 30:ad:88:8f:ad:9d:be:05:7a:11:dc:76:f4:00:6a:35:60:99: ef:a7:3e:cd:90:d9:8d:0b:c0:84:b1:08:02:0a:4a:88:3a:ba: 57:7d:2d:d1:22:ae:bb:ed:d2:9d:d5:8e:94:54:a2:05:11:3c: 92:0f:ad:d2:db:4a:db:d6:07:d2:b6:ab:4a:34:f6:73:f2:56: a1:11:62:f2:0a:69:47:a5:30:42:69:6a:ec:f8:ef:bc:d9:4f: 4a:aa:45:34:f1:e7:b1:c0:ce:a2:eb:ba:f1:8b:4d:fe:b4:6c: 1e:d5:9d:7e:5b:8b:f4:95:63:2a:c7:b8:6b:6e:0d:ee:04:3e: e9:75:6a:0e:3f:33:06:bc:6a:2b:ee:63:73:51:32:4d:12:0c: 18:5d:81:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjUwNTA3MDA0NDA3WhcNMjUwNTE0MDA0NDA3WjAYMRYwFAYD VQQDEw02ODFhYWNkNy1jYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwE1W12V+DxlAFS+hq506SaaJKfcrCTU+k6DiEgLyxfJvVuZmoeovi4ND95g 1wQXDpsGKiHeSw7EYs8y4eu5Y6WsooxigYrBZBMwSNKjPq8hPDcEUD5WeknCd7O4 HM4wg1/+yTANWXiKSZD7FB/r0jPfmdImgTWV+71NoSHNxL1DKwPfjP+XyXhkkMqf 75EmVps4pHBdLy+eepVM/1YeopGEsLq4M8F4WDRL4u6eEDVqQ/N9uz6czndPNeBi qDYjXxUzE3B6mbO90gh+Palos8In4yCxFFpXzvp8iyqhNm79hvN89T+zPkbPiLbM i9zz+8Vp41JAiFt+k1yg29+mCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjdx8AX E36vnWGG7ApD8XcAGhalMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAYPUThn+8OLu/HYUI1xoiBApVtA5QZDctPAsLAXIOfqP0HeBA3pd2 MoRBVt2mB6bzQmnmChNjC2SvTR//5t+rZAZzDwZE+yGTKmjsL8Uv9I9qollSjNUu ENcAZusJzO3LPW4Ynsp0qR1gKUAwrYiPrZ2+BXoR3Hb0AGo1YJnvpz7NkNmNC8CE sQgCCkqIOrpXfS3RIq677dKd1Y6UVKIFETySD63S20rb1gfStqtKNPZz8lahEWLy CmlHpTBCaWrs+O+82U9KqkU08eexwM6i67rxi03+tGwe1Z1+W4v0lWMqx7hrbg3u BD7pdWoOPzMGvGor7mNzUTJNEgwYXYHm -----END CERTIFICATE-----Generated at Wed May 7 05:53:36 2025 by rpki-client