$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: C/XBNoJE40O6DOhkfWW+6kg5EnkVgvXNMByUJloB79I= Subject key identifier: 73:96:2A:BB:4C:6C:96:D4:3A:CD:A7:FD:C2:4B:26:25:E0:78:6C:92 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 132F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 1319 Signing time: Sat 10 May 2025 16:56:36 +0000 Manifest this update: Sat 10 May 2025 16:56:35 +0000 Manifest next update: Sat 17 May 2025 16:56:35 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: RAs4Uza2HKBl8d8GSATbbZ0RHMULEGDvtLaTSm5v2vw=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: vee2Trog0A8Sa455ioxH/3gGtre4yzjbz6bH8ySXmH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4911 (0x132f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: May 10 16:56:35 2025 GMT Not After : May 17 16:56:35 2025 GMT Subject: CN=681f8544-a313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:68:74:87:34:7f:00:32:d6:81:f6:a3:99: 93:74:00:e6:9e:94:ea:54:5f:84:13:49:2d:a1:cc: b6:e1:02:6d:3a:92:5e:85:d1:3d:1e:4b:fd:ad:7d: cb:53:67:c6:3b:4c:7a:7d:79:4c:ce:64:07:eb:b2: 97:9c:41:30:c0:e0:47:ab:bb:65:fd:f8:95:cd:5e: 89:0a:ae:24:93:70:c8:f6:db:60:07:d8:c3:27:40: e8:08:f3:34:e5:f5:38:81:ca:b4:2a:2d:3c:ab:d8: 81:58:93:da:d2:c2:26:08:34:b2:f2:f3:80:63:4a: 35:bd:e3:75:a1:3f:82:e3:9c:d4:0b:b0:53:c5:12: 17:84:0e:28:cf:59:d8:07:f0:e2:22:57:10:f3:f0: 8a:2c:f1:93:db:63:d0:af:69:86:54:58:8c:6c:83: e3:d8:5a:3c:68:ab:d1:2d:06:ee:98:29:e9:2a:44: 3c:94:12:6b:bb:9b:95:68:04:f3:03:05:59:e0:11: c5:5d:4e:b4:27:0e:11:38:03:bc:0b:a1:8a:73:90: 6a:b7:e4:15:70:3e:56:1f:91:18:48:31:7e:c4:29: 2f:f0:67:a4:98:bf:8f:e4:98:04:48:71:97:48:03: 0f:cf:63:8c:50:5d:4a:56:ea:9a:43:20:0e:9a:1e: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:96:2A:BB:4C:6C:96:D4:3A:CD:A7:FD:C2:4B:26:25:E0:78:6C:92 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:67:2e:db:cd:5f:1c:9e:45:51:4c:fa:c7:7a:d0:1c:57:43: 0a:4f:99:37:ca:a0:fd:81:1b:bd:06:2a:a9:1e:99:93:49:38: a9:7f:92:bd:4d:17:52:92:0f:e8:bb:fc:0f:95:85:78:88:f5: 53:4b:76:09:bd:93:82:00:ea:4c:08:02:9e:f4:f3:e8:f4:44: 54:19:54:e5:7e:15:2b:7b:55:58:78:7e:ad:eb:98:2d:32:04: ff:dc:d4:72:b9:12:06:47:a0:ab:6a:1b:e8:d4:a4:d0:2e:1e: 5a:ed:12:6f:63:3d:28:35:54:f1:90:c3:da:14:b6:88:92:76: b3:61:4e:72:5d:3c:6e:22:e8:1c:e2:6f:b5:96:6e:4a:18:be: cf:a6:fa:7e:1b:9a:a3:03:ae:c1:f2:f7:74:e1:1c:df:cf:c9: 36:27:f6:5f:99:7d:14:ae:32:e0:1a:ea:9e:23:8e:f0:ac:85: 03:71:bd:c1:85:4a:83:dc:b3:23:b4:f0:03:c3:63:f2:8f:a0: 6f:4a:bb:1c:ff:6b:02:a4:c7:bc:5f:09:8e:8a:42:14:66:b2: 9a:03:9c:eb:01:4e:f5:8c:a5:9b:d2:8f:98:fd:e8:2d:83:b4: 7d:bf:24:68:0e:9c:bb:85:97:c6:f0:c4:70:0f:70:76:3c:2f: be:5b:b2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUwNTEwMTY1NjM1WhcNMjUwNTE3MTY1NjM1WjAYMRYwFAYD VQQDEw02ODFmODU0NC1hMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQVodIc0fwAy1oH2o5mTdADmnpTqVF+EE0ktocy24QJtOpJehdE9Hkv9rX3L U2fGO0x6fXlMzmQH67KXnEEwwOBHq7tl/fiVzV6JCq4kk3DI9ttgB9jDJ0DoCPM0 5fU4gcq0Ki08q9iBWJPa0sImCDSy8vOAY0o1veN1oT+C45zUC7BTxRIXhA4oz1nY B/DiIlcQ8/CKLPGT22PQr2mGVFiMbIPj2Fo8aKvRLQbumCnpKkQ8lBJru5uVaATz AwVZ4BHFXU60Jw4ROAO8C6GKc5Bqt+QVcD5WH5EYSDF+xCkv8GekmL+P5JgESHGX SAMPz2OMUF1KVuqaQyAOmh6gdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOWKrtM bJbUOs2n/cJLJiXgeGySMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcZy7bzV8cnkVRTPrHetAcV0MKT5k3yqD9gRu9BiqpHpmTSTipf5K9 TRdSkg/ou/wPlYV4iPVTS3YJvZOCAOpMCAKe9PPo9ERUGVTlfhUre1VYeH6t65gt MgT/3NRyuRIGR6Crahvo1KTQLh5a7RJvYz0oNVTxkMPaFLaIknazYU5yXTxuIugc 4m+1lm5KGL7Ppvp+G5qjA67B8vd04Rzfz8k2J/ZfmX0UrjLgGuqeI47wrIUDcb3B hUqD3LMjtPADw2Pyj6BvSrsc/2sCpMe8XwmOikIUZrKaA5zrAU71jKWb0o+Y/egt g7R9vyRoDpy7hZfG8MRwD3B2PC++W7Lx -----END CERTIFICATE-----Generated at Mon May 12 13:11:38 2025 by rpki-client