$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json) Hash identifier: 51JLR5K6hhCl3CWE2FAEp4uDJijLXEmWM0HqxwEA4oQ= Subject key identifier: A4:B0:6C:E4:C8:52:81:54:5F:E4:79:C2:22:03:1E:4F:3A:38:AD:52 Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 123A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft Manifest number: 1224 Signing time: Sat 10 May 2025 17:02:13 +0000 Manifest this update: Sat 10 May 2025 17:02:13 +0000 Manifest next update: Sat 17 May 2025 17:02:13 +0000 Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: /iHftb1qa53qWdeFXMjULA8wsobPI0NcnfjMvKb1enI=) 2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: VilJgVER7BycZHaWd4URO4KYACwZnY/x/nNDEK5obqE=) 3: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: OeaX4Y36BcWO+hpCFTJVXRa1o/dq7PQS00iGf5uCP9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4666 (0x123a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Validity Not Before: May 10 17:02:13 2025 GMT Not After : May 17 17:02:13 2025 GMT Subject: CN=681f8695-ac43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:0c:3a:7d:7f:6b:24:ce:f6:29:a8:6d:c6: 18:e3:27:42:7f:5e:40:27:ec:0d:6f:46:85:19:f4: 4b:68:7b:63:a2:37:d6:f1:21:c8:ca:53:97:2c:ce: b4:7b:e3:0f:51:2e:bc:49:c4:46:5f:2f:20:a9:18: 61:90:54:8f:a6:38:01:25:da:b1:48:f1:99:af:05: 60:d9:0a:39:dd:1c:a4:7a:87:b9:fe:24:ce:fc:fd: fc:d6:4f:e5:25:ac:bf:10:06:ab:46:89:67:d3:28: a6:5e:ee:93:38:82:45:a4:88:a7:89:f4:d9:7c:3b: 21:da:24:18:57:f9:e7:a2:5c:39:83:e1:62:af:f7: 33:4b:5b:91:4f:89:04:91:e9:1a:44:1e:bc:e9:80: eb:42:7b:6e:ee:40:f6:7c:d3:01:37:ff:10:6a:74: e4:18:72:2a:c1:86:16:26:c9:e9:6a:3f:07:d4:72: 92:52:86:13:b8:dc:28:9c:e5:4b:7c:fb:b3:f7:fd: 40:3b:06:34:eb:6b:56:7e:49:e3:dd:d1:cf:13:8a: 9d:14:0b:3e:59:ca:7b:fc:d1:b8:61:e1:0a:7e:1c: ec:9e:30:59:a6:94:22:12:ed:05:53:af:74:7b:8c: 91:00:f8:18:dc:4a:bc:2d:ca:06:ce:37:38:ab:09: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B0:6C:E4:C8:52:81:54:5F:E4:79:C2:22:03:1E:4F:3A:38:AD:52 X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a9:6e:b5:58:25:09:2c:f4:06:35:76:52:a8:4a:77:45:3b: 96:26:b1:be:b4:9a:c3:95:32:27:06:5a:ae:26:61:2f:c4:bd: 26:a1:54:ca:ac:c2:47:f1:4f:11:68:de:17:5a:98:32:da:2d: a2:e9:21:fd:8f:a2:13:cb:3f:27:91:7f:ed:2b:69:04:5d:63: 44:9d:d0:e9:c5:a9:66:7e:81:53:39:73:65:0b:db:a5:2f:c3: 77:d8:aa:89:d3:e9:e1:8c:be:04:2c:6b:31:81:0a:1e:a3:a3: 50:c6:6d:0d:23:3d:7f:a6:fd:a7:4e:e1:9a:3f:1c:81:bf:ca: 3a:53:c9:e3:e7:89:8c:61:cb:f6:69:d3:1a:53:af:26:7c:42: 81:7d:0f:6f:9c:c4:71:9a:41:65:d3:8b:ac:f5:f8:97:3f:1e: 4f:2a:92:00:d6:9a:a4:6c:75:c7:db:e2:f4:fa:fd:7b:dc:d1: 72:5e:12:15:18:f3:af:1a:c7:a0:63:2e:f4:1a:0e:ed:ff:36: c9:84:76:ef:7e:01:0d:74:10:c3:d1:08:71:31:33:db:a4:07: 27:e0:a4:1a:62:23:4f:01:11:50:2e:2b:6b:37:10:e0:16:43: 19:d8:30:25:29:5d:d7:c2:de:ac:3f:86:d6:c3:d7:b6:38:e9: 1f:af:34:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjUwNTEwMTcwMjEzWhcNMjUwNTE3MTcwMjEzWjAYMRYwFAYD VQQDEw02ODFmODY5NS1hYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxYMOn1/ayTO9imobcYY4ydCf15AJ+wNb0aFGfRLaHtjojfW8SHIylOXLM60 e+MPUS68ScRGXy8gqRhhkFSPpjgBJdqxSPGZrwVg2Qo53Rykeoe5/iTO/P381k/l Jay/EAarRoln0yimXu6TOIJFpIinifTZfDsh2iQYV/nnolw5g+Fir/czS1uRT4kE kekaRB686YDrQntu7kD2fNMBN/8QanTkGHIqwYYWJsnpaj8H1HKSUoYTuNwonOVL fPuz9/1AOwY062tWfknj3dHPE4qdFAs+Wcp7/NG4YeEKfhzsnjBZppQiEu0FU690 e4yRAPgY3Eq8LcoGzjc4qwnVEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSwbOTI UoFUX+R5wiIDHk86OK1SMB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjY4QS84NEZCNEM5Q0REQTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTla SXVvOWdEVlRZNGdqLXU2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZqW61WCUJLPQGNXZSqEp3RTuWJrG+tJrDlTInBlquJmEvxL0moVTK rMJH8U8RaN4XWpgy2i2i6SH9j6ITyz8nkX/tK2kEXWNEndDpxalmfoFTOXNlC9ul L8N32KqJ0+nhjL4ELGsxgQoeo6NQxm0NIz1/pv2nTuGaPxyBv8o6U8nj54mMYcv2 adMaU68mfEKBfQ9vnMRxmkFl04us9fiXPx5PKpIA1pqkbHXH2+L0+v173NFyXhIV GPOvGsegYy70Gg7t/zbJhHbvfgENdBDD0QhxMTPbpAcn4KQaYiNPARFQLitrNxDg FkMZ2DAlKV3Xwt6sP4bWw9e2OOkfrzRb -----END CERTIFICATE-----Generated at Sun May 11 10:20:17 2025 by rpki-client