$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft File: _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json) Hash identifier: DRDgZvQnWdlyYWoE9vzwD0JKQdn7+O3+9KJQoLZPCBk= Subject key identifier: 25:B8:C8:0B:C2:66:DC:D8:3D:1F:01:0F:41:66:4F:F7:4E:6D:F6:DE Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft Manifest number: 01E0 Signing time: Sun 11 May 2025 01:41:44 +0000 Manifest this update: Sun 11 May 2025 01:41:44 +0000 Manifest next update: Sun 18 May 2025 01:41:44 +0000 Files and hashes: 1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: M59+CwiccCdqhW7CupOmDCtj2eyXk9wosJc/HhIvZz8=) 2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: ezVuFYLFE5nPFWmkFpb3o3Zc1r5CWJVIlBRAQm/fLig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Validity Not Before: May 11 01:41:44 2025 GMT Not After : May 18 01:41:44 2025 GMT Subject: CN=68200058-0ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:8a:04:03:01:f2:67:69:5e:39:6f:fc:3d: 14:9e:bb:c3:21:76:f8:ce:51:fe:56:7c:eb:0e:dc: 48:42:3f:78:f5:99:fd:59:16:26:80:89:34:68:7f: 42:2a:d7:9b:dc:1e:1a:76:75:cd:b7:87:3c:af:b0: fb:94:93:05:5c:06:7c:52:67:71:3f:82:a9:f9:f2: 8b:71:e6:f8:22:f1:7f:fc:99:eb:0e:05:33:b3:3d: bb:aa:98:67:4f:4f:f6:f3:93:bf:b7:d7:4c:ef:85: f0:3f:52:55:24:76:d9:c5:7a:19:bd:5c:15:0f:bb: 9f:d5:1b:bf:37:b0:e5:f2:d6:96:89:71:7a:d7:ba: b8:c7:29:4f:c1:44:5e:de:c6:82:7f:a5:1b:b9:e3: dc:3b:41:9d:c1:86:ac:8c:3e:18:b4:93:5d:f0:8a: ec:3a:d2:e7:83:84:ed:dd:08:b6:aa:d5:64:1c:c3: cb:f5:bc:c0:a4:24:2d:8b:66:8f:c3:40:23:ab:c6: 09:1e:a8:65:1f:1b:ab:6c:5c:37:d3:26:30:d0:cc: cd:49:c0:20:82:d9:a0:cf:f8:36:ef:38:c5:53:1a: ba:8b:cf:a6:19:3d:68:2a:85:9c:d3:d5:75:bd:42: 37:39:26:1d:96:89:89:88:98:fd:a0:a9:80:db:da: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B8:C8:0B:C2:66:DC:D8:3D:1F:01:0F:41:66:4F:F7:4E:6D:F6:DE X509v3 Authority Key Identifier: keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:37:20:86:c1:2a:38:5c:67:b1:4b:fa:dc:17:0d:9f:e2:6c: 6b:a4:b8:98:84:2d:be:07:4b:fc:15:3e:f7:a5:f0:09:4c:3e: d6:05:16:53:dd:53:58:02:d1:a8:7b:9d:09:fa:73:ba:49:05: 06:51:9a:07:31:34:2a:d6:e3:64:9d:3a:15:c0:cf:a2:2f:35: 6d:37:91:e6:4a:55:99:2b:0a:09:63:71:a6:14:59:77:14:66: 14:ee:53:20:e3:79:65:31:df:0f:e2:49:72:53:dc:c9:25:8c: 4c:1b:2b:c6:a2:33:4e:d8:58:c2:b1:00:38:41:08:7e:5c:79: c7:36:f2:05:89:ba:cf:0a:76:ff:7e:d8:1b:7c:b2:ab:7e:78: 41:f9:ab:eb:11:52:df:30:89:81:6b:e3:19:54:24:43:8d:83: 88:01:63:aa:e5:36:7d:4b:e2:0d:73:52:00:75:40:a2:f1:c8: 42:51:a8:6c:5d:a9:c2:22:43:28:77:f8:22:69:3c:e1:88:4b: c4:7a:7c:6d:bf:0a:42:13:bb:ee:c0:44:b5:ba:cb:5e:2a:1d: 80:6f:42:62:b2:ce:91:8b:16:eb:d3:09:bd:74:3e:47:84:2a: 82:50:70:33:a6:ef:3c:32:09:7f:d0:56:0f:ea:4a:56:e5:f1: e4:75:6f:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDQzAxMTAvBgNVBAUTKEZFMkUzNTJCNDJGNzRGMTBENTc2ODM1MzAzQTJFOTc4 RTFDNDM3QjYwHhcNMjUwNTExMDE0MTQ0WhcNMjUwNTE4MDE0MTQ0WjAYMRYwFAYD VQQDEw02ODIwMDA1OC0wYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwruKBAMB8mdpXjlv/D0UnrvDIXb4zlH+VnzrDtxIQj949Zn9WRYmgIk0aH9C Kteb3B4adnXNt4c8r7D7lJMFXAZ8UmdxP4Kp+fKLceb4IvF//JnrDgUzsz27qphn T0/285O/t9dM74XwP1JVJHbZxXoZvVwVD7uf1Ru/N7Dl8taWiXF617q4xylPwURe 3saCf6UbuePcO0GdwYasjD4YtJNd8IrsOtLng4Tt3Qi2qtVkHMPL9bzApCQti2aP w0Ajq8YJHqhlHxurbFw30yYw0MzNScAggtmgz/g27zjFUxq6i8+mGT1oKoWc09V1 vUI3OSYdlomJiJj9oKmA29rmZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCW4yAvC ZtzYPR8BD0FmT/dObfbeMB8GA1UdIwQYMBaAFP4uNStC908Q1XaDUwOi6XjhxDe2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNDMC9DRkE3OUYxQTUw M0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4RFZkb05UQTZMcGVPSEVO N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pNDFLMEwzVHhEVmRvTlRBNkxwZU9IRU43WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNDMC9DRkE3OUYxQTUwM0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4 RFZkb05UQTZMcGVPSEVON1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGNyCGwSo4XGexS/rcFw2f4mxrpLiYhC2+B0v8FT73pfAJTD7WBRZT 3VNYAtGoe50J+nO6SQUGUZoHMTQq1uNknToVwM+iLzVtN5HmSlWZKwoJY3GmFFl3 FGYU7lMg43llMd8P4klyU9zJJYxMGyvGojNO2FjCsQA4QQh+XHnHNvIFibrPCnb/ ftgbfLKrfnhB+avrEVLfMImBa+MZVCRDjYOIAWOq5TZ9S+INc1IAdUCi8chCUahs XanCIkMod/giaTzhiEvEenxtvwpCE7vuwES1usteKh2Ab0Jiss6Rixbr0wm9dD5H hCqCUHAzpu88Mgl/0FYP6kpW5fHkdW+K -----END CERTIFICATE-----Generated at Sun May 11 10:26:26 2025 by rpki-client