$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: aipjR1yEu8YH2XXFz6pFoLcSH2Y8uS652bRDwBxnRZg= Subject key identifier: C8:E3:69:5F:6A:F7:8A:95:C9:FB:85:66:42:60:3F:38:7B:F9:D9:C5 Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: 8A Signing time: Sun 11 May 2025 05:16:54 +0000 Manifest this update: Sun 11 May 2025 05:16:54 +0000 Manifest next update: Sun 18 May 2025 05:16:54 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: gWcpVa9KfbFvUSt8M8lvLx2TEE6wTpxNZfn+PdAcabs=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: May 11 05:16:54 2025 GMT Not After : May 18 05:16:54 2025 GMT Subject: CN=682032c6-9cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:df:62:96:a2:54:95:79:2a:7e:8d:a1:04: 7b:57:bf:27:7e:19:13:9f:81:7c:62:4e:bb:4c:79: 4b:d5:fa:91:3b:3c:e3:60:87:a2:75:f6:40:0c:7f: ce:66:1c:37:f9:fb:25:83:b9:60:3b:3a:8f:e0:d6: 4a:65:2d:6a:c4:c4:4f:c3:ad:4a:ae:df:dd:0d:17: d4:eb:ea:62:c2:a6:ae:07:ea:da:ba:a7:b3:a4:62: 4d:ae:e4:53:f1:12:f9:32:8c:91:d5:5a:e2:b3:3b: 31:79:99:b4:09:ea:83:61:bd:e7:5d:71:4b:9e:5b: 83:d1:5d:88:08:78:d6:78:8b:44:ef:9b:e8:79:50: 1a:b3:fa:f8:6e:9a:cd:87:4b:53:a2:5f:08:e8:15: 42:51:d6:73:1e:90:85:3a:6c:be:e0:96:bb:43:4d: a0:93:09:17:6b:49:36:0f:32:09:21:ce:f1:ac:f5: 15:4e:0a:eb:63:ff:1c:c0:d2:07:2d:49:08:7a:60: af:c5:d5:13:5e:52:54:3c:27:77:1e:36:80:ee:31: e9:7e:34:cf:b6:c8:27:1a:b8:99:06:9d:f4:27:da: 47:fd:26:e5:a6:2f:c7:ac:89:aa:78:d5:a1:c3:1f: c1:cf:0b:6a:2a:b9:8f:06:bf:4c:de:af:f2:d0:da: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E3:69:5F:6A:F7:8A:95:C9:FB:85:66:42:60:3F:38:7B:F9:D9:C5 X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2b:42:df:48:26:10:b3:65:ba:47:01:f8:07:95:00:02:20: 43:ae:96:93:b0:cc:bd:13:0c:77:92:37:5f:61:f5:41:6f:e9: 44:60:5e:3e:2e:ae:dc:3a:ef:43:5d:d9:0d:fb:2c:b4:bd:b2: 38:94:f9:38:fe:54:b3:b0:7a:13:7a:e2:9f:0e:65:55:3b:75: 2f:f0:2c:1a:d1:4e:20:21:52:10:83:b1:2a:0b:f0:3e:ca:20: 7d:df:75:30:61:08:31:74:61:e8:94:6a:cd:66:4e:35:1d:f9: 64:ab:4a:71:af:1b:12:a0:3d:eb:12:2c:1f:21:54:d9:fa:7f: 1b:bf:b4:60:05:f3:6c:88:2e:12:3d:8b:f8:83:b2:f5:d5:c7: d5:79:8a:fb:f0:ff:4d:7a:fa:1a:89:af:b4:c1:55:22:b9:84: 59:88:c6:a1:e5:9b:c2:19:fa:c1:ff:37:b0:5e:18:52:01:19: 84:97:97:45:24:82:bc:6e:75:8b:1e:53:87:8e:69:68:1c:10: f6:14:03:50:d8:7f:5e:7e:d9:4b:67:49:06:19:c4:85:11:cc: ac:61:1c:46:e4:1d:90:dc:ca:58:b1:0c:e2:4c:87:6b:22:8b: c0:22:7d:cd:a2:44:c5:4f:0a:09:7d:c3:a9:18:fa:1e:da:e1: 6d:96:b7:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB RENGOUEzQTkwHhcNMjUwNTExMDUxNjU0WhcNMjUwNTE4MDUxNjU0WjAYMRYwFAYD VQQDEw02ODIwMzJjNi05Y2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QnfYpaiVJV5Kn6NoQR7V78nfhkTn4F8Yk67THlL1fqROzzjYIeidfZADH/O Zhw3+fslg7lgOzqP4NZKZS1qxMRPw61Krt/dDRfU6+piwqauB+rauqezpGJNruRT 8RL5MoyR1VriszsxeZm0CeqDYb3nXXFLnluD0V2ICHjWeItE75voeVAas/r4bprN h0tTol8I6BVCUdZzHpCFOmy+4Ja7Q02gkwkXa0k2DzIJIc7xrPUVTgrrY/8cwNIH LUkIemCvxdUTXlJUPCd3HjaA7jHpfjTPtsgnGriZBp30J9pH/Sblpi/HrImqeNWh wx/BzwtqKrmPBr9M3q/y0NoKOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjjaV9q 94qVyfuFZkJgPzh7+dnFMB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa dnNudEhwQmsyYnl0ejVvNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAK0LfSCYQs2W6RwH4B5UAAiBDrpaTsMy9Ewx3kjdfYfVBb+lEYF4+ Lq7cOu9DXdkN+yy0vbI4lPk4/lSzsHoTeuKfDmVVO3Uv8Cwa0U4gIVIQg7EqC/A+ yiB933UwYQgxdGHolGrNZk41Hflkq0pxrxsSoD3rEiwfIVTZ+n8bv7RgBfNsiC4S PYv4g7L11cfVeYr78P9Nevoaia+0wVUiuYRZiMah5ZvCGfrB/zewXhhSARmEl5dF JIK8bnWLHlOHjmloHBD2FANQ2H9eftlLZ0kGGcSFEcysYRxG5B2Q3MpYsQziTIdr IovAIn3NokTFTwoJfcOpGPoe2uFtlrc7 -----END CERTIFICATE-----Generated at Sun May 11 12:51:28 2025 by rpki-client