$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: 6TZfv6w0hrNiExwtDU1+O6XmK5Ffmd6rCx8odup3wiQ= Subject key identifier: D3:0A:A3:F4:85:64:85:95:5C:0A:B9:2C:6E:3E:E5:85:6B:B1:26:FD Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 129A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 128C Signing time: Tue 06 May 2025 17:07:26 +0000 Manifest this update: Tue 06 May 2025 17:07:25 +0000 Manifest next update: Tue 13 May 2025 17:07:25 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: iE8M+AE/P9RC07xbdiowWcTEHbw7XFbPsgVGFCoIhmI=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: tYzlvKoaH6Iw/czt01Ia6uEcjkV7kohl/OzIkYhWPeY=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: Gl4gKDf4aT96XGuS7DGEepsfpPgK8tonViSlMSSTaDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 17:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4762 (0x129a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: May 6 17:07:25 2025 GMT Not After : May 13 17:07:25 2025 GMT Subject: CN=681a41ce-5b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:18:a5:42:63:4e:2a:80:f4:67:14:80:e3: e6:8e:7b:b0:bf:ae:b4:72:4b:d2:7b:9f:2e:99:06: d6:9f:ab:89:c8:d5:d5:bb:e6:c1:06:78:40:f6:5d: 23:87:d2:a5:f9:a2:21:b9:26:e3:27:fe:6a:44:65: 7a:53:36:fb:ff:bf:c6:f2:73:89:5e:cb:bc:8f:c4: 36:11:1d:34:cb:2a:9a:92:56:28:cf:15:18:98:51: 68:6d:2a:aa:bb:d5:b3:12:8a:0f:da:16:8f:b9:35: 8c:22:d4:4d:d9:75:60:1f:bb:d7:b1:f6:31:be:ef: 74:da:bc:4d:1f:83:ac:d8:e4:9c:c6:6b:96:6e:3b: 08:5b:5c:37:47:6b:8d:b0:5b:b3:51:3b:bc:60:00: 97:1a:3e:28:63:b5:f1:26:de:69:54:89:39:ec:62: 1b:e7:ef:21:e0:ea:ee:f4:01:e5:ed:ed:4d:cc:28: 39:45:3a:8d:91:69:f0:c2:91:b9:1e:db:bc:cb:14: 52:fb:19:dd:a0:8b:ab:ce:ff:23:fa:54:4e:7a:85: b2:49:c6:e4:e9:32:16:01:ff:bc:b7:40:17:90:80: 4a:1d:7c:58:e5:0c:53:11:4a:30:87:c8:8d:06:ee: 69:16:54:0e:a7:af:e8:e7:66:01:8c:57:5f:b4:ca: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0A:A3:F4:85:64:85:95:5C:0A:B9:2C:6E:3E:E5:85:6B:B1:26:FD X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bd:dd:32:a3:ff:04:17:ae:e0:03:63:05:ce:81:9d:fb:86: 62:25:e8:f7:37:2f:70:23:da:79:8b:fb:a8:72:08:d5:6d:62: 71:f0:bd:6a:88:ec:48:03:cc:6b:05:5b:58:48:89:b4:ac:07: 7c:c9:0f:3e:d8:8c:6f:74:84:07:c6:db:a1:56:53:15:b2:ab: 28:f7:f0:0c:90:a4:c1:7d:62:62:b5:24:fc:6b:7b:72:b8:d5: b6:fa:df:52:51:24:40:ac:6b:a5:55:e4:0b:54:73:bc:48:5e: 92:c3:f8:ec:22:2d:ff:64:28:92:44:cc:aa:ff:a0:35:d7:d3: 91:0e:c8:c2:f1:8d:9b:ca:2d:1e:03:78:f1:78:96:5c:ee:81: 67:4d:27:2f:0a:99:1c:b5:87:c6:b9:31:ae:d9:59:4f:52:a9: 0c:3c:7c:6f:d9:e4:75:23:4b:c6:97:58:a2:ac:14:db:6e:12: b0:de:aa:f6:9b:3b:a0:4f:0c:e1:b2:40:e9:b0:90:fa:37:28: 02:aa:f2:71:83:58:7f:5e:f6:65:bc:87:15:c8:9c:3e:02:3f: 32:ff:cd:6c:26:d1:fe:62:e0:c9:ab:bf:80:e0:56:99:9e:7d: 47:79:f3:cc:4b:dd:94:b3:5e:09:04:5b:58:dc:a2:e5:da:a4: 2a:34:9d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjUwNTA2MTcwNzI1WhcNMjUwNTEzMTcwNzI1WjAYMRYwFAYD VQQDEw02ODFhNDFjZS01YjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb4YpUJjTiqA9GcUgOPmjnuwv660ckvSe58umQbWn6uJyNXVu+bBBnhA9l0j h9Kl+aIhuSbjJ/5qRGV6Uzb7/7/G8nOJXsu8j8Q2ER00yyqaklYozxUYmFFobSqq u9WzEooP2haPuTWMItRN2XVgH7vXsfYxvu902rxNH4Os2OScxmuWbjsIW1w3R2uN sFuzUTu8YACXGj4oY7XxJt5pVIk57GIb5+8h4Oru9AHl7e1NzCg5RTqNkWnwwpG5 Htu8yxRS+xndoIurzv8j+lROeoWyScbk6TIWAf+8t0AXkIBKHXxY5QxTEUowh8iN Bu5pFlQOp6/o52YBjFdftMogDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMKo/SF ZIWVXAq5LG4+5YVrsSb9MB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9vd0yo/8EF67gA2MFzoGd+4ZiJej3Ny9wI9p5i/uocgjVbWJx8L1q iOxIA8xrBVtYSIm0rAd8yQ8+2IxvdIQHxtuhVlMVsqso9/AMkKTBfWJitST8a3ty uNW2+t9SUSRArGulVeQLVHO8SF6Sw/jsIi3/ZCiSRMyq/6A119ORDsjC8Y2byi0e A3jxeJZc7oFnTScvCpkctYfGuTGu2VlPUqkMPHxv2eR1I0vGl1iirBTbbhKw3qr2 mzugTwzhskDpsJD6NygCqvJxg1h/XvZlvIcVyJw+Aj8y/81sJtH+YuDJq7+A4FaZ nn1HefPMS92Us14JBFtY3KLl2qQqNJ3p -----END CERTIFICATE-----Generated at Wed May 7 13:45:40 2025 by rpki-client