$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: NmVDQ7NHK4ORjaP5Nzn53uq9jeH7w6+RXCPPNazchro= Subject key identifier: D9:D8:FA:11:45:71:DC:41:4F:96:3A:02:0F:5D:07:79:D9:C6:BC:FB Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: 58 Signing time: Sun 11 May 2025 05:59:38 +0000 Manifest this update: Sun 11 May 2025 05:59:38 +0000 Manifest next update: Sun 18 May 2025 05:59:38 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: vjOQI+Jb49IPQt3wgBpC6EJNcBDek1XboiiLcTDvCcY=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: May 11 05:59:38 2025 GMT Not After : May 18 05:59:38 2025 GMT Subject: CN=68203cca-c919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:61:b8:24:7e:e1:76:2a:1e:26:a5:b7:f9: 7c:c5:15:47:6f:f1:c6:7b:eb:f3:81:a0:b7:17:91: 67:a0:bc:25:e7:68:de:45:f5:5b:1e:a8:e0:98:52: 9a:08:bb:9d:cf:55:69:c5:ae:12:3a:1d:73:09:6d: b7:d8:c9:f4:46:44:9d:7e:d9:ec:6f:cd:98:af:68: bd:56:5c:31:b7:af:bd:52:fb:6b:f9:54:45:3d:d8: a3:b6:6e:c7:18:4a:b2:b1:1f:3c:75:a9:ba:cf:d2: 8a:67:14:77:e1:c1:07:36:77:32:0c:9a:f4:f5:76: 62:d9:cf:0b:cd:73:79:15:17:51:6a:33:94:28:5a: 3a:4f:d5:b9:89:63:2c:5a:90:78:f6:bf:b4:a2:7e: 31:22:82:a6:06:fe:f6:61:48:07:16:55:85:5b:81: 69:95:22:17:18:24:ef:bf:94:ff:74:fc:f1:02:fd: d9:93:aa:a7:0e:6c:62:43:f2:04:d3:67:9c:ff:b7: 25:e3:ee:a0:43:1a:8d:6d:bd:ed:a3:00:f5:aa:f7: 49:a2:bd:34:16:d5:f2:8c:46:1d:fa:fc:7a:dc:60: b8:15:e0:7c:ad:11:37:2f:93:98:c5:69:24:74:27: 67:27:13:70:32:1e:e9:cb:b8:fe:77:d1:9b:99:98: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D8:FA:11:45:71:DC:41:4F:96:3A:02:0F:5D:07:79:D9:C6:BC:FB X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6f:88:0a:9a:ea:6d:bf:75:ec:df:1f:74:9b:0c:39:b9:b0: 21:86:68:6c:6b:86:83:3f:c5:98:99:98:6e:d8:b3:92:08:e3: e4:ae:7c:47:0c:1a:70:6c:ff:16:f5:20:e1:71:b7:0a:fb:48: 55:3f:7e:4a:c0:f1:b3:ba:c2:6c:41:82:d5:b1:07:b9:e2:dc: 23:82:31:9d:b6:8e:f3:7c:d2:a7:d5:ec:d3:fa:4d:22:2a:c4: 46:03:26:79:d3:73:22:fb:53:f8:8b:b0:ad:d9:4d:74:7a:a4: 64:7b:c0:7b:03:98:b9:36:d0:47:9f:8e:75:c0:46:ce:37:97: 1e:9a:c7:8c:81:b4:6c:28:57:6f:06:52:6d:a3:e2:2f:1f:a6: e3:6d:32:69:3f:47:90:ba:03:9d:a9:60:3b:4f:dc:ca:6c:25: 2a:a3:9c:6b:cd:55:12:9a:17:7d:99:10:15:fd:22:cd:72:12: 95:81:f3:17:9f:69:8d:58:32:dd:55:f0:09:b8:9d:8c:6f:ba: 1c:fb:45:6d:c2:52:83:43:09:cb:80:a2:c8:4e:eb:66:1f:b7: 05:84:7e:bd:9f:6a:09:30:8b:5d:d0:fb:a6:71:90:dc:10:d4: 0a:2b:5d:10:1e:c1:6d:2a:0a:20:01:8f:ca:d9:bf:77:b4:f0: 96:ab:17:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTJFNjMwNjY3NUQ1RjU0RDIwN0I2NzgyQTk2QzdBQTk2 N0IxRkM5MTAeFw0yNTA1MTEwNTU5MzhaFw0yNTA1MTgwNTU5MzhaMBgxFjAUBgNV BAMTDTY4MjAzY2NhLWM5MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7ZWG4JH7hdioeJqW3+XzFFUdv8cZ76/OBoLcXkWegvCXnaN5F9VseqOCYUpoI u53PVWnFrhI6HXMJbbfYyfRGRJ1+2exvzZivaL1WXDG3r71S+2v5VEU92KO2bscY SrKxHzx1qbrP0opnFHfhwQc2dzIMmvT1dmLZzwvNc3kVF1FqM5QoWjpP1bmJYyxa kHj2v7SifjEigqYG/vZhSAcWVYVbgWmVIhcYJO+/lP90/PEC/dmTqqcObGJD8gTT Z5z/tyXj7qBDGo1tve2jAPWq90mivTQW1fKMRh36/HrcYLgV4HytETcvk5jFaSR0 J2cnE3AyHunLuP530ZuZmJoLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2dj6EUVx 3EFPljoCD10HednGvPswHwYDVR0jBBgwFoAU4uYwZnXV9U0ge2eCqWx6qWex/JEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0U5QkUwNURDQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHVZd1puWFY5VTBnZTJlQ3FXeDZxV2V4X0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0U5QkUwNURDQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUw Z2UyZUNxV3g2cVdleF9KRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBviAqa6m2/dezfH3SbDDm5sCGGaGxrhoM/xZiZmG7Ys5II4+SufEcM GnBs/xb1IOFxtwr7SFU/fkrA8bO6wmxBgtWxB7ni3COCMZ22jvN80qfV7NP6TSIq xEYDJnnTcyL7U/iLsK3ZTXR6pGR7wHsDmLk20EefjnXARs43lx6ax4yBtGwoV28G Um2j4i8fpuNtMmk/R5C6A52pYDtP3MpsJSqjnGvNVRKaF32ZEBX9Is1yEpWB8xef aY1YMt1V8Am4nYxvuhz7RW3CUoNDCcuAoshO62YftwWEfr2fagkwi13Q+6ZxkNwQ 1AorXRAewW0qCiABj8rZv3e08JarF1Y= -----END CERTIFICATE-----Generated at Mon May 12 04:01:13 2025 by rpki-client