$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: HmfWMldkN6ZTJJ1pxfbyrQ8XGW2qLLuZwcE0RfHzdho= Subject key identifier: 5C:4C:AE:6E:A0:E7:F1:B2:11:93:B6:D0:C5:EA:9E:89:7D:9C:A9:E4 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 0387 Signing time: Tue 13 May 2025 00:43:31 +0000 Manifest this update: Tue 13 May 2025 00:43:31 +0000 Manifest next update: Tue 20 May 2025 00:43:31 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: pL4kHTvvz0zo/qKMVZ6GuSnF5hfVE8ofh4+8SAFPF+k=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: 28RTGOVxaiYLARwHZ0Std1aK28GFPOrIsqNmVkJG6o8=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 4: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: U6f6OEgNO9G7tnJE8PE9Soyl3bJOGu5+tt1ALRGB7dY=) 5: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: May 13 00:43:31 2025 GMT Not After : May 20 00:43:31 2025 GMT Subject: CN=682295b3-204e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:eb:98:76:44:7a:bb:a0:ea:6e:94:a5:03: a8:68:25:bd:14:1f:58:78:44:0b:59:d7:ac:91:eb: e6:ca:c1:54:ca:b1:c3:08:b7:fb:21:6b:f9:67:72: 2c:4b:86:e9:98:2d:f7:2b:78:8b:67:e6:30:3a:19: d1:c6:64:56:37:87:21:01:d5:29:c8:bd:f7:36:05: ec:7e:49:d8:5b:a5:e1:19:b1:bd:cf:e6:72:b8:ab: b7:5a:5f:ab:3c:91:9a:09:e3:31:25:53:89:29:1f: 36:4e:8c:67:44:13:6e:03:4d:94:75:ae:03:c4:79: 49:f5:be:15:d3:78:de:3f:bd:26:2d:c6:44:99:2c: 98:95:df:e0:ff:ee:24:a8:26:c1:f8:81:33:ab:c7: d9:52:df:e9:b8:c4:82:d4:70:06:ed:c1:c5:34:82: d0:2b:85:fc:3f:0b:ef:31:56:e1:94:03:85:b1:13: fe:da:ef:ae:1c:6a:a3:78:ca:34:57:96:f7:92:35: 05:de:c2:ae:b5:fc:00:38:ea:5c:eb:4a:2b:7e:79: 9d:df:36:55:67:de:7e:d7:bf:45:6c:12:00:b8:46: db:d5:7a:70:28:82:a4:09:d9:ad:b2:52:95:0e:9f: f8:1c:20:24:f9:08:21:9f:03:85:de:a6:f6:5b:1c: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4C:AE:6E:A0:E7:F1:B2:11:93:B6:D0:C5:EA:9E:89:7D:9C:A9:E4 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:93:87:7b:b4:cb:48:db:b2:db:8c:84:e7:1c:1a:1d:14:55: 83:2c:df:cf:6b:bc:b5:01:18:6d:76:c5:34:5e:85:a8:bd:ce: 4f:db:08:fa:21:b6:4b:f1:8e:52:97:13:e6:1c:62:72:b9:00: 50:f3:d9:e8:dd:b8:07:63:b4:13:ca:31:8a:ec:b8:c2:78:15: 13:1a:a7:b3:3d:fe:90:b8:c1:d1:15:db:ab:38:dc:da:14:02: e1:d9:93:79:80:85:a2:24:39:8d:50:ed:e1:a0:3c:11:20:fb: f8:e0:4a:06:da:1c:93:69:40:80:31:c9:75:20:5c:e5:e7:ea: 5e:07:24:cf:8f:85:55:d4:a1:64:c5:12:bf:73:1b:6d:f4:04: 7f:ae:cf:1f:f0:92:aa:ca:1d:e7:bd:83:90:b4:32:a4:a7:3c: 28:b1:6a:54:f5:b7:0f:77:04:7e:60:e2:9f:f4:50:2c:45:8d: eb:c5:8d:fb:f7:eb:fb:71:70:d5:59:12:b2:f1:0e:52:b1:77: 54:20:e2:0d:4a:20:59:b2:0d:b5:e6:d6:46:8b:35:f3:8a:69: 79:66:77:15:af:92:30:37:bc:98:c1:cf:00:c0:ca:4d:d1:ae: 0e:95:cd:6a:3f:f6:9a:53:0f:d0:07:7b:d8:6e:d6:81:e5:45: 87:53:07:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUwNTEzMDA0MzMxWhcNMjUwNTIwMDA0MzMxWjAYMRYwFAYD VQQDEw02ODIyOTViMy0yMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXjrmHZEerug6m6UpQOoaCW9FB9YeEQLWdeskevmysFUyrHDCLf7IWv5Z3Is S4bpmC33K3iLZ+YwOhnRxmRWN4chAdUpyL33NgXsfknYW6XhGbG9z+ZyuKu3Wl+r PJGaCeMxJVOJKR82ToxnRBNuA02Uda4DxHlJ9b4V03jeP70mLcZEmSyYld/g/+4k qCbB+IEzq8fZUt/puMSC1HAG7cHFNILQK4X8PwvvMVbhlAOFsRP+2u+uHGqjeMo0 V5b3kjUF3sKutfwAOOpc60orfnmd3zZVZ95+179FbBIAuEbb1XpwKIKkCdmtslKV Dp/4HCAk+QghnwOF3qb2WxzTbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxMrm6g 5/GyEZO20MXqnol9nKnkMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYk4d7tMtI27LbjITnHBodFFWDLN/Pa7y1ARhtdsU0XoWovc5P2wj6 IbZL8Y5SlxPmHGJyuQBQ89no3bgHY7QTyjGK7LjCeBUTGqezPf6QuMHRFdurONza FALh2ZN5gIWiJDmNUO3hoDwRIPv44EoG2hyTaUCAMcl1IFzl5+peByTPj4VV1KFk xRK/cxtt9AR/rs8f8JKqyh3nvYOQtDKkpzwosWpU9bcPdwR+YOKf9FAsRY3rxY37 9+v7cXDVWRKy8Q5SsXdUIOINSiBZsg215tZGizXziml5ZncVr5IwN7yYwc8AwMpN 0a4Olc1qP/aaUw/QB3vYbtaB5UWHUwfs -----END CERTIFICATE-----Generated at Tue May 13 19:02:33 2025 by rpki-client