$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json) Hash identifier: uCihwNR4J5x4TDULbYvWW/Hi2u8v48ctF/MLoSpdCcY= Subject key identifier: 0F:BB:DC:D5:DE:AF:E3:31:D3:E4:A7:20:D8:A6:44:0E:A4:54:B1:D0 Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Certificate serial: 11C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft Manifest number: 11B5 Signing time: Sat 10 May 2025 17:05:38 +0000 Manifest this update: Sat 10 May 2025 17:05:38 +0000 Manifest next update: Sat 17 May 2025 17:05:38 +0000 Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: F2/NoZH0cbUKdL7iy2wYjaTWP88LNZJsT4FFgrA7uLk=) 2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4547 (0x11c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Validity Not Before: May 10 17:05:38 2025 GMT Not After : May 17 17:05:38 2025 GMT Subject: CN=681f8762-e5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:d5:72:3c:df:28:09:f0:0b:a4:0a:50:ae: 92:7d:ac:e6:70:41:9d:bc:9f:af:9e:a5:3a:24:cc: 8e:2f:c9:44:be:c6:9a:c7:6c:12:28:89:10:5b:3f: a4:a7:83:45:17:a6:0b:62:8b:98:ae:f5:23:70:9b: 5c:88:d0:2b:dd:4b:20:27:1e:7f:f3:b9:3d:35:91: 7d:a5:0e:cb:a4:41:45:e0:1d:18:09:ef:5e:94:52: 41:68:b8:09:6c:29:a8:2f:93:45:3e:c4:75:2f:63: a0:a8:f1:e6:d5:a0:5d:30:8c:f2:ab:69:36:0d:e5: ff:85:12:a0:5b:79:cd:db:61:20:f0:0f:3a:e4:d5: 14:59:5e:64:a5:69:aa:e3:c8:2a:a9:82:77:ee:90: f4:f6:81:5e:81:66:11:3c:13:d5:dc:a3:13:99:0e: 0a:26:77:5b:57:43:93:7b:5c:56:5b:c6:d0:cb:81: b3:7c:4b:ff:3c:56:20:d4:7a:4a:15:fd:8d:78:ee: d4:9a:48:b5:fd:07:23:48:d6:ef:cb:91:ff:09:d8: b4:96:9f:b3:8b:ed:9f:ca:cf:36:16:20:57:09:f1: a3:b2:28:c8:2d:f9:94:19:47:4f:80:87:30:e6:62: 68:ba:4b:e4:24:0c:50:7a:70:b8:c0:76:e1:be:d9: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BB:DC:D5:DE:AF:E3:31:D3:E4:A7:20:D8:A6:44:0E:A4:54:B1:D0 X509v3 Authority Key Identifier: keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:38:dd:58:c5:65:ce:0e:8e:9f:68:c2:d7:50:9f:c9:1b:4e: 8d:33:ce:b9:b2:76:ec:68:9d:4e:7c:06:ba:53:2a:69:16:74: df:b4:49:b1:fd:6f:fe:0d:74:4c:dd:19:fd:dc:f4:91:46:4e: fb:1d:f7:bc:d9:69:a8:11:85:30:8c:ba:c2:61:bd:87:c4:c2: 38:42:b0:14:44:1f:68:fe:c2:01:fb:59:a7:9e:4c:88:15:43: 8a:f8:52:3d:f4:5d:86:00:b4:27:fd:14:b1:77:ac:96:2c:84: c4:23:84:ba:24:0d:ef:77:24:78:53:20:be:e0:ef:14:2c:85: 14:c7:18:ed:ed:95:d3:a7:5a:3f:37:7a:cc:8e:c5:3f:e8:d3: f1:1e:02:8c:45:3e:3a:0e:bd:fd:57:94:b3:ce:cf:52:56:37: 90:00:ad:ae:82:8d:9f:ec:a9:a1:94:1a:0a:e3:74:c2:2e:8d: a9:46:66:fa:b3:3b:c1:97:b2:a8:a2:a7:da:16:fc:c6:20:bb: f4:14:bd:0d:a9:0c:f2:a9:14:15:bc:6d:fc:5d:6a:dc:49:2f: 96:43:93:64:57:00:3e:7d:a2:bd:d2:c7:9b:69:41:c7:8d:1a: 37:27:c2:a7:5a:50:5e:e0:ed:42:9d:40:06:f0:ce:94:10:a4: 8b:d0:d7:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy Q0NDMjFENjcwHhcNMjUwNTEwMTcwNTM4WhcNMjUwNTE3MTcwNTM4WjAYMRYwFAYD VQQDEw02ODFmODc2Mi1lNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeDVcjzfKAnwC6QKUK6SfazmcEGdvJ+vnqU6JMyOL8lEvsaax2wSKIkQWz+k p4NFF6YLYouYrvUjcJtciNAr3UsgJx5/87k9NZF9pQ7LpEFF4B0YCe9elFJBaLgJ bCmoL5NFPsR1L2OgqPHm1aBdMIzyq2k2DeX/hRKgW3nN22Eg8A865NUUWV5kpWmq 48gqqYJ37pD09oFegWYRPBPV3KMTmQ4KJndbV0OTe1xWW8bQy4GzfEv/PFYg1HpK Ff2NeO7Umki1/QcjSNbvy5H/Cdi0lp+zi+2fys82FiBXCfGjsijILfmUGUdPgIcw 5mJoukvkJAxQenC4wHbhvtlb+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+73NXe r+Mx0+SnINimRA6kVLHQMB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOON1YxWXODo6faMLXUJ/JG06NM865snbsaJ1OfAa6UyppFnTftEmx /W/+DXRM3Rn93PSRRk77Hfe82WmoEYUwjLrCYb2HxMI4QrAURB9o/sIB+1mnnkyI FUOK+FI99F2GALQn/RSxd6yWLITEI4S6JA3vdyR4UyC+4O8ULIUUxxjt7ZXTp1o/ N3rMjsU/6NPxHgKMRT46Dr39V5Szzs9SVjeQAK2ugo2f7KmhlBoK43TCLo2pRmb6 szvBl7KooqfaFvzGILv0FL0NqQzyqRQVvG38XWrcSS+WQ5NkVwA+faK90sebaUHH jRo3J8KnWlBe4O1CnUAG8M6UEKSL0Ncp -----END CERTIFICATE-----Generated at Mon May 12 15:07:03 2025 by rpki-client