$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: GE4458ajsJ6qim7b6QPiFPZKjQV5Ficy7LyzMzQypl0= Subject key identifier: 46:5B:50:92:90:57:36:B4:F0:5C:6E:62:16:7C:97:E5:DA:9B:5D:88 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 127E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 125D Signing time: Mon 12 May 2025 17:03:20 +0000 Manifest this update: Mon 12 May 2025 17:03:19 +0000 Manifest next update: Mon 19 May 2025 17:03:19 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: jBrJC8tBxuKcGkQgFTgH1P522yI3Z96p2KfjvEYJR1U=) 2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: CA19srqh0Q6qSkpS5f1WI4ZLZ8befQ3b095HOMVpe8Q=) 3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: RyCNpZPyi/g+YauzqBs7rDG8vGnkFGaOzI70T5pPGJQ=) 4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: CyPCkB+xF7/7LV5tDeHmCsATVCTbsm9N+YA32mChPrU=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: ulDXXytzKLhDZDPUF/WwhWO/+4HtH6mgUrwehHRDvEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4734 (0x127e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: May 12 17:03:19 2025 GMT Not After : May 19 17:03:19 2025 GMT Subject: CN=682229d8-c1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e7:b9:02:d7:89:28:87:da:ce:66:a6:ae:c3: d8:1b:30:5d:6b:ef:70:2a:98:88:de:90:e7:56:67: bd:fd:38:3c:03:ca:c7:de:07:54:35:5d:93:fc:7f: e4:f5:91:d6:78:33:19:c5:05:fa:29:6f:31:f9:66: 1a:f6:3a:78:dd:f7:12:e9:50:9b:11:10:35:1a:cf: 5f:05:87:dd:1e:ef:55:71:20:cc:5f:78:51:7e:64: 44:51:16:0b:cf:41:82:e9:89:07:2d:78:9d:35:a1: fb:38:34:00:9e:a9:b4:35:de:30:3e:3a:97:c5:26: 83:14:22:86:4d:79:a1:e7:9e:9d:73:60:b8:b8:1d: 7d:3f:81:ae:7b:39:12:9e:50:ee:2a:ea:4a:ec:60: f2:18:3a:a1:ae:16:75:c3:21:a3:a2:b6:04:b1:53: 50:7e:1b:6f:5e:b8:f9:93:b9:9e:6a:13:61:ae:35: 89:8f:7a:7c:dc:b6:70:f5:89:c9:1c:d6:97:26:c2: 8e:46:db:b1:e8:f8:39:19:e2:50:fe:4b:6d:1c:58: 48:52:10:77:f1:81:1b:87:57:5f:4a:ca:6a:de:0a: 8d:ac:7a:d7:e9:4a:a9:d5:54:da:1f:07:25:d5:5a: 26:2b:c0:0e:8b:f8:90:8a:13:33:54:f3:5c:8c:67: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5B:50:92:90:57:36:B4:F0:5C:6E:62:16:7C:97:E5:DA:9B:5D:88 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:4a:04:da:83:33:ac:6c:3a:a1:52:34:61:4d:38:9a:e9:51: 97:81:7c:7e:1a:25:be:aa:e4:7a:52:b5:09:66:97:9b:2f:8f: d9:7b:61:f3:07:0c:64:cd:e4:e6:8a:87:e7:86:c2:24:58:6d: 4a:05:a4:7d:42:ef:39:79:f0:3a:d4:9b:c1:29:e0:5b:75:6a: 71:9d:98:2c:a2:a2:bb:f6:7f:59:21:95:18:e0:82:c1:c5:94: 3e:4b:c2:5e:dc:08:27:0c:83:43:8b:f4:5c:af:7e:b2:3e:a3: 73:d2:bd:68:01:4c:c1:a9:a8:5f:9c:e4:4f:86:f6:59:a0:0b: 19:c8:26:af:0e:7f:6d:ab:5b:91:69:1c:e2:a0:5d:45:b3:35: ef:01:da:4e:c2:e8:de:13:fb:f9:8a:b9:a1:d9:80:8e:c9:4d: 8f:17:7f:be:c3:3c:7c:2d:91:a9:35:97:6e:be:80:2a:8a:3c: bf:4b:a0:32:4f:d8:cb:9b:7d:84:4d:1a:08:f6:3f:21:78:fb: 69:df:72:f6:f7:04:dc:7d:74:d1:35:b6:cd:21:4b:a0:84:44: 8f:4e:fa:7d:01:89:ee:f4:6d:6f:72:01:d5:bb:fb:59:bb:2a: 14:96:87:25:ba:12:dd:7b:75:e6:ee:b4:ce:0b:16:3b:4f:89: 33:33:91:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUwNTEyMTcwMzE5WhcNMjUwNTE5MTcwMzE5WjAYMRYwFAYD VQQDEw02ODIyMjlkOC1jMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ee5AteJKIfazmamrsPYGzBda+9wKpiI3pDnVme9/Tg8A8rH3gdUNV2T/H/k 9ZHWeDMZxQX6KW8x+WYa9jp43fcS6VCbERA1Gs9fBYfdHu9VcSDMX3hRfmREURYL z0GC6YkHLXidNaH7ODQAnqm0Nd4wPjqXxSaDFCKGTXmh556dc2C4uB19P4GuezkS nlDuKupK7GDyGDqhrhZ1wyGjorYEsVNQfhtvXrj5k7meahNhrjWJj3p83LZw9YnJ HNaXJsKORtux6Pg5GeJQ/kttHFhIUhB38YEbh1dfSspq3gqNrHrX6Uqp1VTaHwcl 1VomK8AOi/iQihMzVPNcjGeRdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZbUJKQ Vza08FxuYhZ8l+Xam12IMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzSgTagzOsbDqhUjRhTTia6VGXgXx+GiW+quR6UrUJZpebL4/Ze2Hz BwxkzeTmiofnhsIkWG1KBaR9Qu85efA61JvBKeBbdWpxnZgsoqK79n9ZIZUY4ILB xZQ+S8Je3AgnDINDi/Rcr36yPqNz0r1oAUzBqahfnORPhvZZoAsZyCavDn9tq1uR aRzioF1FszXvAdpOwujeE/v5irmh2YCOyU2PF3++wzx8LZGpNZduvoAqijy/S6Ay T9jLm32ETRoI9j8hePtp33L29wTcfXTRNbbNIUughESPTvp9AYnu9G1vcgHVu/tZ uyoUlocluhLde3Xm7rTOCxY7T4kzM5H+ -----END CERTIFICATE-----Generated at Tue May 13 19:43:14 2025 by rpki-client