$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: goaCK0qYYPAAuKKmE2Rhv+qNqHQ/80UgwZT1KoptwH4= Subject key identifier: CF:AF:EC:AD:AD:85:6C:07:76:33:66:00:F4:29:A6:D6:BB:DF:CB:02 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0138 Signing time: Sun 11 May 2025 03:19:50 +0000 Manifest this update: Sun 11 May 2025 03:19:50 +0000 Manifest next update: Sun 18 May 2025 03:19:50 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: phlc90h8RMlAVT0k8BiyNd3V/c+eNfKp+AohHzGSvwI=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: May 11 03:19:50 2025 GMT Not After : May 18 03:19:50 2025 GMT Subject: CN=68201756-9c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:a7:eb:4c:a1:0d:00:63:22:ba:8d:a7:a2: 99:93:ef:e0:01:73:72:02:3b:33:0a:a0:dc:4c:d1: 34:9c:42:9c:7f:a5:48:83:7f:95:42:1c:cf:76:5d: d8:29:bb:8f:5a:f8:28:d9:96:94:e8:d8:ca:aa:4f: 23:ab:0e:bb:cc:a9:da:ee:de:f0:ff:ab:80:81:7b: ba:48:8e:36:45:2d:19:ce:8d:16:b1:61:96:2d:74: b4:f5:16:b1:32:19:94:11:a5:32:1d:7c:0e:78:59: 16:64:4c:07:08:58:94:8a:3f:45:67:d7:45:53:ce: 15:f5:4b:d8:6d:a6:ed:7a:82:fe:e1:9b:8c:33:4a: dd:80:21:04:4e:eb:2e:b8:8d:6b:ba:bb:5a:f3:a1: ab:b4:95:ab:bb:98:6f:f9:0f:4e:2f:8a:3f:99:24: 39:f0:e6:9a:51:8a:04:56:9d:d5:14:fc:d9:5e:79: 96:63:e6:79:d8:c7:f8:9d:d9:61:3e:4a:7b:a9:d7: eb:ce:df:95:8a:bf:78:74:ff:c0:dc:9b:e5:fe:4a: 96:12:2e:f3:c5:d1:7e:9b:79:54:76:20:2d:d3:87: ce:36:08:39:53:cf:4c:f5:d0:74:12:4f:a5:8d:33: 30:6b:f9:84:3d:0f:68:fc:a7:df:f7:43:7f:47:79: 6e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AF:EC:AD:AD:85:6C:07:76:33:66:00:F4:29:A6:D6:BB:DF:CB:02 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:60:4c:5c:ff:0c:01:2b:8e:a5:3b:fd:46:9e:ed:53:a6:06: c2:80:58:62:ff:d8:c8:f4:9e:8b:17:86:d5:83:0d:a8:ed:a8: 37:67:19:85:52:c0:1c:cb:b7:3b:34:fd:58:dc:fb:da:31:06: c6:29:03:c9:fa:f5:fa:7f:1f:db:53:2d:a0:4a:57:2e:3c:21: c5:48:99:65:b0:3e:ac:f1:68:85:46:57:37:a7:4c:98:0f:88: a6:15:14:ec:73:a2:65:38:d8:28:9c:6e:eb:4f:1e:78:1a:ee: 4a:5c:4d:88:e9:9a:79:98:e0:fc:c3:4c:bc:d1:f8:24:40:0f: 5a:15:ed:85:e4:54:3f:7c:7d:61:2e:85:fa:43:0a:f1:84:d6: 46:55:1c:5a:35:d6:31:ec:84:a7:94:aa:70:eb:0c:92:f4:cc: 1c:b2:ea:66:d5:df:e5:ec:2a:46:97:66:e7:1b:1e:ba:e4:b8: 83:3c:da:e2:ef:82:18:71:63:24:96:7a:13:23:f6:e4:95:a9: aa:89:4f:5e:97:a0:38:d5:e9:76:d0:04:ce:2f:a3:90:34:43: 2c:9f:5c:a6:39:ee:10:1f:ca:bd:2f:92:c3:d9:e6:d5:63:a2: ca:9b:57:4b:5d:b2:bb:ce:da:84:23:ea:ac:71:90:fc:94:4a: 83:bf:78:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUwNTExMDMxOTUwWhcNMjUwNTE4MDMxOTUwWjAYMRYwFAYD VQQDEw02ODIwMTc1Ni05YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHen60yhDQBjIrqNp6KZk+/gAXNyAjszCqDcTNE0nEKcf6VIg3+VQhzPdl3Y KbuPWvgo2ZaU6NjKqk8jqw67zKna7t7w/6uAgXu6SI42RS0Zzo0WsWGWLXS09Rax MhmUEaUyHXwOeFkWZEwHCFiUij9FZ9dFU84V9UvYbabteoL+4ZuMM0rdgCEETusu uI1rurta86GrtJWru5hv+Q9OL4o/mSQ58OaaUYoEVp3VFPzZXnmWY+Z52Mf4ndlh Pkp7qdfrzt+Vir94dP/A3Jvl/kqWEi7zxdF+m3lUdiAt04fONgg5U89M9dB0Ek+l jTMwa/mEPQ9o/Kff90N/R3luJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+v7K2t hWwHdjNmAPQppta738sCMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdYExc/wwBK46lO/1Gnu1TpgbCgFhi/9jI9J6LF4bVgw2o7ag3ZxmF UsAcy7c7NP1Y3PvaMQbGKQPJ+vX6fx/bUy2gSlcuPCHFSJllsD6s8WiFRlc3p0yY D4imFRTsc6JlONgonG7rTx54Gu5KXE2I6Zp5mOD8w0y80fgkQA9aFe2F5FQ/fH1h LoX6QwrxhNZGVRxaNdYx7ISnlKpw6wyS9Mwcsupm1d/l7CpGl2bnGx665LiDPNri 74IYcWMklnoTI/bklamqiU9el6A41el20ATOL6OQNEMsn1ymOe4QH8q9L5LD2ebV Y6LKm1dLXbK7ztqEI+qscZD8lEqDv3h3 -----END CERTIFICATE-----Generated at Sun May 11 15:48:57 2025 by rpki-client