$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json) Hash identifier: bGYTGMBO7Fk2zjs3q0qDIpNxd5oBj1LqUzg4CYdz3ww= Subject key identifier: 09:C4:DB:80:27:3E:4A:C2:50:FD:CC:90:81:B7:A7:16:07:13:B0:F2 Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft Manifest number: F1 Signing time: Tue 13 May 2025 04:30:39 +0000 Manifest this update: Tue 13 May 2025 04:30:39 +0000 Manifest next update: Tue 20 May 2025 04:30:39 +0000 Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: ws0BfYXrWWtIWUbgEg4Oue+L24DsoHyVyPkFahMLR30=) 2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: ENR1qEuttVnNRROdOyzWRsQ7bm7evUlkAyBRhI4KcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Validity Not Before: May 13 04:30:39 2025 GMT Not After : May 20 04:30:39 2025 GMT Subject: CN=6822caef-35c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:35:7c:76:2f:af:8b:f1:28:98:e5:4a:38: 59:6b:c2:10:34:de:01:d9:63:02:fa:d5:97:f8:12: c4:ac:18:15:89:84:6e:f7:cf:b5:ea:b8:c9:06:f4: 6a:2f:f7:32:3f:3f:72:18:3c:7e:a1:1a:62:a3:41: 50:dd:48:7a:bf:42:36:6e:a7:02:51:2e:6c:3f:24: 18:fe:7f:d9:c9:29:9b:53:cd:fa:e9:22:f8:bf:c3: e3:3c:c4:8c:1f:08:38:40:13:28:c7:7a:6e:12:54: fb:ab:dc:5b:de:5a:d9:57:c8:cb:04:cd:d9:f7:30: 89:97:d0:ff:f6:23:ac:ec:5d:bd:67:9e:b2:69:75: 41:6b:12:7a:d1:23:11:4e:07:0d:ab:74:b4:64:9c: 01:51:19:46:d6:02:b8:c3:5f:86:7c:83:d2:4e:f3: c0:2a:15:2f:1c:68:8e:b3:45:02:e1:b3:7a:1f:dd: 4d:63:1c:c1:ec:93:53:79:4b:3f:8d:39:b1:9e:df: 76:2a:29:b6:b6:90:d5:86:f9:f7:55:dc:b4:e3:62: 71:ed:b8:50:ff:60:55:98:d6:5d:b2:43:d8:30:c2: 38:31:76:59:5b:ed:54:b2:15:a5:4a:bb:a9:9f:83: 1f:ba:d1:95:fa:5e:3a:a8:8c:53:b5:28:58:11:10: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C4:DB:80:27:3E:4A:C2:50:FD:CC:90:81:B7:A7:16:07:13:B0:F2 X509v3 Authority Key Identifier: keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fb:91:e2:46:f2:a0:3b:e2:d8:9c:19:38:3e:9e:38:d2:b7: 25:9f:96:07:38:68:54:85:1a:b5:04:97:79:0c:75:0b:19:96: 9c:ef:0f:a3:d9:b2:51:59:2b:98:8c:ef:df:5a:9f:44:56:4e: b5:53:03:63:51:9c:5d:c2:07:59:bb:15:a6:bd:a2:2d:a6:47: 35:50:5c:78:6b:01:49:13:96:91:36:c1:c8:3d:3a:e9:0a:24: 38:ba:6d:04:a1:19:8c:9e:fb:9d:62:fe:13:b4:a1:63:7e:28: db:3c:3c:7f:25:0c:0e:17:3a:3b:51:96:66:e9:cf:96:d6:6e: 52:12:ca:bc:a5:1f:aa:47:70:9f:20:cd:51:f4:84:ef:ea:c3: dd:d5:e1:07:37:06:8d:93:ab:d3:1d:e8:35:4a:b2:32:b6:63: 8d:68:e9:31:22:c1:b1:2a:6e:48:09:87:94:73:e8:af:33:61: 9a:78:18:cf:8a:5a:6e:f4:30:ce:f3:bd:2f:15:ce:e1:2d:f1: 31:34:93:0d:11:6a:4e:24:dc:5b:d7:68:a1:a7:71:02:71:2e: 22:43:1e:45:a4:3c:80:33:db:62:6c:eb:4a:0c:84:86:83:dd: db:f8:c6:65:7a:b8:e0:6e:97:98:61:9c:9c:ff:5b:f1:ff:ea: 71:97:a8:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEMyMTEyRjQ0RDQ0NThGMTg1Q0RCOUFEOUE5MUFGODI5 MDY0ODlDQzYwHhcNMjUwNTEzMDQzMDM5WhcNMjUwNTIwMDQzMDM5WjAYMRYwFAYD VQQDEw02ODIyY2FlZi0zNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHI1fHYvr4vxKJjlSjhZa8IQNN4B2WMC+tWX+BLErBgViYRu98+16rjJBvRq L/cyPz9yGDx+oRpio0FQ3Uh6v0I2bqcCUS5sPyQY/n/ZySmbU8366SL4v8PjPMSM Hwg4QBMox3puElT7q9xb3lrZV8jLBM3Z9zCJl9D/9iOs7F29Z56yaXVBaxJ60SMR TgcNq3S0ZJwBURlG1gK4w1+GfIPSTvPAKhUvHGiOs0UC4bN6H91NYxzB7JNTeUs/ jTmxnt92Kim2tpDVhvn3Vdy042Jx7bhQ/2BVmNZdskPYMMI4MXZZW+1UshWlSrup n4MfutGV+l46qIxTtShYERDgiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnE24An PkrCUP3MkIG3pxYHE7DyMB8GA1UdIwQYMBaAFMIRL0TURY8YXNua2aka+CkGSJzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri84N0MzNDU0Q0M0 NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4aGMyNXJacVJyNEtRWklu TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri84N0MzNDU0Q0M0NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4 aGMyNXJacVJyNEtRWkluTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu+5HiRvKgO+LYnBk4Pp440rcln5YHOGhUhRq1BJd5DHULGZac7w+j 2bJRWSuYjO/fWp9EVk61UwNjUZxdwgdZuxWmvaItpkc1UFx4awFJE5aRNsHIPTrp CiQ4um0EoRmMnvudYv4TtKFjfijbPDx/JQwOFzo7UZZm6c+W1m5SEsq8pR+qR3Cf IM1R9ITv6sPd1eEHNwaNk6vTHeg1SrIytmONaOkxIsGxKm5ICYeUc+ivM2GaeBjP ilpu9DDO870vFc7hLfExNJMNEWpOJNxb12ihp3ECcS4iQx5FpDyAM9tibOtKDISG g93b+MZlerjgbpeYYZyc/1vx/+pxl6iC -----END CERTIFICATE-----Generated at Tue May 13 19:30:12 2025 by rpki-client