$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: 5LXt9lIZwB0OrItRTTF6WTtGzXwvyvUumlsy4TPH+pk= Subject key identifier: F8:1D:7B:D8:B0:09:C9:CD:5E:E5:31:46:43:2C:6B:72:86:A2:EB:9F Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0DAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0DA7 Signing time: Mon 12 May 2025 17:49:14 +0000 Manifest this update: Mon 12 May 2025 17:49:13 +0000 Manifest next update: Mon 19 May 2025 17:49:13 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: gvwuNQzZja2TwmDm1zZwDVx9lJQN0PbuOlw7wR9c9xQ=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: Ik/3X8YIb0qhd0Fqkle1gmGuYbSdF2VymS/D7TZSlFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3503 (0xdaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: May 12 17:49:13 2025 GMT Not After : May 19 17:49:13 2025 GMT Subject: CN=6822349a-d0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:f3:fe:41:9c:e9:69:0b:87:a4:57:a3:41: e3:20:a3:21:c2:36:c1:4d:2a:0b:a5:bd:22:6d:1a: a5:6e:23:f5:f6:37:c2:48:f8:cc:29:70:51:66:69: 74:2b:5d:76:5b:d6:fe:77:a0:b4:12:f5:f9:db:b5: 07:9e:88:71:73:ed:be:c6:11:9c:46:21:27:29:4a: 72:15:f3:41:f5:f7:42:b6:03:1c:8a:59:b1:7e:7e: 8a:92:df:4e:cf:2e:09:e2:26:92:2c:a7:cd:4c:4b: d5:d2:05:49:25:70:8c:c0:4e:42:8e:4a:d2:4e:5b: 00:0c:1a:f3:95:a5:4f:4b:41:93:17:dd:43:de:43: 73:ce:e8:68:40:0e:4e:7d:9b:ec:e1:53:15:4d:3c: 0a:0d:b6:8b:c0:64:bf:1c:0d:51:78:f0:dc:c3:e1: 72:93:3e:a8:c1:4f:65:b4:ad:09:b1:05:4d:98:72: bc:c8:6f:72:9f:e3:83:ed:1f:2b:17:29:db:64:63: 57:91:5b:ab:6e:57:a1:45:cf:99:3e:ce:e4:fc:93: 11:0e:ef:89:b5:e1:95:86:c1:ad:b2:a5:03:44:2b: d9:36:bc:97:34:5e:d6:f6:62:d7:5d:bc:0c:ec:3c: 84:e4:0b:d7:1d:a0:cf:37:ba:d5:38:bb:20:f6:fa: c1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1D:7B:D8:B0:09:C9:CD:5E:E5:31:46:43:2C:6B:72:86:A2:EB:9F X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:9b:86:ba:dc:62:5f:98:35:18:14:81:03:fa:58:ba:01:2e: 42:54:ae:1e:25:d5:0a:a6:be:7e:c0:5d:04:1e:70:36:a1:9b: 19:1a:ce:03:cd:2f:c3:e3:55:3a:4a:f8:e1:c5:be:32:e6:b1: 00:5a:58:a0:29:fa:6a:66:cb:c2:b5:79:4c:39:a9:73:1c:ef: e0:4b:24:64:4d:bd:d6:72:42:e8:ad:ad:ed:2b:85:e9:fa:71: 36:8b:01:ea:42:b9:a5:ac:a0:20:a8:ae:51:18:2b:48:97:62: c7:c4:ba:92:a3:6d:a5:d6:af:1f:a8:f9:7a:e6:ea:50:1b:41: 30:82:c9:13:14:4c:d0:77:a7:b2:37:92:fd:e9:eb:8d:43:11: e3:7c:3c:46:63:02:9a:02:77:bc:e2:6f:88:b9:eb:ba:9d:da: 28:56:00:45:3f:6d:de:7f:13:8e:d9:82:16:98:16:66:cd:b1: 67:cf:4e:d9:b1:18:4f:ab:9d:0b:2d:14:eb:85:c5:07:c6:25: d2:cf:64:91:b4:47:15:0b:9f:bb:01:37:8d:58:c0:1f:f1:d6: 1f:e1:78:a5:dc:67:67:c8:9f:ea:00:f0:56:b9:bf:59:4c:50: 99:41:0f:4b:fb:76:62:f6:8d:f5:bb:8e:43:79:cc:d1:12:b2: 88:83:7e:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjUwNTEyMTc0OTEzWhcNMjUwNTE5MTc0OTEzWjAYMRYwFAYD VQQDEw02ODIyMzQ5YS1kMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb7z/kGc6WkLh6RXo0HjIKMhwjbBTSoLpb0ibRqlbiP19jfCSPjMKXBRZml0 K112W9b+d6C0EvX527UHnohxc+2+xhGcRiEnKUpyFfNB9fdCtgMcilmxfn6Kkt9O zy4J4iaSLKfNTEvV0gVJJXCMwE5CjkrSTlsADBrzlaVPS0GTF91D3kNzzuhoQA5O fZvs4VMVTTwKDbaLwGS/HA1RePDcw+Fykz6owU9ltK0JsQVNmHK8yG9yn+OD7R8r FynbZGNXkVurblehRc+ZPs7k/JMRDu+JteGVhsGtsqUDRCvZNryXNF7W9mLXXbwM 7DyE5AvXHaDPN7rVOLsg9vrB1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgde9iw CcnNXuUxRkMsa3KGouufMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZm4a63GJfmDUYFIED+li6AS5CVK4eJdUKpr5+wF0EHnA2oZsZGs4D zS/D41U6Svjhxb4y5rEAWligKfpqZsvCtXlMOalzHO/gSyRkTb3WckLora3tK4Xp +nE2iwHqQrmlrKAgqK5RGCtIl2LHxLqSo22l1q8fqPl65upQG0EwgskTFEzQd6ey N5L96euNQxHjfDxGYwKaAne84m+Iueu6ndooVgBFP23efxOO2YIWmBZmzbFnz07Z sRhPq50LLRTrhcUHxiXSz2SRtEcVC5+7ATeNWMAf8dYf4Xil3GdnyJ/qAPBWub9Z TFCZQQ9L+3Zi9o31u45DeczRErKIg35l -----END CERTIFICATE-----Generated at Tue May 13 04:46:24 2025 by rpki-client