$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: 4IbBTL/0ZwS+bIRoD63KcvO0EuHm9deonfZWezTmMZU= Subject key identifier: 41:89:A3:80:94:DA:FF:79:7B:7A:C8:F9:0F:C7:32:AA:31:4E:51:80 Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0C38 Signing time: Wed 14 May 2025 18:38:17 +0000 Manifest this update: Wed 14 May 2025 18:38:17 +0000 Manifest next update: Wed 21 May 2025 18:38:17 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: igITkNxPq6e3ZKzb+0zNKQx1VeI2XKnelHJ89S3izv8=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: WK/JV9u6bxzN5pWyJs08YddvdU/3rwCasfFO2UjwIic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: May 14 18:38:17 2025 GMT Not After : May 21 18:38:17 2025 GMT Subject: CN=6824e319-13d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:0c:fd:8b:0c:ae:6a:64:b9:5d:5c:54:c6: 6d:01:a0:14:f2:78:90:27:a2:af:16:a6:e5:a9:1d: 51:6e:54:18:be:3e:03:bc:50:45:92:f3:e9:62:75: 69:13:84:23:28:58:bd:61:c4:b0:72:fb:74:33:cb: 5b:db:e8:f0:f9:03:48:3e:49:9e:f9:c3:69:e1:52: 0b:d8:05:a3:88:82:9b:57:f1:8c:80:18:05:46:46: 50:9f:62:fb:b3:6b:0c:58:2b:d1:fa:3d:34:ec:ea: 9e:56:b3:90:08:d1:ba:ec:94:d0:97:56:2d:ff:93: 50:d1:18:04:45:c5:d7:8f:6f:a5:14:0c:a7:7a:a1: a1:e3:43:f2:8e:8f:e6:0c:16:9f:e0:23:52:34:26: aa:b7:2c:03:ee:b1:25:3a:eb:39:ba:d9:c5:e5:30: 2c:97:b2:b1:86:1e:87:f5:c5:ac:7f:2d:38:bc:08: db:81:fb:af:77:3e:a0:2c:73:fa:52:66:3f:b2:03: 31:3f:05:a0:0e:62:28:20:92:7f:9d:74:e0:11:c5: 48:9b:da:e3:b9:c3:d3:53:da:b5:a7:67:4e:3a:bd: 1a:e1:bf:42:23:e8:a0:da:fa:ab:42:22:9b:78:68: ec:65:12:7a:b1:0c:e2:b2:57:63:57:54:fa:f7:e3: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:89:A3:80:94:DA:FF:79:7B:7A:C8:F9:0F:C7:32:AA:31:4E:51:80 X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e9:66:88:c8:1f:d5:c8:75:1d:f8:26:79:92:fe:5a:0e:2b: 15:ec:b3:e8:0f:62:43:55:04:50:85:3e:94:6e:8d:92:20:2f: 00:f0:30:bc:6f:fd:b3:e8:ed:73:e6:50:dc:35:eb:21:96:a6: fe:c7:b6:82:cb:63:a5:88:ea:59:3d:74:c8:99:46:03:ef:ea: 2d:19:1b:7b:bb:e1:5a:11:0b:ce:39:e4:a4:db:17:18:43:43: fc:4b:cc:17:48:00:d6:d7:73:4c:68:15:ef:a7:8e:15:53:b9: a7:84:59:fc:50:8d:34:cc:b2:4e:1d:71:13:83:8f:cf:d4:a6: 80:e0:95:93:49:65:d5:29:3a:3d:71:4f:26:4b:cf:3d:92:01: c0:37:26:bc:4b:fd:58:90:28:85:b3:92:76:87:0a:33:94:34: c8:e8:55:31:bd:3a:c9:0c:2e:a5:f1:34:c1:a4:5c:8c:15:b5: 64:9c:85:c6:75:94:06:70:77:86:4e:7c:8c:4f:79:f1:af:d2: 09:9b:23:bf:26:cb:6c:9d:60:c9:64:87:3a:4c:58:98:0f:c9: 71:18:b4:82:8b:f4:0b:84:6e:dc:ff:f1:ad:52:d5:a0:f9:e5: 3a:c6:bc:89:6b:ce:b2:71:dc:1f:a8:fc:6a:d1:77:a5:8b:81: 41:16:e0:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjUwNTE0MTgzODE3WhcNMjUwNTIxMTgzODE3WjAYMRYwFAYD VQQDEw02ODI0ZTMxOS0xM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxsM/YsMrmpkuV1cVMZtAaAU8niQJ6KvFqblqR1RblQYvj4DvFBFkvPpYnVp E4QjKFi9YcSwcvt0M8tb2+jw+QNIPkme+cNp4VIL2AWjiIKbV/GMgBgFRkZQn2L7 s2sMWCvR+j007OqeVrOQCNG67JTQl1Yt/5NQ0RgERcXXj2+lFAyneqGh40Pyjo/m DBaf4CNSNCaqtywD7rElOus5utnF5TAsl7Kxhh6H9cWsfy04vAjbgfuvdz6gLHP6 UmY/sgMxPwWgDmIoIJJ/nXTgEcVIm9rjucPTU9q1p2dOOr0a4b9CI+ig2vqrQiKb eGjsZRJ6sQzisldjV1T69+OtCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGJo4CU 2v95e3rI+Q/HMqoxTlGAMB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC06WaIyB/VyHUd+CZ5kv5aDisV7LPoD2JDVQRQhT6Ubo2SIC8A8DC8 b/2z6O1z5lDcNeshlqb+x7aCy2OliOpZPXTImUYD7+otGRt7u+FaEQvOOeSk2xcY Q0P8S8wXSADW13NMaBXvp44VU7mnhFn8UI00zLJOHXETg4/P1KaA4JWTSWXVKTo9 cU8mS889kgHANya8S/1YkCiFs5J2hwozlDTI6FUxvTrJDC6l8TTBpFyMFbVknIXG dZQGcHeGTnyMT3nxr9IJmyO/JstsnWDJZIc6TFiYD8lxGLSCi/QLhG7c//GtUtWg +eU6xryJa86ycdwfqPxq0Xeli4FBFuDd -----END CERTIFICATE-----Generated at Wed May 14 22:50:29 2025 by rpki-client