$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft File: M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft (raw, json) Hash identifier: M9QMRWYjPiCyemQRS8WRGwmJm7/rQ57siBEPfQvrBMc= Subject key identifier: 16:FB:77:BE:FB:EF:B4:A4:04:7E:0C:7E:94:5B:47:5B:4E:FB:49:F6 Authority key identifier: 33:E7:F2:66:15:D3:F4:07:32:C5:3B:F8:73:E2:7C:9C:52:E1:2D:CD Certificate issuer: /CN=A91C5413/serialNumber=33E7F26615D3F40732C53BF873E27C9C52E12DCD Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft Manifest number: 07F5 Signing time: Sat 10 May 2025 21:59:35 +0000 Manifest this update: Sat 10 May 2025 21:59:35 +0000 Manifest next update: Sat 17 May 2025 21:59:35 +0000 Files and hashes: 1: M-fyZhXT9AcyxTv4c-J8nFLhLc0.crl (hash: F8WQIk6rrAUEJsXHyOz67FPgJ8lghUDeCfyz/U5CMis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.crl rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5413, serialNumber=33E7F26615D3F40732C53BF873E27C9C52E12DCD Validity Not Before: May 10 21:59:35 2025 GMT Not After : May 17 21:59:35 2025 GMT Subject: CN=681fcc47-00b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:f1:a3:12:3d:88:04:5f:67:23:2b:cf:46: 74:be:fd:b4:09:ae:4c:9d:2a:6f:f5:10:38:bf:c1: 36:8f:88:d1:88:04:d7:8f:d5:0c:34:a2:1b:36:9a: 8a:57:51:de:a7:9d:60:01:89:c1:21:c6:fc:79:1f: 06:33:bd:bb:21:b3:c9:e0:4c:a3:e7:5c:8b:a0:99: e6:50:8f:3c:ca:65:4a:ee:27:59:b7:40:b3:b8:43: 8c:02:69:09:69:6b:e2:b5:0c:c7:d8:d5:a4:ba:04: 0d:e2:0b:5d:ac:bf:8b:b2:75:fe:ca:9a:2f:38:f0: 2d:cd:17:b1:a6:12:ac:c3:d7:c6:25:ae:1b:7f:6a: 5b:39:6b:c7:10:34:5f:70:09:2e:2b:d5:76:57:57: 5e:41:17:34:29:ba:4f:5f:b7:d3:74:c6:28:d7:5f: ac:62:90:08:6d:c7:ec:16:01:34:6f:4a:94:fb:8d: e7:23:93:44:34:d4:2d:20:4d:bd:ae:7b:a8:43:11: 76:51:4d:16:fd:82:65:62:3f:93:f0:6b:81:2c:51: c4:3d:aa:fd:03:56:41:b4:47:9b:d8:74:57:49:13: 0e:82:74:f1:df:81:8a:2d:3a:36:c9:3f:e5:94:d8: 9d:68:5c:a9:e4:99:d7:26:f2:5d:46:24:53:03:fa: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FB:77:BE:FB:EF:B4:A4:04:7E:0C:7E:94:5B:47:5B:4E:FB:49:F6 X509v3 Authority Key Identifier: keyid:33:E7:F2:66:15:D3:F4:07:32:C5:3B:F8:73:E2:7C:9C:52:E1:2D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8d:d3:d9:6c:e9:64:14:ed:6b:99:4c:86:a5:e5:32:bc:b7: d4:f5:55:5c:d0:87:7f:2a:4e:a7:fe:ee:25:ac:c8:c6:ac:9f: 39:3d:0e:66:39:96:ff:44:01:6f:1b:97:8b:b7:9b:fa:e9:21: e5:2a:53:b7:c0:e2:e4:a1:de:ed:30:d3:80:0c:99:32:53:38: cf:42:b1:1b:1a:57:5e:4b:1d:d9:95:44:76:0a:88:af:c1:74: e5:6d:c0:fe:4e:8e:35:ac:78:21:b5:96:f5:85:4c:8f:00:c6: 3d:65:4f:30:43:01:01:ab:22:7f:c5:de:65:3f:79:20:f5:d7: 67:d7:fe:a5:df:0c:e7:47:78:3a:ce:bf:50:e2:7e:73:f7:ab: 7d:33:0c:60:74:3f:fb:ac:4d:5c:5f:08:60:25:de:58:8c:6a: 5c:95:8f:b6:b1:7a:6d:d1:b0:13:cd:df:9d:50:11:3b:a2:2d: 31:21:ef:f4:02:db:6d:f5:c2:ca:0e:71:8e:f5:ae:d7:5c:24: c4:da:a3:6a:b9:d8:a9:24:9e:66:de:87:92:b3:6b:a4:9a:8c: 53:07:2c:f2:02:cb:47:a1:1a:be:b6:9e:fe:61:10:e7:57:b5: 4a:b5:cd:54:63:29:de:dd:8c:f9:f2:50:b6:dd:52:fb:91:6f: f1:a9:22:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0MTMxMTAvBgNVBAUTKDMzRTdGMjY2MTVEM0Y0MDczMkM1M0JGODczRTI3QzlD NTJFMTJEQ0QwHhcNMjUwNTEwMjE1OTM1WhcNMjUwNTE3MjE1OTM1WjAYMRYwFAYD VQQDEw02ODFmY2M0Ny0wMGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFbxoxI9iARfZyMrz0Z0vv20Ca5MnSpv9RA4v8E2j4jRiATXj9UMNKIbNpqK V1Hep51gAYnBIcb8eR8GM727IbPJ4Eyj51yLoJnmUI88ymVK7idZt0CzuEOMAmkJ aWvitQzH2NWkugQN4gtdrL+LsnX+ypovOPAtzRexphKsw9fGJa4bf2pbOWvHEDRf cAkuK9V2V1deQRc0KbpPX7fTdMYo11+sYpAIbcfsFgE0b0qU+43nI5NENNQtIE29 rnuoQxF2UU0W/YJlYj+T8GuBLFHEPar9A1ZBtEeb2HRXSRMOgnTx34GKLTo2yT/l lNidaFyp5JnXJvJdRiRTA/phzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb7d777 77SkBH4MfpRbR1tO+0n2MB8GA1UdIwQYMBaAFDPn8mYV0/QHMsU7+HPifJxS4S3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTQxMy9ERjk5QTFFODdC RTgxMUVCOUEwOTIzNDJDNEY5QUUwMi9NLWZ5WmhYVDlBY3l4VHY0Yy1KOG5GTGhM YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00tZnlaaFhUOUFjeXhUdjRjLUo4bkZMaExjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTQxMy9ERjk5QTFFODdCRTgxMUVCOUEwOTIzNDJDNEY5QUUwMi9NLWZ5WmhYVDlB Y3l4VHY0Yy1KOG5GTGhMYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKjdPZbOlkFO1rmUyGpeUyvLfU9VVc0Id/Kk6n/u4lrMjGrJ85PQ5m OZb/RAFvG5eLt5v66SHlKlO3wOLkod7tMNOADJkyUzjPQrEbGldeSx3ZlUR2Coiv wXTlbcD+To41rHghtZb1hUyPAMY9ZU8wQwEBqyJ/xd5lP3kg9ddn1/6l3wznR3g6 zr9Q4n5z96t9MwxgdD/7rE1cXwhgJd5YjGpclY+2sXpt0bATzd+dUBE7oi0xIe/0 Attt9cLKDnGO9a7XXCTE2qNqudipJJ5m3oeSs2ukmoxTByzyAstHoRq+tp7+YRDn V7VKtc1UYyne3Yz58lC23VL7kW/xqSIQ -----END CERTIFICATE-----Generated at Sun May 11 10:26:19 2025 by rpki-client