$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json) Hash identifier: h3kTUDQ2tDdMj5Jmafx2jcYQxFBar5GQ4FlpxdfubxQ= Subject key identifier: 6D:D6:B0:D1:E5:81:36:E3:C5:2C:63:89:51:F5:28:85:11:D0:2C:F6 Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Certificate serial: 0BA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft Manifest number: 0B95 Signing time: Thu 08 May 2025 18:57:40 +0000 Manifest this update: Thu 08 May 2025 18:57:40 +0000 Manifest next update: Thu 15 May 2025 18:57:40 +0000 Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: I9h+xDI79DPwO78yUHBQzL6inlTdR//vOX43z6lXDxY=) 2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: RnlpXPDYIPfGNZjOgLnab/vPRagmWGYMa1TJEw32Q5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 18:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Validity Not Before: May 8 18:57:40 2025 GMT Not After : May 15 18:57:40 2025 GMT Subject: CN=681cfea4-56cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:a9:86:b8:b1:5a:38:75:d8:61:c9:22:01: 13:61:67:f1:cf:9b:06:a3:f3:63:f7:33:c0:e2:02: 7d:58:6f:bb:a8:1f:00:d8:8a:d0:02:ee:c9:87:fe: e2:b4:cf:3a:01:47:35:75:7b:f6:91:04:70:80:a1: ad:23:9e:bd:d3:09:23:12:9e:c5:1f:34:f3:7e:fa: 3d:9e:f0:67:b8:8a:cc:e1:ce:7f:bb:48:89:c2:ef: ad:19:b3:b6:2b:0a:74:ef:91:62:96:94:0a:d2:ac: 83:a7:02:fd:0f:23:c3:ec:8c:eb:ee:cc:9f:cd:ce: a4:84:35:79:eb:9e:82:06:0c:7e:c4:51:c5:82:58: c6:fa:41:33:91:af:3e:c8:f2:76:e2:ba:19:90:4a: 2d:c4:d4:88:01:38:77:4b:45:3d:fb:dd:ec:22:fd: 06:78:c2:2b:56:db:13:0b:c7:63:d1:b4:24:30:a6: 2a:c7:21:3c:15:b8:e1:ca:b8:59:fb:3a:a4:92:83: ff:57:85:da:70:bb:e9:49:6a:15:84:dd:5b:10:42: b9:1d:ba:51:31:95:b4:11:5d:07:7e:bb:fe:95:04: 31:5d:c0:ef:25:51:85:ff:99:01:02:63:f0:1d:64: 6b:9c:65:1a:54:e6:9f:5a:b7:67:6e:7d:5c:d3:8b: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:B0:D1:E5:81:36:E3:C5:2C:63:89:51:F5:28:85:11:D0:2C:F6 X509v3 Authority Key Identifier: keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3f:1f:01:2c:85:c5:31:cf:37:84:f4:20:15:0a:e7:ce:35: 9f:b2:b1:09:ba:4b:0c:c7:47:1f:b1:7a:1c:60:85:18:32:70: 94:aa:04:67:22:ef:95:26:b4:1c:4f:df:21:bc:37:d0:24:9c: 4d:87:85:46:b5:18:0c:ac:a0:a3:e0:b6:86:e6:fd:c9:ab:d9: 77:37:ec:22:96:c7:2d:90:a2:1e:2b:8d:ba:08:49:a4:31:1e: 71:4f:1b:b5:de:b7:a6:0d:25:ee:07:bb:71:d9:21:58:c4:50: 95:ed:f4:f9:3d:45:9a:57:c1:49:7d:16:fa:8f:31:ff:a1:54: 08:c0:66:2b:ae:36:c5:25:dd:b0:f3:88:5b:94:a0:48:db:ad: b3:7c:a2:e6:3d:72:59:25:54:42:5a:fb:85:ac:3a:6f:bc:94: 94:64:ae:25:b4:52:fb:74:5f:15:e6:1c:df:81:c0:fd:3f:78: 8a:61:a7:12:dc:cc:1d:48:de:5f:08:2c:c3:05:31:95:4a:29: 7e:e8:78:8f:38:b0:b5:97:b5:9b:82:f8:fd:41:b4:a8:bf:f2: a1:8c:b7:61:14:ec:dd:e7:44:8d:63:48:2e:aa:f5:5f:7c:e8: 7b:b1:ed:02:bc:53:c9:ac:bc:d1:c9:f5:f1:a7:2f:53:a2:2e: 5b:ca:15:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4 RUIyMUYwNkEwHhcNMjUwNTA4MTg1NzQwWhcNMjUwNTE1MTg1NzQwWjAYMRYwFAYD VQQDEw02ODFjZmVhNC01NmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvyphrixWjh12GHJIgETYWfxz5sGo/Nj9zPA4gJ9WG+7qB8A2IrQAu7Jh/7i tM86AUc1dXv2kQRwgKGtI5690wkjEp7FHzTzfvo9nvBnuIrM4c5/u0iJwu+tGbO2 Kwp075FilpQK0qyDpwL9DyPD7Izr7syfzc6khDV5656CBgx+xFHFgljG+kEzka8+ yPJ24roZkEotxNSIATh3S0U9+93sIv0GeMIrVtsTC8dj0bQkMKYqxyE8FbjhyrhZ +zqkkoP/V4XacLvpSWoVhN1bEEK5HbpRMZW0EV0Hfrv+lQQxXcDvJVGF/5kBAmPw HWRrnGUaVOafWrdnbn1c04s6GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3WsNHl gTbjxSxjiVH1KIUR0Cz2MB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1 NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njg2MS81Q0MyMTAwMDI1NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBj MHByRWZaMTlDSlNPc2g4R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHPx8BLIXFMc83hPQgFQrnzjWfsrEJuksMx0cfsXocYIUYMnCUqgRn Iu+VJrQcT98hvDfQJJxNh4VGtRgMrKCj4LaG5v3Jq9l3N+wilsctkKIeK426CEmk MR5xTxu13remDSXuB7tx2SFYxFCV7fT5PUWaV8FJfRb6jzH/oVQIwGYrrjbFJd2w 84hblKBI262zfKLmPXJZJVRCWvuFrDpvvJSUZK4ltFL7dF8V5hzfgcD9P3iKYacS 3MwdSN5fCCzDBTGVSil+6HiPOLC1l7Wbgvj9QbSov/KhjLdhFOzd50SNY0guqvVf fOh7se0CvFPJrLzRyfXxpy9Toi5byhUK -----END CERTIFICATE-----Generated at Fri May 9 04:04:48 2025 by rpki-client