$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: xwW4WrvXm5iklWvVAxeI4W3IMd8b661qNay/LTSGjPo= Subject key identifier: 3A:33:23:01:32:42:A3:C7:41:27:F7:4A:FE:E2:5E:2E:5F:B6:7D:74 Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 0284 Signing time: Tue 13 May 2025 01:26:54 +0000 Manifest this update: Tue 13 May 2025 01:26:54 +0000 Manifest next update: Tue 20 May 2025 01:26:54 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: P9sGkYzRN7joP4bcXvC/wYQ+PfcduhAnCki/T8SAxlg=) 2: 0D3B0894B55611EFB91FFB17C4F9AE02.roa (hash: s5ttZ68NNtBBfg0lzH3ft8+w2I44cPtM3zNbD4FDDUQ=) 3: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: uXjCh7TkzA4xr6P8TlTEkjQ53fF7fy/5V3MP61ICuDM=) 4: CFB6C2ECB55511EFB8F19317C4F9AE02.roa (hash: 7DH9XNSCd4jWFH0/wUCfAwXyA4TmJu5U8XhIJRlq9bc=) 5: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: LJgcF5ukT6mBdzEM26be8zREGTvnZs0KmOcJarcZEy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: May 13 01:26:54 2025 GMT Not After : May 20 01:26:54 2025 GMT Subject: CN=68229fde-7711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:fb:65:e2:36:23:97:05:88:f7:c8:34:43: c6:b2:b2:90:43:9d:ca:1f:52:7b:89:d3:82:b6:a0: ff:8e:bb:dc:02:b4:85:61:27:48:d1:5c:3a:83:fe: 80:5c:55:a5:f4:72:56:90:4c:de:71:29:91:c4:48: 91:47:f8:78:12:d0:c5:10:69:26:44:cd:e0:22:ff: 32:2a:6e:89:7f:e3:c4:02:85:8c:ae:f6:01:80:7b: 5c:26:96:3d:9d:7f:3a:b3:6b:12:1a:4e:36:22:ae: 4a:c0:da:ae:71:93:ab:b4:0e:91:37:23:bb:0c:44: 50:7f:43:4f:05:e4:50:fe:a7:27:eb:91:5a:f3:31: 12:f5:57:8a:f2:12:bd:50:1c:69:ac:5b:13:01:d5: 33:06:84:9a:84:13:9f:8f:4d:61:cc:2c:dc:14:be: 81:59:9e:89:10:07:9d:28:71:2a:13:6d:cf:df:db: 8a:f9:a1:26:74:5d:d8:aa:1b:62:39:31:f6:99:5a: af:3c:f5:a1:bd:0e:51:b5:8e:ae:17:aa:6a:41:c4: d8:94:c9:84:d6:98:da:33:88:93:cf:d5:1c:8c:ff: d9:3a:7b:71:e6:4c:53:1a:93:73:cc:21:71:70:ba: 03:7d:b9:0e:ce:e5:eb:16:2b:11:74:66:f6:bf:18: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:33:23:01:32:42:A3:C7:41:27:F7:4A:FE:E2:5E:2E:5F:B6:7D:74 X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:bb:4d:49:52:a9:af:dd:19:fa:8d:ab:45:bc:95:38:74:85: 8e:31:ef:1f:db:5e:39:c5:1b:46:26:bf:56:77:80:13:0d:6c: 27:fc:f6:eb:8e:bc:97:26:da:ad:c0:9a:e8:24:42:81:1f:fa: 10:5b:80:8e:48:d2:86:82:10:91:69:87:ea:53:ee:82:3f:a1: 02:80:0e:0f:a7:2c:4f:1e:70:a9:c5:3d:42:cf:86:3f:fa:99: 3b:53:00:68:22:01:a4:12:02:b9:03:6c:58:32:39:37:77:38: da:06:f3:f6:a3:2f:50:59:62:a5:cc:53:18:6e:1c:7f:a3:10: 95:60:b3:89:ed:01:d6:b6:47:46:a6:f5:43:fe:9e:4d:dc:56: c4:22:81:63:bb:c1:56:be:f0:a9:ae:cb:bd:96:d1:bd:6a:07: d8:8a:16:03:5c:90:73:04:eb:81:70:5f:a9:31:23:62:cc:f2: c1:17:e6:11:fc:db:c1:23:2e:e4:b7:6f:5e:d9:12:2d:da:22: e5:07:9a:fc:aa:ac:09:4d:7e:6e:3e:96:fe:a6:08:12:ab:20: 8a:db:08:34:f1:80:0c:e3:5a:6e:6d:96:e2:35:e3:23:72:4d: f1:5f:cc:40:2f:d4:70:48:67:e1:2f:4f:46:51:24:d7:64:c6: 17:0e:55:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjUwNTEzMDEyNjU0WhcNMjUwNTIwMDEyNjU0WjAYMRYwFAYD VQQDEw02ODIyOWZkZS03NzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXb7ZeI2I5cFiPfINEPGsrKQQ53KH1J7idOCtqD/jrvcArSFYSdI0Vw6g/6A XFWl9HJWkEzecSmRxEiRR/h4EtDFEGkmRM3gIv8yKm6Jf+PEAoWMrvYBgHtcJpY9 nX86s2sSGk42Iq5KwNqucZOrtA6RNyO7DERQf0NPBeRQ/qcn65Fa8zES9VeK8hK9 UBxprFsTAdUzBoSahBOfj01hzCzcFL6BWZ6JEAedKHEqE23P39uK+aEmdF3Yqhti OTH2mVqvPPWhvQ5RtY6uF6pqQcTYlMmE1pjaM4iTz9UcjP/ZOntx5kxTGpNzzCFx cLoDfbkOzuXrFisRdGb2vxit0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDozIwEy QqPHQSf3Sv7iXi5ftn10MB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJu01JUqmv3Rn6jatFvJU4dIWOMe8f2145xRtGJr9Wd4ATDWwn/Pbr jryXJtqtwJroJEKBH/oQW4COSNKGghCRaYfqU+6CP6ECgA4PpyxPHnCpxT1Cz4Y/ +pk7UwBoIgGkEgK5A2xYMjk3dzjaBvP2oy9QWWKlzFMYbhx/oxCVYLOJ7QHWtkdG pvVD/p5N3FbEIoFju8FWvvCprsu9ltG9agfYihYDXJBzBOuBcF+pMSNizPLBF+YR /NvBIy7kt29e2RIt2iLlB5r8qqwJTX5uPpb+pggSqyCK2wg08YAM41pubZbiNeMj ck3xX8xAL9RwSGfhL09GUSTXZMYXDlWD -----END CERTIFICATE-----Generated at Tue May 13 21:51:35 2025 by rpki-client