$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: m9UDwbcBBMkGYLUC+38m299tZb8nVZHJY8RMFLfuslM= Subject key identifier: 8A:3B:D7:3D:96:7B:E9:0C:07:B2:E2:07:77:6E:C2:11:7C:9F:75:91 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0C54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0C46 Signing time: Sat 10 May 2025 18:12:16 +0000 Manifest this update: Sat 10 May 2025 18:12:15 +0000 Manifest next update: Sat 17 May 2025 18:12:15 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: q+c6V/GjOAmPZdWK8mpZuTYlB8Ut73NvDhn1YBhkF4Q=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: G3Qc6m6Md1/HMosoucJ9nNLXdAyquVgUZsxf+L03AvI=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: HJ8Z2bhTYV+Kfn18R3ptoMoDD462QKeVcqv3I9e4DJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: May 10 18:12:15 2025 GMT Not After : May 17 18:12:15 2025 GMT Subject: CN=681f96ff-fc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:37:fb:66:e6:ab:ac:e6:06:1f:7c:08:c7: ed:e1:45:e4:0e:1d:fa:10:17:fa:0f:5e:1e:8a:70: 6a:d1:23:21:ab:f8:38:9c:f6:79:3a:90:77:fe:ac: 7e:bb:99:fc:bb:ac:e7:ff:75:2d:09:c2:be:cf:aa: e0:b6:31:aa:24:c9:cf:fa:ba:48:f0:97:9e:56:90: b5:db:da:ab:4b:9b:b8:03:04:97:3b:e6:67:3f:21: 9e:7f:da:20:9a:42:59:a5:14:25:f2:78:a2:8b:af: 96:67:8c:0c:ab:47:f7:d2:44:02:fa:6d:49:59:c7: 9d:5e:48:f5:75:31:2b:c6:bb:b9:d6:54:79:20:d1: 6d:f5:16:01:06:9f:9f:85:c9:7a:fa:79:30:5a:de: a3:84:79:56:0d:73:1f:97:2d:1b:ee:47:86:bc:5c: ea:2a:a5:40:f5:fe:79:4d:df:e1:d9:11:1b:6a:41: d3:78:ce:65:23:94:08:d4:45:c7:38:23:10:2c:f2: 66:99:f0:86:cc:68:ef:ee:6c:41:6d:ba:5b:0a:f3: 13:ca:42:60:d9:be:2c:8b:4e:54:4d:1e:3e:ca:f5: 32:25:b7:a9:75:e4:bc:79:ca:c3:29:36:ae:b8:2c: 5c:2f:7e:67:2b:a6:4b:ad:fe:18:3a:9c:3e:6e:b1: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:D7:3D:96:7B:E9:0C:07:B2:E2:07:77:6E:C2:11:7C:9F:75:91 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f6:b0:91:9e:82:74:51:d1:3c:69:40:97:51:9e:0b:1d:78: ca:1e:78:5b:af:4b:5d:11:92:50:9d:5b:3f:fc:1a:e0:b2:79: 74:95:df:a7:dd:ed:7d:9c:49:65:76:41:65:37:fb:89:1c:8e: 08:12:67:8f:b2:cc:49:f4:8a:51:4f:30:1e:a1:d8:3e:75:f4: 97:80:04:1c:6c:04:39:87:f3:79:f9:07:ce:f4:e5:e3:07:7f: 7a:9b:66:67:8d:09:c2:27:42:5c:4a:58:66:a7:54:88:ab:c1: 0b:f8:12:bb:aa:15:74:dc:8f:bd:8d:cb:a4:8e:a5:81:32:77: 86:2b:d1:cf:f4:d3:97:61:6f:43:a6:3c:d4:4c:9c:89:99:1e: ea:18:9a:0f:36:cd:b1:4a:1c:01:ad:75:2f:0a:c4:2c:35:d2: 90:74:d5:aa:48:8f:70:f6:a6:ff:52:0f:28:20:ec:b3:54:ea: 60:b5:46:dc:eb:f0:d9:92:91:21:9a:c9:7e:1d:9d:54:df:c2: d6:e3:ed:e2:72:af:ab:df:58:53:e9:ad:d9:7a:ce:43:60:09: 9e:fb:3b:20:2c:53:75:63:99:94:f3:97:af:d5:38:c4:de:1d: dd:b7:bf:b7:e0:4c:e6:b5:48:34:25:4f:5b:29:84:2d:12:46: 53:e1:7c:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUwNTEwMTgxMjE1WhcNMjUwNTE3MTgxMjE1WjAYMRYwFAYD VQQDEw02ODFmOTZmZi1mYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmc3+2bmq6zmBh98CMft4UXkDh36EBf6D14einBq0SMhq/g4nPZ5OpB3/qx+ u5n8u6zn/3UtCcK+z6rgtjGqJMnP+rpI8JeeVpC129qrS5u4AwSXO+ZnPyGef9og mkJZpRQl8niii6+WZ4wMq0f30kQC+m1JWcedXkj1dTErxru51lR5INFt9RYBBp+f hcl6+nkwWt6jhHlWDXMfly0b7keGvFzqKqVA9f55Td/h2REbakHTeM5lI5QI1EXH OCMQLPJmmfCGzGjv7mxBbbpbCvMTykJg2b4si05UTR4+yvUyJbepdeS8ecrDKTau uCxcL35nK6ZLrf4YOpw+brEJ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo71z2W e+kMB7LiB3duwhF8n3WRMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq9rCRnoJ0UdE8aUCXUZ4LHXjKHnhbr0tdEZJQnVs//Brgsnl0ld+n 3e19nElldkFlN/uJHI4IEmePssxJ9IpRTzAeodg+dfSXgAQcbAQ5h/N5+QfO9OXj B396m2ZnjQnCJ0JcSlhmp1SIq8EL+BK7qhV03I+9jcukjqWBMneGK9HP9NOXYW9D pjzUTJyJmR7qGJoPNs2xShwBrXUvCsQsNdKQdNWqSI9w9qb/Ug8oIOyzVOpgtUbc 6/DZkpEhmsl+HZ1U38LW4+3icq+r31hT6a3Zes5DYAme+zsgLFN1Y5mU85ev1TjE 3h3dt7+34EzmtUg0JU9bKYQtEkZT4Xy0 -----END CERTIFICATE-----Generated at Sun May 11 19:26:32 2025 by rpki-client