$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: cl0DiDbuA2zrlZrKl4fXJpDY2/A4EPFzGYb3BIlmZHo= Subject key identifier: 68:E9:F2:F1:FB:14:5A:CA:D0:76:17:5D:12:EA:A8:D0:08:5C:35:5F Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0D0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0D01 Signing time: Sat 10 May 2025 17:55:28 +0000 Manifest this update: Sat 10 May 2025 17:55:28 +0000 Manifest next update: Sat 17 May 2025 17:55:28 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: rfkJrYB2l5voa/QzHLbPG4kC11BUfDqGqwHZP2C1T0U=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: YQKzakVZRwkEoSkOxzmifYwaHBBE1uM/hdsf+7QDJq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3339 (0xd0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: May 10 17:55:28 2025 GMT Not After : May 17 17:55:28 2025 GMT Subject: CN=681f9310-57eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:40:c3:dd:f1:03:8e:14:70:66:4c:94:08: 65:74:ae:45:ec:94:c9:cc:56:81:dd:d4:c2:24:3c: cd:5a:9b:78:10:39:bb:35:39:66:6d:31:fe:24:0f: 8a:69:5d:d6:c4:8b:a7:50:fe:2f:26:a2:a5:87:1a: 00:47:58:9d:9d:a6:e6:85:2b:e8:d1:f1:f5:d3:cf: 9a:20:92:a6:7d:ce:77:2c:c9:d4:09:bb:c4:fe:91: 1e:8f:66:b9:a4:d1:e7:cf:ec:2b:44:6b:e1:a8:88: 07:4d:2b:f2:e6:6a:58:50:dc:2b:7e:fc:03:0c:a0: b5:00:c8:9e:ef:75:a7:5d:0d:d2:e3:bf:6e:77:a5: e5:b5:45:c8:c4:50:91:b6:a6:05:dd:c4:14:8a:ef: 7a:44:be:02:ff:6a:70:56:36:26:04:69:62:ac:2b: 7d:60:c4:33:bc:0c:57:02:10:9c:02:0a:f8:50:ad: 29:14:c8:36:24:ce:8f:bb:c4:82:24:5b:2e:84:f6: fa:2c:1f:d0:6c:17:4e:63:41:06:4c:7c:1e:cd:5b: 1a:d0:ff:54:ef:32:a4:52:5b:d6:04:a6:60:67:f6: 74:76:b1:0c:b4:c6:33:d2:eb:61:76:61:a8:dd:43: 48:68:87:10:4f:1a:97:ee:7c:2d:16:59:e5:f2:f7: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:F2:F1:FB:14:5A:CA:D0:76:17:5D:12:EA:A8:D0:08:5C:35:5F X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cc:20:1e:c4:db:56:19:24:2f:29:f2:07:82:fb:ee:26:e2: 59:19:c7:44:39:bc:2d:44:77:b0:aa:41:c0:73:01:f6:e0:e4: 9c:68:22:21:78:fd:ce:b7:ee:90:90:c3:0b:be:6d:79:c6:c2: 70:65:e3:c1:d6:8b:9b:aa:3a:c7:cd:29:56:8a:2a:5a:0d:5a: 1f:97:25:cb:48:58:ec:ee:ef:4c:6c:68:a2:4b:fb:c0:96:b0: d4:f3:16:11:5d:2c:8a:ef:88:26:2c:41:74:29:22:88:cb:1a: 75:58:35:1b:cc:c0:7a:77:3a:ad:3e:ce:0e:24:f0:b7:5e:58: c9:1f:e7:9d:50:38:f1:f0:91:82:fc:13:36:2c:7a:e4:41:35: 0d:7e:c2:b3:d7:8b:c2:b0:e6:0a:55:40:52:b3:c8:a3:e0:13: 1c:92:1c:6a:db:5f:be:56:54:d0:da:f8:c1:0c:26:e7:6b:d9: 13:40:b4:34:5d:ca:a7:5d:35:36:ec:c4:43:01:10:f9:51:f5: 95:3f:04:41:85:ed:fb:85:8d:0f:00:e2:bf:d7:9b:ee:92:fe: 2e:66:f5:7e:a6:a7:8d:44:ca:4e:22:3d:e4:ba:37:16:ed:dc: d3:30:a1:3f:e6:c2:ab:5a:25:e5:62:16:14:59:19:9a:9e:0d: f2:53:7c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjUwNTEwMTc1NTI4WhcNMjUwNTE3MTc1NTI4WjAYMRYwFAYD VQQDEw02ODFmOTMxMC01N2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqT9Aw93xA44UcGZMlAhldK5F7JTJzFaB3dTCJDzNWpt4EDm7NTlmbTH+JA+K aV3WxIunUP4vJqKlhxoAR1idnabmhSvo0fH108+aIJKmfc53LMnUCbvE/pEej2a5 pNHnz+wrRGvhqIgHTSvy5mpYUNwrfvwDDKC1AMie73WnXQ3S479ud6XltUXIxFCR tqYF3cQUiu96RL4C/2pwVjYmBGlirCt9YMQzvAxXAhCcAgr4UK0pFMg2JM6Pu8SC JFsuhPb6LB/QbBdOY0EGTHwezVsa0P9U7zKkUlvWBKZgZ/Z0drEMtMYz0uthdmGo 3UNIaIcQTxqX7nwtFlnl8vdQcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjp8vH7 FFrK0HYXXRLqqNAIXDVfMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbzCAexNtWGSQvKfIHgvvuJuJZGcdEObwtRHewqkHAcwH24OScaCIh eP3Ot+6QkMMLvm15xsJwZePB1oubqjrHzSlWiipaDVoflyXLSFjs7u9MbGiiS/vA lrDU8xYRXSyK74gmLEF0KSKIyxp1WDUbzMB6dzqtPs4OJPC3XljJH+edUDjx8JGC /BM2LHrkQTUNfsKz14vCsOYKVUBSs8ij4BMckhxq21++VlTQ2vjBDCbna9kTQLQ0 XcqnXTU27MRDARD5UfWVPwRBhe37hY0PAOK/15vukv4uZvV+pqeNRMpOIj3kujcW 7dzTMKE/5sKrWiXlYhYUWRmang3yU3xG -----END CERTIFICATE-----Generated at Sun May 11 00:42:40 2025 by rpki-client