$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft File: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json) Hash identifier: wzA6xmCqeKkNxaDDNFbN6a6xdWPondZlBPjtVC3m8uc= Subject key identifier: 5D:93:9D:E8:90:4B:38:53:60:BD:3B:EB:CF:C5:76:CB:A9:DF:9D:34 Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 Certificate issuer: /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft Manifest number: 020A Signing time: Sat 17 May 2025 02:13:31 +0000 Manifest this update: Sat 17 May 2025 02:13:30 +0000 Manifest next update: Sat 24 May 2025 02:13:30 +0000 Files and hashes: 1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: NZpIJcnlcF2NeDZM2lxbKf2M6p/05fZo2CHTWt/DVYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Validity Not Before: May 17 02:13:30 2025 GMT Not After : May 24 02:13:30 2025 GMT Subject: CN=6827f0cb-9c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:77:59:13:a5:1a:78:f2:43:b5:eb:5e:3b: 6f:47:15:ab:0a:b5:de:88:0c:20:bd:81:e9:cb:aa: 20:b8:2a:3d:16:3e:50:f9:ac:3b:42:93:26:6f:d0: 94:e5:8c:57:11:53:b8:f9:94:26:6c:3c:ac:ee:10: fd:b6:e8:a5:56:f7:12:1c:e0:67:a3:03:ea:9e:62: 5a:ac:7b:bd:1c:ff:14:a2:1f:e8:59:9b:9e:66:fb: 15:c2:b8:ba:1f:f8:e4:c2:1e:7d:93:ee:a8:dd:41: 08:79:c5:a4:a6:72:ff:ad:59:d1:fa:3b:a0:a2:6f: ef:79:2e:67:1d:0c:77:b1:94:57:a4:44:12:24:47: 56:4c:1d:a1:62:23:3f:53:49:dc:e0:6a:bb:cd:7a: 1e:59:20:31:7e:3e:d4:bd:7c:c5:28:08:4a:ef:56: a4:1e:bc:a5:ac:34:42:a7:01:78:01:cf:78:99:a9: a4:8d:1d:7c:96:f6:c1:40:b2:92:42:02:14:c4:76: da:4e:eb:cb:7e:3a:88:69:97:45:74:c3:8b:fb:ae: 64:f6:c2:fe:da:3c:21:83:7f:29:a5:dd:3f:96:f6: 8b:23:54:8e:d3:2e:3a:09:ce:99:1e:27:dc:17:1e: 5d:af:33:fc:48:18:e6:5d:8e:2e:59:2e:97:0a:07: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:93:9D:E8:90:4B:38:53:60:BD:3B:EB:CF:C5:76:CB:A9:DF:9D:34 X509v3 Authority Key Identifier: keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:27:99:c5:fd:ab:41:31:9f:27:c8:9b:19:91:33:0b:d1:12: b8:d8:f7:9c:81:34:ef:fd:6a:1f:e7:7f:46:61:25:e7:fe:5d: a9:8e:5c:88:c4:dc:74:91:02:c1:2b:14:57:25:01:e3:f6:e7: 6f:a9:3d:ad:23:f3:1e:b7:59:9f:77:8f:df:d4:59:f2:2d:d0: c6:36:2b:90:4d:ed:ae:29:51:52:c5:d3:90:7c:09:3b:bb:4f: bd:ff:c8:4a:ef:65:63:ab:f8:5a:df:f0:76:26:2e:93:e3:d4: 93:70:11:e4:d7:a2:3b:63:ff:9e:76:1e:a2:d7:61:49:0c:41: 3a:60:94:23:97:23:cf:e5:44:ca:32:f1:02:53:31:19:13:f1: c2:98:92:23:37:31:3c:1c:fb:6e:53:ec:6f:89:9e:0b:c6:84: 5d:d0:78:fc:64:9d:d5:3b:a7:ca:ee:c5:c5:e9:d9:38:8c:7a: b0:25:55:f0:a7:03:c8:f7:de:30:89:7f:e8:a4:78:29:52:30: 0b:69:dd:2a:b7:6e:7c:a9:7b:8b:9c:77:d0:87:23:c3:fb:36: 49:70:64:8d:c9:71:e0:a1:74:8e:fd:70:00:13:d2:ec:0a:b7: a9:74:6e:75:28:d3:72:22:c4:b4:ea:21:f2:d0:f4:2a:93:14: f1:91:77:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy ODYwQ0Y5MjkwHhcNMjUwNTE3MDIxMzMwWhcNMjUwNTI0MDIxMzMwWjAYMRYwFAYD VQQDEw02ODI3ZjBjYi05YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRR3WROlGnjyQ7XrXjtvRxWrCrXeiAwgvYHpy6oguCo9Fj5Q+aw7QpMmb9CU 5YxXEVO4+ZQmbDys7hD9tuilVvcSHOBnowPqnmJarHu9HP8Uoh/oWZueZvsVwri6 H/jkwh59k+6o3UEIecWkpnL/rVnR+jugom/veS5nHQx3sZRXpEQSJEdWTB2hYiM/ U0nc4Gq7zXoeWSAxfj7UvXzFKAhK71akHrylrDRCpwF4Ac94mamkjR18lvbBQLKS QgIUxHbaTuvLfjqIaZdFdMOL+65k9sL+2jwhg38ppd0/lvaLI1SO0y46Cc6ZHifc Fx5drzP8SBjmXY4uWS6XCgccvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2TneiQ SzhTYL0768/Fdsup3500MB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0 NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj U1A2Z21Ec0VxT3dvWU0tU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+J5nF/atBMZ8nyJsZkTML0RK42PecgTTv/Wof539GYSXn/l2pjlyI xNx0kQLBKxRXJQHj9udvqT2tI/Met1mfd4/f1FnyLdDGNiuQTe2uKVFSxdOQfAk7 u0+9/8hK72Vjq/ha3/B2Ji6T49STcBHk16I7Y/+edh6i12FJDEE6YJQjlyPP5UTK MvECUzEZE/HCmJIjNzE8HPtuU+xviZ4LxoRd0Hj8ZJ3VO6fK7sXF6dk4jHqwJVXw pwPI994wiX/opHgpUjALad0qt258qXuLnHfQhyPD+zZJcGSNyXHgoXSO/XAAE9Ls CrepdG51KNNyIsS06iHy0PQqkxTxkXdi -----END CERTIFICATE-----Generated at Sat May 17 05:49:53 2025 by rpki-client