$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft File: U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft (raw, json) Hash identifier: I6mK0XAC6v2jiyLg0Ao6fL6uyJwqOHU5YCqYw7WvtlY= Subject key identifier: 16:FA:6C:D6:77:64:48:3E:CA:15:D3:97:2E:BB:BC:C9:FD:ED:3F:39 Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91 Certificate issuer: /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft Manifest number: 8C Signing time: Sat 17 May 2025 06:02:19 +0000 Manifest this update: Sat 17 May 2025 06:02:18 +0000 Manifest next update: Sat 24 May 2025 06:02:18 +0000 Files and hashes: 1: U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl (hash: XiwNO1JIpGTKl5SF2sZmPCwgHwc69sjRIBifuj80E/4=) 2: 38D25300639D11EFB668775FC4F9AE02.roa (hash: IIflfQCAxW1X5tnyPUSdNiUWUvRyGX/zn4vbskdXfXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 06:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91 Validity Not Before: May 17 06:02:18 2025 GMT Not After : May 24 06:02:18 2025 GMT Subject: CN=6828266a-7f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:18:bb:31:aa:77:f5:c2:2c:76:e3:10:aa: 7b:a7:23:cd:65:69:27:43:01:ea:42:57:f4:b6:d0: 19:a0:c9:91:45:98:d4:5c:d1:50:a2:c9:91:ab:bc: 16:bb:ce:0d:c9:d7:08:08:a4:76:74:6c:77:42:7e: 96:cf:5f:82:52:6e:79:1a:45:7c:25:43:c5:e4:47: 3f:b5:35:e2:26:b5:27:10:f2:c3:39:43:b9:13:f8: 70:27:0a:dc:1d:70:eb:80:a3:77:55:4b:5f:27:67: 75:50:4e:b0:f3:4c:92:9d:59:2f:80:3d:73:ee:41: 13:72:58:08:da:5a:1a:7d:19:03:26:f4:c2:e7:e3: 8c:bd:c6:34:79:2f:b5:4a:dd:78:6c:38:bc:d1:34: 3f:df:da:5c:be:20:3f:54:96:e1:ba:c6:58:bc:56: 45:ec:a3:26:a7:15:dc:66:3f:13:0f:aa:b2:8d:e0: ef:71:dc:c7:33:78:3c:42:12:a2:a0:f8:59:8d:84: 92:e6:54:9c:1b:9e:f2:f6:8b:48:a5:e2:88:f7:82: ea:04:14:de:b7:87:83:10:3d:5c:38:7d:36:d3:a9: d3:87:58:65:20:bb:d1:4e:03:8c:49:26:e1:61:f7: ab:36:db:df:95:fb:2d:2b:f8:14:4c:85:d5:4f:fc: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FA:6C:D6:77:64:48:3E:CA:15:D3:97:2E:BB:BC:C9:FD:ED:3F:39 X509v3 Authority Key Identifier: keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:62:d5:d5:48:ad:d6:bd:c5:83:89:f5:ef:ba:db:58:b9:6c: 02:a4:34:68:d6:9a:c0:ae:dc:2f:a6:96:0e:0b:52:b8:4e:6f: 87:1d:03:a5:64:98:b8:e9:0a:61:74:66:82:e8:68:12:88:bf: 3b:c5:53:42:fc:76:f9:89:f8:1c:df:8f:6a:f9:3f:f8:6d:99: db:f5:1e:e6:f9:10:53:75:03:35:3c:1a:9b:32:39:bb:7d:2f: ff:38:04:ab:57:e3:f7:b5:07:a9:82:c8:22:e9:26:d9:8b:fc: 3e:31:1d:22:ad:6c:89:83:1a:47:7b:fd:48:3d:cc:cb:9f:3d: 03:d1:dd:0b:6b:62:c1:09:c5:86:1f:ec:fa:a1:cf:fb:47:8d: de:b8:c9:eb:a4:b1:3c:46:91:af:a9:3c:e9:84:80:69:fb:85: b1:10:ac:6b:d0:fc:a3:8d:b6:88:8a:47:41:e1:c4:c8:da:a7: 50:14:1d:4b:83:ef:64:61:d4:78:9e:e1:a0:5c:13:56:66:90: 28:43:1c:8f:64:8b:64:ce:c5:0b:a0:91:26:af:d5:ee:75:8c: 3f:92:5d:14:df:5b:82:06:03:91:6b:20:25:1c:e8:fd:3a:11: ee:78:df:2d:fe:02:7f:a3:32:4d:0e:72:87:b9:54:b5:67:9f: f0:86:2c:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E3MzUxMTAvBgNVBAUTKDUzN0IxQkExQzAxQjQ4NjM0NzM4QUExMTU5QUUyQjk1 NTkwREREOTEwHhcNMjUwNTE3MDYwMjE4WhcNMjUwNTI0MDYwMjE4WjAYMRYwFAYD VQQDEw02ODI4MjY2YS03ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/4YuzGqd/XCLHbjEKp7pyPNZWknQwHqQlf0ttAZoMmRRZjUXNFQosmRq7wW u84NydcICKR2dGx3Qn6Wz1+CUm55GkV8JUPF5Ec/tTXiJrUnEPLDOUO5E/hwJwrc HXDrgKN3VUtfJ2d1UE6w80ySnVkvgD1z7kETclgI2loafRkDJvTC5+OMvcY0eS+1 St14bDi80TQ/39pcviA/VJbhusZYvFZF7KMmpxXcZj8TD6qyjeDvcdzHM3g8QhKi oPhZjYSS5lScG57y9otIpeKI94LqBBTet4eDED1cOH0206nTh1hlILvRTgOMSSbh YferNtvflfstK/gUTIXVT/z3yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb6bNZ3 ZEg+yhXTly67vMn97T85MB8GA1UdIwQYMBaAFFN7G6HAG0hjRziqEVmuK5VZDd2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTczNS9EMEU5QjFFRTYz OUIxMUVGOUI0RDJBNURDNEY5QUUwMi9VM3Nib2NBYlNHTkhPS29SV2E0cmxWa04z WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Uzc2JvY0FiU0dOSE9Lb1JXYTRybFZrTjNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTczNS9EMEU5QjFFRTYzOUIxMUVGOUI0RDJBNURDNEY5QUUwMi9VM3Nib2NBYlNH TkhPS29SV2E0cmxWa04zWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmYtXVSK3WvcWDifXvuttYuWwCpDRo1prArtwvppYOC1K4Tm+HHQOl ZJi46QphdGaC6GgSiL87xVNC/Hb5ifgc349q+T/4bZnb9R7m+RBTdQM1PBqbMjm7 fS//OASrV+P3tQepgsgi6SbZi/w+MR0irWyJgxpHe/1IPczLnz0D0d0La2LBCcWG H+z6oc/7R43euMnrpLE8RpGvqTzphIBp+4WxEKxr0PyjjbaIikdB4cTI2qdQFB1L g+9kYdR4nuGgXBNWZpAoQxyPZItkzsULoJEmr9XudYw/kl0U31uCBgORayAlHOj9 OhHueN8t/gJ/ozJNDnKHuVS1Z5/whiwc -----END CERTIFICATE-----Generated at Sat May 17 14:34:02 2025 by rpki-client