$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: 9OU7vJkoW+86zrPWVx9iO9KkqkfaTNGc7Kt/jIarVE8= Subject key identifier: 13:ED:96:8A:E7:5E:47:FA:B2:BB:EE:74:59:6F:27:76:9E:00:A9:CD Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 05A1 Signing time: Thu 08 May 2025 23:03:32 +0000 Manifest this update: Thu 08 May 2025 23:03:32 +0000 Manifest next update: Thu 15 May 2025 23:03:32 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: MqM4T+xMZIRom5zb3P++ArqwTcHXIWFH/mjyfwcmovc=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: 6AJPVo9vxTgn3yMGe8EXUj+/hKbxpASVzYIJLzUgXCE=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: May 8 23:03:32 2025 GMT Not After : May 15 23:03:32 2025 GMT Subject: CN=681d3844-ac1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:da:17:99:8c:78:d7:2b:99:e9:35:88:ef:2a: d7:29:d8:84:64:0e:e3:97:43:a6:b0:b0:cf:bb:63: 25:22:4e:0c:d0:91:d7:bf:57:53:d5:44:2e:b4:42: b4:e0:65:76:0a:0f:1e:72:a3:5c:ff:5c:50:ea:33: b9:5c:0b:23:ce:e9:82:3a:e3:d5:4d:87:68:4f:38: b4:e2:d1:0c:eb:3f:2c:ae:46:40:cb:3f:44:3a:2e: f7:a4:bf:48:5e:23:22:17:e7:e5:1e:b9:d0:fd:b0: d3:2b:6f:92:0c:54:c6:0d:21:fb:9d:d2:88:f7:90: e3:4e:62:68:7b:61:9d:62:78:0b:17:20:55:bb:96: ef:24:fa:dd:b6:3e:a3:af:4e:02:ae:01:04:84:22: 62:ed:12:b5:1f:7d:ca:dd:5a:6a:17:6d:40:fb:56: 16:c6:c1:59:2a:5e:7d:f3:f4:43:a0:93:19:fc:f9: 4e:15:eb:30:40:ce:22:dc:c2:d5:46:39:41:48:c3: e7:6f:f2:53:aa:40:24:c6:bd:16:7d:ae:ad:2e:70: ba:34:28:74:bb:d2:51:8a:f3:21:51:b1:42:eb:ec: 70:a4:f1:86:62:28:a5:e2:54:51:d6:9b:ca:da:b8: dd:3c:bb:08:fb:db:1a:70:e9:ba:79:2c:86:8b:4d: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:ED:96:8A:E7:5E:47:FA:B2:BB:EE:74:59:6F:27:76:9E:00:A9:CD X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:51:42:61:d3:6f:5f:1f:88:a4:56:70:4c:27:23:6e:4a:a4: ae:4c:f0:c5:a0:b1:44:bb:4b:4f:c7:0b:dc:f7:03:5c:0e:d1: 59:e7:56:51:4a:c3:64:c0:38:a7:28:61:70:cf:09:c4:1f:42: f3:5e:7e:d3:18:1c:19:5d:f7:f8:ec:da:bf:d9:e3:11:6f:70: e6:43:00:39:49:78:72:b6:e6:01:5b:17:8f:a7:25:14:50:03: e0:be:86:24:b1:23:a4:4d:41:2a:81:b5:9d:33:0a:61:31:00: ea:34:43:a7:22:c9:9f:ea:fb:15:5a:6d:20:23:b8:14:08:83: 43:4c:f5:ad:06:03:ec:22:86:b4:f5:41:1f:a7:63:0e:3d:58: 14:5c:c9:4a:9e:89:07:fd:bb:4e:fa:28:57:cc:a1:48:4b:ef: 3e:3d:dc:14:26:6b:86:d7:62:fa:84:fc:05:80:77:8f:2f:72: e0:16:56:8a:6d:d4:c3:50:d6:91:a4:19:28:18:65:a0:1c:ce: 83:8f:43:85:05:e2:aa:9a:d8:17:77:7c:73:81:b1:86:b8:4d: af:78:14:ea:52:94:d4:7b:44:44:ec:0a:00:ff:6a:71:e8:d8: 89:b8:06:2a:7c:0d:0b:8b:5e:4c:fc:43:b3:23:d0:91:ab:ba: 3f:b2:63:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwNTA4MjMwMzMyWhcNMjUwNTE1MjMwMzMyWjAYMRYwFAYD VQQDEw02ODFkMzg0NC1hYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8doXmYx41yuZ6TWI7yrXKdiEZA7jl0OmsLDPu2MlIk4M0JHXv1dT1UQutEK0 4GV2Cg8ecqNc/1xQ6jO5XAsjzumCOuPVTYdoTzi04tEM6z8srkZAyz9EOi73pL9I XiMiF+flHrnQ/bDTK2+SDFTGDSH7ndKI95DjTmJoe2GdYngLFyBVu5bvJPrdtj6j r04CrgEEhCJi7RK1H33K3VpqF21A+1YWxsFZKl598/RDoJMZ/PlOFeswQM4i3MLV RjlBSMPnb/JTqkAkxr0Wfa6tLnC6NCh0u9JRivMhUbFC6+xwpPGGYiil4lRR1pvK 2rjdPLsI+9sacOm6eSyGi03iYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPtlorn Xkf6srvudFlvJ3aeAKnNMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbUUJh029fH4ikVnBMJyNuSqSuTPDFoLFEu0tPxwvc9wNcDtFZ51ZR SsNkwDinKGFwzwnEH0LzXn7TGBwZXff47Nq/2eMRb3DmQwA5SXhytuYBWxePpyUU UAPgvoYksSOkTUEqgbWdMwphMQDqNEOnIsmf6vsVWm0gI7gUCINDTPWtBgPsIoa0 9UEfp2MOPVgUXMlKnokH/btO+ihXzKFIS+8+PdwUJmuG12L6hPwFgHePL3LgFlaK bdTDUNaRpBkoGGWgHM6Dj0OFBeKqmtgXd3xzgbGGuE2veBTqUpTUe0RE7AoA/2px 6NiJuAYqfA0Li15M/EOzI9CRq7o/smPs -----END CERTIFICATE-----Generated at Sat May 10 13:54:04 2025 by rpki-client