$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json) Hash identifier: 0YQxFXE8jHhWnncnYo/XNynPqi+VjTdMLvKg6e4wVU4= Subject key identifier: EF:C9:B8:23:EB:D4:70:31:5C:74:A3:A8:D5:36:D9:2E:F9:3F:6A:3B Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft Manifest number: 06BE Signing time: Sat 10 May 2025 21:45:17 +0000 Manifest this update: Sat 10 May 2025 21:45:17 +0000 Manifest next update: Sat 17 May 2025 21:45:17 +0000 Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: Xlimgn05K6mCgC6SQ2v+gcz7bv3ZsZ03eHg57T9UQds=) 2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: t/jzVO6L3wgo+QH7mzqB0zSXy5Nwbra0pOtYvgiFmIs=) 3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: bMetSmWwjzP6LMILwQp0327+1V3svzhvOdiLjBriktI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Validity Not Before: May 10 21:45:17 2025 GMT Not After : May 17 21:45:17 2025 GMT Subject: CN=681fc8ed-b686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:98:8e:05:6f:d0:b5:22:af:5e:96:d8:98: 9c:1f:f2:56:ad:5f:74:8e:81:34:9b:2f:11:3e:42: 47:f0:e7:78:ca:80:5c:22:a8:18:3b:1f:91:45:13: 8e:c7:1d:56:6c:12:23:72:06:45:4a:3f:9b:0c:eb: 92:e4:64:86:32:88:7e:b7:9e:95:2a:2a:77:20:a1: 9f:bb:b3:ae:62:65:1b:94:dc:d6:95:a6:5f:24:fc: 03:51:e8:7d:33:a0:ed:63:20:d8:aa:0e:f1:b5:8f: 83:30:95:9a:00:1c:46:22:ef:dd:5f:b4:24:4e:16: 87:c6:89:23:ff:5f:65:d7:6d:ed:62:ed:32:1a:2f: b0:33:17:be:99:63:8d:7c:a7:4c:07:ce:b6:90:4c: 36:28:1d:58:44:64:d2:58:96:4a:43:95:21:a0:75: 4f:21:36:a1:1f:87:1a:3d:d0:95:76:f7:49:c9:1d: f2:da:85:96:9d:38:9c:a0:34:e8:50:c9:96:08:43: c4:9a:bf:0f:73:62:06:6f:73:0a:07:54:05:27:d4: 2c:ff:62:74:e7:db:6b:a0:4a:d6:7c:fb:c9:36:3b: 7a:13:23:82:3c:87:2f:98:7b:dc:0f:7b:76:d0:55: d4:70:e9:5d:4a:1e:dc:b6:fb:82:d8:ba:5e:10:fb: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C9:B8:23:EB:D4:70:31:5C:74:A3:A8:D5:36:D9:2E:F9:3F:6A:3B X509v3 Authority Key Identifier: keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:08:c2:d0:3e:f6:a2:f2:6c:30:7d:c2:f3:27:ec:fc:0e:f0: 3b:18:fb:32:56:8f:5d:60:0c:36:15:c0:0f:fc:a2:ed:2c:f8: 42:80:ff:0e:ba:73:74:9e:9c:fd:0d:42:99:a6:3c:36:e2:75: 0d:39:49:3c:9e:0b:1c:36:f3:a8:e6:90:a6:4e:57:f9:73:fe: c3:0a:6c:15:e8:ee:56:71:d7:8a:69:1d:ac:8e:5b:94:22:66: 9c:fa:cd:e9:5b:2d:cc:1d:24:18:9a:a2:0c:e7:61:ff:a1:a7: f3:84:f1:2b:b3:74:e0:da:aa:6b:1a:79:2b:99:cf:66:f4:66: 28:bd:0a:58:31:de:48:a0:7d:25:5d:f1:51:c3:98:b3:ab:3e: a9:96:fc:3d:1a:32:37:32:52:ef:0c:26:b0:2d:58:41:a0:bb: 3f:74:c1:7e:d1:62:d0:77:23:4d:e7:f4:46:24:aa:21:64:22: 35:b0:f4:86:84:4f:11:17:f2:fd:7f:9a:59:d1:ac:16:14:9d: 78:b5:ed:ff:6a:78:cd:e5:92:7f:39:47:43:49:65:a6:1a:ba: cc:c3:5b:13:5a:d3:22:47:3d:0d:60:0c:e8:5d:a7:41:c3:da: 1e:ea:27:f0:56:0e:de:76:44:1a:90:a7:4f:0e:30:f7:de:c5: 74:55:05:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB REQ3NkVBMDEwHhcNMjUwNTEwMjE0NTE3WhcNMjUwNTE3MjE0NTE3WjAYMRYwFAYD VQQDEw02ODFmYzhlZC1iNjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEiYjgVv0LUir16W2JicH/JWrV90joE0my8RPkJH8Od4yoBcIqgYOx+RRROO xx1WbBIjcgZFSj+bDOuS5GSGMoh+t56VKip3IKGfu7OuYmUblNzWlaZfJPwDUeh9 M6DtYyDYqg7xtY+DMJWaABxGIu/dX7QkThaHxokj/19l123tYu0yGi+wMxe+mWON fKdMB862kEw2KB1YRGTSWJZKQ5UhoHVPITahH4caPdCVdvdJyR3y2oWWnTicoDTo UMmWCEPEmr8Pc2IGb3MKB1QFJ9Qs/2J059troErWfPvJNjt6EyOCPIcvmHvcD3t2 0FXUcOldSh7ctvuC2LpeEPtXSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/JuCPr 1HAxXHSjqNU22S75P2o7MB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2 Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10 VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASCMLQPvai8mwwfcLzJ+z8DvA7GPsyVo9dYAw2FcAP/KLtLPhCgP8O unN0npz9DUKZpjw24nUNOUk8ngscNvOo5pCmTlf5c/7DCmwV6O5WcdeKaR2sjluU Imac+s3pWy3MHSQYmqIM52H/oafzhPErs3Tg2qprGnkrmc9m9GYovQpYMd5IoH0l XfFRw5izqz6plvw9GjI3MlLvDCawLVhBoLs/dMF+0WLQdyNN5/RGJKohZCI1sPSG hE8RF/L9f5pZ0awWFJ14te3/anjN5ZJ/OUdDSWWmGrrMw1sTWtMiRz0NYAzoXadB w9oe6ifwVg7edkQakKdPDjD33sV0VQUD -----END CERTIFICATE-----Generated at Mon May 12 19:13:01 2025 by rpki-client