$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json) Hash identifier: PZLLQI5LsB2ZTg9isnKrZT1i5ueXSFlUsgCfoMRhcqk= Subject key identifier: D7:5D:7D:A9:D0:3F:F9:7F:73:F7:0C:81:05:71:2C:66:B8:9E:A4:F5 Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft Manifest number: 0163 Signing time: Sun 11 May 2025 02:53:47 +0000 Manifest this update: Sun 11 May 2025 02:53:47 +0000 Manifest next update: Sun 18 May 2025 02:53:47 +0000 Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: CQGXcbOcjkuEfKJqExEzjVKiRIXESWYMjFbcn0k7otw=) 2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: IQBn4ZS4C/ZFnSsdM9cr5llJmaKNs+18E9KjqV8Ptcw=) 3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: G67FBcoSo5SdfUGnyF3K1ScYA7zHkycNrRNLNW9eMyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Validity Not Before: May 11 02:53:47 2025 GMT Not After : May 18 02:53:47 2025 GMT Subject: CN=6820113b-631c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:b8:45:a1:a9:cf:f4:5f:8a:d8:91:5c:fa: b9:55:5a:52:7e:e5:68:f9:7d:07:40:8d:29:06:17: c4:ce:9d:0e:91:e1:bb:bf:c5:9e:48:55:42:f4:23: 5d:29:92:37:c5:92:79:7a:b9:41:ad:31:62:3f:65: ae:fa:13:02:97:8b:8a:0e:94:df:d2:0b:52:fe:70: 02:ec:9b:86:12:9f:32:c7:45:94:f3:ac:39:62:26: 40:23:ac:27:bd:0c:78:da:9a:8f:87:1c:5f:d4:c7: 4d:42:c8:b5:12:37:77:c4:fb:bb:f9:88:66:97:6f: 35:c8:c1:76:5d:b3:9d:19:27:dd:e4:6a:33:7d:ed: b1:aa:48:17:dc:dd:f1:ae:71:a0:8e:f6:25:2b:11: ba:6b:e3:3c:f0:aa:03:38:b9:46:09:a6:15:1d:ad: b6:20:cc:7b:00:d8:7e:3e:f6:7d:e1:8d:ac:94:44: 1d:9f:9c:36:28:39:b6:89:c1:66:7f:47:0f:37:cf: 91:8a:d8:f2:18:10:ed:5e:e8:b2:99:d5:b1:00:18: 79:8c:82:bc:9b:48:d3:f1:29:4b:15:21:ac:1c:a6: 3b:3b:b2:a6:f5:a0:4d:16:20:01:1e:0b:e0:e5:b4: df:0a:b4:b1:46:f4:6c:e3:c0:a0:27:5b:0c:06:f8: b6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5D:7D:A9:D0:3F:F9:7F:73:F7:0C:81:05:71:2C:66:B8:9E:A4:F5 X509v3 Authority Key Identifier: keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:52:96:1a:d7:40:54:d0:6d:20:fc:5e:10:05:57:71:75:2e: 07:8e:ec:98:8a:75:50:b9:b1:a3:09:b2:95:94:9c:cf:93:82: 7f:ae:dd:ed:78:68:80:4e:ec:b8:e6:18:cd:5d:53:4a:17:9e: 7c:a5:e6:ba:5c:02:1b:06:8c:55:c9:82:c0:d7:87:84:3c:82: b3:d1:91:13:16:47:b7:c2:52:53:5f:7c:6e:f2:fa:e5:50:3b: bd:3a:40:56:67:73:29:92:f5:58:50:d7:27:62:47:e2:a9:1a: bc:76:e3:15:28:8d:24:b3:8e:62:f1:fd:32:84:f0:c1:a8:d8: 9c:87:17:8f:60:bf:5c:80:41:bc:68:23:41:21:cf:5a:d9:97: 41:f2:0e:31:56:7a:bc:21:02:4a:4b:9a:1b:47:e1:99:dc:09: c0:73:68:7e:70:e6:07:30:85:4e:30:49:2c:44:1b:06:6b:e0: dc:cf:d8:e0:01:45:d1:04:72:61:41:30:5a:c0:da:85:ad:58: b1:aa:22:41:5e:a4:c4:3d:c4:45:0b:c3:21:f3:02:bf:0e:81: e3:fd:63:7c:cc:b7:b1:c7:f9:36:37:73:ca:48:b0:f3:5f:f3: 11:64:e0:4b:fa:66:cb:92:f9:a4:c9:64:69:6c:d5:1a:f1:8c: 6d:23:1b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4NkYxMTAvBgNVBAUTKDZCQUREN0Q1RDExMjgxMTJENzBBQjRBMjQ1MjQwMTQy OEY5RDA5N0IwHhcNMjUwNTExMDI1MzQ3WhcNMjUwNTE4MDI1MzQ3WjAYMRYwFAYD VQQDEw02ODIwMTEzYi02MzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKm4RaGpz/RfitiRXPq5VVpSfuVo+X0HQI0pBhfEzp0OkeG7v8WeSFVC9CNd KZI3xZJ5erlBrTFiP2Wu+hMCl4uKDpTf0gtS/nAC7JuGEp8yx0WU86w5YiZAI6wn vQx42pqPhxxf1MdNQsi1Ejd3xPu7+Yhml281yMF2XbOdGSfd5Gozfe2xqkgX3N3x rnGgjvYlKxG6a+M88KoDOLlGCaYVHa22IMx7ANh+PvZ94Y2slEQdn5w2KDm2icFm f0cPN8+RitjyGBDtXuiymdWxABh5jIK8m0jT8SlLFSGsHKY7O7Km9aBNFiABHgvg 5bTfCrSxRvRs48CgJ1sMBvi2kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNddfanQ P/l/c/cMgQVxLGa4nqT1MB8GA1UdIwQYMBaAFGut19XREoES1wq0okUkAUKPnQl7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzg2Ri80N0JBMjhBRTEz RjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dSTFhDclNpUlNRQlFvLWRD WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2M1gxZEVTZ1JMWENyU2lSU1FCUW8tZENYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qzg2Ri80N0JBMjhBRTEzRjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dS TFhDclNpUlNRQlFvLWRDWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfUpYa10BU0G0g/F4QBVdxdS4HjuyYinVQubGjCbKVlJzPk4J/rt3t eGiATuy45hjNXVNKF558pea6XAIbBoxVyYLA14eEPIKz0ZETFke3wlJTX3xu8vrl UDu9OkBWZ3MpkvVYUNcnYkfiqRq8duMVKI0ks45i8f0yhPDBqNichxePYL9cgEG8 aCNBIc9a2ZdB8g4xVnq8IQJKS5obR+GZ3AnAc2h+cOYHMIVOMEksRBsGa+Dcz9jg AUXRBHJhQTBawNqFrVixqiJBXqTEPcRFC8Mh8wK/DoHj/WN8zLexx/k2N3PKSLDz X/MRZOBL+mbLkvmkyWRpbNUa8YxtIxt1 -----END CERTIFICATE-----Generated at Mon May 12 22:27:50 2025 by rpki-client