$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: fm5SDQBH89jXhGWcOm7IDgA+kbhUBsWiQsNmbvE2xA8= Subject key identifier: 17:B4:CD:06:36:2A:CC:FC:4A:CA:60:1D:B3:E6:9C:95:C9:50:00:0A Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: 75 Signing time: Thu 15 May 2025 06:07:57 +0000 Manifest this update: Thu 15 May 2025 06:07:57 +0000 Manifest next update: Thu 22 May 2025 06:07:56 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: FRpyRhv2s36VkAtFNVCVcQWKD93oRIGYbx0qcrdFbfE=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: May 15 06:07:57 2025 GMT Not After : May 22 06:07:56 2025 GMT Subject: CN=682584bd-5e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:6a:98:99:39:8d:30:d1:9b:6e:f9:73:b0: c6:77:ac:2e:43:e5:8b:ee:c3:6f:1b:3b:34:12:cd: 88:71:6f:e8:34:92:68:6d:3f:c5:a7:d0:fb:34:c4: 6b:7c:e1:b4:80:5f:ef:e3:1f:41:1e:2a:dd:59:4f: 70:5c:eb:21:ee:ff:d5:8c:e2:e9:1c:d1:2e:cb:e5: d5:04:c3:e9:00:43:bf:31:b3:e9:bc:86:70:4d:bb: 8e:a5:ba:b2:61:43:d7:07:81:3f:57:01:6e:e0:63: d2:f1:34:19:d7:2f:75:7b:da:37:ce:76:27:7a:06: 52:21:f0:1a:5e:67:ef:f4:44:f6:f6:58:49:ef:c6: cc:49:fb:26:5f:71:d8:b8:2f:db:e6:0f:c8:2d:c3: 1f:01:22:ab:28:f6:80:92:ec:ee:24:c0:65:f5:f6: 4d:6f:c4:f0:56:83:a5:14:12:60:04:f6:1f:d2:26: cc:23:19:04:39:e5:38:fb:03:da:c2:91:e4:b6:92: 9b:f3:34:c8:95:af:62:f5:87:ac:9a:1d:7f:71:7b: a8:b7:c0:b7:16:94:3f:89:0b:50:6c:dc:64:e0:13: d6:ba:98:89:ae:e7:67:17:cd:ea:33:cc:a7:2a:61: 10:81:d9:5a:07:7a:b4:60:85:f7:5e:66:16:e5:aa: 5f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:CD:06:36:2A:CC:FC:4A:CA:60:1D:B3:E6:9C:95:C9:50:00:0A X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ed:8f:e5:ea:11:1c:97:c8:cb:6c:42:b7:44:1d:2b:d0:6b: de:89:ae:dd:f3:8a:9e:49:9c:af:ac:cc:79:83:af:58:1b:f3: 11:d0:87:3e:ff:82:a1:73:0b:55:43:17:bc:84:da:df:bc:88: 2b:94:53:ac:a9:4b:e9:72:74:5f:61:34:ab:d0:06:18:ed:3b: c5:e3:b9:94:fe:80:4b:e5:da:4a:a4:af:ec:b6:94:16:65:da: 12:16:f7:ad:80:a8:fc:29:c6:94:a9:99:23:a4:96:bf:29:86: 7d:5b:56:f9:65:e3:30:e6:b0:79:d2:64:ad:e8:bb:8a:8a:a2: ab:8d:93:ef:54:b3:75:ce:cd:1b:ac:a3:54:12:85:4a:91:76: df:ea:21:7a:28:a0:63:57:fd:cc:d1:42:9b:f0:81:b5:b8:53: 8d:2a:76:61:44:ac:01:89:52:b2:74:a7:8f:d5:57:1f:db:2c: bb:cb:c4:18:01:4a:71:06:87:73:0f:0a:2d:f5:34:e0:c2:9f: c7:e3:f8:fd:26:eb:f2:8a:33:0a:e2:10:40:72:d1:5c:a7:71: ac:af:1d:64:8f:08:c6:4e:92:22:d6:2a:62:6a:fd:ad:2e:0e: d2:76:18:eb:cb:2c:c5:05:b2:3a:9c:5f:c3:3b:18:ed:89:6e: 5e:d2:d6:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0E5MjExMC8GA1UEBRMoNkE0NThBQjBGQzU2MjgyOTMzMTgzRDQ2ODA1MUJGQzUw NzkxMTYzMjAeFw0yNTA1MTUwNjA3NTdaFw0yNTA1MjIwNjA3NTZaMBgxFjAUBgNV BAMTDTY4MjU4NGJkLTVlNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBOGqYmTmNMNGbbvlzsMZ3rC5D5Yvuw28bOzQSzYhxb+g0kmhtP8Wn0Ps0xGt8 4bSAX+/jH0EeKt1ZT3Bc6yHu/9WM4ukc0S7L5dUEw+kAQ78xs+m8hnBNu46lurJh Q9cHgT9XAW7gY9LxNBnXL3V72jfOdid6BlIh8BpeZ+/0RPb2WEnvxsxJ+yZfcdi4 L9vmD8gtwx8BIqso9oCS7O4kwGX19k1vxPBWg6UUEmAE9h/SJswjGQQ55Tj7A9rC keS2kpvzNMiVr2L1h6yaHX9xe6i3wLcWlD+JC1Bs3GTgE9a6mImu52cXzeozzKcq YRCB2VoHerRghfdeZhblql9vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF7TNBjYq zPxKymAds+aclclQAAowHwYDVR0jBBgwFoAUakWKsPxWKCkzGD1GgFG/xQeRFjIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQTkyLzk5OUU4RUFDODdC RTExRUZCQzQxQzI2OEM0RjlBRTAyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZq SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtXS3NQeFdLQ2t6R0QxR2dGR194UWVSRmpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QTkyLzk5OUU4RUFDODdCRTExRUZCQzQxQzI2OEM0RjlBRTAyL2FrV0tzUHhXS0Nr ekdEMUdnRkdfeFFlUkZqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABXtj+XqERyXyMtsQrdEHSvQa96Jrt3zip5JnK+szHmDr1gb8xHQhz7/ gqFzC1VDF7yE2t+8iCuUU6ypS+lydF9hNKvQBhjtO8XjuZT+gEvl2kqkr+y2lBZl 2hIW962AqPwpxpSpmSOklr8phn1bVvll4zDmsHnSZK3ou4qKoquNk+9Us3XOzRus o1QShUqRdt/qIXoooGNX/czRQpvwgbW4U40qdmFErAGJUrJ0p4/VVx/bLLvLxBgB SnEGh3MPCi31NODCn8fj+P0m6/KKMwriEEBy0VyncayvHWSPCMZOkiLWKmJq/a0u DtJ2GOvLLMUFsjqcX8M7GO2Jbl7S1go= -----END CERTIFICATE-----Generated at Sat May 17 07:21:27 2025 by rpki-client