$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json) Hash identifier: Fl8dijyhb3GDlEWcojMic1N8uVo8I5WdC+oewc60mcI= Subject key identifier: 89:31:3C:AC:91:4C:75:2A:CC:0A:73:7A:67:2F:76:6B:87:7F:4F:23 Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft Manifest number: 0164 Signing time: Tue 13 May 2025 03:11:43 +0000 Manifest this update: Tue 13 May 2025 03:11:43 +0000 Manifest next update: Tue 20 May 2025 03:11:43 +0000 Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: VGCF73VtD13Fds0zZ2p+tcFtMFimA9SztsbMDpaNrdA=) 2: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: sG8+UmvydEBpSAr4fmNDZH+yixCCNVcNuUvyoD1Dy2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: May 13 03:11:43 2025 GMT Not After : May 20 03:11:43 2025 GMT Subject: CN=6822b86f-3ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:29:bf:58:ea:96:d6:28:66:b2:e4:dc:00: 61:0b:a2:69:cb:91:fa:07:9f:39:e2:06:cd:32:b0: b7:ef:ac:ef:f5:b7:88:cf:f7:b4:ce:6a:df:5f:a2: 00:96:c1:67:29:b3:23:33:c2:b3:9f:40:04:bb:5e: cc:e0:0a:9b:30:08:e7:a7:ba:a9:ee:42:ed:fb:65: 49:31:69:a0:b4:5c:dc:1f:26:e7:aa:fb:57:52:cb: 17:e9:2f:e3:97:73:bc:cd:c0:9d:62:32:3f:f0:ea: a8:4c:56:cf:e5:2c:76:3b:10:ce:cc:dd:77:06:25: 31:b5:56:4b:6a:35:84:c4:ab:ac:b8:ca:fc:c2:56: 89:4b:f3:92:c5:fe:bc:36:c7:e8:08:ac:65:76:22: 7e:dc:04:a7:e8:f2:f3:c8:70:3b:2e:ff:d3:ed:21: a5:82:96:4a:76:0f:36:d9:02:18:e9:d4:53:54:84: 2b:ea:17:61:d4:88:50:e4:eb:d8:64:45:97:a7:84: b8:2b:b1:39:82:86:fc:6f:da:11:32:bd:de:08:cb: ef:0d:d2:d7:96:dd:b0:ed:0a:7f:89:75:68:50:44: 67:fd:fa:c8:12:e9:88:16:9f:fc:36:fe:9f:0e:9a: 9f:21:66:02:3c:f7:18:d4:ed:2d:eb:a7:d9:2c:f1: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:31:3C:AC:91:4C:75:2A:CC:0A:73:7A:67:2F:76:6B:87:7F:4F:23 X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:25:18:44:ab:2e:57:b1:39:60:c5:3c:37:8f:ca:40:df:6d: 46:16:35:88:39:4e:92:66:12:a9:64:4f:57:88:a3:9c:f9:a1: 1e:57:ad:d2:bd:4c:89:b3:7b:1a:c0:6c:bd:97:4c:2c:40:39: e8:1f:66:9a:61:e9:93:4c:3a:2f:9d:76:fa:99:2a:d2:f4:e7: 03:10:b8:80:b0:d7:5c:89:4c:83:72:62:74:93:28:ba:47:1c: 9b:4d:a3:bf:08:60:7b:89:d5:5f:20:a3:15:2a:8e:05:ae:e8: 5a:f8:01:eb:a4:4d:4c:57:e9:77:f4:49:37:df:cf:7a:3f:91: 03:2d:96:8b:ba:8e:57:f0:c5:99:d0:31:81:ce:03:60:c9:6a: 34:e1:c0:fb:a4:07:34:75:01:79:3c:85:4e:35:7b:e6:57:3e: 1b:e4:ec:17:56:bd:a4:69:7b:fa:40:fa:67:21:43:ac:53:80: 02:62:9e:0f:f9:ad:9b:10:00:95:3a:7e:b6:e5:d4:3f:90:19: 8f:08:13:c9:a5:d1:55:87:cc:05:fe:36:cf:53:e3:47:8e:7f: 7d:3c:aa:76:eb:d6:33:ae:be:6f:ea:f0:d4:27:e8:a5:27:fa: 37:f3:b5:9b:2f:f3:36:e4:5a:64:d7:5a:6a:00:d9:5a:ae:45: 78:62:c6:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjUwNTEzMDMxMTQzWhcNMjUwNTIwMDMxMTQzWjAYMRYwFAYD VQQDEw02ODIyYjg2Zi0zZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl4pv1jqltYoZrLk3ABhC6Jpy5H6B5854gbNMrC376zv9beIz/e0zmrfX6IA lsFnKbMjM8Kzn0AEu17M4AqbMAjnp7qp7kLt+2VJMWmgtFzcHybnqvtXUssX6S/j l3O8zcCdYjI/8OqoTFbP5Sx2OxDOzN13BiUxtVZLajWExKusuMr8wlaJS/OSxf68 NsfoCKxldiJ+3ASn6PLzyHA7Lv/T7SGlgpZKdg822QIY6dRTVIQr6hdh1IhQ5OvY ZEWXp4S4K7E5gob8b9oRMr3eCMvvDdLXlt2w7Qp/iXVoUERn/frIEumIFp/8Nv6f DpqfIWYCPPcY1O0t66fZLPGcMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkxPKyR THUqzApzemcvdmuHf08jMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5 S1RTVFhuVWdjaXZWTXoyazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9JRhEqy5XsTlgxTw3j8pA321GFjWIOU6SZhKpZE9XiKOc+aEeV63S vUyJs3sawGy9l0wsQDnoH2aaYemTTDovnXb6mSrS9OcDELiAsNdciUyDcmJ0kyi6 RxybTaO/CGB7idVfIKMVKo4Fruha+AHrpE1MV+l39Ek33896P5EDLZaLuo5X8MWZ 0DGBzgNgyWo04cD7pAc0dQF5PIVONXvmVz4b5OwXVr2kaXv6QPpnIUOsU4ACYp4P +a2bEACVOn625dQ/kBmPCBPJpdFVh8wF/jbPU+NHjn99PKp269Yzrr5v6vDUJ+il J/o387WbL/M25Fpk11pqANlarkV4YsaP -----END CERTIFICATE-----Generated at Tue May 13 21:41:27 2025 by rpki-client