$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json) Hash identifier: 86wDQm01OytkYuZDYMvr56qvkUDsss57JGjmWf4WkME= Subject key identifier: D7:EF:85:C4:B8:CA:98:C6:77:68:0F:6C:61:AC:AC:0C:55:DA:70:74 Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1E2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft Manifest number: 1E0F Signing time: Thu 08 May 2025 16:09:38 +0000 Manifest this update: Thu 08 May 2025 16:09:37 +0000 Manifest next update: Thu 15 May 2025 16:09:37 +0000 Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: LwSqkhT+errn/W2uczNj1DQCuHR/VkoIluYf/F8gnzA=) 2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=) 3: BD314CEA619711EE81211277C4F9AE02.roa (hash: pyylUNX9LlmDbhjQ7Mn/l8NCaA1ACQcAW5FWWwcceq0=) 4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: 01F6A8KAEiWwfIj9UacQjLscVPBcvyK/XHWq85nJWZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 16:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7726 (0x1e2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: May 8 16:09:37 2025 GMT Not After : May 15 16:09:37 2025 GMT Subject: CN=681cd742-c9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:bf:84:4a:06:be:b7:ce:23:5d:27:80:48: 3c:39:3f:43:ae:39:48:ee:b0:39:8d:18:bf:d0:3c: a3:ee:44:46:2c:44:98:64:ae:60:b2:72:47:24:a8: 36:45:57:67:cc:61:c4:3c:44:bc:0d:2b:26:30:cb: 14:db:7d:e3:0e:2e:7c:8b:d5:d0:09:d9:eb:1a:43: 9e:39:64:e8:47:83:8b:a5:af:68:72:02:67:60:67: 54:28:ae:75:54:0c:50:65:20:12:7d:72:ab:b0:02: 64:9a:90:48:11:fa:3b:ee:1d:96:c6:29:4c:34:bd: cc:6f:45:e5:6f:92:98:a3:cc:4d:ca:6c:80:e7:99: aa:56:8d:45:98:19:9f:b1:f6:7e:31:46:c4:d9:d3: 59:6b:c7:a5:20:d4:e3:d5:41:27:8d:d9:ca:81:68: 39:fe:c3:fe:6b:55:cd:e1:c8:66:10:96:fa:df:4b: 6a:b6:93:83:26:e9:57:72:4c:ec:3e:c4:9b:44:27: fe:f4:cc:1e:3c:40:8b:35:f3:5b:0a:47:79:25:03: 8e:22:41:cf:36:c4:fd:51:4d:a9:5f:88:6e:38:dd: b9:53:e1:c1:c2:88:60:34:29:0e:eb:9d:2b:9d:64: f7:ac:ed:fb:03:a5:55:0b:a8:dc:72:d1:83:a5:81: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EF:85:C4:B8:CA:98:C6:77:68:0F:6C:61:AC:AC:0C:55:DA:70:74 X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e1:d2:14:a2:cc:69:00:31:55:dd:20:50:57:71:a5:dd:eb: 97:76:82:ec:57:5b:44:83:d8:b3:94:86:8d:03:0b:48:31:ad: a9:49:88:5f:09:31:44:ca:15:64:61:d1:3b:cc:e6:d8:29:3b: 38:d5:34:7e:2f:c0:1d:cf:7f:76:11:dd:00:bc:32:75:d3:ed: bc:16:7a:62:be:f3:14:79:03:22:a4:6b:8d:6f:84:9f:14:29: 86:1a:1c:bd:26:05:3d:5e:a3:b6:64:6b:83:d2:89:82:eb:12: c4:0a:54:de:eb:04:2b:46:bf:2d:82:8c:6a:ba:44:e0:54:07: 4d:a2:d0:61:7b:39:62:1f:a7:cf:50:30:45:71:50:2f:4e:7e: 9a:24:4f:cc:e9:8b:2f:d9:30:f0:df:4a:3e:e0:30:25:e4:b7: 95:52:82:46:a2:fb:7e:1c:d0:cb:37:15:fa:1f:43:fe:d1:5f: d7:9b:99:54:63:9c:fd:fe:8f:05:f9:a3:48:93:bb:59:34:f4: be:4d:67:7b:0d:67:49:27:cc:01:ad:a0:43:37:b0:78:ef:59: 92:ff:62:33:ad:cb:ce:6e:a4:8e:9e:c1:2a:f6:70:d6:b8:56: ea:38:22:3c:6f:e9:a6:4e:9a:9b:e6:db:93:ca:91:5a:7c:c9: bf:c8:5d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjUwNTA4MTYwOTM3WhcNMjUwNTE1MTYwOTM3WjAYMRYwFAYD VQQDEw02ODFjZDc0Mi1jOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSy/hEoGvrfOI10ngEg8OT9DrjlI7rA5jRi/0Dyj7kRGLESYZK5gsnJHJKg2 RVdnzGHEPES8DSsmMMsU233jDi58i9XQCdnrGkOeOWToR4OLpa9ocgJnYGdUKK51 VAxQZSASfXKrsAJkmpBIEfo77h2WxilMNL3Mb0Xlb5KYo8xNymyA55mqVo1FmBmf sfZ+MUbE2dNZa8elINTj1UEnjdnKgWg5/sP+a1XN4chmEJb630tqtpODJulXckzs PsSbRCf+9MwePECLNfNbCkd5JQOOIkHPNsT9UU2pX4huON25U+HBwohgNCkO650r nWT3rO37A6VVC6jcctGDpYGdfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfvhcS4 ypjGd2gPbGGsrAxV2nB0MB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENCNi82N0M2QUE0QThBRjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5 dUVYYWYxRVZWSmdFTHM1R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ4dIUosxpADFV3SBQV3Gl3euXdoLsV1tEg9izlIaNAwtIMa2pSYhf CTFEyhVkYdE7zObYKTs41TR+L8Adz392Ed0AvDJ10+28FnpivvMUeQMipGuNb4Sf FCmGGhy9JgU9XqO2ZGuD0omC6xLEClTe6wQrRr8tgoxqukTgVAdNotBhezliH6fP UDBFcVAvTn6aJE/M6Ysv2TDw30o+4DAl5LeVUoJGovt+HNDLNxX6H0P+0V/Xm5lU Y5z9/o8F+aNIk7tZNPS+TWd7DWdJJ8wBraBDN7B471mS/2IzrcvObqSOnsEq9nDW uFbqOCI8b+mmTpqb5tuTypFafMm/yF3q -----END CERTIFICATE-----Generated at Sat May 10 07:40:47 2025 by rpki-client