$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: WJvyk3XlL36cx0ankseuxWRznTk0jTRKiE4z8ZWgcLA= Subject key identifier: 2A:A6:04:72:6D:97:1D:C3:10:D6:6F:0D:E9:7E:96:4A:41:85:11:0D Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 18CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 18AC Signing time: Wed 14 May 2025 16:34:01 +0000 Manifest this update: Wed 14 May 2025 16:34:00 +0000 Manifest next update: Wed 21 May 2025 16:34:00 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: iDTwySKregKaPfS5K9HVRQ2qR7P9TnJPKqk5OeV4Eu0=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: dkIdUkxS0d2PbrqHHzMK0XKv4nvJXGsXU3jrSo/hWKk=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: Bm6Hg3gh1j1a80wR2XX7xwyi1WY27Wumi8LE07BcSR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6346 (0x18ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: May 14 16:34:00 2025 GMT Not After : May 21 16:34:00 2025 GMT Subject: CN=6824c5f9-0626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:25:96:21:84:07:f9:e8:51:fe:14:89:ef: 45:75:17:56:92:32:95:32:cd:a5:ce:05:5e:8d:d4: e6:18:10:9a:dd:dc:da:df:a8:13:8d:60:38:42:9b: cf:95:b3:5c:d9:33:12:45:91:78:8f:e4:a2:ff:61: 3c:ca:d6:a0:a9:3f:17:c8:87:19:a9:07:dd:3b:a1: ce:b8:c1:c5:09:73:75:d2:08:f2:38:f5:d8:ad:4f: 4c:65:37:53:c5:df:12:c1:bc:aa:3b:f1:fb:46:f2: 15:f3:fb:91:e6:76:60:99:b3:22:48:d6:c7:03:38: fc:14:04:70:86:6c:30:ab:34:f7:7c:8d:97:ba:bc: 75:ab:c3:57:25:95:0d:e6:e7:b7:2c:31:74:b2:f4: 52:59:96:c1:40:43:45:d4:38:0d:d6:39:6a:c0:93: 41:7c:cc:1e:fe:54:9a:bb:7d:5f:db:30:47:36:a7: 82:35:1f:b1:a7:62:84:33:51:30:52:cb:19:de:bb: e6:2c:b7:da:ab:93:87:6e:39:f6:76:ce:20:62:26: c3:08:78:2f:c4:68:5e:22:51:6b:69:19:7d:7a:6c: 36:22:9d:76:2d:d9:a1:48:95:cd:5b:75:d2:5a:5c: 7e:e9:9a:8b:d1:3d:bd:dd:a8:0b:62:c8:35:8f:74: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A6:04:72:6D:97:1D:C3:10:D6:6F:0D:E9:7E:96:4A:41:85:11:0D X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ff:da:e7:41:e4:a0:95:27:70:0e:00:fa:f9:60:0c:68:68: dc:db:37:fc:b0:44:13:5c:37:01:31:75:bc:af:89:7e:f5:71: 4f:ac:f4:56:cb:06:02:58:01:5e:15:c6:bb:39:ed:59:83:e8: e4:40:fa:fe:4d:fb:03:be:c3:61:37:19:4b:7d:79:96:f5:a0: 4f:40:cb:f5:37:ce:f9:38:63:37:eb:63:46:8b:97:4e:09:0d: d6:58:46:d4:69:fa:1a:1d:be:9f:54:d9:58:2f:f6:9d:60:cc: da:ac:0e:9f:73:c1:f1:38:73:fc:96:85:3d:9c:63:ac:d8:f4: 9b:89:8c:dd:ea:7e:6a:cb:e1:45:79:5b:57:df:bd:17:f1:fe: 44:f2:3b:65:19:58:f1:0c:c7:68:44:93:f0:8e:56:a4:51:62: 77:70:93:e6:c9:3d:a6:c7:50:c0:2f:21:99:f6:30:04:18:f3: 36:43:fb:eb:c5:f5:d5:c5:6c:d3:10:f3:c9:6e:99:f2:62:6d: d3:3e:e4:13:67:ec:67:73:fa:36:4b:29:ac:56:36:2a:69:61: 70:6a:a7:72:0f:cc:fc:5f:10:7f:88:8d:d3:c4:fa:c4:c4:0b: 5a:0d:da:b0:da:7d:ce:06:86:8c:92:f0:f7:78:74:0d:95:ac: 9a:ab:ab:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjUwNTE0MTYzNDAwWhcNMjUwNTIxMTYzNDAwWjAYMRYwFAYD VQQDEw02ODI0YzVmOS0wNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZolliGEB/noUf4Uie9FdRdWkjKVMs2lzgVejdTmGBCa3dza36gTjWA4QpvP lbNc2TMSRZF4j+Si/2E8ytagqT8XyIcZqQfdO6HOuMHFCXN10gjyOPXYrU9MZTdT xd8SwbyqO/H7RvIV8/uR5nZgmbMiSNbHAzj8FARwhmwwqzT3fI2Xurx1q8NXJZUN 5ue3LDF0svRSWZbBQENF1DgN1jlqwJNBfMwe/lSau31f2zBHNqeCNR+xp2KEM1Ew UssZ3rvmLLfaq5OHbjn2ds4gYibDCHgvxGheIlFraRl9emw2Ip12LdmhSJXNW3XS Wlx+6ZqL0T293agLYsg1j3QQiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqmBHJt lx3DENZvDel+lkpBhRENMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk/9rnQeSglSdwDgD6+WAMaGjc2zf8sEQTXDcBMXW8r4l+9XFPrPRW ywYCWAFeFca7Oe1Zg+jkQPr+TfsDvsNhNxlLfXmW9aBPQMv1N875OGM362NGi5dO CQ3WWEbUafoaHb6fVNlYL/adYMzarA6fc8HxOHP8loU9nGOs2PSbiYzd6n5qy+FF eVtX370X8f5E8jtlGVjxDMdoRJPwjlakUWJ3cJPmyT2mx1DALyGZ9jAEGPM2Q/vr xfXVxWzTEPPJbpnyYm3TPuQTZ+xnc/o2SymsVjYqaWFwaqdyD8z8XxB/iI3TxPrE xAtaDdqw2n3OBoaMkvD3eHQNlayaq6ua -----END CERTIFICATE-----Generated at Fri May 16 13:40:49 2025 by rpki-client