$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: Erw2vshNob7b6EXJ3OvDzqH3JG0uzQubfdhCEmcIKXE= Subject key identifier: CB:38:61:52:40:66:71:60:05:4F:B9:B9:0A:E5:D2:7B:9D:56:D6:22 Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 067B Signing time: Sat 10 May 2025 22:02:15 +0000 Manifest this update: Sat 10 May 2025 22:02:15 +0000 Manifest next update: Sat 17 May 2025 22:02:15 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: coUzwiD4mF3rkw1BhtQIBmb7Z6DlcXHeKV6ln+8DZoM=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: May 10 22:02:15 2025 GMT Not After : May 17 22:02:15 2025 GMT Subject: CN=681fcce7-c213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c9:b6:fc:72:96:dd:4d:29:0c:8d:95:5b:7f: 01:71:f0:01:85:3a:6f:e3:f3:9f:40:f0:e6:29:06: fd:34:78:0a:ec:c9:07:d2:a2:93:b1:db:2d:3b:4b: 4a:20:1a:91:46:ed:56:26:a8:b0:2a:83:18:6f:83: b1:a4:37:4c:6e:65:45:04:ce:12:d6:86:2d:a8:65: 83:a2:18:b7:c0:c0:35:d4:6e:80:cc:d6:3e:81:31: ab:02:dc:a6:6f:95:c5:fc:d7:c1:35:15:b8:25:de: c4:13:40:36:89:82:9c:2d:70:7f:89:03:6c:cd:f0: 2a:89:61:45:7c:2a:e5:43:4d:5a:bf:65:55:42:1a: 2d:04:11:67:1d:d8:5a:78:80:e1:24:f4:0a:2a:67: 38:65:74:7d:57:1e:02:7d:14:88:70:43:fb:9f:d2: 3f:9c:97:68:68:59:e4:bc:82:1b:12:73:d3:b6:41: dc:b4:9a:9c:78:d8:a0:61:26:f1:54:f4:86:0e:53: 47:da:25:3a:37:32:28:56:eb:a7:99:81:36:b8:38: 2d:32:04:f1:57:1d:6f:fd:6b:90:f7:5d:70:80:7b: 87:03:a7:ee:7f:37:68:0a:0f:6d:5a:87:5d:43:65: a9:f6:64:7f:84:57:e9:33:dc:13:3f:d7:f1:2d:23: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:38:61:52:40:66:71:60:05:4F:B9:B9:0A:E5:D2:7B:9D:56:D6:22 X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:19:42:ce:b7:af:2f:87:2d:1b:42:5f:07:b0:14:21:18:db: 70:c2:5a:e4:87:53:e0:75:08:06:13:6e:97:5c:de:31:3d:28: 9d:0c:86:8d:7a:03:b6:c1:d0:61:0f:9b:da:92:c5:ac:05:7f: 25:a0:de:79:b5:c6:c3:c3:17:3d:8c:7c:bc:bf:1b:3c:73:a2: 51:49:56:2c:6f:1d:e7:91:25:94:ae:ab:6e:2b:0f:19:24:a9: ad:ed:52:25:c3:39:e6:70:28:35:f5:77:33:ca:45:71:de:50: ce:aa:3e:48:00:12:89:7e:2a:f6:b1:89:b1:cc:11:d6:45:0b: 41:08:cc:d3:ff:ba:46:6d:68:d3:29:ef:67:09:dc:32:22:a8: 26:99:e0:b9:e4:5e:1b:74:80:04:40:ef:6c:3e:1d:c5:e7:46: 2a:70:03:7e:13:d5:69:fb:f1:3c:69:37:cb:30:54:68:45:94: 87:49:f8:78:4d:ea:ca:44:27:9a:e3:14:60:9b:8d:bb:52:75: b6:52:e1:23:15:4c:66:55:fb:90:e2:7d:87:b7:d8:20:78:1e: bc:d3:1b:87:22:20:2b:15:36:6f:18:82:d0:3c:a7:f4:2d:a8: a7:4b:1d:22:ae:72:e3:c7:ab:d7:7b:1f:fa:0e:cd:81:f4:32: 47:10:27:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjUwNTEwMjIwMjE1WhcNMjUwNTE3MjIwMjE1WjAYMRYwFAYD VQQDEw02ODFmY2NlNy1jMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsm2/HKW3U0pDI2VW38BcfABhTpv4/OfQPDmKQb9NHgK7MkH0qKTsdstO0tK IBqRRu1WJqiwKoMYb4OxpDdMbmVFBM4S1oYtqGWDohi3wMA11G6AzNY+gTGrAtym b5XF/NfBNRW4Jd7EE0A2iYKcLXB/iQNszfAqiWFFfCrlQ01av2VVQhotBBFnHdha eIDhJPQKKmc4ZXR9Vx4CfRSIcEP7n9I/nJdoaFnkvIIbEnPTtkHctJqceNigYSbx VPSGDlNH2iU6NzIoVuunmYE2uDgtMgTxVx1v/WuQ911wgHuHA6fufzdoCg9tWodd Q2Wp9mR/hFfpM9wTP9fxLSNDrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs4YVJA ZnFgBU+5uQrl0nudVtYiMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8GULOt68vhy0bQl8HsBQhGNtwwlrkh1PgdQgGE26XXN4xPSidDIaN egO2wdBhD5vaksWsBX8loN55tcbDwxc9jHy8vxs8c6JRSVYsbx3nkSWUrqtuKw8Z JKmt7VIlwznmcCg19XczykVx3lDOqj5IABKJfir2sYmxzBHWRQtBCMzT/7pGbWjT Ke9nCdwyIqgmmeC55F4bdIAEQO9sPh3F50YqcAN+E9Vp+/E8aTfLMFRoRZSHSfh4 TerKRCea4xRgm427UnW2UuEjFUxmVfuQ4n2Ht9ggeB680xuHIiArFTZvGILQPKf0 LainSx0irnLjx6vXex/6Ds2B9DJHECe1 -----END CERTIFICATE-----Generated at Sun May 11 13:52:23 2025 by rpki-client