$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: prE1gHCBuZuDTz0QnDKd99Hc27hL+Cbg5Hjjhzo/FVg= Subject key identifier: 14:8E:07:97:94:D3:2E:96:42:8A:69:AA:8F:3B:6D:74:49:B6:7B:E2 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 1080 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 106D Signing time: Thu 08 May 2025 17:26:11 +0000 Manifest this update: Thu 08 May 2025 17:26:11 +0000 Manifest next update: Thu 15 May 2025 17:26:11 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: WLJUM2qB0sQhezUBngnsnjjJZGv98Xg9MnU7UqCGReo=) 2: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: zHchOODRMXh4YPNN1A7mCb7XiL/ujTp4cFUjm4qxBCU=) 3: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: ZDjZETXLZ7zFreIAvqJ7UMCHnkhV8V9TxpsSD145ZBI=) 4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: 1iubQBpsLSvGnn+Mx1GBJRtm0BcqUW85CF15NJsmWt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 17:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4224 (0x1080) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: May 8 17:26:11 2025 GMT Not After : May 15 17:26:11 2025 GMT Subject: CN=681ce933-2be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:6a:94:ae:4d:b6:e9:fb:a7:e9:55:70:e7: db:b9:6c:37:ea:3f:5c:0c:11:83:65:81:c2:ab:45: b0:d9:b9:f4:b0:6c:44:1e:4d:1a:b1:ab:a8:ad:b7: 7f:74:aa:f6:d0:76:c9:16:91:63:78:c4:90:87:9c: 5b:79:14:bb:5e:00:11:29:c8:e6:d4:67:08:33:89: 3b:9b:84:c1:df:a3:03:c4:0a:2c:61:d1:28:d4:4d: 72:af:f1:6b:d2:62:48:73:b7:0b:de:6c:de:3d:50: ef:96:5d:8b:df:0b:b1:0e:7f:36:6b:8e:7c:d9:8a: 41:12:af:29:bf:7c:00:0d:14:e5:4c:d6:56:a6:2d: 93:7b:cb:3b:01:ac:37:66:e6:b2:29:62:1c:df:b5: fe:8b:34:ba:95:d3:fb:61:38:87:68:e3:e0:d8:fc: d8:ec:ec:5e:1d:af:ae:3a:aa:6b:b4:a0:a8:f3:c5: 5a:e9:67:43:e3:be:09:4d:a5:55:22:f6:8d:5a:68: da:68:cb:40:37:69:aa:54:0e:a7:d8:1f:de:08:aa: f1:3c:32:f4:76:06:1c:57:2d:9e:2d:c8:f6:b4:e5: b9:05:ec:45:0a:e9:0c:9e:93:0c:64:d2:9d:9e:7a: 87:22:76:9e:30:73:7e:72:f7:28:6c:ee:bc:9e:25: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8E:07:97:94:D3:2E:96:42:8A:69:AA:8F:3B:6D:74:49:B6:7B:E2 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:ca:c8:11:b8:35:f3:37:62:0a:3d:ad:b4:ac:ba:18:0e:81: ac:06:9f:31:5d:01:14:84:dd:db:79:d2:01:cb:0f:33:bb:4f: 1e:a4:73:ed:ba:90:e7:8d:d0:a5:c2:9a:7a:88:03:6d:3e:f7: 3b:48:8a:2a:31:95:1a:0b:3e:c5:b0:e0:75:53:66:42:86:f0: ca:3b:88:0f:2d:fc:86:dd:d7:d0:01:e7:f3:20:42:a1:0c:98: e3:be:3a:e1:61:69:1c:c1:79:86:d7:71:42:cb:26:b6:a0:e9: 8c:4c:3a:8e:91:4a:9e:94:38:2b:66:03:b1:c2:02:25:a8:b0: 42:3e:34:f2:4f:6b:96:1b:3a:e8:7e:31:5c:a8:34:bf:97:50: 29:44:46:61:9e:86:32:b8:c7:1f:36:d9:94:ff:03:ca:d5:fd: 10:36:a2:f3:e6:33:24:be:d3:7c:02:f4:4a:d0:2c:b5:1f:fa: 44:82:ad:c8:a0:45:f1:c8:12:8b:78:05:84:0e:29:33:52:e8: 53:80:f1:0f:e2:04:17:55:a9:d3:1e:32:98:be:e2:b2:20:df: 32:36:5e:95:70:6f:f5:5c:fa:90:68:47:43:1e:9a:d3:7a:88: a5:bf:97:c0:d1:2c:e8:42:19:d2:ba:75:57:a0:66:fa:2b:c5: 9b:98:51:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjUwNTA4MTcyNjExWhcNMjUwNTE1MTcyNjExWjAYMRYwFAYD VQQDEw02ODFjZTkzMy0yYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVFqlK5Ntun7p+lVcOfbuWw36j9cDBGDZYHCq0Ww2bn0sGxEHk0asauorbd/ dKr20HbJFpFjeMSQh5xbeRS7XgARKcjm1GcIM4k7m4TB36MDxAosYdEo1E1yr/Fr 0mJIc7cL3mzePVDvll2L3wuxDn82a4582YpBEq8pv3wADRTlTNZWpi2Te8s7Aaw3 ZuayKWIc37X+izS6ldP7YTiHaOPg2PzY7OxeHa+uOqprtKCo88Va6WdD474JTaVV IvaNWmjaaMtAN2mqVA6n2B/eCKrxPDL0dgYcVy2eLcj2tOW5BexFCukMnpMMZNKd nnqHInaeMHN+cvcobO68niVVlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSOB5eU 0y6WQoppqo87bXRJtnviMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5ysgRuDXzN2IKPa20rLoYDoGsBp8xXQEUhN3bedIByw8zu08epHPt upDnjdClwpp6iANtPvc7SIoqMZUaCz7FsOB1U2ZChvDKO4gPLfyG3dfQAefzIEKh DJjjvjrhYWkcwXmG13FCyya2oOmMTDqOkUqelDgrZgOxwgIlqLBCPjTyT2uWGzro fjFcqDS/l1ApREZhnoYyuMcfNtmU/wPK1f0QNqLz5jMkvtN8AvRK0Cy1H/pEgq3I oEXxyBKLeAWEDikzUuhTgPEP4gQXVanTHjKYvuKyIN8yNl6VcG/1XPqQaEdDHprT eoilv5fA0SzoQhnSunVXoGb6K8WbmFEL -----END CERTIFICATE-----Generated at Fri May 9 03:00:01 2025 by rpki-client