$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json) Hash identifier: 2dw0VtqE1nIqrnRLOX8dUdF7XW1+qpIfJBTOKzUjnmc= Subject key identifier: 4D:79:CB:32:E2:D5:6A:A7:9A:69:B4:BD:5F:7F:50:0B:52:A0:F1:BE Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft Manifest number: 081F Signing time: Sat 10 May 2025 20:31:26 +0000 Manifest this update: Sat 10 May 2025 20:31:25 +0000 Manifest next update: Sat 17 May 2025 20:31:25 +0000 Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: RBJkrHhLSdIThTF0DHKjIT98PbR8QKXEVsC4QkK1TCM=) 2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: OISPqX+sjE+FviBwbW316CZ6fba2RRqY67rA1yB66hs=) 3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: 7eZAVrRcBGBKFlQHZK9vBEWzwyr7ij0OTTCgEmnjTCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: May 10 20:31:25 2025 GMT Not After : May 17 20:31:25 2025 GMT Subject: CN=681fb79e-e6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:f8:81:cf:ce:05:5d:7f:ca:c0:50:3f:37: 48:eb:fd:b9:12:f3:bf:a7:df:90:34:8f:29:63:f9: 1c:04:06:d5:07:30:fd:09:9d:3f:4c:d4:fc:15:d1: a9:3a:cf:5d:78:f6:71:9c:dc:57:81:a5:ec:cc:66: 6d:65:25:87:14:f4:7a:3f:c1:e2:b2:77:38:c7:84: 00:e6:c2:f9:54:71:90:ff:c0:cf:5f:2b:c2:02:94: ca:4e:94:eb:eb:fb:18:31:37:63:0b:56:35:82:df: fb:6e:d6:c8:a8:2d:1f:d5:26:2d:01:bc:ce:45:f7: 4d:38:fd:e6:ef:9b:11:aa:6b:f3:36:c7:a5:55:35: eb:f6:4b:04:38:65:9e:2e:3b:57:7b:ed:7d:e8:7c: fa:06:12:33:49:a5:2b:23:b2:87:6b:66:61:d0:c9: 11:64:60:4f:62:50:90:2d:57:9f:d9:c5:d3:ca:1c: 46:2d:b1:53:c3:b6:b1:b4:57:e6:d6:19:58:1c:da: cf:f4:2f:0c:67:b7:6e:cb:71:ff:4d:78:6e:2c:54: cc:dc:85:ad:b1:64:a0:a7:9b:5e:24:30:ab:04:2f: c8:e4:c9:bf:7d:26:c2:d9:a3:a8:88:ac:9c:e0:dd: 60:75:91:07:a2:8c:43:80:0d:6c:5f:e7:3d:60:bf: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:79:CB:32:E2:D5:6A:A7:9A:69:B4:BD:5F:7F:50:0B:52:A0:F1:BE X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:12:ac:8e:b7:f1:3a:34:bd:c2:95:94:b7:fb:22:ac:88:b2: 16:4a:4e:8c:cf:c8:9c:5e:e9:2b:c7:1d:d5:fc:8e:f6:3f:c1: 3c:6d:9c:32:84:a6:43:63:cb:b9:f8:9c:f7:cf:1f:1e:50:c6: ed:ca:c0:c8:5d:4e:98:7b:12:f7:5b:80:06:88:04:85:a9:6c: c1:82:85:60:72:c2:62:41:67:5b:b7:07:b8:42:78:39:47:27: d1:ba:ad:47:87:0a:2b:d0:38:4e:97:50:49:cb:70:04:22:29: a4:62:31:1c:ce:66:d8:5e:7e:f6:b0:93:02:43:31:ea:50:c7: 32:c1:c7:cb:13:67:d8:48:d3:b6:42:14:0f:74:d4:99:ff:a1: bb:30:72:df:48:a4:63:da:7d:9f:9c:0d:24:e4:3b:43:71:aa: 86:28:9f:ff:ab:0e:69:f6:2e:51:e3:51:5b:38:25:77:40:0f: b9:7f:eb:94:78:93:1e:f7:51:b4:23:b1:97:c0:2a:c8:ac:5c: f4:03:d1:e0:94:0d:37:aa:3b:d8:17:41:0a:0d:80:d1:13:58: 4c:86:2f:4d:6a:c7:c3:9b:53:c8:0d:61:4d:05:ce:b1:05:d2: e8:31:08:15:c0:8c:40:29:6c:1c:8a:02:86:6f:35:8d:e7:33: 4f:f9:3b:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjUwNTEwMjAzMTI1WhcNMjUwNTE3MjAzMTI1WjAYMRYwFAYD VQQDEw02ODFmYjc5ZS1lNmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+/4gc/OBV1/ysBQPzdI6/25EvO/p9+QNI8pY/kcBAbVBzD9CZ0/TNT8FdGp Os9dePZxnNxXgaXszGZtZSWHFPR6P8Hisnc4x4QA5sL5VHGQ/8DPXyvCApTKTpTr 6/sYMTdjC1Y1gt/7btbIqC0f1SYtAbzORfdNOP3m75sRqmvzNselVTXr9ksEOGWe LjtXe+196Hz6BhIzSaUrI7KHa2Zh0MkRZGBPYlCQLVef2cXTyhxGLbFTw7axtFfm 1hlYHNrP9C8MZ7duy3H/TXhuLFTM3IWtsWSgp5teJDCrBC/I5Mm/fSbC2aOoiKyc 4N1gdZEHooxDgA1sX+c9YL/z8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE15yzLi 1Wqnmmm0vV9/UAtSoPG+MB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjc3RC8xMUUyNTlEMEQyMkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRh ajRwdUtWZzR1Y3J3RTJRMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEEqyOt/E6NL3ClZS3+yKsiLIWSk6Mz8icXukrxx3V/I72P8E8bZwy hKZDY8u5+Jz3zx8eUMbtysDIXU6YexL3W4AGiASFqWzBgoVgcsJiQWdbtwe4Qng5 RyfRuq1Hhwor0DhOl1BJy3AEIimkYjEczmbYXn72sJMCQzHqUMcywcfLE2fYSNO2 QhQPdNSZ/6G7MHLfSKRj2n2fnA0k5DtDcaqGKJ//qw5p9i5R41FbOCV3QA+5f+uU eJMe91G0I7GXwCrIrFz0A9HglA03qjvYF0EKDYDRE1hMhi9NasfDm1PIDWFNBc6x BdLoMQgVwIxAKWwcigKGbzWN5zNP+Ttz -----END CERTIFICATE-----Generated at Sun May 11 22:57:40 2025 by rpki-client