$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json) Hash identifier: SYrQ+xaREIDD8EXx2N2Oc7pTHyn6UJui21/VrGjH0p8= Subject key identifier: 41:1A:2F:9F:91:17:45:78:D2:19:7E:0D:44:FD:88:DA:2C:96:B6:05 Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft Manifest number: BA Signing time: Tue 13 May 2025 05:09:29 +0000 Manifest this update: Tue 13 May 2025 05:09:29 +0000 Manifest next update: Tue 20 May 2025 05:09:29 +0000 Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: 79zp9mWPWtAPNcUnTqXaNLrGavsJs3OmW8Z8KoAyxB8=) 2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 7t/pdYKTKmwUGR/lE+qnEM4TrcYeXROZCsv49aYTSqk=) 3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: c1LdcyfxBkh65MfHEWuLe4Y+neliIailfDFE8qX4bKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: May 13 05:09:29 2025 GMT Not After : May 20 05:09:29 2025 GMT Subject: CN=6822d409-420a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:c2:8a:5a:5e:18:de:fc:09:e5:06:ff:c7: fe:da:4f:76:6a:fa:a3:51:a8:42:f5:6f:eb:d3:90: ff:90:a7:39:c3:29:af:e0:03:a6:c6:f5:35:55:d7: cc:de:3b:a9:68:73:1a:5c:a8:1f:88:0f:01:9f:7d: 0c:d9:66:5f:d4:fd:86:2c:7e:b2:24:dd:42:4b:02: 9a:72:e2:bd:d5:59:41:e6:94:ce:ae:b3:c5:33:94: a7:18:40:39:b7:8f:36:7a:d2:0b:80:cc:98:d1:2e: ea:b9:1c:c7:6e:f7:10:0f:ff:82:ee:87:99:7e:8a: 48:de:44:bd:5f:15:dc:b3:2e:1e:61:6a:4e:cb:fd: 06:e4:e6:ed:4a:17:6a:02:0a:26:3e:15:00:33:30: a6:fd:71:d5:fd:cd:77:8d:a7:03:93:4c:b8:79:7c: 5f:93:cb:ed:1a:ab:f3:89:dc:04:c9:c8:85:22:ac: 7e:8c:43:e2:31:3b:bc:8e:49:06:9e:13:47:ec:90: d0:5d:4a:8c:0e:0a:c1:1a:63:88:fc:fe:fd:b7:d8: 2f:c1:cc:77:52:d1:a6:35:48:1e:b3:5e:6c:18:b6: c0:50:23:a1:ea:b4:34:47:10:1f:df:0b:5b:6c:27: 38:16:4b:1c:c4:09:89:10:58:d8:67:ec:3b:9f:a2: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1A:2F:9F:91:17:45:78:D2:19:7E:0D:44:FD:88:DA:2C:96:B6:05 X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:b3:50:68:7e:26:07:21:0c:c7:21:0a:81:dc:2b:79:b0:ab: b0:15:67:2e:bf:9d:62:c5:cf:b9:77:db:10:67:1c:6d:5e:a1: 1b:37:54:6a:79:66:00:c5:96:a3:9a:63:3c:9e:8d:c1:61:22: 94:a0:c9:b6:16:97:a3:26:6c:44:73:93:4b:9e:f2:1d:84:fd: 80:0f:19:99:60:3b:46:1d:cf:0c:1a:f7:9f:71:e4:c1:0e:c4: 48:82:f2:57:30:95:7d:35:0c:68:56:54:af:5f:f7:74:09:5a: c8:1f:f0:3a:19:0c:da:5a:ab:30:ba:9c:38:bd:73:fb:25:fb: 28:67:20:a8:09:16:66:c4:bf:52:5f:21:4f:da:eb:fa:64:ad: 60:b8:4d:4f:95:1d:35:5f:55:0b:16:f9:82:c0:0a:8f:08:f8: f4:26:f4:47:80:d1:83:b2:ad:fa:3a:84:71:61:7e:f8:8d:99: a5:50:9f:21:af:89:9b:3b:cb:ad:0e:49:ac:d3:f2:f8:b4:d9: 74:4c:f1:78:54:23:8b:e9:6f:8e:e8:bc:99:ba:2d:f1:0d:40: 0f:55:bb:30:3c:64:6b:09:fe:17:67:e6:44:92:55:e9:84:89: 85:b8:8b:fe:19:75:f0:ac:14:5b:d2:aa:38:1e:d3:9d:c6:d9: fe:ac:32:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRkMxMTAvBgNVBAUTKDBGNTkxNENCQjk2QTcwREEwNkIxMUVGM0REMkI2M0M5 RTQwN0IzMUMwHhcNMjUwNTEzMDUwOTI5WhcNMjUwNTIwMDUwOTI5WjAYMRYwFAYD VQQDEw02ODIyZDQwOS00MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEHCilpeGN78CeUG/8f+2k92avqjUahC9W/r05D/kKc5wymv4AOmxvU1VdfM 3jupaHMaXKgfiA8Bn30M2WZf1P2GLH6yJN1CSwKacuK91VlB5pTOrrPFM5SnGEA5 t482etILgMyY0S7quRzHbvcQD/+C7oeZfopI3kS9XxXcsy4eYWpOy/0G5ObtShdq AgomPhUAMzCm/XHV/c13jacDk0y4eXxfk8vtGqvzidwEyciFIqx+jEPiMTu8jkkG nhNH7JDQXUqMDgrBGmOI/P79t9gvwcx3UtGmNUges15sGLbAUCOh6rQ0RxAf3wtb bCc4FkscxAmJEFjYZ+w7n6KUGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEaL5+R F0V40hl+DUT9iNoslrYFMB8GA1UdIwQYMBaAFA9ZFMu5anDaBrEe890rY8nkB7Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNGQy9DN0IwOTM1NjFE NzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNOb0dzUjd6M1N0anllUUhz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNGQy9DN0IwOTM1NjFENzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNO b0dzUjd6M1N0anllUUhzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCs1BofiYHIQzHIQqB3Ct5sKuwFWcuv51ixc+5d9sQZxxtXqEbN1Rq eWYAxZajmmM8no3BYSKUoMm2FpejJmxEc5NLnvIdhP2ADxmZYDtGHc8MGvefceTB DsRIgvJXMJV9NQxoVlSvX/d0CVrIH/A6GQzaWqswupw4vXP7JfsoZyCoCRZmxL9S XyFP2uv6ZK1guE1PlR01X1ULFvmCwAqPCPj0JvRHgNGDsq36OoRxYX74jZmlUJ8h r4mbO8utDkms0/L4tNl0TPF4VCOL6W+O6LyZui3xDUAPVbswPGRrCf4XZ+ZEklXp hImFuIv+GXXwrBRb0qo4HtOdxtn+rDJR -----END CERTIFICATE-----Generated at Tue May 13 08:17:17 2025 by rpki-client