$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json) Hash identifier: qJquy85w/98XY9dvBv7yyufxw4jA9QwQW3Pz+82hkCY= Subject key identifier: 78:0B:B1:59:7D:1A:CD:8B:72:8B:34:0E:EF:EA:6C:8C:F6:8B:6E:88 Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft Manifest number: 035B Signing time: Tue 13 May 2025 00:46:33 +0000 Manifest this update: Tue 13 May 2025 00:46:33 +0000 Manifest next update: Tue 20 May 2025 00:46:33 +0000 Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: 9ZQ6CC/ajSjVKCGq8scx974H584DyA+qAOrW+/lQ4ic=) 2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: KMYbMfLRKgCDX7CbZCwrDOvnhVpSxFbhQooHcCajhmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Validity Not Before: May 13 00:46:33 2025 GMT Not After : May 20 00:46:33 2025 GMT Subject: CN=68229669-516f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:cf:38:cf:62:de:b2:4d:da:10:b6:4a:d3: 3f:f8:10:0c:dc:62:52:42:4c:59:d6:39:66:87:22: f0:64:a2:d1:7d:46:83:2c:8e:f2:e0:ea:98:92:46: 59:eb:8d:4d:26:87:69:26:2c:63:1c:8f:8d:3f:c1: d1:e0:e0:c5:96:59:5f:29:0e:cd:5c:e1:dc:65:ab: 3d:60:b3:75:a6:37:9e:96:01:38:70:cb:9b:57:40: 26:51:cf:e2:84:35:65:41:37:24:4a:4b:68:dc:12: 66:9f:69:f2:83:85:36:1a:37:95:c2:99:88:41:03: 1b:34:d7:46:46:a2:a4:e4:d5:f7:13:5f:f9:4f:5d: a0:02:70:f3:74:d8:bc:16:30:cd:95:3f:92:32:3b: 48:8a:8e:95:43:6c:4d:1d:3d:61:62:92:51:fc:1e: 7f:1b:00:cb:50:99:48:5b:11:32:26:bb:ba:ee:0b: b4:a9:2f:46:20:95:fb:18:13:b0:4c:c6:4b:69:d7: 49:4f:36:ca:00:34:3c:c7:01:f0:45:25:2a:d4:52: 39:4e:a1:ae:c7:92:30:74:25:ce:a8:0e:18:8a:1e: 65:4b:31:37:e0:52:70:dd:a3:39:3a:65:99:66:5e: fb:1f:dd:ec:a3:bc:16:f1:30:11:ca:68:62:75:1e: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0B:B1:59:7D:1A:CD:8B:72:8B:34:0E:EF:EA:6C:8C:F6:8B:6E:88 X509v3 Authority Key Identifier: keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c2:6c:a7:30:58:7e:8e:22:ed:f6:3a:23:e4:bb:ff:6d:45: f3:20:97:e9:4d:3c:a0:1f:d3:d3:6f:6e:8c:a0:1f:21:27:4a: 13:1b:f6:07:4d:50:5e:b8:22:2d:16:fc:9e:f6:d7:74:e8:f3: d6:5f:ba:ae:61:6f:ef:76:78:a9:39:f5:89:59:86:cb:ad:91: a4:ce:f2:27:bb:8a:91:12:b2:d8:fb:9d:a3:24:77:f9:1a:ce: 8d:ec:01:3d:45:bd:1e:76:57:64:86:6b:bc:3c:c1:49:06:9c: 1f:b9:53:8d:9a:80:64:1d:c7:49:c8:55:21:70:64:6b:3a:e1: 37:a3:6f:11:bd:7d:ce:42:86:28:c3:30:ad:5b:db:10:f0:ea: fe:e9:0b:c1:ad:fd:60:23:c8:f5:8f:1a:82:2b:3a:e2:bf:19: 16:e6:4b:b3:8e:ec:fa:d7:69:b0:08:d0:56:52:75:a5:d1:26: ea:f7:4b:a8:cb:85:9e:20:e2:ba:d5:3c:31:17:88:a1:bc:f3: 49:9a:8f:74:93:e1:f4:b8:14:4d:7c:cf:16:90:72:8b:03:b6: fe:31:55:b5:1c:d2:2b:c5:e8:1b:71:c2:5c:64:1b:1b:a0:63: 7b:3c:15:4f:40:00:c5:d5:df:2a:6b:35:ff:de:f0:98:ee:fe: 60:3c:cd:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDN0YxMTAvBgNVBAUTKERBQjRBNTJBOEVDMUFBRDZDOTI1MkVFQTRENUQxNTY5 RDI3QUY0NkIwHhcNMjUwNTEzMDA0NjMzWhcNMjUwNTIwMDA0NjMzWjAYMRYwFAYD VQQDEw02ODIyOTY2OS01MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIPPOM9i3rJN2hC2StM/+BAM3GJSQkxZ1jlmhyLwZKLRfUaDLI7y4OqYkkZZ 641NJodpJixjHI+NP8HR4ODFlllfKQ7NXOHcZas9YLN1pjeelgE4cMubV0AmUc/i hDVlQTckSkto3BJmn2nyg4U2GjeVwpmIQQMbNNdGRqKk5NX3E1/5T12gAnDzdNi8 FjDNlT+SMjtIio6VQ2xNHT1hYpJR/B5/GwDLUJlIWxEyJru67gu0qS9GIJX7GBOw TMZLaddJTzbKADQ8xwHwRSUq1FI5TqGux5IwdCXOqA4Yih5lSzE34FJw3aM5OmWZ Zl77H93so7wW8TARymhidR5s2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgLsVl9 Gs2Lcos0Du/qbIz2i26IMB8GA1UdIwQYMBaAFNq0pSqOwarWySUu6k1dFWnSevRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUM3Ri8wOTFFMUVBQUIw RDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0YkpKUzdxVFYwVmFkSjY5 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyU2xLbzdCcXRiSkpTN3FUVjBWYWRKNjlHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUM3Ri8wOTFFMUVBQUIwRDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0 YkpKUzdxVFYwVmFkSjY5R3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQwmynMFh+jiLt9joj5Lv/bUXzIJfpTTygH9PTb26MoB8hJ0oTG/YH TVBeuCItFvye9td06PPWX7quYW/vdnipOfWJWYbLrZGkzvInu4qRErLY+52jJHf5 Gs6N7AE9Rb0edldkhmu8PMFJBpwfuVONmoBkHcdJyFUhcGRrOuE3o28RvX3OQoYo wzCtW9sQ8Or+6QvBrf1gI8j1jxqCKzrivxkW5kuzjuz612mwCNBWUnWl0Sbq90uo y4WeIOK61TwxF4ihvPNJmo90k+H0uBRNfM8WkHKLA7b+MVW1HNIrxegbccJcZBsb oGN7PBVPQADF1d8qazX/3vCY7v5gPM0s -----END CERTIFICATE-----Generated at Tue May 13 19:03:36 2025 by rpki-client