$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft File: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json) Hash identifier: uUibnIYVDnFjZp9b033DJRuulk6IwSHFCrGqd8dH/po= Subject key identifier: 84:AE:0D:49:44:CF:11:80:EB:15:FB:66:18:ED:E9:28:F4:81:66:81 Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft Manifest number: 0695 Signing time: Sat 10 May 2025 21:52:39 +0000 Manifest this update: Sat 10 May 2025 21:52:39 +0000 Manifest next update: Sat 17 May 2025 21:52:39 +0000 Files and hashes: 1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: oe2tvIxuahjvDDhYys4qdbnuey1CGvlcK81+a+qZ0QQ=) 2: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: 0+CvQqBA1GWK9uAje6YI9ltQjscAcIJ8/LtX4JAvJgQ=) 3: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: BifS2RiKJAeyaao2xahiTEJyhWsX4uSdQw3ik4lZCoM=) 4: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: qv769QTOuxRY2vZMEitP1PhQNGQQJL1+VWV0CsKcicw=) 5: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: Fk3FD4AcHMukexgYcFy6H4xmHyHDGU1VOrgDQ2JaHQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Validity Not Before: May 10 21:52:39 2025 GMT Not After : May 17 21:52:39 2025 GMT Subject: CN=681fcaa7-1bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a9:01:fe:b9:c6:5f:f2:94:a6:26:71:ae:4a: 41:d0:59:c2:54:e8:3d:cd:a0:ea:99:b3:9e:2d:0c: 31:99:26:2f:0a:1b:a7:62:ae:f1:5b:68:53:89:a0: 42:d6:da:41:9a:73:4f:69:3e:1b:b7:ca:65:7a:b1: 5a:63:cd:e6:b8:98:c5:00:7e:93:2c:82:ef:d1:70: a3:5a:a7:2c:9b:4a:d8:75:a1:af:d3:24:b2:0f:65: c9:ae:9f:43:b9:30:fd:0b:5b:6f:f6:54:49:14:1c: 4e:fb:a1:61:fe:eb:01:31:c5:05:6e:23:f9:ee:d1: 74:9e:43:a5:88:dc:af:4c:1e:5b:3a:45:60:e0:a3: a6:86:93:9d:01:75:c4:72:4d:bb:3f:62:c2:e7:da: 7a:39:8c:09:a1:81:d8:54:84:93:75:1a:21:49:28: 64:0c:14:39:ce:47:5d:27:6e:8a:a6:5c:f7:a4:db: 03:39:c0:d1:cb:3b:81:6e:ac:bd:3c:1e:e9:e4:03: e0:49:35:2f:22:20:74:31:a9:1b:02:ff:e1:94:0a: 37:ae:09:2a:b4:44:9e:13:dd:48:b6:74:2a:e3:e0: e5:8c:03:ef:23:a5:69:ca:98:36:67:44:93:43:28: 2e:55:dd:3a:4f:57:9e:1b:a9:d1:3e:e0:a0:ca:be: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:0D:49:44:CF:11:80:EB:15:FB:66:18:ED:E9:28:F4:81:66:81 X509v3 Authority Key Identifier: keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4c:00:c2:ac:2e:60:66:36:6b:7d:9c:38:0c:8a:bb:d2:ce: 24:d6:69:f8:04:d7:73:d1:e6:8f:e1:05:4f:d2:59:17:4e:9b: 2d:55:37:03:82:fd:30:2c:39:62:d5:ad:52:e6:c1:55:b7:fe: c5:d8:2f:3c:00:f7:e2:44:74:3f:e4:5a:e3:c2:87:23:5e:17: e5:89:d0:96:64:3e:66:e7:ec:dc:c7:26:13:49:4b:a9:f5:d4: 27:a5:56:2e:4f:86:45:3b:20:65:74:c1:77:72:8a:d8:88:c9: d1:91:a3:bb:42:6b:00:8c:a0:61:1d:f0:f2:77:ef:ad:af:aa: e0:e4:89:f3:da:e5:db:65:44:a3:5b:ee:97:46:7d:6b:45:8b: 71:ae:57:b9:6b:cd:23:da:cc:8d:2d:90:78:83:6d:3d:b4:86: e2:4c:e2:5b:5e:1e:c2:fb:33:10:6d:c4:8e:41:a5:a6:2e:e7: 9c:ad:1a:fe:9b:de:eb:96:f5:bd:b7:ba:19:04:b6:9d:7a:bb: 01:18:f3:19:cf:5c:e2:d2:dc:e5:0c:9b:f5:67:c4:04:bc:f2: e1:51:61:3f:be:4b:3d:18:2c:43:be:f2:a6:b8:71:35:12:ea: 6d:dd:d0:d8:31:b3:d7:54:70:81:92:d9:c2:7e:cb:e7:dc:77: 8c:a0:a8:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1 RjE4MzQ5RjcwHhcNMjUwNTEwMjE1MjM5WhcNMjUwNTE3MjE1MjM5WjAYMRYwFAYD VQQDEw02ODFmY2FhNy0xYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKkB/rnGX/KUpiZxrkpB0FnCVOg9zaDqmbOeLQwxmSYvChunYq7xW2hTiaBC 1tpBmnNPaT4bt8plerFaY83muJjFAH6TLILv0XCjWqcsm0rYdaGv0ySyD2XJrp9D uTD9C1tv9lRJFBxO+6Fh/usBMcUFbiP57tF0nkOliNyvTB5bOkVg4KOmhpOdAXXE ck27P2LC59p6OYwJoYHYVISTdRohSShkDBQ5zkddJ26Kplz3pNsDOcDRyzuBbqy9 PB7p5APgSTUvIiB0MakbAv/hlAo3rgkqtESeE91ItnQq4+DljAPvI6Vpypg2Z0ST QyguVd06T1eeG6nRPuCgyr6v/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISuDUlE zxGA6xX7Zhjt6Sj0gWaBMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjZDNi81OEU5OUU5NDZGNzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dy UVRJRlM3Zm9QSjFmR0RTZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATTADCrC5gZjZrfZw4DIq70s4k1mn4BNdz0eaP4QVP0lkXTpstVTcD gv0wLDli1a1S5sFVt/7F2C88APfiRHQ/5FrjwocjXhflidCWZD5m5+zcxyYTSUup 9dQnpVYuT4ZFOyBldMF3corYiMnRkaO7QmsAjKBhHfDyd++tr6rg5Inz2uXbZUSj W+6XRn1rRYtxrle5a80j2syNLZB4g209tIbiTOJbXh7C+zMQbcSOQaWmLuecrRr+ m97rlvW9t7oZBLadersBGPMZz1zi0tzlDJv1Z8QEvPLhUWE/vks9GCxDvvKmuHE1 Eupt3dDYMbPXVHCBktnCfsvn3HeMoKjK -----END CERTIFICATE-----Generated at Sun May 11 16:23:21 2025 by rpki-client