$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: gA4VxvnffJK7iMbn7bdPN/m7SLzgmOIr7wwYYoTCAtg= Subject key identifier: 94:AC:2D:FF:55:52:DB:CD:80:67:DE:94:24:EB:E5:1D:F1:60:15:BD Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 085A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 0822 Signing time: Mon 12 May 2025 20:52:52 +0000 Manifest this update: Mon 12 May 2025 20:52:51 +0000 Manifest next update: Mon 19 May 2025 20:52:51 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: 4Um5z+w73HMpRlpWAj/ewQVf61MxlRhHsX3MM511pdA=) 2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: nEa6jfXtxG9N2Xq8i5UVfOUP23F8VB7FknoSsQg1RJ0=) 3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: KU0OYgNotYA3UtDO5hlxYlQJ813PAymWu54BIJPXlUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: May 12 20:52:51 2025 GMT Not After : May 19 20:52:51 2025 GMT Subject: CN=68225fa4-f6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:09:e6:3d:66:f9:e0:7d:04:03:25:58:3a: ca:82:c4:66:a4:b0:94:a1:89:7d:e0:23:87:36:65: 89:22:1b:6d:12:48:eb:bd:00:4b:a7:fd:90:ed:c2: c9:bd:bd:86:e1:d1:fa:ad:e9:bc:d2:9e:a5:95:5e: e2:19:4f:b0:88:cb:5b:fd:b3:c9:50:e6:92:59:96: 07:b4:9a:2b:dd:f9:c6:80:ac:68:40:46:a9:4f:e8: 61:d7:68:2b:89:12:2a:0f:0c:d3:a1:c4:49:24:9f: 2a:ed:ed:4a:d5:7e:df:1c:20:6d:4b:c2:c7:c9:18: 34:05:46:0e:5c:dd:4c:da:9c:a2:c4:3d:b6:48:d4: b3:cc:f6:87:35:11:d7:25:9f:72:7c:27:86:d3:ac: ab:b1:39:64:4e:f4:82:8b:e6:4b:35:3f:c3:8f:12: da:34:fb:06:b3:19:76:bc:69:2f:62:72:91:ee:ba: 06:1b:69:94:2f:89:2e:7b:60:20:2b:47:72:e3:6f: f2:6b:11:13:66:ac:a8:79:1d:6b:a8:65:ae:f1:1d: 5c:b0:2b:e0:7a:c7:e9:f0:96:ce:18:25:e2:1d:ae: cf:aa:ec:43:52:4a:6e:de:a7:94:4d:ca:98:45:59: f7:80:9f:95:f4:62:f6:88:b7:88:b0:7d:a9:06:f4: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AC:2D:FF:55:52:DB:CD:80:67:DE:94:24:EB:E5:1D:F1:60:15:BD X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9f:aa:26:23:93:ab:df:47:58:47:47:1c:a8:96:18:e7:70: 7f:60:05:07:d8:1d:52:ab:23:a4:02:25:9b:7c:06:43:60:02: f7:e4:d6:60:cf:9b:db:5d:82:bb:3e:f1:19:81:b6:76:37:b6: d7:f6:6e:bc:d1:2d:3f:65:e0:b6:3e:6b:dd:b3:24:99:08:39: e3:67:9c:97:1a:54:e0:31:f7:8f:a4:82:e7:1f:84:c6:f3:19: b1:8b:84:66:16:7d:37:5b:0c:98:60:b0:25:f1:73:2d:4d:64: 24:fc:11:b3:15:18:a1:66:71:20:16:2b:2f:9f:1c:9a:29:da: 01:e1:69:3e:7e:ee:55:f1:52:36:b0:ec:46:2b:03:f8:56:cc: 83:72:0a:68:0f:6f:20:15:97:2c:8b:6d:c1:f9:5c:90:eb:a2: b5:b4:02:9b:3c:30:07:0a:40:cf:20:76:6b:10:02:78:40:55: d1:31:9c:09:84:ea:09:22:c7:22:7e:94:a7:4d:93:e6:f7:c5: a1:c6:1d:82:23:24:9a:66:95:38:52:71:d4:6e:c6:b8:59:2d: 52:4a:25:0c:00:42:22:a6:7f:3c:a1:ff:9d:4e:34:8c:98:a4: c7:c8:21:e1:b0:3a:44:20:47:b7:19:74:57:06:32:e9:be:5a: 95:1f:f0:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjUwNTEyMjA1MjUxWhcNMjUwNTE5MjA1MjUxWjAYMRYwFAYD VQQDEw02ODIyNWZhNC1mNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSIJ5j1m+eB9BAMlWDrKgsRmpLCUoYl94COHNmWJIhttEkjrvQBLp/2Q7cLJ vb2G4dH6rem80p6llV7iGU+wiMtb/bPJUOaSWZYHtJor3fnGgKxoQEapT+hh12gr iRIqDwzTocRJJJ8q7e1K1X7fHCBtS8LHyRg0BUYOXN1M2pyixD22SNSzzPaHNRHX JZ9yfCeG06yrsTlkTvSCi+ZLNT/DjxLaNPsGsxl2vGkvYnKR7roGG2mUL4kue2Ag K0dy42/yaxETZqyoeR1rqGWu8R1csCvgesfp8JbOGCXiHa7PquxDUkpu3qeUTcqY RVn3gJ+V9GL2iLeIsH2pBvSU0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSsLf9V UtvNgGfelCTr5R3xYBW9MB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvn6omI5Or30dYR0ccqJYY53B/YAUH2B1SqyOkAiWbfAZDYAL35NZg z5vbXYK7PvEZgbZ2N7bX9m680S0/ZeC2PmvdsySZCDnjZ5yXGlTgMfePpILnH4TG 8xmxi4RmFn03WwyYYLAl8XMtTWQk/BGzFRihZnEgFisvnxyaKdoB4Wk+fu5V8VI2 sOxGKwP4VsyDcgpoD28gFZcsi23B+VyQ66K1tAKbPDAHCkDPIHZrEAJ4QFXRMZwJ hOoJIscifpSnTZPm98Whxh2CIySaZpU4UnHUbsa4WS1SSiUMAEIipn88of+dTjSM mKTHyCHhsDpEIEe3GXRXBjLpvlqVH/Db -----END CERTIFICATE-----Generated at Tue May 13 11:38:32 2025 by rpki-client