$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json) Hash identifier: V1fSFLqyjjXXSLiMBQzEAx8YTQjf+YXsdoe80ODbvhM= Subject key identifier: EB:CC:BB:1B:FC:B4:D5:4F:17:4D:1A:43:75:9A:23:58:F3:A4:07:F5 Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Certificate serial: 0C14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft Manifest number: 0C0D Signing time: Wed 14 May 2025 18:48:45 +0000 Manifest this update: Wed 14 May 2025 18:48:44 +0000 Manifest next update: Wed 21 May 2025 18:48:44 +0000 Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: aAmZD4LILb3ANdVjCoaqYo2dXSDvrc0rULL16d6BWYY=) 2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3092 (0xc14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Validity Not Before: May 14 18:48:44 2025 GMT Not After : May 21 18:48:44 2025 GMT Subject: CN=6824e58d-6001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:06:1d:18:b6:2e:c1:4a:a4:3b:06:3c:c6: bc:fb:ac:20:05:50:7e:0d:3a:c1:32:f6:31:bf:a2: b8:8d:da:c4:f7:94:47:62:fc:e5:7b:c0:3d:a9:1c: c4:95:73:5e:96:82:8c:35:e5:be:ba:9d:be:6d:d4: 37:bc:28:8f:33:66:9e:76:a7:6d:32:71:fd:72:32: f7:ff:b0:53:d6:2b:f1:1f:c1:b2:17:13:d7:a0:8f: b2:52:d9:0f:ba:e8:86:9e:4a:07:a3:a5:d8:2b:03: d5:a4:69:89:2e:cc:c9:56:24:7d:d7:f7:7a:0b:0c: 5a:e0:fe:f0:44:c6:9b:de:55:af:3a:5d:a7:e8:f5: 96:81:bd:b1:83:8e:59:47:af:03:a7:0a:50:cc:21: 43:9d:b3:5e:89:98:42:be:08:61:54:c9:12:d0:a5: e4:c1:d0:f9:14:42:09:18:97:74:d7:0b:5e:0a:43: 3b:9f:41:8a:5d:9c:79:4e:37:6a:cf:de:4e:c9:39: 24:51:ab:11:38:b1:85:7e:8f:4e:cf:49:53:ce:b5: 01:f9:54:2b:d4:dd:5f:28:da:89:bb:be:23:3a:13: 66:58:53:20:ee:ec:ff:80:0b:6c:b4:51:4c:43:ff: d5:de:e3:89:ae:55:eb:78:06:16:6e:d2:22:df:82: 00:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CC:BB:1B:FC:B4:D5:4F:17:4D:1A:43:75:9A:23:58:F3:A4:07:F5 X509v3 Authority Key Identifier: keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b0:ac:be:eb:8e:9f:43:aa:ef:11:e0:c4:12:c2:31:42:13: 03:a2:cc:2b:d0:51:d3:d5:7a:5b:42:ba:76:6e:03:bd:96:bc: 86:b5:cc:28:4a:f8:87:fa:6e:7b:f8:8c:db:66:2e:93:a8:f7: d3:e3:90:f8:7a:ed:d6:a4:ce:7a:4c:1b:4b:4a:4d:79:d4:2c: 79:6a:0d:0b:68:c3:4d:04:35:e1:a1:2c:86:13:76:fa:b3:b6: 51:53:e0:ea:c2:02:95:91:19:34:39:2e:c0:f7:a0:a2:c8:95: 36:db:cc:38:3b:32:1b:1a:65:8b:0d:2c:1a:bd:e1:21:80:a2: 11:56:03:4e:58:27:2e:dc:f8:85:5f:66:82:e7:3e:2f:bb:b3: da:db:06:57:94:aa:fe:b9:05:de:0d:be:be:0f:cd:41:6b:9b: d3:8e:91:ea:0f:48:c4:39:35:ac:27:70:80:56:0d:57:ac:cb: d8:e1:ae:09:63:14:31:7c:92:89:97:79:15:ea:c2:7c:10:b1: 64:da:c9:90:2d:3f:dc:b7:13:2e:9a:6f:55:3d:20:21:90:b1: 56:c0:d5:78:b4:8d:29:46:c8:2d:84:db:bd:df:3c:10:40:c3: 5c:4b:bc:e3:2f:30:91:dc:a7:67:69:b1:f9:e8:c9:32:8b:f1: 8a:04:0a:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM1OUUxMTAvBgNVBAUTKEVGQjY5MDcwRTJDNDAxQTVGNzcxMzNEMkRCQjFCQTM0 MUQxN0U2MUUwHhcNMjUwNTE0MTg0ODQ0WhcNMjUwNTIxMTg0ODQ0WjAYMRYwFAYD VQQDEw02ODI0ZTU4ZC02MDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPwGHRi2LsFKpDsGPMa8+6wgBVB+DTrBMvYxv6K4jdrE95RHYvzle8A9qRzE lXNeloKMNeW+up2+bdQ3vCiPM2aedqdtMnH9cjL3/7BT1ivxH8GyFxPXoI+yUtkP uuiGnkoHo6XYKwPVpGmJLszJViR91/d6Cwxa4P7wRMab3lWvOl2n6PWWgb2xg45Z R68DpwpQzCFDnbNeiZhCvghhVMkS0KXkwdD5FEIJGJd01wteCkM7n0GKXZx5Tjdq z95OyTkkUasROLGFfo9Oz0lTzrUB+VQr1N1fKNqJu74jOhNmWFMg7uz/gAtstFFM Q//V3uOJrlXreAYWbtIi34IANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvMuxv8 tNVPF00aQ3WaI1jzpAf1MB8GA1UdIwQYMBaAFO+2kHDixAGl93Ez0tuxujQdF+Ye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzU5RS82QTQ5ODhCNjBE RUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFhWDNjVFBTMjdHNk5CMFg1 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3YVFjT0xFQWFYM2NUUFMyN0c2TkIwWDVoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzU5RS82QTQ5ODhCNjBERUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFh WDNjVFBTMjdHNk5CMFg1aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSsKy+646fQ6rvEeDEEsIxQhMDoswr0FHT1XpbQrp2bgO9lryGtcwo SviH+m57+IzbZi6TqPfT45D4eu3WpM56TBtLSk151Cx5ag0LaMNNBDXhoSyGE3b6 s7ZRU+DqwgKVkRk0OS7A96CiyJU228w4OzIbGmWLDSwaveEhgKIRVgNOWCcu3PiF X2aC5z4vu7Pa2wZXlKr+uQXeDb6+D81Ba5vTjpHqD0jEOTWsJ3CAVg1XrMvY4a4J YxQxfJKJl3kV6sJ8ELFk2smQLT/ctxMumm9VPSAhkLFWwNV4tI0pRsgthNu93zwQ QMNcS7zjLzCR3KdnabH56Mkyi/GKBAok -----END CERTIFICATE-----Generated at Thu May 15 00:07:09 2025 by rpki-client