$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft File: V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json) Hash identifier: xzhfhFoqFVBsClTinMBmjBON+xSy6Ow0nOrCL5Nh2NY= Subject key identifier: 38:E1:09:3A:30:EC:BD:62:39:BB:93:C2:FB:63:84:C7:BE:74:7B:38 Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft Manifest number: 5B Signing time: Sun 11 May 2025 05:53:56 +0000 Manifest this update: Sun 11 May 2025 05:53:55 +0000 Manifest next update: Sun 18 May 2025 05:53:55 +0000 Files and hashes: 1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: 65v75GCNO6SVegTFwSosCBg9+JLZjeRSzH9wNDPi13M=) 2: 07D85DDEA7C811EF92C28379C4F9AE02.roa (hash: ZcWeD92UYMu6fLpMaSqSsvoWJIwNEm94vjjCo7cjTrY=) 3: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: 3RUDCXxLe0lvptsJjUy4NkMr2pEIuvZpBiDjKj7RKDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Validity Not Before: May 11 05:53:55 2025 GMT Not After : May 18 05:53:55 2025 GMT Subject: CN=68203b73-189f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:3c:a1:36:e7:cd:c4:34:16:b2:b7:d1:05: e1:fe:2e:0a:99:1c:ac:5d:ec:53:56:cc:03:40:2e: c8:24:1f:68:b3:d1:78:e8:89:65:72:d9:81:f9:f6: 85:a8:07:ac:0c:92:34:57:87:84:68:fb:97:b7:61: 43:13:01:bd:1b:5f:75:13:13:ff:48:28:da:ae:ae: 53:50:69:a6:e9:19:b0:19:ab:13:3a:99:4a:9b:a6: b5:f2:33:75:2f:64:de:df:3a:26:44:af:e9:0c:bc: 2e:82:8e:85:bc:00:c5:39:d4:9c:ed:be:f2:e0:51: 91:b9:f7:69:b5:2b:84:f8:6d:95:78:a5:64:5c:85: c2:c8:c0:ef:a2:01:e9:13:96:3f:06:07:e0:5a:12: b5:16:36:c7:27:28:bb:e1:c5:2e:50:91:42:d9:f9: 9c:d3:e6:79:2c:68:1d:e4:05:fc:22:71:27:f9:3f: 54:04:9c:23:bd:fb:69:c5:a5:0d:e4:03:e4:71:b6: 80:f8:fd:f8:20:39:f8:6f:bd:0a:ce:83:9b:09:69: fa:04:dc:62:a6:f8:9f:38:6e:18:a4:b8:42:13:1e: 27:c3:63:b3:b1:45:1b:68:73:cc:e7:26:e8:14:00: c9:ee:68:0e:80:da:90:13:11:78:be:64:7a:e0:12: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E1:09:3A:30:EC:BD:62:39:BB:93:C2:FB:63:84:C7:BE:74:7B:38 X509v3 Authority Key Identifier: keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:6c:f5:e5:62:ba:9c:5f:34:3c:2a:70:8e:58:9b:13:bf:f5: 70:46:42:6e:a6:b5:5c:ab:4e:a1:1d:db:39:1d:27:d3:bb:79: 9b:07:f4:6f:ae:5a:56:66:be:d8:2f:b4:d0:df:28:93:4a:97: 55:7d:80:d5:f4:28:32:f6:2d:38:10:3d:4d:c4:1d:6b:6d:12: 1b:6e:6e:d5:cc:6d:17:1e:19:b8:f7:3a:76:f3:1a:1c:59:e2: 20:1d:f5:7f:00:ed:76:bb:60:9d:56:24:7e:ea:0b:57:1b:52: 1e:1a:bd:43:e2:b5:c2:d5:57:e0:b7:ae:55:74:58:ea:eb:49: 6e:e0:a4:83:17:5e:96:6c:b1:1d:04:50:a3:9d:04:37:61:41: 89:13:0c:34:67:51:b9:4f:16:56:08:20:67:35:23:0a:3d:05: 18:44:64:33:e3:c7:99:15:29:72:0f:90:98:ea:56:7f:88:45: 73:e7:f1:06:32:07:bb:70:10:ee:05:18:32:f9:ae:ba:b6:d5: 7f:1a:86:18:42:aa:2a:3e:58:f6:9e:6b:85:81:fe:b3:cb:bd: 06:9d:ef:06:c9:14:e3:ca:7e:86:80:b8:f1:2d:de:5e:7d:ac: 99:da:19:11:01:f8:68:99:1b:94:ff:13:31:91:a4:3a:a7:3b: 67:c2:aa:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDc4NjExMC8GA1UEBRMoNTc4QzhEMDJBRUYwQjQzRTI5RkVDRUExODk1RENDOUQx MDY2MzUzNTAeFw0yNTA1MTEwNTUzNTVaFw0yNTA1MTgwNTUzNTVaMBgxFjAUBgNV BAMTDTY4MjAzYjczLTE4OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqhjyhNufNxDQWsrfRBeH+LgqZHKxd7FNWzANALsgkH2iz0XjoiWVy2YH59oWo B6wMkjRXh4Ro+5e3YUMTAb0bX3UTE/9IKNqurlNQaabpGbAZqxM6mUqbprXyM3Uv ZN7fOiZEr+kMvC6CjoW8AMU51JztvvLgUZG592m1K4T4bZV4pWRchcLIwO+iAekT lj8GB+BaErUWNscnKLvhxS5QkULZ+ZzT5nksaB3kBfwicSf5P1QEnCO9+2nFpQ3k A+RxtoD4/fggOfhvvQrOg5sJafoE3GKm+J84bhikuEITHifDY7OxRRtoc8znJugU AMnuaA6A2pATEXi+ZHrgEm9rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOOEJOjDs vWI5u5PC+2OEx750ezgwHwYDVR0jBBgwFoAUV4yNAq7wtD4p/s6hiV3MnRBmNTUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0Nzg2LzM0NTk4QzcwQTdD MzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0cF9zNmhpVjNNblJCbU5U VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjR5TkFxN3d0RDRwX3M2aGlWM01uUkJtTlRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 Nzg2LzM0NTk4QzcwQTdDMzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0 cF9zNmhpVjNNblJCbU5UVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRs9eViupxfNDwqcI5YmxO/9XBGQm6mtVyrTqEd2zkdJ9O7eZsH9G+u WlZmvtgvtNDfKJNKl1V9gNX0KDL2LTgQPU3EHWttEhtubtXMbRceGbj3OnbzGhxZ 4iAd9X8A7Xa7YJ1WJH7qC1cbUh4avUPitcLVV+C3rlV0WOrrSW7gpIMXXpZssR0E UKOdBDdhQYkTDDRnUblPFlYIIGc1Iwo9BRhEZDPjx5kVKXIPkJjqVn+IRXPn8QYy B7twEO4FGDL5rrq21X8ahhhCqio+WPaea4WB/rPLvQad7wbJFOPKfoaAuPEt3l59 rJnaGREB+GiZG5T/EzGRpDqnO2fCqk4= -----END CERTIFICATE-----Generated at Mon May 12 23:18:48 2025 by rpki-client