$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft File: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft (raw, json) Hash identifier: MpIO0Tzr36EBzEBJj/fM2GJmUPdVb3f8VKQDfVnVYCk= Subject key identifier: BC:17:0C:86:F3:B6:B7:41:8A:CF:71:39:A9:4E:21:85:BB:07:CC:6A Authority key identifier: 34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A Certificate issuer: /CN=A91D4E53/serialNumber=349E597C71788104B0649F073ABA72F65F284B9A Certificate serial: 06E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft Manifest number: 06DE Signing time: Mon 12 May 2025 21:47:13 +0000 Manifest this update: Mon 12 May 2025 21:47:12 +0000 Manifest next update: Mon 19 May 2025 21:47:12 +0000 Files and hashes: 1: NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl (hash: 6SpGVM8HZ14UTuCyP4dy+XsNfiNpPZImFfW26MqFVOg=) 2: 349EFE924E6511EBBFE35D1AC4F9AE02.roa (hash: ErOTyz5l442f54R4SgwNJSi5aE/r3E7WeodId76rTk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E53, serialNumber=349E597C71788104B0649F073ABA72F65F284B9A Validity Not Before: May 12 21:47:12 2025 GMT Not After : May 19 21:47:12 2025 GMT Subject: CN=68226c61-d3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:9d:2a:b6:8e:b4:4a:cd:67:d6:63:22:48: 20:aa:fe:45:87:70:87:c0:26:b3:a8:a2:82:18:bb: 45:2d:8a:30:50:5f:2c:ab:f6:08:70:f0:71:a6:7c: 52:4b:56:c4:1f:38:fc:99:6f:ea:40:9d:51:ce:d9: e2:11:ca:49:03:ea:07:c9:9b:56:32:c6:f4:38:00: 26:ee:56:2f:2c:9d:f6:e8:32:66:56:c0:3f:30:5e: 23:ff:7a:31:d9:e9:b6:b5:0e:4c:b3:95:40:56:12: d2:1d:4e:28:4b:3f:8a:05:81:6b:b8:8a:c6:70:be: fc:4b:ec:02:85:f4:c3:51:51:93:3c:d9:f8:94:57: a3:bc:67:2a:75:f5:ae:52:8c:0a:24:61:b9:c1:20: 5b:13:56:67:91:68:7a:55:8a:20:1d:19:79:50:b2: 85:d2:b9:db:1f:67:38:49:f1:37:1d:df:f8:f0:ef: 49:9c:bc:b8:92:38:b4:36:49:e5:42:a9:a4:cb:1e: 48:e4:99:f6:b1:4d:da:f6:bc:61:5e:00:ee:90:20: d8:51:70:1a:20:20:e1:1f:e8:8b:dd:c3:fa:4f:f1: 03:fa:e3:4d:31:25:4b:f6:80:eb:f9:fa:78:9f:52: c4:23:b4:6d:2c:a8:af:1f:35:37:68:23:c3:19:2b: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:17:0C:86:F3:B6:B7:41:8A:CF:71:39:A9:4E:21:85:BB:07:CC:6A X509v3 Authority Key Identifier: keyid:34:9E:59:7C:71:78:81:04:B0:64:9F:07:3A:BA:72:F6:5F:28:4B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E53/A4A519EA4E6211EBA8ACAC5AC4F9AE02/NJ5ZfHF4gQSwZJ8HOrpy9l8oS5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:45:84:a6:9e:25:a0:e2:5b:88:0e:92:50:2a:76:97:76:78: 68:e5:79:dc:84:99:1a:99:f0:bb:00:ec:1f:2b:c0:dc:1f:a3: c9:ad:b3:4e:cd:3b:b8:b5:fd:a4:b2:74:dd:fc:c1:0e:d2:4a: b1:1f:26:ea:09:89:44:d3:95:f3:dc:b5:4a:1a:8c:98:84:39: 25:39:d8:dd:7f:f8:1f:48:98:5e:b7:89:7d:21:b7:b4:3f:e0: 02:ca:cf:26:01:86:b4:95:95:df:2c:db:8b:65:72:4d:56:4e: f0:d1:5d:16:2b:be:0a:ab:fd:14:13:77:7a:c7:48:19:ba:6a: b2:a3:83:ec:13:b9:c8:a8:aa:c7:d7:67:f1:48:2d:3b:9e:44: cf:2a:c8:06:12:e0:28:e4:ed:9f:73:39:0e:64:47:40:1e:68: 46:14:0e:69:04:7d:99:17:cc:d9:c4:48:c4:c5:a0:35:5e:ee: cd:50:6a:7e:25:9c:1d:37:04:95:8d:ed:02:19:ac:b1:2f:2e: 2d:f1:87:18:b1:96:3e:97:df:40:e6:f2:f8:40:24:de:db:f0: a1:1c:f0:22:f3:23:b0:3f:c9:0f:ff:3f:1e:7d:9b:ae:08:df: d2:e5:e3:c8:bd:53:35:9b:05:8d:47:c0:e8:e5:f5:5c:51:72: 9e:8e:f1:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNTMxMTAvBgNVBAUTKDM0OUU1OTdDNzE3ODgxMDRCMDY0OUYwNzNBQkE3MkY2 NUYyODRCOUEwHhcNMjUwNTEyMjE0NzEyWhcNMjUwNTE5MjE0NzEyWjAYMRYwFAYD VQQDEw02ODIyNmM2MS1kM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cmdKraOtErNZ9ZjIkggqv5Fh3CHwCazqKKCGLtFLYowUF8sq/YIcPBxpnxS S1bEHzj8mW/qQJ1RztniEcpJA+oHyZtWMsb0OAAm7lYvLJ326DJmVsA/MF4j/3ox 2em2tQ5Ms5VAVhLSHU4oSz+KBYFruIrGcL78S+wChfTDUVGTPNn4lFejvGcqdfWu UowKJGG5wSBbE1ZnkWh6VYogHRl5ULKF0rnbH2c4SfE3Hd/48O9JnLy4kji0Nknl Qqmkyx5I5Jn2sU3a9rxhXgDukCDYUXAaICDhH+iL3cP6T/ED+uNNMSVL9oDr+fp4 n1LEI7RtLKivHzU3aCPDGSvFPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwXDIbz trdBis9xOalOIYW7B8xqMB8GA1UdIwQYMBaAFDSeWXxxeIEEsGSfBzq6cvZfKEua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU1My9BNEE1MTlFQTRF NjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdRU3daSjhIT3JweTlsOG9T NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KNVpmSEY0Z1FTd1pKOEhPcnB5OWw4b1M1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU1My9BNEE1MTlFQTRFNjIxMUVCQThBQ0FDNUFDNEY5QUUwMi9OSjVaZkhGNGdR U3daSjhIT3JweTlsOG9TNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjRYSmniWg4luIDpJQKnaXdnho5XnchJkamfC7AOwfK8DcH6PJrbNO zTu4tf2ksnTd/MEO0kqxHybqCYlE05Xz3LVKGoyYhDklOdjdf/gfSJhet4l9Ibe0 P+ACys8mAYa0lZXfLNuLZXJNVk7w0V0WK74Kq/0UE3d6x0gZumqyo4PsE7nIqKrH 12fxSC07nkTPKsgGEuAo5O2fczkOZEdAHmhGFA5pBH2ZF8zZxEjExaA1Xu7NUGp+ JZwdNwSVje0CGayxLy4t8YcYsZY+l99A5vL4QCTe2/ChHPAi8yOwP8kP/z8efZuu CN/S5ePIvVM1mwWNR8Do5fVcUXKejvHs -----END CERTIFICATE-----Generated at Wed May 14 03:47:17 2025 by rpki-client