$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json) Hash identifier: A/8m/fs5dPlniUrlOlrwSsoEjPa+DUtE1/yFL7Bz4zk= Subject key identifier: 43:B1:66:D4:6B:FE:93:5A:AD:3A:3C:08:95:10:7F:F1:C6:B5:5C:5D Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft Manifest number: E7 Signing time: Tue 13 May 2025 04:36:43 +0000 Manifest this update: Tue 13 May 2025 04:36:42 +0000 Manifest next update: Tue 20 May 2025 04:36:42 +0000 Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: zpa71ZYEn0Qf9kFYtYB66GmaAAAvS6niRgmSRK9VYms=) 2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: SAKcVkUSU/ZcJXpgMJhIHN2SX2uP3Z2m9YsmC8MIfhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Validity Not Before: May 13 04:36:42 2025 GMT Not After : May 20 04:36:42 2025 GMT Subject: CN=6822cc5a-9881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:03:bf:83:7a:50:ec:97:8c:3b:ce:db:a7: 60:52:7c:ef:98:0c:02:bf:6a:85:00:9b:22:b6:bc: 6f:52:9b:f4:9f:0c:60:dc:d7:13:33:c1:02:e5:f5: 13:d6:57:8c:cd:61:6e:dd:2c:b2:05:4c:2f:64:80: cc:8e:a0:33:60:e1:02:5c:f9:a5:9c:60:99:59:d8: f8:52:27:75:50:55:25:ec:4a:9b:ce:f9:4c:a0:40: 43:45:69:34:19:cb:5b:79:6e:25:38:c3:4a:ee:8a: ba:cf:1a:c9:ff:de:ee:5b:33:20:13:77:19:37:3b: 0c:bb:4d:92:bd:6c:b3:0f:99:f0:e8:9d:2b:1c:87: ed:c5:b3:ba:61:35:a6:17:56:72:99:8e:a8:b9:41: 31:d7:49:fb:9e:fd:b7:ed:3a:65:2f:9e:72:b0:23: 22:11:f7:81:ce:5f:0a:72:fd:69:2c:96:6d:b8:a3: 02:58:3d:1a:52:e8:e2:84:06:78:e6:9a:0f:fd:6b: f1:09:4f:a7:1f:f2:ed:48:ca:c7:f1:ad:05:3a:2a: d9:92:ef:c4:77:3a:b1:7a:d5:9a:ea:e1:7f:6e:48: aa:1a:2e:47:ef:50:07:cd:fa:f5:64:4e:e9:8d:87: 4b:c8:49:90:a1:87:f0:f6:90:64:c8:a7:f2:90:a4: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B1:66:D4:6B:FE:93:5A:AD:3A:3C:08:95:10:7F:F1:C6:B5:5C:5D X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f7:10:b8:87:57:aa:d5:be:ef:32:b8:70:82:5c:ed:2f:66: f4:9c:eb:71:e8:ca:8e:12:53:f8:93:2d:43:4c:5e:9e:5d:fe: d3:56:e3:6d:95:01:b9:60:da:7d:a7:9d:02:7f:64:e7:b0:06: eb:33:fe:06:ad:b0:1b:09:4d:08:c9:48:2f:cd:9d:e9:82:15: 2b:e5:26:e7:62:9a:5d:e3:24:c0:a7:45:6e:c5:06:5a:88:22: 9d:f4:44:bf:4b:db:41:5d:6f:b4:e4:d9:89:a7:45:51:cb:22: e3:58:6c:3f:5d:2a:e9:1a:2c:c9:be:6b:86:e5:ef:2b:ac:18: e4:b3:76:8d:fd:ab:f1:82:ba:e8:cc:45:c0:7b:2b:45:47:94: 80:59:0b:f0:e7:b7:67:3b:d0:89:6d:52:07:52:cb:17:58:4b: 7c:5a:c1:96:ea:a0:0f:1e:1b:af:a7:b9:7f:2f:19:89:a2:47: a4:4a:67:d6:eb:4d:f1:f6:7a:68:92:84:bb:4a:25:15:dc:aa: 86:68:04:bc:18:99:82:f0:01:29:e7:8b:1c:f6:b9:a0:f3:ce: 81:5f:d8:13:d8:e9:f0:16:1c:bf:0a:aa:fe:f9:71:3e:22:63: 29:a4:8e:42:fb:1e:b7:ea:3a:85:77:90:db:d3:e8:f2:57:20: ab:a0:1a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjUwNTEzMDQzNjQyWhcNMjUwNTIwMDQzNjQyWjAYMRYwFAYD VQQDEw02ODIyY2M1YS05ODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEwDv4N6UOyXjDvO26dgUnzvmAwCv2qFAJsitrxvUpv0nwxg3NcTM8EC5fUT 1leMzWFu3SyyBUwvZIDMjqAzYOECXPmlnGCZWdj4Uid1UFUl7EqbzvlMoEBDRWk0 GctbeW4lOMNK7oq6zxrJ/97uWzMgE3cZNzsMu02SvWyzD5nw6J0rHIftxbO6YTWm F1ZymY6ouUEx10n7nv237TplL55ysCMiEfeBzl8Kcv1pLJZtuKMCWD0aUujihAZ4 5poP/WvxCU+nH/LtSMrH8a0FOirZku/EdzqxetWa6uF/bkiqGi5H71AHzfr1ZE7p jYdLyEmQoYfw9pBkyKfykKSyHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOxZtRr /pNarTo8CJUQf/HGtVxdMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU OTlrbGFNY1htRmhMQzYxbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj9xC4h1eq1b7vMrhwglztL2b0nOtx6MqOElP4ky1DTF6eXf7TVuNt lQG5YNp9p50Cf2TnsAbrM/4GrbAbCU0IyUgvzZ3pghUr5SbnYppd4yTAp0VuxQZa iCKd9ES/S9tBXW+05NmJp0VRyyLjWGw/XSrpGizJvmuG5e8rrBjks3aN/avxgrro zEXAeytFR5SAWQvw57dnO9CJbVIHUssXWEt8WsGW6qAPHhuvp7l/LxmJokekSmfW 603x9npokoS7SiUV3KqGaAS8GJmC8AEp54sc9rmg886BX9gT2OnwFhy/Cqr++XE+ ImMppI5C+x636jqFd5Db0+jyVyCroBrW -----END CERTIFICATE-----Generated at Wed May 14 21:07:39 2025 by rpki-client