$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: yqemsp2XCQi9c0M+8s7lgvIzuepnJ7nFXgudX/YBjaE= Subject key identifier: C0:0F:09:C8:35:E8:0A:58:4A:AA:79:96:65:CE:56:A7:E2:21:64:D9 Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 05D3 Signing time: Sat 10 May 2025 22:37:13 +0000 Manifest this update: Sat 10 May 2025 22:37:12 +0000 Manifest next update: Sat 17 May 2025 22:37:12 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: /ySQxFxrnUVTdz+BuaFeuXAgQc3egPWOVOBc4j4MrBA=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: UVYU38/2P4ZcsBnZKHRUezkcR8i0kOVNyl3hZT7lyzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: May 10 22:37:12 2025 GMT Not After : May 17 22:37:12 2025 GMT Subject: CN=681fd519-206c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:4c:98:88:7d:59:db:d0:cc:47:8c:44:74: 0b:e1:94:fc:68:53:f6:5a:f4:ad:4d:a5:39:5f:db: 28:a8:d0:62:44:15:42:d9:a6:10:8e:a3:1e:0a:32: 0d:9c:9c:0a:ec:90:af:7f:c0:4a:81:69:d9:e7:e6: db:d3:20:4d:e6:56:62:6e:55:43:84:3c:66:a7:50: aa:53:84:61:95:1c:ac:1b:49:67:f8:38:7e:fd:95: 47:f1:77:4e:99:8d:dc:55:da:ba:24:56:73:39:3e: 57:6e:34:8a:9d:44:9f:a6:7d:52:e7:3c:df:cd:d6: ef:51:1c:51:a2:ad:df:9f:a7:8c:6b:6a:a1:4d:56: 13:9b:63:d2:87:bf:cb:c7:29:2b:6b:83:72:45:1b: 39:46:c2:1d:71:54:08:23:8f:89:12:77:5a:6f:f7: 17:c0:39:04:f8:06:3c:00:13:64:76:60:7c:0c:a2: fa:4e:b7:6d:42:ae:0a:cc:7d:50:4e:a8:43:49:ba: f4:58:12:b9:79:9b:62:96:84:a1:6d:cb:e1:de:1e: f1:c3:07:b3:3d:9b:74:44:4f:d2:34:bf:6f:70:ed: 23:1e:38:86:82:b8:a7:12:87:20:80:a5:b5:60:45: 4f:e8:41:29:67:78:84:7c:95:bf:20:02:db:33:b3: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0F:09:C8:35:E8:0A:58:4A:AA:79:96:65:CE:56:A7:E2:21:64:D9 X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:b2:98:7f:85:f7:b5:92:2b:95:d8:97:ad:59:6a:af:aa:93: de:2f:dd:62:9e:68:30:23:9f:29:b8:96:d6:9f:b5:8d:00:d6: ac:80:ee:99:a5:72:f7:3a:b8:8c:e1:d6:a3:e4:cd:c6:80:36: b9:d5:38:91:a9:5b:b4:2f:5f:1f:1a:ea:65:2a:a2:e9:56:f0: 26:5e:29:55:27:12:c4:5d:83:d6:0d:b5:11:a8:05:91:9b:58: d9:a0:a3:50:4b:bc:23:60:ba:7f:48:18:39:91:39:8e:85:cf: 95:59:80:a7:6e:b9:78:1e:39:98:7f:88:aa:62:7a:0d:86:17: b2:cb:41:b6:ab:6b:5f:7d:a5:ca:e6:86:46:92:48:d3:03:42: 22:11:77:9a:6e:b7:86:69:9a:f6:9e:f4:0d:fb:fc:a4:2d:54: db:16:d4:38:60:5e:86:19:31:b5:3c:65:e2:42:95:5b:8c:7d: b7:31:3b:e3:ee:d1:86:db:69:42:69:5a:ca:e9:a1:3d:ce:9e: cf:a4:7b:0b:b8:59:f6:64:96:4f:d3:6d:03:f8:f8:8b:ea:2d: 4c:ae:74:fe:ad:f3:87:f5:35:15:38:30:6e:18:e3:13:97:d8: f1:cc:fb:cd:f5:7f:12:27:a5:99:05:06:fa:ea:af:34:20:4d: eb:56:ee:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjUwNTEwMjIzNzEyWhcNMjUwNTE3MjIzNzEyWjAYMRYwFAYD VQQDEw02ODFmZDUxOS0yMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxhMmIh9WdvQzEeMRHQL4ZT8aFP2WvStTaU5X9soqNBiRBVC2aYQjqMeCjIN nJwK7JCvf8BKgWnZ5+bb0yBN5lZiblVDhDxmp1CqU4RhlRysG0ln+Dh+/ZVH8XdO mY3cVdq6JFZzOT5XbjSKnUSfpn1S5zzfzdbvURxRoq3fn6eMa2qhTVYTm2PSh7/L xykra4NyRRs5RsIdcVQII4+JEndab/cXwDkE+AY8ABNkdmB8DKL6TrdtQq4KzH1Q TqhDSbr0WBK5eZtiloShbcvh3h7xwwezPZt0RE/SNL9vcO0jHjiGgrinEocggKW1 YEVP6EEpZ3iEfJW/IALbM7O3+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAPCcg1 6ApYSqp5lmXOVqfiIWTZMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDasph/hfe1kiuV2JetWWqvqpPeL91inmgwI58puJbWn7WNANasgO6Z pXL3OriM4daj5M3GgDa51TiRqVu0L18fGuplKqLpVvAmXilVJxLEXYPWDbURqAWR m1jZoKNQS7wjYLp/SBg5kTmOhc+VWYCnbrl4HjmYf4iqYnoNhheyy0G2q2tffaXK 5oZGkkjTA0IiEXeabreGaZr2nvQN+/ykLVTbFtQ4YF6GGTG1PGXiQpVbjH23MTvj 7tGG22lCaVrK6aE9zp7PpHsLuFn2ZJZP020D+PiL6i1MrnT+rfOH9TUVODBuGOMT l9jxzPvN9X8SJ6WZBQb66q80IE3rVu6T -----END CERTIFICATE-----Generated at Sun May 11 22:26:22 2025 by rpki-client