$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json) Hash identifier: vuLjGZBdYtCj8eQ6HWPYDZXI/b1Vk9XUHpyJpiVXgO0= Subject key identifier: 8B:51:3D:C6:5E:83:0C:43:98:45:2E:96:1C:BE:4A:81:3C:FB:BB:2C Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft Manifest number: 015E Signing time: Fri 09 May 2025 03:10:53 +0000 Manifest this update: Fri 09 May 2025 03:10:52 +0000 Manifest next update: Fri 16 May 2025 03:10:52 +0000 Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: URyhe2OtcxaD5AN3D96ll1KakQo0VxqctMR82OPO2zE=) 2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Validity Not Before: May 9 03:10:52 2025 GMT Not After : May 16 03:10:52 2025 GMT Subject: CN=681d723d-c1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:08:4d:e0:8c:87:36:e3:96:54:38:4b:ef: 06:97:fc:5c:2a:7f:a6:fd:fe:21:5b:b6:35:dc:2c: 4e:59:4a:d1:f5:46:c5:fc:ec:96:7a:d4:75:58:44: 0f:9b:ec:3f:e5:86:6e:a7:da:0a:d2:15:08:f7:c3: 4f:f7:dd:fd:15:42:d4:17:39:6f:05:9b:7d:de:d6: ba:37:d1:68:2a:5a:10:fe:d6:78:e9:e3:c1:94:30: c8:78:f9:36:32:9f:8c:49:ec:f0:25:4e:57:f5:2f: fa:29:44:71:7f:da:2d:bb:7f:af:04:62:e6:3a:da: 99:d3:ef:38:de:1e:e0:ad:7e:4a:b8:af:1e:8d:6b: e9:f8:25:f2:92:62:d8:c1:00:c6:3f:53:ba:02:63: b0:9f:f2:5d:91:d4:73:7a:90:d8:ea:06:de:ec:9f: 0f:93:f8:d6:6e:a4:d9:68:81:b0:b2:a8:6c:f2:13: 9d:7e:34:db:de:25:9f:a1:75:d3:91:a2:fe:19:07: 77:65:8b:2a:8a:a4:9b:74:2a:ca:3b:c4:fb:e6:12: ec:78:de:45:e9:d1:78:1c:68:31:15:7e:a6:83:9a: ee:27:6b:66:d7:f2:30:e6:e4:b7:4d:bf:27:85:23: c5:12:1e:df:62:07:51:f5:b5:3c:72:7e:59:1c:05: 75:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:51:3D:C6:5E:83:0C:43:98:45:2E:96:1C:BE:4A:81:3C:FB:BB:2C X509v3 Authority Key Identifier: keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:be:8d:d8:ce:33:72:6b:72:8b:3f:6f:d0:06:0d:c8:e0:97: 80:06:71:15:f0:c3:42:29:17:70:ac:63:e8:9a:a7:12:10:92: 48:d6:83:6e:ab:a2:79:71:0f:de:1f:42:4d:ed:84:fd:73:b5: 47:11:21:bb:0b:40:d4:ba:0b:88:ad:2b:7f:2f:ea:15:15:e2: 24:bd:6e:48:21:cb:f4:38:39:68:88:75:93:73:e8:d2:20:f5: ee:28:c4:d8:e9:85:e0:89:a7:f0:33:0f:12:d6:6b:c4:69:5a: 1b:3d:d5:6a:0a:df:24:bb:89:7e:13:5d:d2:cc:f3:93:37:97: 51:64:f4:4d:39:70:ad:5f:20:8e:43:2e:5f:bc:1b:b7:ab:34: d7:58:5f:d6:26:6d:8e:bc:f4:c4:a1:91:8e:c4:f2:95:c6:1a: 7d:52:cb:6f:d0:ba:6b:16:4c:26:19:0b:1b:a4:18:6f:94:b3: ba:59:d4:bd:5b:86:ae:86:d7:24:bb:89:ce:32:33:2f:d5:76: 9d:aa:79:27:2a:f8:4f:66:98:f7:3b:68:e4:ff:f5:b1:39:d7: a0:f7:23:0f:dc:e8:32:90:21:81:6b:92:2c:e3:ad:9b:75:c1: 61:c3:20:44:e9:0b:21:7e:eb:4e:3a:55:80:5c:16:18:ce:30: a3:90:84:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG RUI0RUI4NkMwHhcNMjUwNTA5MDMxMDUyWhcNMjUwNTE2MDMxMDUyWjAYMRYwFAYD VQQDEw02ODFkNzIzZC1jMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEsITeCMhzbjllQ4S+8Gl/xcKn+m/f4hW7Y13CxOWUrR9UbF/OyWetR1WEQP m+w/5YZup9oK0hUI98NP9939FULUFzlvBZt93ta6N9FoKloQ/tZ46ePBlDDIePk2 Mp+MSezwJU5X9S/6KURxf9otu3+vBGLmOtqZ0+843h7grX5KuK8ejWvp+CXykmLY wQDGP1O6AmOwn/JdkdRzepDY6gbe7J8Pk/jWbqTZaIGwsqhs8hOdfjTb3iWfoXXT kaL+GQd3ZYsqiqSbdCrKO8T75hLseN5F6dF4HGgxFX6mg5ruJ2tm1/Iw5uS3Tb8n hSPFEh7fYgdR9bU8cn5ZHAV1DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItRPcZe gwxDmEUulhy+SoE8+7ssMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6vo3YzjNya3KLP2/QBg3I4JeABnEV8MNCKRdwrGPomqcSEJJI1oNu q6J5cQ/eH0JN7YT9c7VHESG7C0DUuguIrSt/L+oVFeIkvW5IIcv0ODloiHWTc+jS IPXuKMTY6YXgiafwMw8S1mvEaVobPdVqCt8ku4l+E13SzPOTN5dRZPRNOXCtXyCO Qy5fvBu3qzTXWF/WJm2OvPTEoZGOxPKVxhp9Ustv0LprFkwmGQsbpBhvlLO6WdS9 W4auhtcku4nOMjMv1XadqnknKvhPZpj3O2jk//WxOdeg9yMP3OgykCGBa5Is462b dcFhwyBE6QshfutOOlWAXBYYzjCjkIQR -----END CERTIFICATE-----Generated at Sat May 10 19:40:50 2025 by rpki-client