$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: xrg9l29s4iSLIagU1pizRMz88NkJZwYcEnTk13HUDcg= Subject key identifier: 93:B4:28:A9:36:A8:29:31:4D:7D:58:C9:F8:3F:5D:7C:F6:EB:5C:BA Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 047B Signing time: Sat 10 May 2025 23:41:36 +0000 Manifest this update: Sat 10 May 2025 23:41:36 +0000 Manifest next update: Sat 17 May 2025 23:41:36 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: PTSGrEhjSEi6hOvU1bSGOvkAH9PRY3EBquiB55mx8cs=) 2: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: C2tgoi4ndceE+FSZfwDXIED+n+ZW+4Wp1mUo8nhP9gw=) 3: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: jv1ungDFXqLOGYMpTJjaYjynG3firC0fxKibhbmN4oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: May 10 23:41:36 2025 GMT Not After : May 17 23:41:36 2025 GMT Subject: CN=681fe430-441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:72:1f:cc:84:a9:4a:2b:b7:33:a0:a7:16: 82:cf:37:99:42:12:79:42:c4:53:ea:02:45:d1:b2: 7e:a2:e2:81:7a:90:55:d9:21:75:ea:80:ab:72:90: 05:4f:a8:8c:89:2f:27:b1:cb:51:b3:42:e7:61:3b: 34:0c:57:a4:25:9b:c8:e8:db:58:31:70:90:2a:6c: d5:d9:45:fc:ee:97:03:7f:e8:e6:5c:8e:f7:a7:80: 78:5e:52:f4:b4:1c:64:6b:2b:c3:70:06:b8:19:d2: 26:b8:99:07:32:4e:61:32:a2:46:b0:c1:27:0c:4c: 84:2f:8b:7f:5d:b5:bf:0f:83:98:58:54:d1:41:a3: 09:d9:79:76:bc:28:b8:47:8f:56:75:ee:af:53:42: 49:f4:a0:40:0b:57:a9:0b:bf:49:d8:e2:3a:91:7f: 21:7f:d0:3b:5a:f1:cc:b6:b9:e5:61:ae:b8:c3:16: 58:87:58:80:b1:eb:30:7c:5f:ab:5e:88:f3:9a:8e: f4:37:5a:6e:8d:fa:99:a5:9d:b5:e0:9a:c7:58:49: 1f:60:0b:43:f8:4b:fd:3a:c0:14:f7:cc:b5:f7:35: 16:ce:06:a9:ae:37:9d:d7:bc:3c:13:00:bc:26:c6: a9:93:80:67:2a:c0:8d:0a:a4:99:df:5e:26:91:ab: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B4:28:A9:36:A8:29:31:4D:7D:58:C9:F8:3F:5D:7C:F6:EB:5C:BA X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:dd:bc:71:d3:63:c6:db:00:b6:9c:a0:33:e4:00:84:57:fd: 7d:b7:3d:8a:5f:8a:f9:90:95:e0:f0:ee:40:51:02:b7:dd:ac: 12:65:e9:bc:c7:b4:35:65:0a:3e:fb:e1:6c:23:c4:06:ab:fe: 1f:a9:6f:a2:49:33:1e:d2:02:ee:84:87:1b:03:2b:dc:2c:57: fb:7f:61:5b:95:e8:06:59:18:b1:c7:3d:77:cd:c0:ad:36:74: 89:90:8b:8b:41:00:60:5d:02:73:9d:52:ab:48:b4:be:95:55: 94:ad:6a:77:1e:e0:45:af:b3:1e:86:95:cd:73:a0:2f:5a:80: 23:02:9b:2f:91:66:67:bd:84:62:23:fb:24:3d:d7:2a:7d:bc: d5:f9:db:cb:14:f9:fd:82:f3:42:ff:f8:20:2a:97:4c:8a:8c: 95:13:93:1f:4b:31:40:26:62:aa:0a:f0:b9:d2:00:07:f1:35: e0:19:94:64:04:13:95:38:5c:27:c0:05:91:99:ea:5f:52:59: 43:b8:7a:da:3a:91:f4:37:86:45:80:d0:35:dc:e3:6e:56:ca: ca:7b:69:e7:c0:54:98:76:8b:04:ef:4a:5d:ce:46:41:4b:c0: c5:26:f3:c9:f6:3d:04:e5:ce:bc:d7:f0:fa:85:d1:4c:5f:77: 55:e6:7b:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjUwNTEwMjM0MTM2WhcNMjUwNTE3MjM0MTM2WjAYMRYwFAYD VQQDEw02ODFmZTQzMC00NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVhyH8yEqUortzOgpxaCzzeZQhJ5QsRT6gJF0bJ+ouKBepBV2SF16oCrcpAF T6iMiS8nsctRs0LnYTs0DFekJZvI6NtYMXCQKmzV2UX87pcDf+jmXI73p4B4XlL0 tBxkayvDcAa4GdImuJkHMk5hMqJGsMEnDEyEL4t/XbW/D4OYWFTRQaMJ2Xl2vCi4 R49Wde6vU0JJ9KBAC1epC79J2OI6kX8hf9A7WvHMtrnlYa64wxZYh1iAseswfF+r Xojzmo70N1pujfqZpZ214JrHWEkfYAtD+Ev9OsAU98y19zUWzgaprjed17w8EwC8 Jsapk4BnKsCNCqSZ314mkaviQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO0KKk2 qCkxTX1Yyfg/XXz261y6MB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC3bxx02PG2wC2nKAz5ACEV/19tz2KX4r5kJXg8O5AUQK33awSZem8 x7Q1ZQo+++FsI8QGq/4fqW+iSTMe0gLuhIcbAyvcLFf7f2FblegGWRixxz13zcCt NnSJkIuLQQBgXQJznVKrSLS+lVWUrWp3HuBFr7MehpXNc6AvWoAjApsvkWZnvYRi I/skPdcqfbzV+dvLFPn9gvNC//ggKpdMioyVE5MfSzFAJmKqCvC50gAH8TXgGZRk BBOVOFwnwAWRmepfUllDuHraOpH0N4ZFgNA13ONuVsrKe2nnwFSYdosE70pdzkZB S8DFJvPJ9j0E5c681/D6hdFMX3dV5nvm -----END CERTIFICATE-----Generated at Sun May 11 16:41:01 2025 by rpki-client