$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft File: 10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json) Hash identifier: GlCC3ByLGmLFvxttseX7d5P95F/3PBfDVEViDB10ymI= Subject key identifier: 9B:62:1E:DE:17:6B:7C:25:4D:CF:4E:EB:A5:57:52:FB:B0:C1:0C:22 Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft Manifest number: 014A Signing time: Sun 11 May 2025 03:09:53 +0000 Manifest this update: Sun 11 May 2025 03:09:52 +0000 Manifest next update: Sun 18 May 2025 03:09:52 +0000 Files and hashes: 1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: UdEePsrdtTWsHEgcO95bSavdwsT9WCn2qoarrISbZv8=) 2: 12DD779467A211EEA8239268C4F9AE02.roa (hash: 7lqdZ2FcePrtK+ORkGuFUebt7bprHrcQU1BOkcrtW3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Validity Not Before: May 11 03:09:52 2025 GMT Not After : May 18 03:09:52 2025 GMT Subject: CN=68201500-7fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:97:64:fa:a1:37:e9:25:7d:dd:5b:f1:fd: ec:b9:bc:a6:29:37:65:b7:ff:e8:b2:46:39:59:ee: 3a:9d:ea:9d:a0:2a:c4:ad:e7:d2:00:51:77:26:71: 7d:dd:4b:e7:b2:cb:8d:70:0b:7e:fb:2a:9b:43:38: d1:79:07:39:73:e2:98:43:b0:78:76:58:81:e7:8d: 36:8c:57:c3:ad:43:e4:a0:f4:f6:1e:96:c0:19:f6: 08:ae:8b:5a:1f:a7:42:f4:ca:a5:1b:c1:52:23:1a: 81:c1:bb:6a:96:16:4c:04:b1:7a:a1:8a:da:82:90: 54:b3:c2:00:fe:7e:18:8c:9f:12:2d:81:60:a4:13: fa:ef:a5:cf:e8:70:0e:fc:7d:76:d7:6c:3c:8f:70: a5:c7:61:de:ec:26:46:b9:31:57:a9:12:34:f8:75: 90:69:ba:52:83:43:b8:aa:69:e3:04:f6:14:b3:cb: a9:b9:ea:62:cd:1d:9a:cd:c8:ae:ec:c0:7f:10:1c: 60:8c:1c:06:b1:66:b1:66:24:a8:9c:ad:dc:80:b9: 05:f7:44:ea:fe:c8:e1:07:d2:34:bf:96:11:33:52: ec:34:b1:b4:cd:3e:3d:ae:af:d7:39:2c:10:56:d2: 55:69:c9:e8:cf:ae:32:15:95:ce:e5:0b:4c:07:c0: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:62:1E:DE:17:6B:7C:25:4D:CF:4E:EB:A5:57:52:FB:B0:C1:0C:22 X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:79:7e:9f:93:c7:28:b9:68:09:89:7f:00:d6:bb:74:18:59: ce:6e:da:0b:71:c4:58:01:4f:83:1f:7c:18:cf:1c:99:dd:72: 54:84:15:14:f6:8f:5c:c1:09:19:06:77:ec:21:a2:2f:8d:61: 1a:d2:10:67:48:32:9e:d3:7e:b1:c0:80:85:72:72:12:e3:06: 7e:cb:f7:42:34:97:6d:48:c1:b7:d7:88:25:09:34:1a:ff:75: 64:71:d4:ff:1d:32:f3:19:54:35:09:16:93:70:69:e4:e0:db: d3:b5:dd:60:a3:d5:79:7d:f5:59:9e:56:2b:79:33:89:ba:4a: 65:49:44:23:dd:63:b3:2f:07:3f:2b:4c:74:30:b6:98:f3:86: e7:ca:7c:7e:42:58:7b:21:e2:cb:be:aa:5c:df:bc:2b:25:42: d6:c8:b7:d6:da:97:8b:b6:63:bf:bc:a0:02:28:6d:07:ef:5c: 9f:ce:27:ce:5e:9d:c6:7d:f9:5d:f9:ba:a4:e2:c8:fa:05:07: 1b:5d:69:ed:8a:3b:9d:2a:6f:1d:91:9e:a9:be:e9:6c:15:8b: 43:53:31:c0:37:a8:93:be:20:3b:f8:30:b8:53:1c:e9:0f:ad: 64:67:09:58:db:cb:c4:25:99:bf:31:35:93:30:60:74:da:12: 89:63:a5:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3QzQxMTAvBgNVBAUTKEQ3NDVFMUM4NkIxODE4RjdEMDU2M0Y5MEU4QkExMkJF OEIxQUUzNzgwHhcNMjUwNTExMDMwOTUyWhcNMjUwNTE4MDMwOTUyWjAYMRYwFAYD VQQDEw02ODIwMTUwMC03ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIOXZPqhN+klfd1b8f3subymKTdlt//oskY5We46neqdoCrErefSAFF3JnF9 3UvnssuNcAt++yqbQzjReQc5c+KYQ7B4dliB5402jFfDrUPkoPT2HpbAGfYIrota H6dC9MqlG8FSIxqBwbtqlhZMBLF6oYragpBUs8IA/n4YjJ8SLYFgpBP676XP6HAO /H1212w8j3Clx2He7CZGuTFXqRI0+HWQabpSg0O4qmnjBPYUs8upuepizR2azciu 7MB/EBxgjBwGsWaxZiSonK3cgLkF90Tq/sjhB9I0v5YRM1LsNLG0zT49rq/XOSwQ VtJVacnoz64yFZXO5QtMB8CxbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtiHt4X a3wlTc9O66VXUvuwwQwiMB8GA1UdIwQYMBaAFNdF4chrGBj30FY/kOi6Er6LGuN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTdDNC9DNjNERjIwMDND NjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQZlFWai1RNkxvU3Zvc2E0 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQ ZlFWai1RNkxvU3Zvc2E0M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBreX6fk8couWgJiX8A1rt0GFnObtoLccRYAU+DH3wYzxyZ3XJUhBUU 9o9cwQkZBnfsIaIvjWEa0hBnSDKe036xwICFcnIS4wZ+y/dCNJdtSMG314glCTQa /3VkcdT/HTLzGVQ1CRaTcGnk4NvTtd1go9V5ffVZnlYreTOJukplSUQj3WOzLwc/ K0x0MLaY84bnynx+Qlh7IeLLvqpc37wrJULWyLfW2peLtmO/vKACKG0H71yfzifO Xp3Gffld+bqk4sj6BQcbXWntijudKm8dkZ6pvulsFYtDUzHAN6iTviA7+DC4Uxzp D61kZwlY28vEJZm/MTWTMGB02hKJY6Ug -----END CERTIFICATE-----Generated at Sun May 11 15:35:34 2025 by rpki-client