$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft File: rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json) Hash identifier: f5N+FfEH8r2I9eF1Il55YYRs+W7VugEPc8w6oI8EP7I= Subject key identifier: C6:6E:39:FF:9F:A4:7C:C6:98:B7:16:82:A1:C1:27:C1:B4:60:C2:92 Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55 Certificate issuer: /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155 Certificate serial: 0ADC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft Manifest number: 0AD1 Signing time: Mon 12 May 2025 19:17:53 +0000 Manifest this update: Mon 12 May 2025 19:17:52 +0000 Manifest next update: Mon 19 May 2025 19:17:52 +0000 Files and hashes: 1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: aS5lbVxis6UZ9SotFxPa7b3+WdfKVDL7oJ7dM/oXd7Y=) 2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: TavcsNbKSaSDXkcGP72u+jTcP48G3Su8SEY/uwppPwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2780 (0xadc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA0F, serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155 Validity Not Before: May 12 19:17:52 2025 GMT Not After : May 19 19:17:52 2025 GMT Subject: CN=68224961-558b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:d0:6f:7d:a0:37:d8:85:42:14:28:49:23: 24:0d:28:6a:8f:47:c1:e4:17:a7:c2:a2:b2:0d:42: b3:3c:24:a9:db:23:ed:d6:c0:ab:e6:37:11:ff:9c: 31:37:4c:a6:ba:77:9e:77:77:99:2c:a2:22:97:91: 73:b3:6f:18:d3:14:59:b7:d8:a8:10:1d:95:55:dd: 84:f0:32:c4:b4:b7:78:a0:d0:e3:77:f6:68:06:10: 14:20:7e:3e:f9:01:50:77:b5:56:15:5b:15:18:60: 27:20:be:a3:11:fa:41:a4:b6:28:47:b4:57:b6:72: 0f:ee:67:2b:5a:c6:c5:58:c0:d5:a0:de:f1:55:94: 5d:16:b2:d7:d6:05:31:0d:cb:77:5d:bb:5c:09:d1: e3:c4:2c:33:ed:46:fa:de:00:e6:f4:9a:41:97:92: 55:f4:f7:24:8b:65:95:72:c7:8f:d5:a8:82:7c:bb: 40:90:6c:b8:92:92:b5:0e:23:49:21:f3:0a:3f:38: 13:b7:3a:f0:58:82:3a:16:c9:ad:eb:7c:79:8b:8b: 0e:c6:58:4e:62:90:5c:83:da:4b:9a:0e:cb:62:54: 44:06:00:56:7b:d7:ad:97:f5:1e:9b:88:a1:f7:ea: f0:b9:c2:3f:76:93:ba:1f:35:d4:0b:97:5e:37:91: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6E:39:FF:9F:A4:7C:C6:98:B7:16:82:A1:C1:27:C1:B4:60:C2:92 X509v3 Authority Key Identifier: keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:7c:ae:2f:f1:9c:26:ff:af:77:c4:ae:4b:84:af:60:79:63: 54:a8:62:65:bf:33:9e:3d:4d:5d:3e:e9:d5:88:7b:b4:d8:b3: b5:ca:09:28:81:80:58:9c:60:b5:5d:32:eb:2f:62:55:07:ef: 27:66:3a:61:a8:fa:2e:93:d1:e0:02:2b:52:d3:c0:a7:58:e9: b4:2d:d4:a8:fa:a1:89:6c:70:7d:f3:1a:35:13:70:5f:75:82: f0:7a:40:af:5a:1c:b1:12:b2:1b:5e:e5:cb:aa:58:3f:65:53: 67:3a:06:41:d3:c7:84:04:46:fd:2e:bb:f0:79:5c:bb:57:b3: 7b:b4:88:14:ce:32:be:38:3e:a0:70:82:f9:98:bb:39:14:a0: c1:82:0b:a1:37:aa:01:8d:35:b9:73:d1:d5:bb:44:5c:f8:93: 56:42:a3:00:e0:ad:8e:cb:71:32:05:ce:fc:32:b8:ac:68:55: 21:f5:34:41:57:8a:d0:24:ec:f5:8e:6e:8d:9c:2f:a9:3f:d2: 1d:68:2a:73:cf:b3:5a:90:7b:65:56:59:c5:8a:9b:e4:d1:11: d3:47:ca:20:6e:9c:32:2f:0e:ed:5c:05:7f:d8:72:6b:74:74: 91:0f:5f:4d:82:b0:dd:4e:92:df:24:68:8e:8b:6a:b0:9c:a9: 48:2b:e3:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBMEYxMTAvBgNVBAUTKEFEMTZBOTE5QjMyREVCOTQ1MEQyRUE2M0M3OUQ1MDMx NUQ5MTgxNTUwHhcNMjUwNTEyMTkxNzUyWhcNMjUwNTE5MTkxNzUyWjAYMRYwFAYD VQQDEw02ODIyNDk2MS01NThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oPQb32gN9iFQhQoSSMkDShqj0fB5BenwqKyDUKzPCSp2yPt1sCr5jcR/5wx N0ymuneed3eZLKIil5Fzs28Y0xRZt9ioEB2VVd2E8DLEtLd4oNDjd/ZoBhAUIH4+ +QFQd7VWFVsVGGAnIL6jEfpBpLYoR7RXtnIP7mcrWsbFWMDVoN7xVZRdFrLX1gUx Dct3XbtcCdHjxCwz7Ub63gDm9JpBl5JV9Pcki2WVcseP1aiCfLtAkGy4kpK1DiNJ IfMKPzgTtzrwWII6Fsmt63x5i4sOxlhOYpBcg9pLmg7LYlREBgBWe9etl/Uem4ih 9+rwucI/dpO6HzXUC5deN5EUYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZuOf+f pHzGmLcWgqHBJ8G0YMKSMB8GA1UdIwQYMBaAFK0WqRmzLeuUUNLqY8edUDFdkYFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkEwRi9EOTAwNjdGRTRD RDcxMUVBQjQ1NTU4NDVDNEY5QUUwMi9yUmFwR2JNdDY1UlEwdXBqeDUxUU1WMlJn VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JSYXBHYk10NjVSUTB1cGp4NTFRTVYyUmdWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkEwRi9EOTAwNjdGRTRDRDcxMUVBQjQ1NTU4NDVDNEY5QUUwMi9yUmFwR2JNdDY1 UlEwdXBqeDUxUU1WMlJnVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSfK4v8Zwm/693xK5LhK9geWNUqGJlvzOePU1dPunViHu02LO1ygko gYBYnGC1XTLrL2JVB+8nZjphqPouk9HgAitS08CnWOm0LdSo+qGJbHB98xo1E3Bf dYLwekCvWhyxErIbXuXLqlg/ZVNnOgZB08eEBEb9LrvweVy7V7N7tIgUzjK+OD6g cIL5mLs5FKDBgguhN6oBjTW5c9HVu0Rc+JNWQqMA4K2Oy3EyBc78MrisaFUh9TRB V4rQJOz1jm6NnC+pP9IdaCpzz7NakHtlVlnFipvk0RHTR8ogbpwyLw7tXAV/2HJr dHSRD19NgrDdTpLfJGiOi2qwnKlIK+ME -----END CERTIFICATE-----Generated at Wed May 14 15:12:36 2025 by rpki-client