$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: 21Q5RGeCtcfWSDZtkv6/VB2N69ysqsj88x26582hVd8= Subject key identifier: 17:9E:34:5E:EC:00:53:03:16:A3:D7:59:ED:B7:83:AE:6D:DD:C7:7B Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 77 Signing time: Fri 09 May 2025 05:47:04 +0000 Manifest this update: Fri 09 May 2025 05:47:03 +0000 Manifest next update: Fri 16 May 2025 05:47:03 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: pzX9Es1yAP7rHdLz2tzlrZWk3XC+qyHccX1HnYq1QMo=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: May 9 05:47:03 2025 GMT Not After : May 16 05:47:03 2025 GMT Subject: CN=681d96d8-6e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:12:0f:7b:2f:fc:68:fe:2c:02:f0:25:0f: 4e:e6:f0:ca:09:c0:06:6f:12:3c:7d:50:d5:04:19: e6:06:31:cd:a5:5d:41:7a:3e:8c:98:c0:96:e9:76: 50:0a:de:47:29:86:af:93:6f:b0:3c:76:7f:97:a1: ff:d8:74:44:8b:2c:09:61:53:87:65:95:3f:64:f2: ad:47:20:fa:58:c7:b8:57:3c:da:aa:4c:07:ed:59: 80:19:d5:61:a7:c4:7a:dd:5a:7e:6d:07:bb:36:cb: 83:6f:42:6f:0b:53:48:9c:71:70:aa:b3:45:e7:24: 93:a9:ad:27:ff:07:8a:3f:5d:ab:a4:7e:10:90:a4: b6:c0:ca:e6:96:7a:f5:a4:54:21:8d:85:4f:cf:55: d4:a4:c6:b1:fd:17:e3:ed:bb:63:e2:7a:4e:18:3e: 1a:2e:3b:04:c9:7d:28:31:cb:d9:18:8a:50:8e:56: 39:b6:92:d0:3a:df:52:b2:4c:eb:1f:9f:45:93:22: fb:2b:6b:99:ba:b0:7d:b2:1e:3c:dc:82:08:49:84: 87:c7:8a:e9:d1:18:c8:f8:c3:8c:12:a2:7d:e7:69: 4f:4d:79:5d:35:74:fb:f1:ba:dd:61:18:af:93:ba: a3:26:3d:bb:f2:a0:6f:45:6d:45:50:d6:8b:43:a5: 6e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9E:34:5E:EC:00:53:03:16:A3:D7:59:ED:B7:83:AE:6D:DD:C7:7B X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:fd:fa:9d:61:46:02:48:ae:33:bc:14:96:af:5c:7e:3f:ca: 5e:e1:34:ba:65:4d:3e:ed:b1:19:04:ce:3b:a5:d0:25:fa:df: f7:00:aa:6b:f2:0e:79:a3:1e:f4:1a:3d:08:06:79:4a:28:ad: a2:75:b6:93:2f:fa:fb:57:4e:a1:71:0f:ea:dd:96:6f:62:3d: 12:04:3d:cf:c1:04:f1:7e:dd:28:14:71:9e:5a:41:28:1d:56: 21:f3:bb:d0:54:20:3f:86:58:95:08:85:ef:e3:89:98:ae:cf: 24:a6:20:e2:1c:d3:b5:18:2c:75:b5:89:cb:46:01:75:e9:4e: f9:d2:b5:8d:d0:59:2c:6b:5d:dd:4e:87:34:a7:51:72:b5:31: 63:8b:a3:74:75:5f:ad:4d:f1:a2:34:35:10:60:a1:06:32:8b: 1b:d5:66:53:a1:2f:c1:b6:e0:cf:ee:34:2f:e9:5a:a6:fa:35: d6:81:1c:6c:cf:4d:7c:f9:42:3f:4a:78:bf:4e:7f:c9:fe:c7: 76:3d:41:b4:47:5d:d0:b1:31:97:3a:86:c1:df:d2:c0:1b:78: cf:52:15:2e:84:98:0f:58:00:90:54:d5:a3:c1:07:2d:58:39: 2a:15:39:b9:c5:5d:66:ac:45:d8:16:94:96:34:d4:5e:79:33: 5a:3b:16:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDBBNTExMC8GA1UEBRMoREU4NkU2NUVFQTFFMEIzMEU0RkQ4RDkyNDU4N0VERjU3 MjNENTA3RDAeFw0yNTA1MDkwNTQ3MDNaFw0yNTA1MTYwNTQ3MDNaMBgxFjAUBgNV BAMTDTY4MWQ5NmQ4LTZlMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLxhIPey/8aP4sAvAlD07m8MoJwAZvEjx9UNUEGeYGMc2lXUF6PoyYwJbpdlAK 3kcphq+Tb7A8dn+Xof/YdESLLAlhU4dllT9k8q1HIPpYx7hXPNqqTAftWYAZ1WGn xHrdWn5tB7s2y4NvQm8LU0iccXCqs0XnJJOprSf/B4o/XaukfhCQpLbAyuaWevWk VCGNhU/PVdSkxrH9F+Ptu2Piek4YPhouOwTJfSgxy9kYilCOVjm2ktA631KyTOsf n0WTIvsra5m6sH2yHjzcgghJhIfHiunRGMj4w4wSon3naU9NeV01dPvxut1hGK+T uqMmPbvyoG9FbUVQ1otDpW71AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF540XuwA UwMWo9dZ7beDrm3dx3swHwYDVR0jBBgwFoAU3obmXuoeCzDk/Y2SRYft9XI9UH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMEE1L0E2NDgzQTNDN0FC QjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29ibVh1b2VDekRrX1kyU1JZZnQ5WEk5VUgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MEE1L0E2NDgzQTNDN0FCQjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pE a19ZMlNSWWZ0OVhJOVVIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAf9+p1hRgJIrjO8FJavXH4/yl7hNLplTT7tsRkEzjul0CX63/cAqmvy DnmjHvQaPQgGeUooraJ1tpMv+vtXTqFxD+rdlm9iPRIEPc/BBPF+3SgUcZ5aQSgd ViHzu9BUID+GWJUIhe/jiZiuzySmIOIc07UYLHW1ictGAXXpTvnStY3QWSxrXd1O hzSnUXK1MWOLo3R1X61N8aI0NRBgoQYyixvVZlOhL8G24M/uNC/pWqb6NdaBHGzP TXz5Qj9KeL9Of8n+x3Y9QbRHXdCxMZc6hsHf0sAbeM9SFS6EmA9YAJBU1aPBBy1Y OSoVObnFXWasRdgWlJY01F55M1o7Fnw= -----END CERTIFICATE-----Generated at Sat May 10 18:57:47 2025 by rpki-client