$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json) Hash identifier: 4rUwKPia3fHWwyNEbAlygIgNBAP+Lsp20bSI0tOaxlo= Subject key identifier: B1:83:9D:1A:00:C6:D2:31:7B:3E:F1:F8:DF:50:67:1A:9F:D0:AD:B0 Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft Manifest number: 034F Signing time: Sun 11 May 2025 00:34:14 +0000 Manifest this update: Sun 11 May 2025 00:34:14 +0000 Manifest next update: Sun 18 May 2025 00:34:14 +0000 Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: 0OrxY+uGRaD7Oz0KTl+LPf7d4Br+yW8yOFoI9UVKpKw=) 2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: 3ltUc1MRVqJi3SEeMGw79iaqCBtkg84cqJVUr/o1VYA=) 3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: Amk0fNoLVyq/V0Aumz+LOy4QbvlRWTIXw8dCA9q0zmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Validity Not Before: May 11 00:34:14 2025 GMT Not After : May 18 00:34:14 2025 GMT Subject: CN=681ff086-2012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:f1:12:46:b8:41:f4:06:2b:57:2e:98:23: 77:ab:6e:cb:ca:f3:ef:29:b5:2a:89:75:ae:2e:5f: 2a:6f:f3:ef:9f:2b:01:2b:fd:86:9c:90:f9:b5:6a: 7e:81:d5:5b:13:4b:c7:19:c9:9b:3e:c9:86:e6:77: 4e:22:8f:31:10:21:c0:e7:26:50:5d:04:25:ae:04: 3a:b9:16:29:67:de:22:5c:fc:03:d2:35:7e:2d:80: 56:83:f4:2e:39:90:1e:f2:98:c3:6f:f3:7a:0e:e2: bd:9c:e5:78:43:fa:e3:be:e4:c3:c5:30:7f:4d:c9: 5c:10:bb:a2:22:de:99:55:ae:f3:4d:f4:d1:b5:d9: 63:ab:60:66:36:8c:f5:e3:d9:7b:ec:ca:89:a4:48: 07:4b:0f:50:d8:00:99:9d:ba:7c:d4:10:53:c7:76: f5:56:f4:ba:43:91:13:81:d0:64:a6:99:a2:ac:ef: 5e:8f:fc:91:c3:b0:f9:42:28:0d:fc:03:42:e3:32: 34:12:0b:a0:86:1d:59:dd:cf:8f:e2:d2:14:07:c3: 78:cd:71:fd:74:e1:74:0c:91:75:18:cf:71:65:ed: 8a:cf:26:58:78:15:12:9f:94:44:f1:42:53:d1:6e: 52:da:9f:c8:d8:95:ef:19:04:93:5c:cd:cb:d3:1f: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:9D:1A:00:C6:D2:31:7B:3E:F1:F8:DF:50:67:1A:9F:D0:AD:B0 X509v3 Authority Key Identifier: keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:6b:42:9c:11:c7:97:84:f8:c1:e8:69:f6:29:60:7e:b6:8e: 64:f1:cd:dd:52:dd:d2:91:5b:55:83:3e:62:84:c9:99:69:97: 7c:30:21:a2:60:b9:e4:e2:c0:99:a1:b9:98:2f:b7:7f:c1:ce: d8:9a:2e:5e:f5:c1:b6:a1:74:13:12:65:b3:d8:85:91:33:d8: a9:66:0a:c9:1a:5a:51:e8:a2:9a:15:d7:7d:96:a1:fd:22:cc: 7d:ed:b2:3d:3d:b2:18:26:dc:09:04:a8:b3:95:ec:93:22:5b: a3:52:d2:f9:8f:58:a3:92:3b:f5:f6:df:fb:ae:68:59:7e:48: b5:90:db:1b:6f:00:bd:49:21:2c:2e:cb:59:dc:e2:b5:b4:c2: fa:e0:1a:a4:c1:a5:59:32:6e:da:a3:8e:37:d8:cd:78:b7:9c: a6:56:d8:9b:40:50:36:4b:00:1d:b8:99:61:29:8f:d1:c4:dd: 92:d9:a1:3f:65:0d:28:9d:b3:16:73:a3:6d:67:8d:0f:42:67: 47:c5:15:6b:59:12:6d:93:dc:9f:91:43:b2:a0:50:c7:88:ca: 95:77:b6:e5:b3:69:52:e0:be:b6:fb:cb:b0:be:30:f6:cb:3a: 12:af:d7:b1:c7:9a:d1:cf:02:cc:19:60:cb:4c:59:ee:66:a4: a0:8e:a4:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4 Mjc5ODE0QTkwHhcNMjUwNTExMDAzNDE0WhcNMjUwNTE4MDAzNDE0WjAYMRYwFAYD VQQDEw02ODFmZjA4Ni0yMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc3xEka4QfQGK1cumCN3q27LyvPvKbUqiXWuLl8qb/PvnysBK/2GnJD5tWp+ gdVbE0vHGcmbPsmG5ndOIo8xECHA5yZQXQQlrgQ6uRYpZ94iXPwD0jV+LYBWg/Qu OZAe8pjDb/N6DuK9nOV4Q/rjvuTDxTB/TclcELuiIt6ZVa7zTfTRtdljq2BmNoz1 49l77MqJpEgHSw9Q2ACZnbp81BBTx3b1VvS6Q5ETgdBkppmirO9ej/yRw7D5QigN /ANC4zI0Egughh1Z3c+P4tIUB8N4zXH9dOF0DJF1GM9xZe2KzyZYeBUSn5RE8UJT 0W5S2p/I2JXvGQSTXM3L0x+sEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGDnRoA xtIxez7x+N9QZxqf0K2wMB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2 NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO SUoyMFBjYUEtM2lDZVlGS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAa0KcEceXhPjB6Gn2KWB+to5k8c3dUt3SkVtVgz5ihMmZaZd8MCGi YLnk4sCZobmYL7d/wc7Ymi5e9cG2oXQTEmWz2IWRM9ipZgrJGlpR6KKaFdd9lqH9 Isx97bI9PbIYJtwJBKizleyTIlujUtL5j1ijkjv19t/7rmhZfki1kNsbbwC9SSEs LstZ3OK1tML64BqkwaVZMm7ao4432M14t5ymVtibQFA2SwAduJlhKY/RxN2S2aE/ ZQ0onbMWc6NtZ40PQmdHxRVrWRJtk9yfkUOyoFDHiMqVd7bls2lS4L62+8uwvjD2 yzoSr9exx5rRzwLMGWDLTFnuZqSgjqRo -----END CERTIFICATE-----Generated at Mon May 12 16:32:21 2025 by rpki-client