$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: bLsDtkem7O0oGb/p/DTKK6KPtz+Skj9/VkQTgQRC1H8= Subject key identifier: CA:3A:C1:6E:AE:1C:21:06:AB:75:D0:E2:77:76:C0:17:14:16:72:A3 Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0ACF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0AA9 Signing time: Mon 12 May 2025 19:26:29 +0000 Manifest this update: Mon 12 May 2025 19:26:28 +0000 Manifest next update: Mon 19 May 2025 19:26:28 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: oTogT97esWQKIqjokwLwAFTSvKKWZI8m9QCRVUwR9gQ=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2767 (0xacf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: May 12 19:26:28 2025 GMT Not After : May 19 19:26:28 2025 GMT Subject: CN=68224b64-cd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:5c:c7:74:cb:63:f3:0b:ce:78:bf:47:cf: 27:12:88:08:56:dc:cd:b4:0b:e4:78:05:3f:32:e9: 60:5a:d0:b6:6b:f3:1a:5e:6a:e1:0d:1c:df:32:7c: 33:fc:a9:07:03:22:13:26:49:61:ef:5c:c2:f4:2b: a5:73:fa:d1:64:2c:44:3c:3d:54:00:cd:57:64:58: 10:c3:36:43:27:1e:68:fc:f4:5e:b8:a0:7b:d4:df: 6e:28:26:63:89:22:d0:e4:0c:5e:0e:32:c1:75:4d: 56:90:a9:d1:e2:51:de:ac:25:ba:2e:78:9b:19:c6: 3a:cc:e7:0c:f2:53:80:a3:e6:09:64:fc:42:5a:2f: 2b:bf:9e:ed:4e:5f:d5:39:47:f8:ab:44:94:48:6d: 5b:e5:21:8e:1c:1c:fc:95:e9:02:f0:8a:ad:7e:7a: c5:ab:aa:b3:4b:92:d3:5b:cc:fb:ae:5c:76:60:7f: f2:1c:f5:c6:1e:9a:31:02:13:c7:b7:c9:19:b5:c2: af:9b:60:9e:38:cb:1d:f4:9e:03:37:0d:db:6b:08: 15:bf:f8:30:4b:62:3b:73:3d:fe:d4:44:a6:e2:72: 12:d0:a8:9b:88:58:b8:65:06:2f:2a:02:2a:5e:52: 41:5d:2d:a4:a6:4c:98:c9:28:14:b0:dd:f4:cc:7e: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3A:C1:6E:AE:1C:21:06:AB:75:D0:E2:77:76:C0:17:14:16:72:A3 X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:10:40:b8:18:b8:13:1d:dc:80:0c:ab:34:f9:6d:8f:8f:a5: d9:14:93:47:12:87:2f:a3:d8:88:ba:02:4e:a7:ee:01:9e:f7: a3:64:e2:15:4c:0f:29:53:0e:28:64:6f:dc:c3:61:e4:82:6e: ef:10:30:c8:41:4c:56:e8:ea:6f:ea:01:2c:3e:1f:81:88:a0: 7a:1d:41:9f:d5:3b:ca:09:43:e4:6c:7a:d7:51:32:03:35:4a: e8:95:01:f8:d4:91:0e:d3:16:79:8d:33:c9:92:50:f0:a2:5b: f0:fc:33:72:f4:0a:7b:fe:28:42:d9:e9:31:98:7b:e9:3d:1c: 49:d5:ed:89:c7:32:f1:9d:75:c6:81:de:64:f0:85:10:7a:f0: b4:10:43:82:bf:5f:3f:b5:63:1a:3c:d4:69:97:ad:f3:41:21: 24:ca:93:b8:01:52:76:98:95:61:78:b7:b0:f8:52:41:a0:95: 4c:53:f8:5e:d5:be:15:40:1d:16:28:a1:28:b8:d8:3d:3a:7d: e3:41:b1:1e:66:77:5d:1b:da:08:db:c1:17:87:0d:8c:bd:21: f2:71:3d:8d:a2:14:5c:c9:ff:4b:dd:61:e8:b9:15:c7:ad:f0: 89:e5:be:70:e2:51:d1:8a:ed:b2:c2:cf:90:b5:12:f3:49:c7: 12:2d:d8:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjUwNTEyMTkyNjI4WhcNMjUwNTE5MTkyNjI4WjAYMRYwFAYD VQQDEw02ODIyNGI2NC1jZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkBcx3TLY/MLzni/R88nEogIVtzNtAvkeAU/MulgWtC2a/MaXmrhDRzfMnwz /KkHAyITJklh71zC9Culc/rRZCxEPD1UAM1XZFgQwzZDJx5o/PReuKB71N9uKCZj iSLQ5AxeDjLBdU1WkKnR4lHerCW6LnibGcY6zOcM8lOAo+YJZPxCWi8rv57tTl/V OUf4q0SUSG1b5SGOHBz8lekC8IqtfnrFq6qzS5LTW8z7rlx2YH/yHPXGHpoxAhPH t8kZtcKvm2CeOMsd9J4DNw3bawgVv/gwS2I7cz3+1ESm4nIS0KibiFi4ZQYvKgIq XlJBXS2kpkyYySgUsN30zH70ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo6wW6u HCEGq3XQ4nd2wBcUFnKjMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1EEC4GLgTHdyADKs0+W2Pj6XZFJNHEocvo9iIugJOp+4BnvejZOIV TA8pUw4oZG/cw2Hkgm7vEDDIQUxW6Opv6gEsPh+BiKB6HUGf1TvKCUPkbHrXUTID NUrolQH41JEO0xZ5jTPJklDwolvw/DNy9Ap7/ihC2ekxmHvpPRxJ1e2JxzLxnXXG gd5k8IUQevC0EEOCv18/tWMaPNRpl63zQSEkypO4AVJ2mJVheLew+FJBoJVMU/he 1b4VQB0WKKEouNg9On3jQbEeZnddG9oI28EXhw2MvSHycT2NohRcyf9L3WHouRXH rfCJ5b5w4lHRiu2yws+QtRLzSccSLdhm -----END CERTIFICATE-----Generated at Wed May 14 20:42:38 2025 by rpki-client