$ rpki-client -vvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft File: s40rj01btqU-m0GSYQSBpdiBZUY.mft (raw, json) Hash identifier: gVMAlQBNhF83P+ZJ+vsI5X4KivCUuDHy+mnEP87bFVw= Subject key identifier: A2:A7:97:18:20:B7:D5:31:7B:1E:F6:8E:9F:3C:32:A6:EC:CF:06:3F Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Certificate serial: 0AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft Manifest number: 0AD0 Signing time: Mon 12 May 2025 19:17:16 +0000 Manifest this update: Mon 12 May 2025 19:17:16 +0000 Manifest next update: Mon 19 May 2025 19:17:16 +0000 Files and hashes: 1: s40rj01btqU-m0GSYQSBpdiBZUY.crl (hash: Z4GlfIN2BCmP4UsNJwy8iYHiOn8S9+/Q1AxZV8wdxZU=) 2: 1E1E9122565411EBA14ED510C4F9AE02.roa (hash: j/OpYEtDuYk8PfhysOsvn+uhuepZ3xGdAVnmL79tUAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2775 (0xad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546 Validity Not Before: May 12 19:17:16 2025 GMT Not After : May 19 19:17:16 2025 GMT Subject: CN=6822493c-ec6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:52:d7:a0:db:fa:ce:1b:96:9d:cb:3b:25: 15:ee:3b:f9:1e:ce:96:70:90:39:db:20:81:94:d6: c3:7b:39:69:ca:80:e6:e2:8b:a2:b5:93:cd:91:28: dc:b0:b6:88:cf:5c:11:f9:1e:b0:b9:dc:5e:20:da: 68:d8:91:8b:53:5e:eb:07:ef:e7:13:dd:43:b4:34: 13:bb:6c:ee:78:47:a5:8c:27:18:04:43:a9:c5:b4: 83:b8:8c:c1:c3:c2:9f:67:e6:63:b4:6c:95:58:90: 53:ee:89:ff:1d:ce:0d:28:67:7e:e9:00:8b:71:a0: 8a:16:b3:86:00:8a:d8:1c:9c:e1:78:ec:9b:40:91: f0:c0:e7:40:fd:2d:8c:5a:96:aa:66:88:4c:12:c8: f6:c2:2b:42:e4:fb:8e:54:f1:0a:ad:a7:96:61:08: bf:fc:2d:f1:c5:33:71:cb:0c:f3:30:49:71:c8:81: 40:d0:b6:94:95:3d:e8:c2:0f:c5:ba:01:9e:06:39: cf:5c:ba:02:9c:d7:07:b1:a7:8c:0f:ef:3e:f1:df: 53:53:e8:78:2e:08:6d:49:19:69:8a:8d:21:d4:d7: 53:68:08:ce:00:7b:21:fd:62:7c:f9:9d:0d:9e:f6: d9:e6:eb:00:95:e7:4d:46:d5:67:aa:31:f2:0d:8e: 0d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A7:97:18:20:B7:D5:31:7B:1E:F6:8E:9F:3C:32:A6:EC:CF:06:3F X509v3 Authority Key Identifier: keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c0:32:cf:b6:53:11:af:5f:fd:36:81:f9:ea:6d:1b:62:84: f0:30:48:60:f8:e9:e3:42:1d:a9:ec:82:ce:12:57:2c:71:20: 62:bd:57:37:07:83:b5:77:e1:cd:b7:00:74:32:4c:4a:71:04: 12:35:86:da:e1:01:64:e5:e5:c6:4c:4e:fd:4c:e0:0f:a6:bf: 01:b5:bc:ec:a5:ba:3a:02:12:bb:b0:27:53:b4:f3:35:01:28: a1:6f:1e:e1:a9:88:2b:d1:9c:d6:b2:ef:d4:e0:54:ce:28:75: 49:18:2e:be:b3:61:43:2f:87:39:6e:04:00:3b:e2:d0:63:c3: 67:ff:32:15:37:94:df:ba:0e:a4:7b:2f:67:9c:68:c4:63:76: e5:8f:f4:57:87:e2:91:ee:6f:88:80:15:ca:49:83:cb:9e:55: 93:29:8a:08:c0:d4:54:81:1e:92:47:30:a3:9c:a9:21:b0:ba: 78:5a:78:46:a0:85:dd:f4:c0:b3:79:7a:9c:43:e8:9a:25:22: d3:5c:ca:fe:27:d5:50:94:ae:45:69:19:25:f6:8d:36:fc:b4: 1c:bb:9c:c0:43:d4:96:e1:2a:0a:4d:91:2c:72:26:08:94:68: 30:e8:0d:c7:f4:18:67:c0:57:b2:45:90:bc:9e:ef:93:ca:77: 7a:45:51:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEyQUQxMTAvBgNVBAUTKEIzOEQyQjhGNEQ1QkI2QTUzRTlCNDE5MjYxMDQ4MUE1 RDg4MTY1NDYwHhcNMjUwNTEyMTkxNzE2WhcNMjUwNTE5MTkxNzE2WjAYMRYwFAYD VQQDEw02ODIyNDkzYy1lYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT9S16Db+s4blp3LOyUV7jv5Hs6WcJA52yCBlNbDezlpyoDm4ouitZPNkSjc sLaIz1wR+R6wudxeINpo2JGLU17rB+/nE91DtDQTu2zueEeljCcYBEOpxbSDuIzB w8KfZ+ZjtGyVWJBT7on/Hc4NKGd+6QCLcaCKFrOGAIrYHJzheOybQJHwwOdA/S2M WpaqZohMEsj2witC5PuOVPEKraeWYQi//C3xxTNxywzzMElxyIFA0LaUlT3owg/F ugGeBjnPXLoCnNcHsaeMD+8+8d9TU+h4LghtSRlpio0h1NdTaAjOAHsh/WJ8+Z0N nvbZ5usAledNRtVnqjHyDY4NXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKnlxgg t9Uxex72jp88MqbszwY/MB8GA1UdIwQYMBaAFLONK49NW7alPptBkmEEgaXYgWVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTJBRC8zOERBQTA2QzRC MjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRxVS1tMEdTWVFTQnBkaUJa VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M0MHJqMDFidHFVLW0wR1NZUVNCcGRpQlpVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTJBRC8zOERBQTA2QzRCMjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRx VS1tMEdTWVFTQnBkaUJaVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYwDLPtlMRr1/9NoH56m0bYoTwMEhg+OnjQh2p7ILOElcscSBivVc3 B4O1d+HNtwB0MkxKcQQSNYba4QFk5eXGTE79TOAPpr8Btbzspbo6AhK7sCdTtPM1 ASihbx7hqYgr0ZzWsu/U4FTOKHVJGC6+s2FDL4c5bgQAO+LQY8Nn/zIVN5Tfug6k ey9nnGjEY3blj/RXh+KR7m+IgBXKSYPLnlWTKYoIwNRUgR6SRzCjnKkhsLp4WnhG oIXd9MCzeXqcQ+iaJSLTXMr+J9VQlK5FaRkl9o02/LQcu5zAQ9SW4SoKTZEsciYI lGgw6A3H9BhnwFeyRZC8nu+Tynd6RVFu -----END CERTIFICATE-----Generated at Wed May 14 09:25:01 2025 by rpki-client