$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft File: 29u3f7gUXp1EhgdPtz74TVSOpiI.mft (raw, json) Hash identifier: 7Oh/wa088UoepnIXIVimuYugkEmyV1XlNRJW/4Zx6lI= Subject key identifier: D5:D8:74:36:BD:A9:29:32:1E:95:DC:0E:AB:34:29:D6:CB:6C:DA:B7 Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 Certificate issuer: /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft Manifest number: B5 Signing time: Sat 03 May 2025 05:17:48 +0000 Manifest this update: Sat 03 May 2025 05:17:48 +0000 Manifest next update: Sat 10 May 2025 05:17:48 +0000 Files and hashes: 1: 29u3f7gUXp1EhgdPtz74TVSOpiI.crl (hash: ndNQCicsTjCE6SeMOKXPeIZhS3qxEAgdjfbbkhiP4PY=) 2: 5741EB0A159311EFA0CC790BC4F9AE02.roa (hash: jE4GzHd14AerZws/zq+eZy5XQS34aDVO012G4f0K8Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Validity Not Before: May 3 05:17:48 2025 GMT Not After : May 10 05:17:48 2025 GMT Subject: CN=6815a6fc-889e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f9:27:f3:b2:00:6f:9c:77:89:05:9c:f8:0a: 60:90:47:5f:80:4b:ac:36:88:f8:37:38:c6:bb:41: 4c:ad:59:6e:47:75:85:8e:d9:6a:cb:85:30:95:30: 9e:60:fe:c8:5e:ce:fc:22:cd:a2:e2:a2:a5:2e:df: 3c:b1:ef:b8:46:02:03:27:b9:a3:3a:0e:14:35:01: c6:d8:1b:1c:9c:01:9d:ef:81:cf:64:ae:48:f9:19: e0:eb:5a:8b:07:d3:bd:ba:4c:fc:12:af:b5:10:50: 62:50:15:64:aa:4a:3f:74:80:7b:59:53:97:98:33: 82:b5:a3:93:8d:c7:29:96:6d:f7:b9:0a:ba:df:62: 55:99:f6:56:5e:db:c5:e9:ed:63:7c:8c:63:53:2a: 28:12:ee:0e:f3:24:16:2c:d5:f0:d3:6b:a8:6b:25: 0f:d9:be:d5:30:00:29:f6:ff:0c:04:3b:07:21:da: 6a:0c:34:4f:16:59:bd:bd:2a:1e:55:ce:67:01:72: 90:e8:9a:5e:ee:df:56:56:c7:52:1f:dc:69:ac:be: 4f:83:63:18:d3:73:e3:a6:9c:fa:57:22:a7:98:17: 4d:e6:82:46:7a:28:0e:7e:c7:a5:b5:82:c7:c0:8a: 71:e6:0f:84:5d:ef:6f:1e:9a:47:fb:cf:fc:11:e6: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D8:74:36:BD:A9:29:32:1E:95:DC:0E:AB:34:29:D6:CB:6C:DA:B7 X509v3 Authority Key Identifier: keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b3:b4:23:46:f9:da:38:3b:c7:7c:42:c0:dd:c1:72:0b:af: 7d:c0:26:ee:13:c3:0f:c0:fe:32:5b:8d:b8:d5:9e:59:8c:d7: 8b:a2:46:7f:f0:c4:a6:36:97:e2:dc:9c:fb:d9:ef:21:c7:90: 62:ad:7a:3a:50:e8:1b:a2:1c:3c:4f:b2:30:a6:14:14:5b:4d: 84:63:8b:49:36:48:f9:f4:15:d2:89:fe:5d:e3:2e:7d:64:2f: 96:64:25:8c:0d:59:7e:91:cd:b0:b0:64:e9:d3:c8:95:5b:33: 41:11:9b:c3:b1:54:96:65:4c:7c:f7:28:31:8f:5f:14:6d:65: c0:4e:2b:46:4b:0b:87:f3:e3:ea:b8:f2:e9:1f:2c:de:03:6f: 1e:7e:04:0c:7b:d8:7e:47:f5:84:36:84:61:a7:8b:55:32:87: f9:e5:cf:6e:a9:78:84:3b:fb:1f:19:df:8e:48:18:a9:da:53: 52:90:61:30:89:b6:76:55:cf:41:e7:c6:56:c4:b3:06:60:03: f4:c8:24:be:5e:46:46:58:4d:ca:b1:61:9f:15:8f:8c:11:1d: d0:47:48:11:7d:79:3e:e8:fa:7d:24:87:a5:ba:19:a3:ba:af: 6d:44:1d:69:7e:bc:e0:aa:a1:57:ea:5b:66:72:30:7d:bf:c0: 15:9b:a8:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1MTExMTAvBgNVBAUTKERCREJCNzdGQjgxNDVFOUQ0NDg2MDc0RkI3M0VGODRE NTQ4RUE2MjIwHhcNMjUwNTAzMDUxNzQ4WhcNMjUwNTEwMDUxNzQ4WjAYMRYwFAYD VQQDEw02ODE1YTZmYy04ODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvkn87IAb5x3iQWc+ApgkEdfgEusNoj4NzjGu0FMrVluR3WFjtlqy4UwlTCe YP7IXs78Is2i4qKlLt88se+4RgIDJ7mjOg4UNQHG2BscnAGd74HPZK5I+Rng61qL B9O9ukz8Eq+1EFBiUBVkqko/dIB7WVOXmDOCtaOTjccplm33uQq632JVmfZWXtvF 6e1jfIxjUyooEu4O8yQWLNXw02uoayUP2b7VMAAp9v8MBDsHIdpqDDRPFlm9vSoe Vc5nAXKQ6Jpe7t9WVsdSH9xprL5Pg2MY03Pjppz6VyKnmBdN5oJGeigOfseltYLH wIpx5g+EXe9vHppH+8/8EeZPdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXYdDa9 qSkyHpXcDqs0KdbLbNq3MB8GA1UdIwQYMBaAFNvbt3+4FF6dRIYHT7c++E1UjqYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTUxMS84RDM0MzIzQzEz RjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhwMUVoZ2RQdHo3NFRWU09w aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5dTNmN2dVWHAxRWhnZFB0ejc0VFZTT3BpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTUxMS84RDM0MzIzQzEzRjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhw MUVoZ2RQdHo3NFRWU09waUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgs7QjRvnaODvHfELA3cFyC699wCbuE8MPwP4yW4241Z5ZjNeLokZ/ 8MSmNpfi3Jz72e8hx5BirXo6UOgbohw8T7IwphQUW02EY4tJNkj59BXSif5d4y59 ZC+WZCWMDVl+kc2wsGTp08iVWzNBEZvDsVSWZUx89ygxj18UbWXATitGSwuH8+Pq uPLpHyzeA28efgQMe9h+R/WENoRhp4tVMof55c9uqXiEO/sfGd+OSBip2lNSkGEw ibZ2Vc9B58ZWxLMGYAP0yCS+XkZGWE3KsWGfFY+MER3QR0gRfXk+6Pp9JIeluhmj uq9tRB1pfrzgqqFX6ltmcjB9v8AVm6gW -----END CERTIFICATE-----Generated at Mon May 5 03:15:48 2025 by rpki-client