$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: 4MO9yzcy42V7C7OiMT4Rk3sDZwcD7glNzSqMgXMSDtw= Subject key identifier: 51:C5:03:6A:91:68:A6:42:E9:92:00:3E:EF:E0:8E:F9:4D:EA:00:67 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 03AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 03A2 Signing time: Tue 13 May 2025 00:33:26 +0000 Manifest this update: Tue 13 May 2025 00:33:26 +0000 Manifest next update: Tue 20 May 2025 00:33:26 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: OWkcWD5a4jy5Pff7cEYOjfOPAXRCv1JMYHgvXwJFjRY=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 943 (0x3af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: May 13 00:33:26 2025 GMT Not After : May 20 00:33:26 2025 GMT Subject: CN=68229356-e473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:22:c4:01:0b:38:2a:b2:cc:74:64:33:ca: f0:71:9c:ad:61:8a:8b:c2:f1:fe:bb:dc:de:d8:a3: b5:2f:1c:e2:e4:f8:6f:d1:59:f8:6f:e4:d3:aa:99: 17:b2:34:75:e6:51:2f:59:78:f1:a1:d0:63:79:a2: 0a:98:32:37:5b:64:93:51:da:fb:68:cb:23:45:f4: 8c:cd:6f:4b:cc:89:cc:76:18:98:a6:db:37:05:89: 8b:13:f7:3f:0d:0d:c9:fe:e4:37:75:17:51:ab:07: f4:bb:c9:0f:e1:a7:91:2c:d2:b0:fc:fb:37:a0:b1: 5b:06:4a:ea:11:bc:cb:28:77:3a:5d:47:36:84:99: a0:dd:80:8a:85:87:b4:af:3c:c7:cd:7f:4c:3c:ad: 73:1f:99:0a:77:fc:22:2a:54:75:2b:6d:04:40:97: 0c:26:60:a2:da:a1:f8:1c:b6:b6:18:f1:6e:14:39: cf:68:90:85:3c:56:a8:9e:27:a8:34:32:5b:fd:de: be:eb:9e:54:ab:4a:a6:8f:aa:7c:db:71:3b:35:93: f4:35:a8:9d:fa:6b:d5:a2:15:f2:01:f8:28:ae:7e: dc:f8:93:db:6e:ce:5e:c5:17:a4:b5:2a:83:72:bb: cd:bd:5a:eb:94:93:17:de:9f:ce:dc:7a:be:02:32: 8e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C5:03:6A:91:68:A6:42:E9:92:00:3E:EF:E0:8E:F9:4D:EA:00:67 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c9:cd:db:ef:57:7f:f9:56:f6:ef:ca:f1:66:27:bd:65:10: f8:00:56:5b:4a:42:64:a5:87:3b:a5:66:d7:39:15:0d:de:c9: 87:c8:ba:e9:19:d8:c5:f8:5e:47:2b:cf:85:8a:b0:70:f8:a9: 21:0c:74:62:8c:4c:4d:25:37:b5:bd:72:b0:86:10:61:75:a9: 0b:02:1d:f0:b8:e8:e3:d8:6e:71:3d:30:a9:25:18:56:d1:37: 63:61:d7:b8:24:d7:d4:f3:42:8d:25:96:dd:59:d9:d6:1b:d6: c2:15:86:71:07:88:71:b4:47:2f:8b:e1:cd:3a:9e:45:e6:1a: 12:c9:36:1e:fc:46:19:3a:0f:b5:82:47:59:69:64:e0:b3:c9: 50:9e:52:84:f5:6b:d4:db:15:2e:8d:02:42:ed:9f:d2:cb:98: c8:a4:c4:60:57:06:9c:51:48:09:ff:79:b0:6b:a2:ea:13:6e: f3:0c:af:b4:93:9d:2b:97:eb:53:28:c5:53:74:e2:4d:de:82: d0:28:cb:f8:ca:08:d6:aa:e1:e3:ad:75:b8:53:de:7d:69:2c: 58:33:2a:9d:1f:69:d8:31:27:b5:d9:72:d7:6e:ec:cb:e2:c9: d6:5e:f6:38:01:dc:bf:cb:5c:8c:ed:c8:d1:72:e8:96:7f:1c: af:12:2d:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjUwNTEzMDAzMzI2WhcNMjUwNTIwMDAzMzI2WjAYMRYwFAYD VQQDEw02ODIyOTM1Ni1lNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWcixAELOCqyzHRkM8rwcZytYYqLwvH+u9ze2KO1Lxzi5Phv0Vn4b+TTqpkX sjR15lEvWXjxodBjeaIKmDI3W2STUdr7aMsjRfSMzW9LzInMdhiYpts3BYmLE/c/ DQ3J/uQ3dRdRqwf0u8kP4aeRLNKw/Ps3oLFbBkrqEbzLKHc6XUc2hJmg3YCKhYe0 rzzHzX9MPK1zH5kKd/wiKlR1K20EQJcMJmCi2qH4HLa2GPFuFDnPaJCFPFaonieo NDJb/d6+655Uq0qmj6p823E7NZP0Naid+mvVohXyAfgorn7c+JPbbs5exRektSqD crvNvVrrlJMX3p/O3Hq+AjKOxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHFA2qR aKZC6ZIAPu/gjvlN6gBnMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPyc3b71d/+Vb278rxZie9ZRD4AFZbSkJkpYc7pWbXORUN3smHyLrp GdjF+F5HK8+FirBw+KkhDHRijExNJTe1vXKwhhBhdakLAh3wuOjj2G5xPTCpJRhW 0TdjYde4JNfU80KNJZbdWdnWG9bCFYZxB4hxtEcvi+HNOp5F5hoSyTYe/EYZOg+1 gkdZaWTgs8lQnlKE9WvU2xUujQJC7Z/Sy5jIpMRgVwacUUgJ/3mwa6LqE27zDK+0 k50rl+tTKMVTdOJN3oLQKMv4ygjWquHjrXW4U959aSxYMyqdH2nYMSe12XLXbuzL 4snWXvY4Ady/y1yM7cjRcuiWfxyvEi1V -----END CERTIFICATE-----Generated at Wed May 14 04:46:40 2025 by rpki-client