$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json) Hash identifier: nqZxUjmOcsddKtwI/uEVWw15VASd/F68I2IpeWS+llg= Subject key identifier: E9:03:76:F5:16:FD:1E:A3:F6:18:7F:F1:9B:38:10:BF:6D:54:D5:3A Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft Manifest number: 063D Signing time: Thu 08 May 2025 22:24:09 +0000 Manifest this update: Thu 08 May 2025 22:24:08 +0000 Manifest next update: Thu 15 May 2025 22:24:08 +0000 Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: DOPMzm5bjWUx4uMTAUOmqXoF8zLmhyXNw7fgcezUC98=) 2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: am0gLM47UswkhQ7d8ve9CDz5IVO8+0wgLFBI3jyuYpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Validity Not Before: May 8 22:24:08 2025 GMT Not After : May 15 22:24:08 2025 GMT Subject: CN=681d2f09-8a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:43:d5:18:87:09:08:a2:c8:7f:19:57:93:e4: b2:65:27:cc:60:0e:00:c8:f4:bc:88:5c:f9:43:e4: f1:c8:02:d5:c5:66:e8:5e:11:8b:28:59:aa:b7:0e: c7:a3:ec:85:de:83:06:29:80:c5:b0:70:14:2e:a4: b5:1d:7e:95:8f:0e:73:20:3d:58:ac:af:f3:be:a6: bc:d9:d4:11:97:eb:67:b4:99:ee:a9:88:7d:b5:aa: 20:67:3a:52:68:98:31:81:a7:8d:fc:3e:99:ab:d3: df:d9:bc:bf:61:f1:56:31:ed:1c:06:a4:72:d2:d9: 3e:cc:26:a6:ab:27:85:68:90:c0:de:9c:a5:39:9d: f2:75:51:2e:81:d2:04:b3:ec:ec:a7:64:81:1a:57: e1:fc:c7:8e:18:9d:3c:c8:25:23:fb:1b:46:49:9d: ba:d7:3b:66:30:ee:39:ab:a6:70:52:23:71:6d:49: dc:be:e8:75:71:f2:ca:20:31:df:2d:63:97:4f:91: 76:dc:74:89:6d:9c:02:58:45:6f:ab:3e:38:db:bd: a7:23:6a:75:f2:c0:e6:39:a9:3c:a7:08:68:cc:d8: 8e:81:08:64:34:d5:eb:a8:49:83:f5:91:42:d0:d1: 0d:59:5d:08:b4:16:95:ed:44:26:4b:7b:95:67:13: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:03:76:F5:16:FD:1E:A3:F6:18:7F:F1:9B:38:10:BF:6D:54:D5:3A X509v3 Authority Key Identifier: keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:13:c5:ba:8b:3c:96:5a:ab:28:71:48:33:0c:c1:52:c5:3c: ec:85:8a:f9:8e:d9:76:e9:49:08:f4:fc:62:ed:56:83:a3:a9: 98:57:d5:65:8f:65:e8:52:d5:4e:ef:bb:ac:de:ac:eb:6a:a3: 3a:42:e8:f8:5f:96:2c:88:14:e7:8c:1b:f6:b7:3f:fb:0f:ad: 69:5a:e3:1a:ea:6e:eb:82:f7:cc:17:2b:82:75:3d:f3:9f:a4: 77:e3:47:9e:50:d3:70:7c:d7:d7:a1:ca:ba:ae:1b:4f:2a:43: c3:f6:7e:d5:1f:6f:6f:a8:40:fe:f9:39:72:7e:50:30:3d:15: 7e:57:5e:3b:0f:f2:e8:4b:f2:57:13:d4:0e:df:d9:8e:28:e8: b4:8b:44:8d:b2:68:8d:76:b7:ea:2c:9b:0a:92:08:b0:fe:33: 9e:96:d1:fa:3b:68:d2:46:50:f9:f1:6e:e5:b9:93:d6:74:c2: 58:35:c2:c7:7d:6e:78:d4:b0:e3:ea:77:97:af:51:5f:3f:4c: 07:f5:3d:cb:db:87:9c:c3:7c:32:2d:e7:eb:ca:50:2a:d3:48: 41:ab:87:4c:6c:92:12:da:ea:25:30:fe:8f:7b:1d:6a:6a:79: ad:dd:de:4b:d0:68:c8:70:20:99:44:d1:84:6c:d5:22:49:d9: a2:a3:8c:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz QkY1QzVEMTQwHhcNMjUwNTA4MjIyNDA4WhcNMjUwNTE1MjIyNDA4WjAYMRYwFAYD VQQDEw02ODFkMmYwOS04YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EPVGIcJCKLIfxlXk+SyZSfMYA4AyPS8iFz5Q+TxyALVxWboXhGLKFmqtw7H o+yF3oMGKYDFsHAULqS1HX6Vjw5zID1YrK/zvqa82dQRl+tntJnuqYh9taogZzpS aJgxgaeN/D6Zq9Pf2by/YfFWMe0cBqRy0tk+zCamqyeFaJDA3pylOZ3ydVEugdIE s+zsp2SBGlfh/MeOGJ08yCUj+xtGSZ261ztmMO45q6ZwUiNxbUncvuh1cfLKIDHf LWOXT5F23HSJbZwCWEVvqz44272nI2p18sDmOak8pwhozNiOgQhkNNXrqEmD9ZFC 0NENWV0ItBaV7UQmS3uVZxPlAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkDdvUW /R6j9hh/8Zs4EL9tVNU6MB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm RmU3bWRVZUJqaVk3OWNYUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGE8W6izyWWqsocUgzDMFSxTzshYr5jtl26UkI9Pxi7VaDo6mYV9Vl j2XoUtVO77us3qzraqM6Quj4X5YsiBTnjBv2tz/7D61pWuMa6m7rgvfMFyuCdT3z n6R340eeUNNwfNfXocq6rhtPKkPD9n7VH29vqED++TlyflAwPRV+V147D/LoS/JX E9QO39mOKOi0i0SNsmiNdrfqLJsKkgiw/jOeltH6O2jSRlD58W7luZPWdMJYNcLH fW541LDj6neXr1FfP0wH9T3L24ecw3wyLefrylAq00hBq4dMbJIS2uolMP6Pex1q anmt3d5L0GjIcCCZRNGEbNUiSdmio4yC -----END CERTIFICATE-----Generated at Sat May 10 19:40:59 2025 by rpki-client