$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json) Hash identifier: L2mN/d8q+SIGwd4ImOKxIC95FtB9gWIIOL/M/hZwBJQ= Subject key identifier: E7:5B:88:C4:35:30:61:88:B8:D8:AE:98:FB:70:9A:58:B3:B7:B4:78 Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0C3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft Manifest number: 0C15 Signing time: Mon 12 May 2025 18:37:00 +0000 Manifest this update: Mon 12 May 2025 18:37:00 +0000 Manifest next update: Mon 19 May 2025 18:37:00 +0000 Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: c8gOAD+s/6cCx/cgh0twPNeIZAG6IPY25PeJG8AxLpw=) 2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: DROTwTMk5DUvv23krOsjnKxfQT0TAHld0vTq/cxjBfM=) 3: AF625B0680FA11EC96280855C4F9AE02.roa (hash: z4WcPtmsy3sGBTXhyRrnZ77SzocIV0s6o5lPO+EbUAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: May 12 18:37:00 2025 GMT Not After : May 19 18:37:00 2025 GMT Subject: CN=68223fcc-b4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:e7:44:3b:2b:1d:eb:2a:58:13:e1:6e:3b: 85:f1:b1:30:e8:6e:95:06:33:03:e6:6d:7a:e0:35: 23:97:26:02:cb:1e:03:e7:7d:77:0a:bb:c7:5c:dc: 0c:cd:dc:6e:59:5c:f0:e6:d0:d1:fe:17:9c:c6:ac: 1f:3e:aa:5e:14:3c:0d:f2:1b:e2:e5:7d:e4:86:5f: 3b:9d:54:3c:47:3b:14:46:bb:2b:3a:6a:c9:f6:c7: 7f:e8:95:4c:5c:22:77:c9:a8:b4:c2:9b:46:5e:25: 7a:5b:11:ed:07:00:f7:2e:b6:19:b8:80:d6:79:4b: 56:f0:f2:fc:8e:bc:30:ea:2e:62:e1:ff:67:d8:25: bf:10:58:76:e9:fe:31:27:dc:21:b7:90:71:d9:05: b3:5e:38:d6:4a:8b:d7:2d:b8:2d:c9:0e:26:e6:7f: fb:c1:00:80:e3:39:66:7a:82:a9:03:98:85:13:20: 18:e4:52:a4:30:64:e9:be:a8:f5:ea:92:66:31:78: 2c:af:50:a4:57:15:14:1b:81:0f:5d:d4:4f:bb:27: f8:b4:98:53:a1:aa:58:0e:80:a3:5c:2b:3c:52:e9: 4d:72:86:f8:f5:75:9a:8c:46:fd:41:fc:1a:3d:8d: 70:fe:32:f5:0e:43:9e:97:6d:fe:a7:94:f5:17:67: 97:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5B:88:C4:35:30:61:88:B8:D8:AE:98:FB:70:9A:58:B3:B7:B4:78 X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d3:e3:69:67:f0:97:bb:c0:68:19:3d:82:a9:6d:8a:43:c8: 68:e0:62:f3:aa:9f:44:cc:74:41:1d:e8:a2:9d:da:77:ef:21: e6:89:31:0e:ae:b2:00:49:e6:b8:4d:4f:17:8c:2a:7d:d8:ae: c0:69:b9:44:33:8b:82:46:cf:89:18:15:6d:72:51:7b:f5:a1: 8a:a0:a0:5d:93:35:7d:81:91:8a:54:b1:ee:50:79:d2:07:62: 70:c7:15:96:22:e4:95:2e:39:2e:18:e2:ef:30:d6:e5:e9:46: 2a:17:c6:6e:8f:d1:31:23:1c:c2:a5:45:17:29:c0:92:95:6b: 53:27:52:54:32:b7:04:aa:f8:b2:9a:32:54:98:0b:15:33:72: cf:e8:3a:f3:15:17:21:3a:78:6d:2d:d1:e7:ca:7f:ff:0c:f6: 50:5a:2a:6e:b1:6d:48:b2:e4:59:70:94:76:0d:f5:02:b3:5b: f6:79:fa:44:1a:ef:7b:e3:89:aa:19:d8:b6:66:2c:51:34:fc: f8:01:98:58:86:38:21:f3:5a:ee:7a:34:1a:9c:ed:9e:9a:9f: ca:97:e7:d0:08:67:f6:a4:a9:27:95:e9:9e:24:eb:e9:c1:81: b1:5e:9d:3d:63:f0:0c:84:22:c2:e9:66:31:51:5b:89:67:bc: dc:5f:39:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjUwNTEyMTgzNzAwWhcNMjUwNTE5MTgzNzAwWjAYMRYwFAYD VQQDEw02ODIyM2ZjYy1iNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqznRDsrHesqWBPhbjuF8bEw6G6VBjMD5m164DUjlyYCyx4D5313CrvHXNwM zdxuWVzw5tDR/hecxqwfPqpeFDwN8hvi5X3khl87nVQ8RzsURrsrOmrJ9sd/6JVM XCJ3yai0wptGXiV6WxHtBwD3LrYZuIDWeUtW8PL8jrww6i5i4f9n2CW/EFh26f4x J9wht5Bx2QWzXjjWSovXLbgtyQ4m5n/7wQCA4zlmeoKpA5iFEyAY5FKkMGTpvqj1 6pJmMXgsr1CkVxUUG4EPXdRPuyf4tJhToapYDoCjXCs8UulNcob49XWajEb9Qfwa PY1w/jL1DkOel23+p5T1F2eXnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdbiMQ1 MGGIuNiumPtwmlizt7R4MB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2My9BNEQ0NDAwQzEzOUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3Yndu Y1dxejNHcUNfRnJzUmU3MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA00+NpZ/CXu8BoGT2CqW2KQ8ho4GLzqp9EzHRBHeiindp37yHmiTEO rrIASea4TU8XjCp92K7AablEM4uCRs+JGBVtclF79aGKoKBdkzV9gZGKVLHuUHnS B2JwxxWWIuSVLjkuGOLvMNbl6UYqF8Zuj9ExIxzCpUUXKcCSlWtTJ1JUMrcEqviy mjJUmAsVM3LP6DrzFRchOnhtLdHnyn//DPZQWipusW1IsuRZcJR2DfUCs1v2efpE Gu9744mqGdi2ZixRNPz4AZhYhjgh81ruejQanO2emp/Kl+fQCGf2pKknlemeJOvp wYGxXp09Y/AMhCLC6WYxUVuJZ7zcXzkD -----END CERTIFICATE-----Generated at Wed May 14 12:30:30 2025 by rpki-client