$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json) Hash identifier: eTOrnQ+EKqhtqq08lt4g+Y4Zxuuj0SOUFB/nM1h1nXQ= Subject key identifier: 4D:34:7B:6A:5A:60:9F:9F:3F:63:2A:F6:48:A4:49:79:8D:2E:DF:E1 Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Certificate serial: 1488 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft Manifest number: 1476 Signing time: Fri 16 May 2025 17:07:49 +0000 Manifest this update: Fri 16 May 2025 17:07:49 +0000 Manifest next update: Fri 23 May 2025 17:07:49 +0000 Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: 3/Va6A+EQKm/cZ5FXirtrddsvEmIyXXuKeO9lzMOqrE=) 2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: 9jViCMxta64fmIo5dm4osOtVC5SSmRZm2YRKWH3IWTM=) 3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: FfJi+Cna0JYZDzk+rBUfl7UT75ngYXqfbGnsFnMhnRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5256 (0x1488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Validity Not Before: May 16 17:07:49 2025 GMT Not After : May 23 17:07:49 2025 GMT Subject: CN=682770e5-9ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:c4:fe:85:b3:7a:1b:c3:d2:f2:0e:f5:c5: f7:6b:28:98:10:48:21:de:d2:e3:ca:6a:9e:b4:34: 1d:f8:3b:95:3b:12:94:6f:40:db:64:54:24:a2:0d: 82:9c:a5:cc:09:2e:34:bc:ff:08:8b:1e:ae:cf:7f: a0:70:03:c3:4f:13:1b:dc:a5:9e:00:dd:a8:86:08: d4:42:8e:65:76:f5:a2:e8:0b:c5:00:98:f4:db:f8: f4:35:15:48:f7:a0:31:39:c3:a8:01:dd:3e:0c:e9: c9:32:5f:47:be:90:52:15:c7:0a:9b:1c:97:d1:03: 29:4d:6e:34:bf:65:97:a1:61:9a:7c:3b:47:c5:fa: d6:82:ed:da:53:3f:19:cb:0e:d0:fc:cc:f6:38:80: b9:9d:7d:8c:46:ea:4d:72:86:e9:76:00:6c:db:53: 98:53:49:10:96:e8:99:06:94:3f:34:98:de:62:13: a8:c6:17:e2:1f:88:b2:4b:a3:96:9f:a6:e4:f7:9b: dd:3b:14:90:92:71:6d:64:d4:62:7c:35:4d:54:2e: bf:cf:71:56:87:69:cd:44:65:70:16:5f:9a:74:47: a6:cd:b2:5d:b7:32:9d:3a:b3:c1:04:0a:99:bc:ce: cf:df:eb:dd:53:52:56:4f:92:e5:d3:1e:dc:d1:07: a3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:34:7B:6A:5A:60:9F:9F:3F:63:2A:F6:48:A4:49:79:8D:2E:DF:E1 X509v3 Authority Key Identifier: keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:41:7b:4c:71:84:38:fe:e7:29:f7:cc:72:c2:61:26:a7:18: 1e:0c:37:7a:a3:14:29:e7:4c:d0:27:03:c2:98:88:45:e3:39: 29:ab:df:70:af:5e:f4:7c:3a:1c:9f:0e:32:a2:ec:81:0f:58: 54:0f:f3:13:70:69:80:8f:68:75:44:2e:15:01:d0:cd:23:86: 5a:ca:5c:d6:e3:db:c5:f7:fb:3c:53:cb:e6:72:ee:b3:da:c0: c9:2f:55:7a:66:8b:ba:5b:a2:ac:f0:3d:49:0f:71:c2:bb:c8: 45:92:0f:33:ba:04:bc:64:df:2b:1f:e3:45:2c:5e:7f:a1:8d: 34:0e:6a:b5:ab:93:fc:6d:9c:a4:4b:2b:c1:de:f0:92:28:c1: b0:ff:d0:a5:0b:03:d8:94:de:60:4a:fb:70:a0:4c:6d:01:40: 38:d7:a6:a6:04:41:92:d2:74:fe:79:3d:33:9e:ef:21:05:7c: 0d:71:c9:e3:1a:ee:3b:13:42:43:78:8e:e0:78:24:af:0d:ae: a5:08:bd:a8:0a:16:24:c9:8e:3e:cb:5a:81:c5:9b:36:12:84: 34:c3:76:68:32:e2:34:c5:d9:08:d1:dd:1c:30:f2:3d:0f:bd: 82:7e:bb:1a:48:ae:a5:7c:06:81:16:fc:47:12:a2:fa:dd:a9: d1:92:b3:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDMwMDc4NDRBQUExOTlCQTlDODhENjQwNEMzREZFODc2 RTFFMzlGQzYwHhcNMjUwNTE2MTcwNzQ5WhcNMjUwNTIzMTcwNzQ5WjAYMRYwFAYD VQQDEw02ODI3NzBlNS05ZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxrE/oWzehvD0vIO9cX3ayiYEEgh3tLjymqetDQd+DuVOxKUb0DbZFQkog2C nKXMCS40vP8Iix6uz3+gcAPDTxMb3KWeAN2ohgjUQo5ldvWi6AvFAJj02/j0NRVI 96AxOcOoAd0+DOnJMl9HvpBSFccKmxyX0QMpTW40v2WXoWGafDtHxfrWgu3aUz8Z yw7Q/Mz2OIC5nX2MRupNcobpdgBs21OYU0kQluiZBpQ/NJjeYhOoxhfiH4iyS6OW n6bk95vdOxSQknFtZNRifDVNVC6/z3FWh2nNRGVwFl+adEemzbJdtzKdOrPBBAqZ vM7P3+vdU1JWT5Ll0x7c0QejowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE00e2pa YJ+fP2Mq9kikSXmNLt/hMB8GA1UdIwQYMBaAFDAHhEqqGZupyI1kBMPf6Hbh45/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GMDBERjM2NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02bklqV1FFdzlfb2R1SGpu OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BZUVTcW9abTZuSWpXUUV3OV9vZHVIam44WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GMDBERjM2NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02 bklqV1FFdzlfb2R1SGpuOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBQXtMcYQ4/ucp98xywmEmpxgeDDd6oxQp50zQJwPCmIhF4zkpq99w r170fDocnw4youyBD1hUD/MTcGmAj2h1RC4VAdDNI4ZaylzW49vF9/s8U8vmcu6z 2sDJL1V6Zou6W6Ks8D1JD3HCu8hFkg8zugS8ZN8rH+NFLF5/oY00Dmq1q5P8bZyk SyvB3vCSKMGw/9ClCwPYlN5gSvtwoExtAUA416amBEGS0nT+eT0znu8hBXwNccnj Gu47E0JDeI7geCSvDa6lCL2oChYkyY4+y1qBxZs2EoQ0w3ZoMuI0xdkI0d0cMPI9 D72CfrsaSK6lfAaBFvxHEqL63anRkrM2 -----END CERTIFICATE-----Generated at Sat May 17 09:28:47 2025 by rpki-client