$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: xscCSzSf8wmPlFG2YiuUclo3kENWq30gYnQru6mGdGg= Subject key identifier: 5F:F1:E3:86:68:25:75:B1:BE:F8:20:A1:E2:85:2C:1C:2C:5D:19:A3 Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 02A1 Signing time: Sun 11 May 2025 01:03:18 +0000 Manifest this update: Sun 11 May 2025 01:03:18 +0000 Manifest next update: Sun 18 May 2025 01:03:18 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: 0YgP1JcmMwOQq2foencMIKe+BIjvWmSueXDH7NVssW4=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: mXf2uQ5mcSdD+NErxrFlghuWQs3NGoZkupDcd+zBXVE=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: M9uQ6pPxIBbjIwPVgVR3Gml4RjG64rh15R2Po2BA/0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: May 11 01:03:18 2025 GMT Not After : May 18 01:03:18 2025 GMT Subject: CN=681ff756-fe60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:bc:a3:78:70:ef:c0:7f:1f:2c:16:a0:fd: 61:ef:8a:87:5f:73:1b:3c:d0:e2:c4:b6:91:eb:a9: f9:4a:fc:c0:df:c8:06:96:23:76:b8:f6:db:11:85: e0:a4:96:31:94:14:a3:d7:99:a6:93:04:ac:cc:3a: a5:3a:4c:a9:c2:68:9b:5c:cf:41:bc:88:ae:fc:09: 0e:5b:9b:dc:18:b7:54:a4:fd:af:45:21:b5:ef:08: 08:83:bf:84:8e:20:e5:c3:e6:f8:4e:9f:0f:2f:dc: 24:d7:64:9d:63:a9:bc:2c:16:19:4e:eb:28:8c:bb: ed:1c:da:a8:c1:86:97:29:f6:ac:fa:7e:b6:cb:7d: 2e:4c:8e:bb:f5:28:90:63:a4:81:e7:9b:b5:9d:bf: e0:c4:68:e6:7b:da:da:18:e0:df:7b:f8:0b:c4:19: ae:1e:a4:d4:e3:f2:cc:39:68:e3:ae:87:37:c1:b9: 05:2b:bc:b0:28:9b:1b:eb:aa:fc:00:0e:4e:42:04: a0:a2:83:01:42:34:45:80:67:84:e4:72:df:44:ae: df:f5:c7:d3:11:f1:62:1e:31:e1:7a:14:3d:e6:dd: 1e:e1:96:63:b3:84:ba:e1:0e:e8:df:2b:1a:50:db: 8e:10:c4:17:b2:ea:94:8b:4f:e2:aa:6b:99:a7:9a: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F1:E3:86:68:25:75:B1:BE:F8:20:A1:E2:85:2C:1C:2C:5D:19:A3 X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:86:e4:cf:40:51:e7:c2:21:75:72:d4:59:cd:2b:c2:15:be: 4f:f5:42:5d:5c:72:a0:b3:2a:68:22:14:93:ba:56:c8:05:08: d4:e8:1a:62:5d:f9:4c:08:83:f5:2e:ae:59:50:e2:b5:aa:0e: c3:34:b6:ca:a8:fb:cd:15:2e:12:dc:4a:26:e2:e1:03:1b:19: 51:af:56:a8:91:66:60:5f:91:70:ed:f7:4f:08:e7:9d:74:1f: 42:90:28:cc:f1:bd:61:5f:15:b9:28:19:a1:8c:80:32:6a:a0: e8:ca:d7:1b:b2:61:71:65:b3:aa:ed:4b:f8:57:ec:3d:1d:51: ce:71:4f:16:90:dc:b8:4f:c1:8f:56:aa:37:b5:a8:f5:d9:44: c7:10:40:ae:31:37:d7:51:9d:09:7c:e3:6e:b6:05:28:73:a9: da:69:fe:65:70:08:64:d5:10:80:a6:a0:a2:7e:f3:64:87:4c: a8:91:3d:14:88:d4:eb:4a:21:35:3a:ea:12:67:70:13:1b:18: 97:01:ad:8d:e8:23:28:35:5f:91:af:d7:ba:43:d4:f0:4f:5e: 97:45:4c:14:b8:26:12:2b:7f:ef:bb:5b:6c:aa:ef:11:7f:ca: f9:1f:c6:6d:c5:6f:16:c9:39:0c:2d:e1:13:76:fb:f9:6f:91: cc:91:97:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjUwNTExMDEwMzE4WhcNMjUwNTE4MDEwMzE4WjAYMRYwFAYD VQQDEw02ODFmZjc1Ni1mZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydy8o3hw78B/HywWoP1h74qHX3MbPNDixLaR66n5SvzA38gGliN2uPbbEYXg pJYxlBSj15mmkwSszDqlOkypwmibXM9BvIiu/AkOW5vcGLdUpP2vRSG17wgIg7+E jiDlw+b4Tp8PL9wk12SdY6m8LBYZTusojLvtHNqowYaXKfas+n62y30uTI679SiQ Y6SB55u1nb/gxGjme9raGODfe/gLxBmuHqTU4/LMOWjjroc3wbkFK7ywKJsb66r8 AA5OQgSgooMBQjRFgGeE5HLfRK7f9cfTEfFiHjHhehQ95t0e4ZZjs4S64Q7o3ysa UNuOEMQXsuqUi0/iqmuZp5olxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/x44Zo JXWxvvggoeKFLBwsXRmjMB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAThuTPQFHnwiF1ctRZzSvCFb5P9UJdXHKgsypoIhSTulbIBQjU6Bpi XflMCIP1Lq5ZUOK1qg7DNLbKqPvNFS4S3Eom4uEDGxlRr1aokWZgX5Fw7fdPCOed dB9CkCjM8b1hXxW5KBmhjIAyaqDoytcbsmFxZbOq7Uv4V+w9HVHOcU8WkNy4T8GP Vqo3taj12UTHEECuMTfXUZ0JfONutgUoc6naaf5lcAhk1RCApqCifvNkh0yokT0U iNTrSiE1OuoSZ3ATGxiXAa2N6CMoNV+Rr9e6Q9TwT16XRUwUuCYSK3/vu1tsqu8R f8r5H8ZtxW8WyTkMLeETdvv5b5HMkZcd -----END CERTIFICATE-----Generated at Sun May 11 16:56:57 2025 by rpki-client