$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json) Hash identifier: HX7eblaVeuk1ufRHLrMBpeRnqxmeaxZpgCeOWivdc5g= Subject key identifier: 61:E8:C1:4D:30:0B:F4:4E:16:FD:3C:E9:02:21:C4:1B:7E:9F:C2:01 Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Certificate serial: 0766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft Manifest number: 0EBE Signing time: Sat 10 May 2025 21:13:26 +0000 Manifest this update: Sat 10 May 2025 21:13:25 +0000 Manifest next update: Sat 17 May 2025 21:13:25 +0000 Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: NlXj88lO2tyDQgWolcDLd7uAqFewazuYr2/Yb/aK5FY=) 2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: hkxmNGokisQG0mbBKypviapB/RNUZ9nsMjdRwBRak9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1894 (0x766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Validity Not Before: May 10 21:13:25 2025 GMT Not After : May 17 21:13:25 2025 GMT Subject: CN=681fc175-acd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ed:1b:9d:46:94:e1:09:4a:91:73:6c:fe:1d: 50:bf:87:83:eb:8d:35:4f:59:9e:2a:bd:ad:12:bd: 38:bd:5e:35:ce:db:94:5d:b4:fb:b5:f4:86:07:76: 69:49:2a:5a:da:ad:ac:40:6c:a5:91:97:08:a8:a1: aa:18:e6:8c:2e:ab:fc:69:b9:0c:ee:d7:65:62:48: fd:d2:01:9f:90:ae:c7:f9:2a:8c:be:52:39:13:4d: 9d:10:7f:c3:3e:17:ba:23:7f:c3:04:b9:71:41:15: 01:7e:a7:7f:3e:07:40:5a:f0:cc:2d:83:9a:f3:a6: f6:9f:07:07:ac:cf:8d:91:41:4c:72:ea:1d:17:63: 24:e4:b1:8e:f0:0c:a8:8a:fc:4e:93:bc:d8:36:7d: cb:34:2d:d5:cd:31:c4:9b:0e:c3:0e:f9:e0:c0:be: 85:7c:b9:20:80:57:b2:72:f9:be:c4:f9:63:2e:7b: a2:8c:3d:9e:97:22:87:19:4a:04:21:3a:65:1a:5d: d0:29:d7:a2:d1:14:1e:a5:b4:4c:85:a2:2f:35:6a: 48:59:27:79:91:3c:f7:8b:40:69:d6:bc:41:a7:16: c6:17:e8:be:8a:63:fe:af:fc:df:ab:73:79:5c:7b: cc:a4:7a:2f:b8:00:c4:02:d1:d5:82:35:73:cc:0d: 0e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E8:C1:4D:30:0B:F4:4E:16:FD:3C:E9:02:21:C4:1B:7E:9F:C2:01 X509v3 Authority Key Identifier: keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f5:2e:0c:6f:a2:dd:2b:41:f3:d9:0e:b3:6e:ac:ef:43:04: 3b:6a:c3:81:1e:ba:d5:d8:59:b0:11:8c:13:a2:1c:16:4a:4d: ec:b2:32:cd:11:3e:33:bd:d4:fd:cd:08:08:4a:28:54:16:25: d6:0e:df:a6:bc:38:db:5f:9c:39:6b:42:cf:9e:f8:0e:3b:71: 24:b4:dc:2c:0f:de:84:3d:bf:80:58:57:79:de:81:43:cc:e9: d9:db:12:3a:b6:6d:5a:33:cf:e1:0e:80:31:d0:8f:e5:bd:3f: 6f:07:7c:3b:91:ed:10:22:7e:5e:70:66:f9:5f:8c:aa:71:b8: 04:1a:fe:23:79:f9:2d:3b:18:87:a1:08:0e:f1:61:ea:0b:f4: dd:df:01:16:27:b7:8e:5e:87:3b:9f:36:cf:96:76:08:13:e5: 13:70:30:2a:8a:36:ca:e9:e8:d6:3c:5a:ed:d7:88:ad:5d:e8: 72:d1:5d:0a:2e:e7:92:19:12:0c:50:01:72:ed:a3:71:4a:f4: 54:8c:0c:db:50:53:5d:bb:c7:0c:18:82:fd:0e:0b:e2:fb:02: 54:a6:25:2c:3e:1a:e9:29:a7:8a:2a:9f:1f:a1:14:e7:93:b5: 81:85:44:b2:cc:f8:f8:09:e4:5a:b0:a7:df:1a:c1:a5:f8:aa: 53:c2:bc:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNCODdCMkU4QzhB RkQxQzYwNzgwHhcNMjUwNTEwMjExMzI1WhcNMjUwNTE3MjExMzI1WjAYMRYwFAYD VQQDEw02ODFmYzE3NS1hY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6u0bnUaU4QlKkXNs/h1Qv4eD6401T1meKr2tEr04vV41ztuUXbT7tfSGB3Zp SSpa2q2sQGylkZcIqKGqGOaMLqv8abkM7tdlYkj90gGfkK7H+SqMvlI5E02dEH/D Phe6I3/DBLlxQRUBfqd/PgdAWvDMLYOa86b2nwcHrM+NkUFMcuodF2Mk5LGO8Ayo ivxOk7zYNn3LNC3VzTHEmw7DDvngwL6FfLkggFeycvm+xPljLnuijD2elyKHGUoE ITplGl3QKdei0RQepbRMhaIvNWpIWSd5kTz3i0Bp1rxBpxbGF+i+imP+r/zfq3N5 XHvMpHovuADEAtHVgjVzzA0ObwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHowU0w C/ROFv086QIhxBt+n8IBMB8GA1UdIwQYMBaAFEQW6JhY2md7DNozuHsujIr9HGB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVozc00yak80ZXk2TWl2MGNZ SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCYm9tRmphWjNzTTJqTzRleTZNaXYwY1lIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVoz c00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj9S4Mb6LdK0Hz2Q6zbqzvQwQ7asOBHrrV2FmwEYwTohwWSk3ssjLN ET4zvdT9zQgISihUFiXWDt+mvDjbX5w5a0LPnvgOO3EktNwsD96EPb+AWFd53oFD zOnZ2xI6tm1aM8/hDoAx0I/lvT9vB3w7ke0QIn5ecGb5X4yqcbgEGv4jefktOxiH oQgO8WHqC/Td3wEWJ7eOXoc7nzbPlnYIE+UTcDAqijbK6ejWPFrt14itXehy0V0K LueSGRIMUAFy7aNxSvRUjAzbUFNdu8cMGIL9Dgvi+wJUpiUsPhrpKaeKKp8foRTn k7WBhUSyzPj4CeRasKffGsGl+KpTwryM -----END CERTIFICATE-----Generated at Sun May 11 06:30:26 2025 by rpki-client