$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: zviWf/LHo4Lw8qrQRsToAMQCl85VmHmkQLuM8zKLxqI= Subject key identifier: 0B:0B:62:9E:60:3A:16:2A:3A:06:60:2A:98:BD:3F:D5:85:2F:FC:D6 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 8B Signing time: Thu 15 May 2025 05:49:50 +0000 Manifest this update: Thu 15 May 2025 05:49:49 +0000 Manifest next update: Thu 22 May 2025 05:49:49 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: NemVQZwz6I3aMRH0lTHPa9eKwj8DbKSXHKrGlGMkKAg=) 2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: May 15 05:49:49 2025 GMT Not After : May 22 05:49:49 2025 GMT Subject: CN=6825807e-b685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:11:5f:5d:f5:02:2e:99:df:ea:be:1a:9b: 59:3c:40:74:4d:2d:1b:8b:79:d2:97:d0:ac:38:17: 44:1d:07:36:2b:7a:77:8a:29:18:9e:2d:2b:b9:e9: 95:7c:60:fd:7b:e7:27:c1:e8:bc:29:80:1d:50:bd: c4:ce:e8:ee:8c:f9:cb:9e:25:2f:bf:28:3f:17:1b: 47:1b:fe:9f:a4:b2:1d:d8:93:1b:db:e6:59:f0:4c: 5a:02:a9:64:f6:92:1a:0c:5e:45:73:5d:37:72:21: 34:a3:ec:2c:d3:fc:7c:74:f7:6d:d0:9c:b9:08:71: a3:d9:70:93:3d:ce:ce:a8:ec:06:ad:e1:e1:71:d8: b8:80:2a:1c:ab:b1:87:ce:7f:18:84:b2:2c:f7:23: 2a:ff:4c:41:b1:88:bf:56:93:63:bf:0b:91:e8:66: 07:ed:4a:3f:57:87:a6:a5:5f:83:f6:70:93:b8:7b: 13:de:bf:d5:2f:ba:86:50:99:1d:cf:db:3a:0c:bb: 64:06:42:69:f5:83:89:f0:22:4f:a6:0c:53:41:4f: c8:cb:db:57:9e:9d:54:3c:eb:a5:70:a3:09:b4:c3: f9:a1:cd:71:3e:b3:ea:5d:4e:40:5c:02:05:cd:95: 3b:89:3f:dc:fe:18:5e:7c:a3:74:90:bb:77:df:2b: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0B:62:9E:60:3A:16:2A:3A:06:60:2A:98:BD:3F:D5:85:2F:FC:D6 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d2:01:10:11:d2:46:b0:82:54:44:7d:82:f6:6a:6c:5c:ed: ff:23:d5:0e:4a:dd:f8:82:82:7c:36:79:1a:bf:04:c3:5e:10: 69:33:01:a9:78:2a:15:1f:9f:e3:50:c2:26:85:49:23:67:45: 9e:94:6a:3f:56:6e:f8:79:63:89:e5:33:37:0e:e7:0e:f9:ec: 9d:d0:a3:13:da:66:c9:e9:89:b9:e1:9c:72:0a:7f:36:6f:91: 2c:54:38:44:c8:11:aa:aa:3f:e0:8e:71:94:f7:05:5a:8a:a7: 78:95:ec:c5:86:57:dd:61:4c:d7:32:8f:e9:63:a0:42:3d:af: e6:5e:1f:b1:a2:88:cb:31:b4:6c:ee:39:5b:9e:73:cc:a7:09: f9:c3:48:c6:11:61:79:93:bc:c1:12:7e:a6:bd:17:8b:ae:cf: 66:9f:9e:01:92:22:93:8d:b7:32:a1:21:a0:eb:09:ac:e3:99: 61:3a:5c:07:32:38:c1:f9:9c:da:ed:fa:22:2e:b2:98:b7:47: 6b:65:b7:71:3f:f1:8c:68:1d:48:fa:ef:aa:67:92:8d:91:d3: 46:2e:a7:a9:fe:ad:13:f3:fb:bd:93:3b:42:1c:08:70:af:23: ed:84:d5:83:8f:33:6e:40:bf:c3:57:fd:13:97:df:9e:cf:0d: ce:b6:c1:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUwNTE1MDU0OTQ5WhcNMjUwNTIyMDU0OTQ5WjAYMRYwFAYD VQQDEw02ODI1ODA3ZS1iNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuURX131Ai6Z3+q+GptZPEB0TS0bi3nSl9CsOBdEHQc2K3p3iikYni0ruemV fGD9e+cnwei8KYAdUL3EzujujPnLniUvvyg/FxtHG/6fpLId2JMb2+ZZ8ExaAqlk 9pIaDF5Fc103ciE0o+ws0/x8dPdt0Jy5CHGj2XCTPc7OqOwGreHhcdi4gCocq7GH zn8YhLIs9yMq/0xBsYi/VpNjvwuR6GYH7Uo/V4empV+D9nCTuHsT3r/VL7qGUJkd z9s6DLtkBkJp9YOJ8CJPpgxTQU/Iy9tXnp1UPOulcKMJtMP5oc1xPrPqXU5AXAIF zZU7iT/c/hhefKN0kLt33ytAbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsLYp5g OhYqOgZgKpi9P9WFL/zWMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL0gEQEdJGsIJURH2C9mpsXO3/I9UOSt34goJ8NnkavwTDXhBpMwGp eCoVH5/jUMImhUkjZ0WelGo/Vm74eWOJ5TM3DucO+eyd0KMT2mbJ6Ym54ZxyCn82 b5EsVDhEyBGqqj/gjnGU9wVaiqd4lezFhlfdYUzXMo/pY6BCPa/mXh+xoojLMbRs 7jlbnnPMpwn5w0jGEWF5k7zBEn6mvReLrs9mn54BkiKTjbcyoSGg6wms45lhOlwH MjjB+Zza7foiLrKYt0drZbdxP/GMaB1I+u+qZ5KNkdNGLqep/q0T8/u9kztCHAhw ryPthNWDjzNuQL/DV/0Tl9+ezw3OtsE8 -----END CERTIFICATE-----Generated at Thu May 15 17:49:22 2025 by rpki-client