$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: HgYsS2z4QAkCgWtBEXOof9u1fCjFbyoEh+Rhc023ynY= Subject key identifier: E6:AF:81:87:85:FC:3C:98:84:90:62:69:0E:A8:C3:85:11:97:10:75 Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 120A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 1203 Signing time: Fri 16 May 2025 17:23:28 +0000 Manifest this update: Fri 16 May 2025 17:23:27 +0000 Manifest next update: Fri 23 May 2025 17:23:27 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: vSrekZVK55zhe70kElNhNzaKsmQXxWLI9sutgjLj1f8=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: nEHygU0iQ55kYxCvR5kzgzTy6GI2Ua1TfbgvO9Q4FhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4618 (0x120a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: May 16 17:23:27 2025 GMT Not After : May 23 17:23:27 2025 GMT Subject: CN=6827748f-88c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:18:8a:48:0c:43:9a:16:46:10:1a:cd:d5: c3:c0:1f:63:46:5e:76:62:79:f3:fd:d4:45:8c:38: 96:d4:12:85:5f:e5:e8:9d:8c:64:4e:c8:db:0b:32: 79:a2:32:b1:79:ae:a6:bd:cd:ad:a1:8c:7c:a0:b3: cb:1e:3b:63:c6:b1:89:34:13:bd:6a:66:c8:8e:48: 55:1c:c3:4a:a8:db:01:09:c6:88:7f:a2:6d:8e:37: 9e:30:90:8b:99:05:1e:ec:65:44:fb:42:2a:0a:71: 0b:3f:d9:80:ad:8c:29:56:b8:ba:63:70:8b:d6:f4: cd:09:ef:88:08:1b:97:e3:4a:a4:56:57:ee:3a:d4: e8:58:e2:c4:9e:5c:fb:8e:64:78:cd:37:cb:ab:8d: 61:10:b4:76:d7:ea:13:c1:f2:f7:22:76:f5:29:eb: 2b:e5:b2:f6:59:15:5b:c9:ba:af:8f:44:7a:9a:84: ac:d3:01:d1:8e:20:e9:a1:8d:a4:f6:f2:16:c1:2a: 6b:76:0b:87:31:18:fa:85:72:81:8a:dd:2f:dd:f3: 87:b7:77:b0:d4:0d:a1:0f:ad:7b:39:c0:f0:bc:1b: c4:6d:1f:21:da:0c:4e:1c:96:20:f4:b6:a8:aa:46: 37:32:94:04:80:47:18:57:aa:fa:95:f1:93:c5:da: ad:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AF:81:87:85:FC:3C:98:84:90:62:69:0E:A8:C3:85:11:97:10:75 X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:9b:f9:49:23:f9:47:0d:f8:d2:03:c9:3b:72:a0:16:8f:58: 89:77:2a:c7:5a:c1:12:80:c3:23:cc:56:d8:5e:17:5d:b4:b5: 20:6f:62:2a:c7:14:f8:89:3b:3a:b3:bb:b2:a6:3b:b0:c6:f9: 46:0a:9a:de:9c:93:1a:20:b3:63:47:3a:80:48:ad:4c:da:18: a7:ed:2d:17:a6:01:d2:a9:fd:38:37:6a:13:f5:2d:ea:43:ec: 4f:49:82:a6:1f:00:1b:f2:f6:69:28:0a:83:47:8a:16:db:00: 9d:75:88:43:2a:89:fb:21:51:1f:3b:76:12:e7:43:72:39:15: af:75:2c:f0:b4:af:47:74:a2:f9:08:a9:ce:5b:d1:e8:e4:ce: 8c:df:e1:b5:64:8b:53:6a:41:86:0b:9c:df:8f:d2:96:0c:0b: d8:e6:10:1d:36:55:68:66:00:0b:5d:a7:a5:91:e7:e0:73:67: d2:18:cc:15:26:de:f1:c6:a6:4e:ca:82:5f:c0:1d:e7:4b:db: 03:e5:cc:d0:9c:57:81:cc:58:49:f2:ad:31:b7:10:61:1a:3b: fb:8f:21:17:74:cb:b8:85:12:da:06:18:e3:a3:ec:c6:7b:7c: 4e:4d:06:74:fc:bf:65:ff:34:e5:6f:56:8e:ba:d5:73:09:2f: c5:df:6a:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjUwNTE2MTcyMzI3WhcNMjUwNTIzMTcyMzI3WjAYMRYwFAYD VQQDEw02ODI3NzQ4Zi04OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uwYikgMQ5oWRhAazdXDwB9jRl52Ynnz/dRFjDiW1BKFX+XonYxkTsjbCzJ5 ojKxea6mvc2toYx8oLPLHjtjxrGJNBO9ambIjkhVHMNKqNsBCcaIf6JtjjeeMJCL mQUe7GVE+0IqCnELP9mArYwpVri6Y3CL1vTNCe+ICBuX40qkVlfuOtToWOLEnlz7 jmR4zTfLq41hELR21+oTwfL3Inb1Kesr5bL2WRVbybqvj0R6moSs0wHRjiDpoY2k 9vIWwSprdguHMRj6hXKBit0v3fOHt3ew1A2hD617OcDwvBvEbR8h2gxOHJYg9Lao qkY3MpQEgEcYV6r6lfGTxdqtUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOavgYeF /DyYhJBiaQ6ow4URlxB1MB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVm/lJI/lHDfjSA8k7cqAWj1iJdyrHWsESgMMjzFbYXhddtLUgb2Iq xxT4iTs6s7uypjuwxvlGCprenJMaILNjRzqASK1M2hin7S0XpgHSqf04N2oT9S3q Q+xPSYKmHwAb8vZpKAqDR4oW2wCddYhDKon7IVEfO3YS50NyORWvdSzwtK9HdKL5 CKnOW9Ho5M6M3+G1ZItTakGGC5zfj9KWDAvY5hAdNlVoZgALXaelkefgc2fSGMwV Jt7xxqZOyoJfwB3nS9sD5czQnFeBzFhJ8q0xtxBhGjv7jyEXdMu4hRLaBhjjo+zG e3xOTQZ0/L9l/zTlb1aOutVzCS/F32pY -----END CERTIFICATE-----Generated at Fri May 16 22:47:42 2025 by rpki-client