$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft File: 4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json) Hash identifier: uEFDSVawzVx/1ODmISXzXTXgRSo5qT1RYwv430RV4JE= Subject key identifier: 86:D2:D1:2D:26:29:AB:CB:3C:4F:BF:A6:EC:39:A8:95:A0:3F:30:FC Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 Certificate issuer: /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft Manifest number: 0151 Signing time: Sun 11 May 2025 03:03:36 +0000 Manifest this update: Sun 11 May 2025 03:03:35 +0000 Manifest next update: Sun 18 May 2025 03:03:35 +0000 Files and hashes: 1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: aOtz+LJkl6uGsAqj5sr79GWv6WihUPVX5yb7LXyN6is=) 2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: gPmbtMjtLenMFEAnNmFzzGl8ckVYYI4uHTkTnXpU64U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF5, serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Validity Not Before: May 11 03:03:35 2025 GMT Not After : May 18 03:03:35 2025 GMT Subject: CN=68201388-e9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:88:8b:8d:67:db:c2:5f:ca:49:39:dd:75:a4: 8b:e8:bb:fa:ab:6e:38:12:0c:ad:35:27:72:5b:9a: ce:c2:d3:24:b3:d1:f3:11:4c:48:be:7d:36:b5:45: 7e:84:2b:ef:c9:6f:e1:e0:c3:03:2c:30:de:c6:20: b6:19:d9:16:1c:d2:7e:95:0e:5d:58:14:37:8d:06: 38:cf:93:5a:9c:f5:6b:43:81:d8:3a:b3:6e:93:32: 71:0e:08:94:ee:38:50:1f:8a:53:69:21:5d:a0:ab: 22:74:5d:96:f9:b1:75:f5:e9:df:6f:4a:c9:4d:d9: e2:67:a6:33:7b:08:0e:f8:d4:08:87:04:86:57:4e: 44:2a:f8:ee:c4:03:59:b6:c2:cb:3d:88:99:15:d3: cc:03:f6:0d:e2:22:40:fc:79:3e:b7:5b:8b:ee:9f: 68:de:22:57:ee:37:81:f6:1d:e0:72:f3:20:38:98: c4:3f:e0:7c:82:44:7a:20:8e:8b:1a:a0:8f:f3:e0: 37:a7:7a:d9:4d:31:6b:d5:36:ce:ae:b2:c5:51:01: cb:55:7e:28:25:f5:16:42:3c:7d:02:cf:7d:a3:06: ba:8c:fa:a6:d1:ca:3b:b7:50:03:69:16:8b:bb:31: 60:62:77:cd:0b:8d:dc:19:bb:41:c1:2f:60:ad:ef: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D2:D1:2D:26:29:AB:CB:3C:4F:BF:A6:EC:39:A8:95:A0:3F:30:FC X509v3 Authority Key Identifier: keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:0a:a1:2b:fd:f6:58:28:1a:3d:c8:e0:63:8f:09:99:ef:7c: 02:63:73:46:35:98:21:ee:b7:d6:57:d2:c0:24:37:0c:57:8a: 51:f8:f1:dd:5e:d2:bc:c1:1b:b8:78:39:b8:0c:da:0f:66:cb: 82:d3:58:e1:68:9e:57:1a:ea:e1:82:46:c3:75:b8:3a:fc:64: ec:a7:85:e7:96:af:94:44:d4:f2:50:7f:24:f1:75:95:da:ee: ec:05:a6:2e:b5:80:69:e0:28:bd:0c:2d:39:ef:86:cc:b7:ea: c1:c1:b0:64:92:55:1c:3d:45:5a:fc:f0:22:67:49:ea:98:40: a6:f7:c5:96:5b:72:f1:f6:ee:f9:63:8b:c7:91:27:bb:1b:6e: c0:40:f2:fa:e8:16:3c:60:b0:c0:a1:37:4f:7b:59:0a:14:af: 5d:c1:36:ae:04:19:84:e1:cd:b9:be:78:73:cf:f8:6f:9e:de: c8:08:9a:b7:92:09:eb:96:68:28:e9:61:9a:8c:07:a1:cc:41: 6c:17:4b:5c:14:97:b7:ea:69:ab:fd:61:b5:5d:23:06:2d:42: 0d:32:a7:d5:c4:42:40:c3:8a:11:09:53:10:4e:72:6c:49:fb: 0a:a2:03:42:e3:31:b5:42:b7:e3:eb:c5:84:6c:66:ae:b4:2d: 90:82:ff:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjUxMTAvBgNVBAUTKEUzNUY3NDE5RDU3MkE4NkY3NkQyRUJGNzgyOUFCNkQ5 RDAzNDA5MDUwHhcNMjUwNTExMDMwMzM1WhcNMjUwNTE4MDMwMzM1WjAYMRYwFAYD VQQDEw02ODIwMTM4OC1lOWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oiLjWfbwl/KSTnddaSL6Lv6q244EgytNSdyW5rOwtMks9HzEUxIvn02tUV+ hCvvyW/h4MMDLDDexiC2GdkWHNJ+lQ5dWBQ3jQY4z5NanPVrQ4HYOrNukzJxDgiU 7jhQH4pTaSFdoKsidF2W+bF19enfb0rJTdniZ6YzewgO+NQIhwSGV05EKvjuxANZ tsLLPYiZFdPMA/YN4iJA/Hk+t1uL7p9o3iJX7jeB9h3gcvMgOJjEP+B8gkR6II6L GqCP8+A3p3rZTTFr1TbOrrLFUQHLVX4oJfUWQjx9As99owa6jPqm0co7t1ADaRaL uzFgYnfNC43cGbtBwS9gre/2oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbS0S0m KavLPE+/puw5qJWgPzD8MB8GA1UdIwQYMBaAFONfdBnVcqhvdtLr94KattnQNAkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGNS8zM0Y3MjU4NjJE MTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFHOTIwdXYzZ3BxMjJkQTBD UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxOTBHZFZ5cUc5MjB1djNncHEyMmRBMENRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGNS8zM0Y3MjU4NjJEMTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFH OTIwdXYzZ3BxMjJkQTBDUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDCqEr/fZYKBo9yOBjjwmZ73wCY3NGNZgh7rfWV9LAJDcMV4pR+PHd XtK8wRu4eDm4DNoPZsuC01jhaJ5XGurhgkbDdbg6/GTsp4Xnlq+URNTyUH8k8XWV 2u7sBaYutYBp4Ci9DC0574bMt+rBwbBkklUcPUVa/PAiZ0nqmECm98WWW3Lx9u75 Y4vHkSe7G27AQPL66BY8YLDAoTdPe1kKFK9dwTauBBmE4c25vnhzz/hvnt7ICJq3 kgnrlmgo6WGajAehzEFsF0tcFJe36mmr/WG1XSMGLUINMqfVxEJAw4oRCVMQTnJs SfsKogNC4zG1Qrfj68WEbGautC2Qgv/w -----END CERTIFICATE-----Generated at Sun May 11 13:27:49 2025 by rpki-client