$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json) Hash identifier: CoHLAC6ZqXVg3D3cicxIXFRPgEygbVghAcyR8jhL24c= Subject key identifier: C2:F0:61:EE:43:52:86:EE:37:B3:5E:E6:E1:40:94:A3:26:7A:C5:79 Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 0979 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft Manifest number: 0971 Signing time: Mon 12 May 2025 20:00:08 +0000 Manifest this update: Mon 12 May 2025 20:00:08 +0000 Manifest next update: Mon 19 May 2025 20:00:08 +0000 Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: aCKsfp3G3rgp930wCPZBiLIMKGXGgtmjQYWTM3RjX7Q=) 2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: FDVevWofhV4OBWCY3mCV+bPsuc2xoyahcfyBo3UC3vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2425 (0x979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Validity Not Before: May 12 20:00:08 2025 GMT Not After : May 19 20:00:08 2025 GMT Subject: CN=68225348-787f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:36:da:15:6d:67:7f:58:88:fe:bf:03:7f: 35:2b:de:42:4c:65:90:0c:0f:c5:f6:d9:5b:8e:30: 30:c7:6c:f7:5c:43:f6:eb:67:24:21:f1:dd:04:04: ce:87:c9:2a:79:66:1d:2b:7f:95:ae:c9:d4:83:c1: 30:8b:96:2b:7a:9b:cd:c8:4b:47:4d:72:5b:36:7b: 88:8d:22:83:a3:1b:62:72:93:cc:f3:e2:f8:85:58: 1d:50:10:1e:ab:30:ee:7d:af:76:25:53:3a:79:27: c5:10:a2:84:e1:e6:bb:41:76:4c:ff:a1:81:95:3a: c2:a5:e4:d4:4c:0e:66:62:80:7f:94:5e:1b:2c:9d: f5:4f:8e:cd:eb:7b:bc:4b:3d:1c:20:5b:30:05:a8: 9f:77:3c:43:f2:34:83:d0:7f:34:69:99:6b:1c:16: f4:c3:2a:ef:ac:dc:dc:ba:07:04:33:cd:66:b3:6d: e4:a2:0e:a5:88:8d:3f:df:74:f1:44:d1:60:b1:b0: 31:c5:1d:41:1c:1c:5f:3c:ed:ec:2e:cd:43:47:3a: 92:00:7a:3f:e5:2f:44:c9:14:aa:58:b5:9d:44:8b: 65:c3:5e:1b:ec:7b:65:62:09:96:62:c9:9d:9a:29: ac:d8:23:1c:12:ad:d2:c6:4c:14:02:f4:2a:6b:22: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F0:61:EE:43:52:86:EE:37:B3:5E:E6:E1:40:94:A3:26:7A:C5:79 X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:82:09:9e:eb:de:5d:10:ad:5c:b2:b4:f2:8e:f7:9b:84:e6: 83:db:0e:bf:d3:b3:b4:11:39:b1:b7:e4:ff:58:66:80:a8:9f: e7:4a:01:e0:85:30:91:9b:5d:8d:2a:12:2c:b1:7b:01:14:90: b8:ef:c4:9e:d0:f2:ce:e9:94:b9:7c:3c:38:70:e2:28:6c:4f: 69:79:c6:4a:37:1c:35:25:2d:f9:b0:7e:f2:46:ad:95:4e:1a: 6a:5a:a6:e4:e4:a1:bb:b9:04:5a:11:92:63:0e:e6:94:35:3e: 96:6d:6a:89:39:4f:58:75:4a:8f:cb:37:a3:30:c3:81:d2:4c: d9:29:5b:bd:cc:5e:85:06:14:df:e8:88:ae:77:ab:bc:07:d1: e1:7b:45:f7:f7:4f:c0:37:24:f4:4d:f1:2d:7d:20:2e:69:f2: 11:ae:1c:d8:85:87:c5:a6:ee:dc:33:39:16:f2:9e:ad:ae:73: e8:4a:58:cf:dd:c4:93:8e:d8:f6:77:8c:12:82:76:5d:ef:35: 6f:ae:4f:1c:dc:a6:c0:7d:0a:28:16:f8:87:d7:f1:ac:1f:91: 25:55:47:02:a9:60:5a:86:e4:07:6b:c4:87:72:f5:4d:bd:ed: 2e:c6:78:f9:fc:84:7f:24:a6:c6:20:38:62:44:9b:2f:4d:1a: be:63:64:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjUwNTEyMjAwMDA4WhcNMjUwNTE5MjAwMDA4WjAYMRYwFAYD VQQDEw02ODIyNTM0OC03ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL422hVtZ39YiP6/A381K95CTGWQDA/F9tlbjjAwx2z3XEP262ckIfHdBATO h8kqeWYdK3+VrsnUg8Ewi5YrepvNyEtHTXJbNnuIjSKDoxticpPM8+L4hVgdUBAe qzDufa92JVM6eSfFEKKE4ea7QXZM/6GBlTrCpeTUTA5mYoB/lF4bLJ31T47N63u8 Sz0cIFswBaifdzxD8jSD0H80aZlrHBb0wyrvrNzcugcEM81ms23kog6liI0/33Tx RNFgsbAxxR1BHBxfPO3sLs1DRzqSAHo/5S9EyRSqWLWdRItlw14b7HtlYgmWYsmd mims2CMcEq3SxkwUAvQqayKnBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLwYe5D UobuN7Ne5uFAlKMmesV5MB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEVBRC8zQzI0REFEMjhGQUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlx SlpyaW9YQWdOeTZlWVdDN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKggme695dEK1csrTyjvebhOaD2w6/07O0ETmxt+T/WGaAqJ/nSgHg hTCRm12NKhIssXsBFJC478Se0PLO6ZS5fDw4cOIobE9pecZKNxw1JS35sH7yRq2V ThpqWqbk5KG7uQRaEZJjDuaUNT6WbWqJOU9YdUqPyzejMMOB0kzZKVu9zF6FBhTf 6Iiud6u8B9Hhe0X390/ANyT0TfEtfSAuafIRrhzYhYfFpu7cMzkW8p6trnPoSljP 3cSTjtj2d4wSgnZd7zVvrk8c3KbAfQooFviH1/GsH5ElVUcCqWBahuQHa8SHcvVN ve0uxnj5/IR/JKbGIDhiRJsvTRq+Y2TC -----END CERTIFICATE-----Generated at Tue May 13 02:26:16 2025 by rpki-client