$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json) Hash identifier: jZdXFqD+qJIu93HPBayKKaj0iEXZhrEzhziVvICCgEw= Subject key identifier: 5A:B6:19:80:3D:94:BE:4F:00:25:11:C8:9C:B3:36:22:01:FC:89:AE Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft Manifest number: 0318 Signing time: Tue 13 May 2025 01:06:13 +0000 Manifest this update: Tue 13 May 2025 01:06:12 +0000 Manifest next update: Tue 20 May 2025 01:06:12 +0000 Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: DzOmkBnparrefHc2CTsGNziQhoXCFn0AN6fhmsqiyYU=) 2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: qiPRAo39Nv8HoFoTbRrwivY4p7lSrXMxurkPZTZZGmo=) 3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: +6Qn9fMMN2JTLH3JCNnMkYnKTJVe5wXPrggbGe55SKw=) 4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: tdNvvtBtSkEXNP3bq9ounB53zb+u6cTArykXyU3hS/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: May 13 01:06:12 2025 GMT Not After : May 20 01:06:12 2025 GMT Subject: CN=68229b04-b924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:b5:83:df:23:ef:53:54:00:b1:d8:f7:a7: 72:c5:85:70:03:26:4b:6e:c0:1c:ce:08:55:75:73: c0:1f:1a:98:6d:e9:06:1b:8a:ec:6f:5b:78:35:44: bd:3c:41:16:f4:77:49:83:4e:3b:b6:43:01:5e:9e: 2a:8b:16:65:27:af:f1:2d:e9:3d:ea:10:a4:b8:9c: fc:71:77:fd:b2:1f:e0:e3:e3:2a:39:bf:79:91:93: ac:76:dc:d2:4e:8c:14:ec:08:8d:30:56:37:80:29: 0b:46:29:6f:a7:3f:f4:00:fe:6d:59:f6:98:ee:7b: 12:f1:56:b7:f4:3a:ec:f3:60:b9:2b:ac:2a:3c:62: 7f:aa:fc:24:0e:57:7d:99:10:68:db:94:4d:08:74: 41:8e:13:13:ee:03:c6:b5:39:f9:9d:6d:bf:5e:89: c6:18:94:b0:76:0c:5d:b1:c5:10:d2:4c:c2:eb:ee: a6:fe:ea:44:46:67:c3:47:fc:55:7a:b7:32:9a:1d: 1e:80:31:75:81:89:78:8d:a1:51:f0:5d:c5:c4:72: c7:4a:78:ca:81:1a:e3:bb:44:13:f8:50:e7:e1:ba: f8:ea:c3:ad:02:88:b5:17:59:2a:96:b2:21:e2:10: b5:63:f7:49:fb:69:8a:eb:8b:67:99:6f:0d:64:d3: 2f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B6:19:80:3D:94:BE:4F:00:25:11:C8:9C:B3:36:22:01:FC:89:AE X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:74:ea:86:31:b2:ea:39:a5:1b:ca:13:b1:a5:db:75:f4:5e: 72:55:59:8d:77:fe:33:be:36:4f:d0:46:03:47:fc:1b:10:c4: 67:bf:ed:27:75:44:69:55:7b:dc:96:5b:15:7c:6a:9e:3d:3c: e0:21:e6:df:b6:94:0f:3d:01:39:69:2c:96:cd:43:2c:a8:46: 9c:a1:fb:8d:e0:ab:41:9d:73:9b:61:18:2c:40:bf:ba:4d:65: 60:35:53:d9:08:b6:61:64:cb:5e:85:99:9d:95:1f:5e:b9:5d: e7:5c:1b:c4:82:b7:27:b9:12:03:80:c1:bc:3e:88:de:52:5c: ed:8d:5d:03:2b:bd:96:02:ce:56:53:99:d6:50:91:6a:08:58: f9:42:7b:4e:bc:3f:ae:9c:19:5d:f2:9b:8b:21:41:17:7b:48: ad:5f:ff:98:f2:2a:fe:3a:4c:74:db:ee:9c:a4:04:2b:be:39: 86:78:1b:e8:68:7d:41:d2:cf:8d:f4:18:b8:35:32:81:02:e8: e1:00:8d:66:82:5b:27:23:36:ac:ca:b9:8c:b9:ac:a3:36:2f: 98:c8:83:d7:1f:76:0c:4d:17:bb:9b:4c:59:1a:45:4f:97:ba: f8:98:f6:88:d4:5b:30:8b:71:4d:29:08:6a:cb:b1:84:44:c2: 8d:19:a0:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwNTEzMDEwNjEyWhcNMjUwNTIwMDEwNjEyWjAYMRYwFAYD VQQDEw02ODIyOWIwNC1iOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sy1g98j71NUALHY96dyxYVwAyZLbsAczghVdXPAHxqYbekGG4rsb1t4NUS9 PEEW9HdJg047tkMBXp4qixZlJ6/xLek96hCkuJz8cXf9sh/g4+MqOb95kZOsdtzS TowU7AiNMFY3gCkLRilvpz/0AP5tWfaY7nsS8Va39Drs82C5K6wqPGJ/qvwkDld9 mRBo25RNCHRBjhMT7gPGtTn5nW2/XonGGJSwdgxdscUQ0kzC6+6m/upERmfDR/xV ercymh0egDF1gYl4jaFR8F3FxHLHSnjKgRrju0QT+FDn4br46sOtAoi1F1kqlrIh 4hC1Y/dJ+2mK64tnmW8NZNMvSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq2GYA9 lL5PACURyJyzNiIB/ImuMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7dOqGMbLqOaUbyhOxpdt19F5yVVmNd/4zvjZP0EYDR/wbEMRnv+0n dURpVXvcllsVfGqePTzgIebftpQPPQE5aSyWzUMsqEacofuN4KtBnXObYRgsQL+6 TWVgNVPZCLZhZMtehZmdlR9euV3nXBvEgrcnuRIDgMG8PojeUlztjV0DK72WAs5W U5nWUJFqCFj5QntOvD+unBld8puLIUEXe0itX/+Y8ir+Okx02+6cpAQrvjmGeBvo aH1B0s+N9Bi4NTKBAujhAI1mglsnIzasyrmMuayjNi+YyIPXH3YMTRe7m0xZGkVP l7r4mPaI1Fswi3FNKQhqy7GERMKNGaAf -----END CERTIFICATE-----Generated at Wed May 14 22:53:52 2025 by rpki-client