$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json) Hash identifier: 9iASwayyftGzCw9NySPNBxkWmDyQg2ZiOcwhU2/v2ps= Subject key identifier: 79:79:3E:81:B0:7B:13:C0:07:1C:4E:C5:29:82:9E:B5:AD:32:A0:E9 Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft Manifest number: 01D5 Signing time: Thu 15 May 2025 02:16:00 +0000 Manifest this update: Thu 15 May 2025 02:16:00 +0000 Manifest next update: Thu 22 May 2025 02:16:00 +0000 Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: WWTAo9mGL8EC8PIE3NfVzqzneSG1ecUhWOjrhIt6Om8=) 2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=) 3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: UKZjo7nlv5xaEfM2Q5iGETEP+0bko/kMccsOgiKgCVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Validity Not Before: May 15 02:16:00 2025 GMT Not After : May 22 02:16:00 2025 GMT Subject: CN=68254e60-689a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:dd:53:94:b7:26:a6:be:af:4c:1d:24:d3: 47:22:43:f1:5d:c8:e9:21:e7:03:5d:da:1b:f0:3b: 2f:33:46:74:f6:86:15:29:a0:e9:f6:48:06:34:18: c4:7d:3e:0a:a1:f3:19:52:ee:28:a4:02:c1:8b:0c: 68:d0:ab:89:59:53:40:11:bf:0e:07:93:b8:93:0d: 49:df:21:bf:4d:8d:90:62:85:13:4a:d6:9b:fd:a9: ce:1e:6e:eb:bd:1b:6d:10:67:c9:30:b9:1c:6d:b0: 47:6e:2a:56:54:a4:34:e0:33:31:2b:3a:40:9b:8b: d9:4e:3d:88:ea:8a:66:43:9d:35:a4:0c:6e:23:da: 95:94:01:42:5b:6a:36:0f:d5:03:fe:13:f0:28:d9: 7e:81:11:9a:db:25:ca:f1:60:e6:4b:d5:df:ad:cf: 1b:3b:98:63:42:dd:d3:20:e4:b3:3a:09:1d:aa:ec: ab:bd:56:a0:a6:6b:92:1c:98:ac:8f:18:76:2b:76: b0:fd:df:07:85:ab:0f:17:67:16:8b:3d:c5:ba:a4: 7b:16:d2:fa:9c:b7:b8:3a:72:bb:a3:b9:e7:7c:0c: 54:0f:c1:a8:fc:bf:6c:8c:28:f2:01:06:fb:0b:a8: 44:fb:10:53:79:c4:ce:c3:ae:a4:97:5c:df:59:e5: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:79:3E:81:B0:7B:13:C0:07:1C:4E:C5:29:82:9E:B5:AD:32:A0:E9 X509v3 Authority Key Identifier: keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:19:74:5d:3d:a9:ac:10:4e:ed:ec:15:7f:6f:51:28:ea:30: 3d:3e:53:b2:0a:22:32:cc:6e:5b:24:b6:68:ee:e4:ea:58:2a: a3:a9:29:3e:c0:a9:dd:66:86:b6:d7:94:7c:e7:58:7e:df:f1: 40:21:4e:66:93:66:8b:89:45:dd:32:73:e1:19:6b:8c:f2:57: 1a:31:e4:1e:6d:61:69:6c:6b:e2:63:fa:fb:f6:19:ff:3d:be: 1e:23:13:e7:47:2a:a8:a1:31:3c:9c:fc:fe:be:62:2d:2b:16: 43:7d:a0:05:7d:8f:8b:5c:50:ac:c8:06:fe:ec:7d:76:fa:ff: b6:9d:b2:98:44:35:0d:74:95:cb:20:42:c3:b8:71:d9:cb:2c: f3:1d:34:f0:96:73:d0:df:eb:00:b2:96:64:41:59:4f:7e:31: 83:39:b0:ed:02:e8:e2:74:a5:5f:b9:78:6f:9d:54:48:1c:cc: d3:51:91:43:a7:bf:02:d8:ea:f5:9f:e7:f4:77:47:e9:9c:65: 54:46:f6:cc:3d:64:ab:77:c5:d2:0b:51:92:3b:d4:ff:fe:92: e3:1e:c4:20:34:b6:cd:10:00:29:ca:46:55:31:bb:bb:5b:21: 7e:bb:cb:31:09:b2:9c:6c:15:e8:0a:52:a3:69:0e:eb:86:a8: a4:b3:fa:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQwNzMxMTAvBgNVBAUTKDA4QUVEM0UxRENCNkVENzc0MjMwM0NFRkY0N0RFMDJE OTJCM0VERTUwHhcNMjUwNTE1MDIxNjAwWhcNMjUwNTIyMDIxNjAwWjAYMRYwFAYD VQQDEw02ODI1NGU2MC02ODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1/dU5S3Jqa+r0wdJNNHIkPxXcjpIecDXdob8DsvM0Z09oYVKaDp9kgGNBjE fT4KofMZUu4opALBiwxo0KuJWVNAEb8OB5O4kw1J3yG/TY2QYoUTStab/anOHm7r vRttEGfJMLkcbbBHbipWVKQ04DMxKzpAm4vZTj2I6opmQ501pAxuI9qVlAFCW2o2 D9UD/hPwKNl+gRGa2yXK8WDmS9Xfrc8bO5hjQt3TIOSzOgkdquyrvVagpmuSHJis jxh2K3aw/d8HhasPF2cWiz3FuqR7FtL6nLe4OnK7o7nnfAxUD8Go/L9sjCjyAQb7 C6hE+xBTecTOw66kl1zfWeW3uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHl5PoGw exPABxxOxSmCnrWtMqDpMB8GA1UdIwQYMBaAFAiu0+Hctu13QjA87/R94C2Ss+3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDA3My9GNEI0Q0E1MjY0 QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdYZENNRHp2OUgzZ0xaS3o3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NLN1Q0ZHkyN1hkQ01EenY5SDNnTFpLejdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDA3My9GNEI0Q0E1MjY0QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdY ZENNRHp2OUgzZ0xaS3o3ZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoGXRdPamsEE7t7BV/b1Eo6jA9PlOyCiIyzG5bJLZo7uTqWCqjqSk+ wKndZoa215R851h+3/FAIU5mk2aLiUXdMnPhGWuM8lcaMeQebWFpbGviY/r79hn/ Pb4eIxPnRyqooTE8nPz+vmItKxZDfaAFfY+LXFCsyAb+7H12+v+2nbKYRDUNdJXL IELDuHHZyyzzHTTwlnPQ3+sAspZkQVlPfjGDObDtAujidKVfuXhvnVRIHMzTUZFD p78C2Or1n+f0d0fpnGVURvbMPWSrd8XSC1GSO9T//pLjHsQgNLbNEAApykZVMbu7 WyF+u8sxCbKcbBXoClKjaQ7rhqiks/oc -----END CERTIFICATE-----Generated at Fri May 16 22:52:25 2025 by rpki-client