$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json) Hash identifier: KxjnrggBhrNcBVIcqcKyBq5FyXTpULy9zy30tpYvR4s= Subject key identifier: 98:C9:C1:D1:69:60:50:A6:CB:51:D6:A5:53:5E:98:B5:47:1B:62:AD Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft Manifest number: 68 Signing time: Tue 13 May 2025 06:11:01 +0000 Manifest this update: Tue 13 May 2025 06:11:00 +0000 Manifest next update: Tue 20 May 2025 06:11:00 +0000 Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: CNrtgaYP6g3OKgljx7e1J6DIoS/p2p4pNLN9gIF6/AA=) 2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Validity Not Before: May 13 06:11:00 2025 GMT Not After : May 20 06:11:00 2025 GMT Subject: CN=6822e274-2784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:0e:a3:7c:a4:d3:27:c3:05:2e:44:af:72: 19:f8:86:f7:e5:4c:74:82:cb:c7:35:6b:d4:c3:1e: d1:b5:73:c5:01:0a:aa:60:3d:f5:7a:b3:b4:ad:1b: 61:9c:db:1b:33:bb:82:e9:14:b2:ad:16:d2:1a:db: 0c:bb:87:88:cb:1e:d4:ca:c1:d9:d5:5d:b6:d5:62: 77:4e:57:9e:a7:a5:46:67:46:21:30:db:f0:52:0e: 84:b6:19:eb:50:83:26:78:c7:cb:90:03:cb:38:5a: 0a:9b:cc:5d:84:d3:5c:22:4e:f3:b7:4f:68:0a:19: 28:3a:2f:0f:10:82:fd:5c:fa:d5:58:f0:1c:8c:bf: 43:4a:44:e0:c6:e5:4e:51:cd:8d:0c:00:01:6f:21: 37:b3:ce:0b:39:bf:6d:c7:80:33:65:11:b5:12:f6: ee:9b:16:b9:76:92:67:59:1d:1b:1e:55:09:b6:4e: cc:f0:75:1f:21:eb:53:b2:4f:d5:9e:06:ef:9c:b4: f8:5e:00:ad:8e:3a:1e:c9:82:b1:1f:57:02:3b:5f: 77:ff:50:fe:97:c3:7f:0b:61:41:e6:f4:5e:cb:9a: 53:cf:9f:6e:1b:71:db:8c:17:3b:3d:5f:cf:a1:4f: 89:1c:12:f5:a5:b9:17:d1:9e:01:61:7e:ef:04:9a: 38:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C9:C1:D1:69:60:50:A6:CB:51:D6:A5:53:5E:98:B5:47:1B:62:AD X509v3 Authority Key Identifier: keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:1f:ce:5d:50:a8:3a:7e:6e:98:51:5c:ab:58:0c:aa:ba:49: 58:c5:26:1b:13:a7:d2:29:3d:76:30:9e:dd:00:d2:9e:56:68: 16:19:d5:5c:36:de:07:3b:75:1c:ae:58:78:17:0b:99:08:5e: 0b:54:8a:0c:d7:ba:e7:62:fd:97:89:75:57:b2:fc:66:8a:33: c2:9b:e7:93:2b:08:df:f4:15:75:29:2b:28:49:92:3e:ee:17: 71:96:5f:59:94:c6:28:c1:71:90:ce:a3:ec:aa:bd:4c:bc:d1: a2:48:e6:61:05:ad:c9:21:5b:06:2f:fc:35:41:ce:a7:19:2d: 0a:47:f6:17:ed:53:3d:b2:50:43:3f:44:69:5e:d4:1d:35:ee: 1f:a1:27:28:88:98:b5:f2:d0:43:92:b4:1d:16:d8:86:69:96: eb:ba:28:f8:99:e6:4c:24:22:24:74:d1:28:e8:14:eb:bb:68: b1:cb:9e:00:ef:3a:28:35:49:5c:45:4a:68:b8:40:02:47:3a: 83:2f:96:da:30:f5:4a:e0:c1:9c:0a:5e:16:ee:46:fb:94:a6: fa:d7:49:8e:be:01:3c:31:14:b4:68:ac:c9:ca:8d:7b:88:cc: 95:7f:bf:e3:e3:f6:7e:63:fa:50:f3:e6:51:ed:53:42:85:54: a9:5f:a2:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkM5NDExMC8GA1UEBRMoQUNCNzAyNTFFQjE1Qjc1RDQyMjlBQTIxMzFFM0Q5QTg3 QzI5NDVDMDAeFw0yNTA1MTMwNjExMDBaFw0yNTA1MjAwNjExMDBaMBgxFjAUBgNV BAMTDTY4MjJlMjc0LTI3ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2EA6jfKTTJ8MFLkSvchn4hvflTHSCy8c1a9TDHtG1c8UBCqpgPfV6s7StG2Gc 2xszu4LpFLKtFtIa2wy7h4jLHtTKwdnVXbbVYndOV56npUZnRiEw2/BSDoS2GetQ gyZ4x8uQA8s4WgqbzF2E01wiTvO3T2gKGSg6Lw8Qgv1c+tVY8ByMv0NKRODG5U5R zY0MAAFvITezzgs5v23HgDNlEbUS9u6bFrl2kmdZHRseVQm2TszwdR8h61OyT9We Bu+ctPheAK2OOh7JgrEfVwI7X3f/UP6Xw38LYUHm9F7LmlPPn24bcduMFzs9X8+h T4kcEvWluRfRngFhfu8EmjivAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmMnB0Wlg UKbLUdalU16YtUcbYq0wHwYDVR0jBBgwFoAUrLcCUesVt11CKaohMePZqHwpRcAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQzk0L0IxNDQ5QzRFOTRE QTExRUY4OTA4NkQyMUM0RjlBRTAyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJj QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckxjQ1Vlc1Z0MTFDS2FvaE1lUFpxSHdwUmNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Qzk0L0IxNDQ5QzRFOTREQTExRUY4OTA4NkQyMUM0RjlBRTAyL3JMY0NVZXNWdDEx Q0thb2hNZVBacUh3cFJjQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMYfzl1QqDp+bphRXKtYDKq6SVjFJhsTp9IpPXYwnt0A0p5WaBYZ1Vw2 3gc7dRyuWHgXC5kIXgtUigzXuudi/ZeJdVey/GaKM8Kb55MrCN/0FXUpKyhJkj7u F3GWX1mUxijBcZDOo+yqvUy80aJI5mEFrckhWwYv/DVBzqcZLQpH9hftUz2yUEM/ RGle1B017h+hJyiImLXy0EOStB0W2IZpluu6KPiZ5kwkIiR00SjoFOu7aLHLngDv Oig1SVxFSmi4QAJHOoMvltow9UrgwZwKXhbuRvuUpvrXSY6+ATwxFLRorMnKjXuI zJV/v+Pj9n5j+lDz5lHtU0KFVKlfoq4= -----END CERTIFICATE-----Generated at Wed May 14 04:35:12 2025 by rpki-client