$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft File: ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft (raw, json) Hash identifier: 0tLm2QKXDlMZ+hPUfu4MMLoGScC7CuJ4U0ArgtoaiWg= Subject key identifier: 69:26:98:7A:77:07:2D:C9:70:56:D4:40:81:BD:A2:F6:04:73:E0:70 Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC Certificate issuer: /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft Manifest number: 022E Signing time: Thu 15 May 2025 01:55:40 +0000 Manifest this update: Thu 15 May 2025 01:55:39 +0000 Manifest next update: Thu 22 May 2025 01:55:39 +0000 Files and hashes: 1: ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl (hash: eW0gN858TBwKobIQh/4kcck04uqugPtsuUxADOM4eII=) 2: 150C1686283511EDABF49D69C4F9AE02.roa (hash: cp/g3c614sxIJhG7+W0sfcuIudQc0T60lgeLxpTEn7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F26F1, serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Validity Not Before: May 15 01:55:39 2025 GMT Not After : May 22 01:55:39 2025 GMT Subject: CN=6825499c-c635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:19:21:85:e4:66:1f:49:dd:aa:9e:b4:1f: 6e:d0:47:cc:5e:a1:61:a8:04:73:a2:54:00:96:94: 41:79:fa:9c:b4:a6:88:d4:df:c4:a3:c1:5f:ac:d0: bd:7b:b9:90:79:73:b4:29:b0:d3:19:35:f5:c6:e5: 6b:d5:f8:74:4b:c4:6f:c8:da:91:d2:87:0b:05:71: 0b:48:3f:26:55:69:d4:51:0b:c3:93:5c:ca:f6:15: 9e:f3:2f:51:af:ac:9f:24:7f:65:fa:fc:0e:20:dc: cf:bf:72:3a:05:1b:d2:92:e3:a8:2c:e9:55:12:68: 36:ed:71:64:9a:28:c4:bb:c6:2e:2a:7b:07:71:e9: 9f:d5:3b:14:cb:2f:fc:55:6f:77:91:72:17:3d:c0: bf:1d:60:63:ef:97:ae:b0:98:49:10:99:62:e2:34: 16:93:82:df:bb:ac:8f:dc:93:0e:f2:7a:fe:67:65: be:20:6f:e2:8b:d0:6f:20:31:6b:26:0b:25:fe:de: da:a1:7b:4f:0a:29:f4:6a:ea:69:af:6c:1f:17:1a: 63:9c:d7:a4:23:e3:b2:39:6c:db:47:99:93:34:cf: c6:3d:c2:f1:b0:e2:74:43:84:ca:5e:59:de:22:e5: 81:5d:f9:d6:36:b6:2c:e0:76:72:a4:35:90:b4:22: 99:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:26:98:7A:77:07:2D:C9:70:56:D4:40:81:BD:A2:F6:04:73:E0:70 X509v3 Authority Key Identifier: keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:be:8f:92:bc:8a:64:be:7a:61:5d:bd:44:6a:7f:e6:e2:ca: 2d:6f:57:8c:69:2e:85:a3:55:c5:2c:3f:24:cd:cd:d3:72:2d: 54:7a:f6:ca:55:c3:bd:74:1f:8f:7f:00:09:38:9d:8a:45:53: 9e:ab:2f:f5:b8:5a:12:c2:1a:53:bb:a0:6e:2d:b3:25:14:67: ab:b8:c3:e7:08:14:39:c8:37:57:b9:f0:af:36:1b:0f:ce:3a: 4a:02:66:31:55:ec:a7:fb:d0:36:60:43:5a:52:c2:50:a9:05: 19:97:2b:91:25:de:9b:09:9c:cf:0a:7e:83:2a:c3:6b:30:5c: 22:8e:1d:20:7a:3b:b8:9e:ab:7c:87:17:01:54:c6:39:2d:2e: 3e:50:aa:32:8f:61:bf:19:aa:9e:1d:f1:7b:5b:04:f3:10:f4: fd:66:9b:7e:d7:26:cd:02:95:6b:c3:0c:b4:08:c1:72:92:34: b4:da:1d:dd:e2:86:ba:77:2e:bd:2d:74:fa:af:d8:87:83:53: be:fc:dc:2e:e1:69:8f:95:12:b8:30:a0:6f:b5:ff:b9:2b:2f: 24:93:0d:d6:60:f4:b2:03:9f:82:07:a2:73:f8:3c:f6:19:c3: a7:87:86:51:48:65:8d:94:3a:04:66:ac:c3:51:3a:de:6b:66: 3a:ec:c0:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI2RjExMTAvBgNVBAUTKDc2Q0QxMkFEOUU2MDhDQUEyQzE5OTdCNjM2RjQ1MDU3 N0JFOTM3QkMwHhcNMjUwNTE1MDE1NTM5WhcNMjUwNTIyMDE1NTM5WjAYMRYwFAYD VQQDEw02ODI1NDk5Yy1jNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRQZIYXkZh9J3aqetB9u0EfMXqFhqARzolQAlpRBefqctKaI1N/Eo8FfrNC9 e7mQeXO0KbDTGTX1xuVr1fh0S8RvyNqR0ocLBXELSD8mVWnUUQvDk1zK9hWe8y9R r6yfJH9l+vwOINzPv3I6BRvSkuOoLOlVEmg27XFkmijEu8YuKnsHcemf1TsUyy/8 VW93kXIXPcC/HWBj75eusJhJEJli4jQWk4Lfu6yP3JMO8nr+Z2W+IG/ii9BvIDFr Jgsl/t7aoXtPCin0auppr2wfFxpjnNekI+OyOWzbR5mTNM/GPcLxsOJ0Q4TKXlne IuWBXfnWNrYs4HZypDWQtCKZLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkmmHp3 By3JcFbUQIG9ovYEc+BwMB8GA1UdIwQYMBaAFHbNEq2eYIyqLBmXtjb0UFd76Te8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjZGMS84OEYxQzc4NDI4 MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pLb3NHWmUyTnZSUVYzdnBO N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMFNyWjVnaktvc0daZTJOdlJRVjN2cE43dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjZGMS84OEYxQzc4NDI4MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pL b3NHWmUyTnZSUVYzdnBON3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzvo+SvIpkvnphXb1Ean/m4sotb1eMaS6Fo1XFLD8kzc3Tci1UevbK VcO9dB+PfwAJOJ2KRVOeqy/1uFoSwhpTu6BuLbMlFGeruMPnCBQ5yDdXufCvNhsP zjpKAmYxVeyn+9A2YENaUsJQqQUZlyuRJd6bCZzPCn6DKsNrMFwijh0geju4nqt8 hxcBVMY5LS4+UKoyj2G/GaqeHfF7WwTzEPT9Zpt+1ybNApVrwwy0CMFykjS02h3d 4oa6dy69LXT6r9iHg1O+/Nwu4WmPlRK4MKBvtf+5Ky8kkw3WYPSyA5+CB6Jz+Dz2 GcOnh4ZRSGWNlDoEZqzDUTrea2Y67MBf -----END CERTIFICATE-----Generated at Fri May 16 09:53:22 2025 by rpki-client