$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json) Hash identifier: 1muHzDLvkYqbiJzXpAERGu3ugtIqkfEIe4M6wbmZbPc= Subject key identifier: 85:22:AC:0F:40:CD:88:67:90:41:04:7E:57:15:8D:B0:3A:80:B1:16 Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft Manifest number: 3F Signing time: Sun 11 May 2025 06:15:19 +0000 Manifest this update: Sun 11 May 2025 06:15:18 +0000 Manifest next update: Sun 18 May 2025 06:15:18 +0000 Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: np2R+/TcEMOwLGjGybF2KG9bg8LY2uWquhxZVEsPKXo=) 2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Validity Not Before: May 11 06:15:18 2025 GMT Not After : May 18 06:15:18 2025 GMT Subject: CN=68204076-e4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:74:3e:44:67:7f:c0:67:0c:ea:fa:0e:34:03: 5a:98:ed:ab:be:51:06:af:ca:75:a8:ca:6f:ef:fe: c7:eb:ad:cd:12:a5:1e:ac:4c:0d:80:73:31:c4:3f: 27:62:ce:fd:c4:58:ab:36:ed:06:46:68:44:e7:07: 76:f3:b7:d0:08:aa:25:06:e3:da:3b:5b:ad:94:3d: e9:25:a8:7d:cd:9e:07:bb:65:23:49:70:45:11:7e: 3e:f5:58:20:0b:12:45:aa:6c:5b:26:bd:1b:44:81: dd:ea:88:55:2c:2c:99:2c:8c:42:7e:95:9d:41:7b: f9:a8:df:6f:15:4c:43:f4:d1:e1:99:dd:7a:6e:25: 8e:d5:c6:30:c3:da:c5:59:8e:45:9a:51:cb:cb:44: 1a:e8:9d:df:5d:fd:13:d4:d9:71:27:b1:48:a2:9e: c6:c7:b8:5a:78:84:62:c8:af:e8:ed:64:0f:a2:bf: 93:a2:a2:5c:23:aa:f6:4a:a6:41:6d:83:57:73:32: cf:cb:a6:b4:ba:75:8d:7b:02:32:e9:a5:8b:a1:b8: cb:c7:0e:02:22:7c:f9:5e:a9:57:11:85:f0:84:f9: 55:f4:51:48:dc:55:11:fe:d0:69:9a:07:95:2e:20: 4f:90:b1:ed:d7:06:41:2e:c7:3e:f7:e2:94:3a:c8: e1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:22:AC:0F:40:CD:88:67:90:41:04:7E:57:15:8D:B0:3A:80:B1:16 X509v3 Authority Key Identifier: keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:cd:a5:da:0b:56:7e:f5:4b:3a:26:7b:67:e7:d0:aa:3d:2c: 53:24:09:4b:8a:13:eb:56:68:e0:66:fa:07:3d:04:f0:75:87: c4:50:bc:01:a0:46:f8:df:bd:b2:39:77:02:fa:b7:d7:76:c2: c0:6d:72:cc:c5:f9:a2:2f:c7:75:b3:14:5f:af:01:a7:7f:81: ea:83:88:9f:03:aa:11:b3:e6:31:8d:76:9c:af:36:d0:aa:9d: 14:98:e1:41:0a:dd:dc:e9:fd:69:b1:8b:f7:a9:9d:54:1c:a7: 6f:ab:8d:72:7b:59:28:cc:d5:ba:19:c6:c5:7d:27:9f:63:84: 9b:33:74:15:7d:44:d5:c3:4f:37:f5:dc:fa:79:fd:1c:2a:94: 0b:5c:d1:8e:bf:de:75:85:bc:86:82:2e:84:aa:d5:22:5f:3d: 8b:59:e2:24:62:f2:1e:75:f1:3c:13:ab:c6:1b:9e:55:00:19: 22:a0:ab:0b:98:33:06:f0:3c:f3:06:8b:6e:4a:4a:88:a7:50: 74:84:ca:e4:b0:f2:61:06:16:16:0b:80:fe:2c:b6:e4:b2:93: 18:70:9c:60:a1:6d:17:a1:c9:2d:7a:7c:81:61:f2:fe:9c:17: 3a:8d:2e:04:b7:f9:ae:9b:b7:79:9d:70:7b:7e:c2:93:c8:48: 75:a4:fa:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkQ5MzExMC8GA1UEBRMoRkJBRTREQjkzOTJDODE5MzIxQUY1MTFEQzZCMkI1QUE4 OTk4MTlGQTAeFw0yNTA1MTEwNjE1MThaFw0yNTA1MTgwNjE1MThaMBgxFjAUBgNV BAMTDTY4MjA0MDc2LWU0YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmdD5EZ3/AZwzq+g40A1qY7au+UQavynWoym/v/sfrrc0SpR6sTA2AczHEPydi zv3EWKs27QZGaETnB3bzt9AIqiUG49o7W62UPeklqH3Nnge7ZSNJcEURfj71WCAL EkWqbFsmvRtEgd3qiFUsLJksjEJ+lZ1Be/mo328VTEP00eGZ3XpuJY7VxjDD2sVZ jkWaUcvLRBrond9d/RPU2XEnsUiinsbHuFp4hGLIr+jtZA+iv5OiolwjqvZKpkFt g1dzMs/LprS6dY17AjLppYuhuMvHDgIifPleqVcRhfCE+VX0UUjcVRH+0GmaB5Uu IE+Qse3XBkEuxz734pQ6yOHhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhSKsD0DN iGeQQQR+VxWNsDqAsRYwHwYDVR0jBBgwFoAU+65NuTksgZMhr1EdxrK1qomYGfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRDkzLzgxOEZEQjc4RDQ0 RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTY1TnVUa3NnWk1ocjFFZHhySzFxb21ZR2ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RDkzLzgxOEZEQjc4RDQ0RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pN aHIxRWR4cksxcW9tWUdmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKfNpdoLVn71Szome2fn0Ko9LFMkCUuKE+tWaOBm+gc9BPB1h8RQvAGg RvjfvbI5dwL6t9d2wsBtcszF+aIvx3WzFF+vAad/geqDiJ8DqhGz5jGNdpyvNtCq nRSY4UEK3dzp/Wmxi/epnVQcp2+rjXJ7WSjM1boZxsV9J59jhJszdBV9RNXDTzf1 3Pp5/RwqlAtc0Y6/3nWFvIaCLoSq1SJfPYtZ4iRi8h518TwTq8YbnlUAGSKgqwuY MwbwPPMGi25KSoinUHSEyuSw8mEGFhYLgP4stuSykxhwnGChbRehyS16fIFh8v6c FzqNLgS3+a6bt3mdcHt+wpPISHWk+js= -----END CERTIFICATE-----Generated at Tue May 13 08:05:07 2025 by rpki-client