$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: cjfhdYFpK7oPcWYuAVLcQZv5r+xvFKHsXEFgbvzICDk= Subject key identifier: B5:B7:97:2D:56:58:29:60:92:BA:98:D7:61:97:76:9D:A8:1A:EA:33 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: 9F Signing time: Tue 13 May 2025 05:26:45 +0000 Manifest this update: Tue 13 May 2025 05:26:44 +0000 Manifest next update: Tue 20 May 2025 05:26:44 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: n1PubIrKFPHp7zxxipN/MTVbKDGpxMKWC4X6rhBLPNA=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: May 13 05:26:44 2025 GMT Not After : May 20 05:26:44 2025 GMT Subject: CN=6822d814-c63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:af:be:9a:85:2e:29:b5:c4:98:57:bf:bb: 5b:4b:40:64:59:2e:2f:b7:00:fc:6c:6f:a0:94:b2: f9:40:71:de:ff:97:01:65:5d:32:91:06:6f:11:a0: 49:5c:9b:a3:b1:e5:31:59:63:32:24:10:91:5a:e9: 1a:44:94:e3:31:3a:38:41:3c:de:75:cc:55:2f:08: 8a:af:fe:22:df:3e:b2:09:04:30:17:46:03:45:b4: 7c:48:03:3d:b7:7f:aa:0d:62:40:ef:dc:8d:ab:36: 88:4e:0c:87:b5:7a:ec:b0:a5:39:08:d3:3a:75:8c: b8:69:65:94:d0:4b:cc:5a:a9:cd:76:04:e9:d9:8c: 46:43:55:7e:9f:e5:15:4c:05:dc:58:60:a8:46:25: 61:f7:b6:4c:31:21:33:7e:de:32:1f:08:3e:68:83: 81:b1:ef:52:2c:74:61:f7:d4:11:f7:85:64:fc:26: 00:46:98:85:98:a4:05:00:3e:50:5c:fd:21:38:b3: 9e:5e:a7:ac:52:0a:d3:c9:e2:96:c8:0a:e5:48:67: cc:92:9c:10:cd:30:db:fb:3c:b8:37:e6:1e:bf:14: 4b:18:c4:f7:69:6d:ef:65:29:6a:7f:ad:ef:01:40: ca:c4:86:3f:af:d0:e4:ba:d9:f6:79:3a:56:23:93: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B7:97:2D:56:58:29:60:92:BA:98:D7:61:97:76:9D:A8:1A:EA:33 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:15:88:40:52:e6:a5:68:12:b9:f5:73:ea:64:1f:16:d8:0a: b7:d2:e2:10:e3:92:43:ac:aa:04:16:07:a2:6a:a6:85:7e:5b: 3c:85:4d:86:1c:c3:63:b9:9c:c5:88:24:44:4b:dd:07:4a:ea: 0d:75:c0:5c:7e:07:3e:12:6d:3c:2c:cc:4d:e7:f0:07:44:86: b7:19:19:f7:7b:c1:a6:33:00:a8:d8:b1:85:01:91:46:23:a6: 5d:f0:b8:76:f0:4a:a4:7f:22:14:2e:c2:05:ea:ae:e6:ca:cc: 3e:9f:3b:e1:ce:17:a3:f4:20:ac:a3:44:a9:07:41:f6:c9:48: 28:c0:07:19:ae:a8:ef:fd:21:bb:ff:f5:b9:e2:da:7e:14:d0: df:fb:a4:16:fc:7e:a8:d1:57:ed:5a:12:71:04:27:b9:4f:18: 17:55:a3:61:04:87:41:1e:fb:0b:13:a1:54:22:35:64:a6:cd: 05:65:61:1c:f8:42:c6:6e:ab:7f:b7:a0:b6:bf:6d:d0:ce:fa: 0e:c4:e7:31:0f:c0:69:6c:c6:68:23:e5:27:7a:43:ed:a5:9c: 96:b2:1d:f7:67:9a:61:88:c1:80:d5:af:30:07:0e:95:cd:9f: e1:bf:d3:93:61:e9:c7:9c:d7:ed:c6:7f:c9:f0:b7:a6:55:09: b4:b3:ce:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUwNTEzMDUyNjQ0WhcNMjUwNTIwMDUyNjQ0WjAYMRYwFAYD VQQDEw02ODIyZDgxNC1jNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeKvvpqFLim1xJhXv7tbS0BkWS4vtwD8bG+glLL5QHHe/5cBZV0ykQZvEaBJ XJujseUxWWMyJBCRWukaRJTjMTo4QTzedcxVLwiKr/4i3z6yCQQwF0YDRbR8SAM9 t3+qDWJA79yNqzaITgyHtXrssKU5CNM6dYy4aWWU0EvMWqnNdgTp2YxGQ1V+n+UV TAXcWGCoRiVh97ZMMSEzft4yHwg+aIOBse9SLHRh99QR94Vk/CYARpiFmKQFAD5Q XP0hOLOeXqesUgrTyeKWyArlSGfMkpwQzTDb+zy4N+YevxRLGMT3aW3vZSlqf63v AUDKxIY/r9Dkutn2eTpWI5O+hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW3ly1W WClgkrqY12GXdp2oGuozMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsFYhAUualaBK59XPqZB8W2Aq30uIQ45JDrKoEFgeiaqaFfls8hU2G HMNjuZzFiCRES90HSuoNdcBcfgc+Em08LMxN5/AHRIa3GRn3e8GmMwCo2LGFAZFG I6Zd8Lh28EqkfyIULsIF6q7mysw+nzvhzhej9CCso0SpB0H2yUgowAcZrqjv/SG7 //W54tp+FNDf+6QW/H6o0VftWhJxBCe5TxgXVaNhBIdBHvsLE6FUIjVkps0FZWEc +ELGbqt/t6C2v23QzvoOxOcxD8BpbMZoI+UnekPtpZyWsh33Z5phiMGA1a8wBw6V zZ/hv9OTYenHnNftxn/J8LemVQm0s85t -----END CERTIFICATE-----Generated at Wed May 14 04:48:52 2025 by rpki-client