$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: c06I1eljblcRfXtQUtglIP45yYzXsMzUyyyt/GbqiO0= Subject key identifier: F9:81:9E:8B:7C:40:43:54:E4:3D:CE:3A:E5:E8:29:6E:45:E2:7D:EB Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: D8 Signing time: Sun 11 May 2025 04:22:33 +0000 Manifest this update: Sun 11 May 2025 04:22:32 +0000 Manifest next update: Sun 18 May 2025 04:22:32 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: psqIlyO068WNNHytEyli7X94kK9kF071yjuVsSziKeQ=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: May 11 04:22:32 2025 GMT Not After : May 18 04:22:32 2025 GMT Subject: CN=68202609-9106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:0f:a7:b3:f1:f5:44:8b:bb:e5:df:25:08: 6c:53:b5:b8:2a:fc:2d:2b:28:82:6b:6d:64:92:06: 6d:ed:96:c7:3a:95:76:63:ec:68:bd:04:ec:bc:80: c0:fc:a7:d2:72:6f:43:32:24:dc:20:49:29:f7:b6: e3:8d:1b:87:7c:37:10:d0:79:ce:f6:a7:13:ef:3e: 5d:5e:3a:1b:00:c6:e8:0b:82:99:f5:de:9a:1c:02: 50:b8:e6:15:23:c2:4a:88:ab:04:32:3d:47:e6:1b: aa:20:84:8e:df:d3:4d:9f:5a:77:cf:00:46:5a:b1: a1:df:ea:7a:57:27:c9:fe:2d:d2:d1:40:ab:3a:0d: 0b:31:79:06:af:b9:69:a6:f3:dd:f7:4c:ec:41:4b: 33:df:07:a9:40:f6:d1:0e:3d:5a:f8:ea:79:04:ee: 4f:ea:e9:e7:2b:06:43:78:04:8e:d1:85:c8:44:3d: c8:fe:ee:54:9d:a1:88:cb:f4:fe:1b:f8:86:55:86: 37:bf:32:22:2e:09:bd:93:98:b9:1e:ef:23:ef:08: fa:0b:fa:e7:a3:36:d2:2f:07:ef:5a:ac:f8:47:c5: 2e:8b:35:62:11:c3:f9:e8:40:1f:1a:ef:f5:d0:31: bb:c7:d6:6d:e1:65:26:a4:c5:74:5e:31:68:47:e3: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:81:9E:8B:7C:40:43:54:E4:3D:CE:3A:E5:E8:29:6E:45:E2:7D:EB X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:aa:4f:a5:70:75:d9:e5:b8:d1:5c:14:0d:d3:77:e1:a2:df: 28:df:ac:b4:0d:ed:f6:12:9b:f0:91:06:ac:01:92:84:1d:e7: b6:0e:e6:d7:e3:e1:33:c2:19:e7:28:68:99:88:70:5c:17:c0: f0:b0:65:99:87:1b:ac:db:28:d3:aa:97:37:b5:fc:27:45:7d: 58:ec:d7:49:66:ac:69:c5:0f:e0:a5:6b:18:fb:6b:d6:ed:39: 17:81:07:4a:9d:64:e7:b4:f1:31:fd:3f:d0:fe:f1:9d:41:81: 3f:cb:23:0e:47:b1:07:da:24:33:14:b0:ec:60:a6:81:eb:a8: 48:77:28:d5:8a:e2:2a:1c:41:60:95:d8:d6:98:06:36:42:2f: 11:a1:36:df:1b:43:31:40:7b:a9:ce:c0:a5:8d:3b:4c:62:dc: dd:61:ff:61:28:01:88:b3:5a:b3:44:d7:22:7b:12:6f:7f:8c: 5e:e9:0b:c5:54:3a:22:1c:69:0c:ae:a6:be:04:ac:eb:50:d7: 3b:b6:1c:59:be:68:2d:14:93:68:9b:47:28:d4:74:af:16:0a: ba:f6:42:a1:ed:e3:3f:dd:7e:0e:31:f8:09:fd:de:d1:a1:87: 62:76:f3:dc:69:2a:e2:fe:ef:63:a0:99:ea:5c:12:fc:54:a1: 42:6d:93:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUwNTExMDQyMjMyWhcNMjUwNTE4MDQyMjMyWjAYMRYwFAYD VQQDEw02ODIwMjYwOS05MTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7QPp7Px9USLu+XfJQhsU7W4KvwtKyiCa21kkgZt7ZbHOpV2Y+xovQTsvIDA /KfScm9DMiTcIEkp97bjjRuHfDcQ0HnO9qcT7z5dXjobAMboC4KZ9d6aHAJQuOYV I8JKiKsEMj1H5huqIISO39NNn1p3zwBGWrGh3+p6VyfJ/i3S0UCrOg0LMXkGr7lp pvPd90zsQUsz3wepQPbRDj1a+Op5BO5P6unnKwZDeASO0YXIRD3I/u5UnaGIy/T+ G/iGVYY3vzIiLgm9k5i5Hu8j7wj6C/rnozbSLwfvWqz4R8UuizViEcP56EAfGu/1 0DG7x9Zt4WUmpMV0XjFoR+MB5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmBnot8 QENU5D3OOuXoKW5F4n3rMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeqk+lcHXZ5bjRXBQN03fhot8o36y0De32EpvwkQasAZKEHee2DubX 4+EzwhnnKGiZiHBcF8DwsGWZhxus2yjTqpc3tfwnRX1Y7NdJZqxpxQ/gpWsY+2vW 7TkXgQdKnWTntPEx/T/Q/vGdQYE/yyMOR7EH2iQzFLDsYKaB66hIdyjViuIqHEFg ldjWmAY2Qi8RoTbfG0MxQHupzsCljTtMYtzdYf9hKAGIs1qzRNciexJvf4xe6QvF VDoiHGkMrqa+BKzrUNc7thxZvmgtFJNom0co1HSvFgq69kKh7eM/3X4OMfgJ/d7R oYdidvPcaSri/u9joJnqXBL8VKFCbZMV -----END CERTIFICATE-----Generated at Sun May 11 14:42:54 2025 by rpki-client