$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json) Hash identifier: UfwhcMRPOMBrfvd0oNzRRH5BPcf6OmJUvHyQYHKgJiI= Subject key identifier: 45:67:B8:F3:D4:CC:0C:95:6D:B7:6C:86:99:A1:59:6B:AF:AD:DF:E5 Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft Manifest number: 01B7 Signing time: Tue 13 May 2025 02:25:44 +0000 Manifest this update: Tue 13 May 2025 02:25:43 +0000 Manifest next update: Tue 20 May 2025 02:25:43 +0000 Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: hlRxs0rvNCsM7Lv6ZeuZKO6ZFNJErN14DwJ1lmCiV1k=) 2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ksp6qBpZ5kB0EysEaPobcR9QCXbiquNMVXrarPKPN4A=) 3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: xgTk5QLU2Vm82iRKTqkbO5V1pNHv+/+0qFa5a4D2Fm4=) 4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: 5cknTz/azpX9sHHI7VxRFMrA+eqmREBfLXzZWKlWnBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: May 13 02:25:43 2025 GMT Not After : May 20 02:25:43 2025 GMT Subject: CN=6822ada8-167c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:58:d3:36:ed:ab:3f:c0:16:6e:ee:38:18: 07:e1:d2:55:4d:90:8c:13:d5:a3:aa:a1:3b:34:ad: 49:ef:0e:d2:ca:63:b9:ba:c6:0f:0f:26:f7:e0:6f: 63:85:9e:4c:1e:60:22:fa:5a:cb:8f:c7:93:61:92: 3b:6b:eb:fa:55:ad:2c:92:f9:00:cc:3b:c0:1b:cc: 53:bf:0a:38:1f:51:a7:62:4f:3d:10:ef:b6:76:90: 9f:05:bc:63:db:dc:21:c0:b8:2a:ed:72:29:ad:df: 19:c0:f3:1e:a9:54:ad:8f:bc:cd:28:2c:86:61:0c: 35:41:27:78:f2:a4:3b:78:33:a4:3c:08:de:06:8d: 78:ab:d0:72:1f:a5:36:94:5c:22:d8:e9:46:96:a1: b5:7c:1d:bb:73:fe:d4:28:36:ba:b8:0f:3b:ea:18: 75:20:5c:cb:4e:59:73:27:4d:f3:91:8c:99:23:9e: 6c:d6:b1:2c:28:37:dd:4a:ff:f5:ac:c8:47:b9:e3: f8:ff:f9:8a:06:17:2b:28:78:c6:8e:1c:77:40:ef: 07:68:41:45:48:e9:27:1e:61:be:99:45:2c:63:ad: 64:f5:3d:c7:00:3a:b8:b3:b1:c6:10:a4:61:3b:bd: 0b:46:cc:6f:32:af:9e:db:47:f7:3f:04:1e:c2:f2: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:67:B8:F3:D4:CC:0C:95:6D:B7:6C:86:99:A1:59:6B:AF:AD:DF:E5 X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:62:c7:d7:c3:e0:52:79:cf:06:7a:9f:be:13:f6:50:54:8b: d7:2d:0a:65:9c:b5:b6:3c:7c:fc:76:c2:3a:16:eb:fb:3e:ca: 2c:25:1c:7f:9c:ba:67:5a:9f:36:dc:65:24:76:17:9a:2f:bf: ec:0e:56:35:e1:a7:2d:9b:25:26:f9:4b:0f:b1:f1:db:ca:3f: ea:21:e5:0c:3d:79:cc:db:78:76:6e:a9:0c:65:fd:cf:f5:b7: 37:ec:c6:60:9e:76:79:0a:f7:b6:3c:6c:16:74:28:e6:23:6e: b6:c1:bc:79:3f:c8:25:67:7e:ba:c0:65:09:ae:05:cd:41:11: 4d:78:75:b7:cc:4f:b0:68:41:1b:87:44:0a:85:ea:8a:e8:da: 28:2b:00:22:b5:57:7c:61:c5:f9:fa:06:53:e4:d3:c4:0e:3b: 54:3c:75:9d:99:a7:e7:86:a9:50:ca:cc:09:e6:8c:b5:9c:bf: 7c:7c:b8:a7:a4:0f:f7:13:b9:7a:bf:9d:d4:f4:98:2c:7e:39: 70:1a:27:b6:ef:54:e8:53:24:ee:8c:a7:d0:ae:41:c7:43:f2: b4:01:29:db:47:59:c6:c4:a0:4b:4f:63:0a:4d:0e:6e:01:3d: 53:47:38:2d:af:1e:cb:5c:55:c0:b3:0b:40:99:cc:0a:ac:11: f6:3f:2c:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjUwNTEzMDIyNTQzWhcNMjUwNTIwMDIyNTQzWjAYMRYwFAYD VQQDEw02ODIyYWRhOC0xNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl1Y0zbtqz/AFm7uOBgH4dJVTZCME9WjqqE7NK1J7w7SymO5usYPDyb34G9j hZ5MHmAi+lrLj8eTYZI7a+v6Va0skvkAzDvAG8xTvwo4H1GnYk89EO+2dpCfBbxj 29whwLgq7XIprd8ZwPMeqVStj7zNKCyGYQw1QSd48qQ7eDOkPAjeBo14q9ByH6U2 lFwi2OlGlqG1fB27c/7UKDa6uA876hh1IFzLTllzJ03zkYyZI55s1rEsKDfdSv/1 rMhHueP4//mKBhcrKHjGjhx3QO8HaEFFSOknHmG+mUUsY61k9T3HADq4s7HGEKRh O70LRsxvMq+e20f3PwQewvJo3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVnuPPU zAyVbbdshpmhWWuvrd/lMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD cDZIazJrc3NCdnJTcXU1TGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvYsfXw+BSec8Gep++E/ZQVIvXLQplnLW2PHz8dsI6Fuv7PsosJRx/ nLpnWp823GUkdheaL7/sDlY14actmyUm+UsPsfHbyj/qIeUMPXnM23h2bqkMZf3P 9bc37MZgnnZ5Cve2PGwWdCjmI262wbx5P8glZ366wGUJrgXNQRFNeHW3zE+waEEb h0QKheqK6NooKwAitVd8YcX5+gZT5NPEDjtUPHWdmafnhqlQyswJ5oy1nL98fLin pA/3E7l6v53U9JgsfjlwGie271ToUyTujKfQrkHHQ/K0ASnbR1nGxKBLT2MKTQ5u AT1TRzgtrx7LXFXAswtAmcwKrBH2Pyxx -----END CERTIFICATE-----Generated at Wed May 14 04:15:04 2025 by rpki-client