$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: tLqrEKQcnZyfVIk1ZvNr22GkGudYkw2nyFlhmg5eOeQ= Subject key identifier: 32:28:AB:82:EA:38:C0:EA:26:67:90:15:93:DE:D9:29:FD:B3:EA:0B Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: E1 Signing time: Thu 15 May 2025 05:07:08 +0000 Manifest this update: Thu 15 May 2025 05:07:07 +0000 Manifest next update: Thu 22 May 2025 05:07:07 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: M+AIJzdkisadPfRxwNpdK13SEgxZGwHH4mBH6KLrmBw=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: u80/WP/FyzFGjNMk1YFjGdFPVtQyAbLjV6K7I70DeS4=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: fBqSW8jISb6HiF16XH44dQP540yVqiuhIc6mypavGXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: May 15 05:07:07 2025 GMT Not After : May 22 05:07:07 2025 GMT Subject: CN=6825767b-a4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:f6:6b:9b:54:12:bc:90:92:51:f2:52:cb: cd:3e:34:a5:33:2c:42:52:27:8b:ce:f0:0f:de:88: 66:0c:1c:c1:95:ad:db:31:42:5b:be:5b:06:43:14: c0:0a:53:bf:56:16:45:67:30:55:b5:21:db:26:66: 14:bb:4c:d6:aa:02:93:17:70:f2:5f:0e:f3:74:f8: 05:67:cf:97:5e:28:36:9d:20:97:03:2a:00:83:4f: c2:63:eb:8b:a5:de:a1:a1:36:9e:4e:66:32:c5:53: 6c:05:7a:88:e5:41:c3:82:e4:51:a3:3f:37:75:7c: 81:c5:9f:1c:a2:0e:cd:d3:a8:38:f4:9a:14:f4:b8: 3a:b1:33:f2:fb:90:2e:cf:4b:04:45:c3:bc:84:92: 2e:ce:f4:dc:1b:b0:12:7f:6d:88:d5:d9:2b:f7:bc: 33:50:94:05:4a:dc:cd:10:ea:4c:9b:c9:a1:7a:e9: 97:31:6a:f7:e3:89:a7:71:43:73:b5:2e:87:ab:e2: 93:1b:9f:a9:45:5b:ed:f8:14:9b:39:ff:da:a6:8a: c0:e5:2a:f8:3a:f5:a5:6e:7c:24:3d:4d:af:f0:31: 79:e1:b3:20:e0:18:e0:75:b5:32:bb:0d:31:95:3b: c3:78:2e:03:c1:47:08:5a:0d:38:ea:48:f5:ae:ac: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:28:AB:82:EA:38:C0:EA:26:67:90:15:93:DE:D9:29:FD:B3:EA:0B X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7d:34:50:fb:56:2b:81:ff:a0:50:4d:ac:0d:84:a4:1f:f8: 4a:c0:a4:02:cf:0a:27:1b:02:91:87:f8:7a:ee:73:81:b5:0d: a0:a7:26:88:29:62:62:26:03:5d:a5:34:90:71:b6:0d:ca:cd: 0e:9e:e2:c3:a9:bc:67:b4:69:c6:ba:fc:f0:50:d1:b3:c7:6c: 7b:1a:9f:e9:38:d1:ac:65:da:e7:b6:d2:e2:0a:b0:84:7e:3a: e0:1a:2d:15:f5:7e:d4:b8:45:15:22:1a:39:56:ea:94:62:a7: bf:2f:7c:1a:e7:c5:43:2e:52:24:b6:6a:96:8c:1d:33:6a:08: 4b:cd:72:62:9c:b1:d8:fe:3c:6b:08:ff:f0:91:87:ee:04:36: 50:a0:e6:da:38:5b:eb:13:7c:c2:78:a3:27:d8:c6:a6:54:67: f0:22:d1:f3:95:23:9b:fe:06:a6:7c:b5:7c:81:5a:79:a1:cd: 7d:38:f0:3a:48:92:b8:8b:42:8f:fc:78:10:6c:63:fe:0f:ce: 30:d0:97:85:68:d4:de:5a:70:ff:86:6a:03:09:dc:bf:68:51: 0d:2c:67:7c:be:e4:42:68:ec:c2:f9:27:61:68:8d:c6:ba:14: 6d:53:e4:a8:f2:05:af:d3:99:db:4b:f6:3e:1a:23:25:29:63: 7c:17:3d:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwNTE1MDUwNzA3WhcNMjUwNTIyMDUwNzA3WjAYMRYwFAYD VQQDEw02ODI1NzY3Yi1hNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy972a5tUEryQklHyUsvNPjSlMyxCUieLzvAP3ohmDBzBla3bMUJbvlsGQxTA ClO/VhZFZzBVtSHbJmYUu0zWqgKTF3DyXw7zdPgFZ8+XXig2nSCXAyoAg0/CY+uL pd6hoTaeTmYyxVNsBXqI5UHDguRRoz83dXyBxZ8cog7N06g49JoU9Lg6sTPy+5Au z0sERcO8hJIuzvTcG7ASf22I1dkr97wzUJQFStzNEOpMm8mheumXMWr344mncUNz tS6Hq+KTG5+pRVvt+BSbOf/aporA5Sr4OvWlbnwkPU2v8DF54bMg4BjgdbUyuw0x lTvDeC4DwUcIWg046kj1rqx22QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIoq4Lq OMDqJmeQFZPe2Sn9s+oLMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnfTRQ+1Yrgf+gUE2sDYSkH/hKwKQCzwonGwKRh/h67nOBtQ2gpyaI KWJiJgNdpTSQcbYNys0OnuLDqbxntGnGuvzwUNGzx2x7Gp/pONGsZdrnttLiCrCE fjrgGi0V9X7UuEUVIho5VuqUYqe/L3wa58VDLlIktmqWjB0zaghLzXJinLHY/jxr CP/wkYfuBDZQoObaOFvrE3zCeKMn2MamVGfwItHzlSOb/gamfLV8gVp5oc19OPA6 SJK4i0KP/HgQbGP+D84w0JeFaNTeWnD/hmoDCdy/aFENLGd8vuRCaOzC+SdhaI3G uhRtU+So8gWv05nbS/Y+GiMlKWN8Fz0W -----END CERTIFICATE-----Generated at Thu May 15 19:14:37 2025 by rpki-client