$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: ZV+86820sFxtYEvlZ8c0X6MDrdEx2DQYPAiTTsE6590= Subject key identifier: 83:6C:17:30:02:90:1D:A1:81:23:45:60:0B:5C:47:97:82:03:56:58 Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 014F Signing time: Thu 15 May 2025 03:34:51 +0000 Manifest this update: Thu 15 May 2025 03:34:50 +0000 Manifest next update: Thu 22 May 2025 03:34:50 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: kBSd6jrftwHvaWidZfsRCq3SfdUpCHt2G7RxLbBa1+c=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: +03LMs4GrIEKMr4AUS8THT/+aKHBZJZQJL5qDyXGi38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: May 15 03:34:50 2025 GMT Not After : May 22 03:34:50 2025 GMT Subject: CN=682560da-8855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:7c:7c:c8:65:ef:d9:a8:58:5b:d6:82:98: 76:ad:34:6f:e9:36:14:71:a0:92:63:e5:7b:6c:78: 1d:33:e4:6b:3e:c3:cd:e3:e1:97:ca:8f:e1:fe:12: 10:41:e3:f1:32:b0:e8:bf:7b:36:f3:0c:35:92:08: 9f:a5:25:2e:d8:05:f4:bc:8a:83:1c:62:e9:42:b4: ed:5f:07:ec:76:63:cd:81:d5:b6:90:14:c5:d2:8c: eb:9a:42:d1:87:29:7c:29:4e:91:04:49:0f:9f:11: e4:92:60:9f:0e:93:9e:47:71:ea:ea:d7:72:d9:8a: 89:8c:fa:61:bd:38:f6:9c:99:ff:e6:22:45:9a:56: e1:82:90:2b:5b:54:5d:cf:a3:cc:47:41:74:14:77: a7:5f:23:74:51:f6:b0:bf:86:8a:db:bc:22:98:b6: ed:08:c8:84:0a:85:4e:2f:cb:89:de:2f:16:0a:0f: 68:58:b8:82:a5:df:11:d7:06:39:f3:30:1e:6f:69: a5:b8:01:d7:1e:22:8d:56:16:4e:ee:dc:c2:1b:85: 8e:9b:ee:66:6b:7d:a4:c6:43:d2:79:8f:74:d4:b2: 79:2a:cb:af:5e:d8:3f:6a:62:79:2f:3f:2a:8b:34: 48:d0:46:3b:c6:5e:51:aa:5f:7f:c5:a2:7a:6f:bc: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6C:17:30:02:90:1D:A1:81:23:45:60:0B:5C:47:97:82:03:56:58 X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:79:d5:47:bf:1b:25:9b:f1:1f:2b:41:92:0a:45:d3:c5:f6: af:f0:a9:e7:da:e8:3d:84:95:bc:e9:ad:9e:9c:b1:23:e2:f5: 40:36:4f:af:cf:bd:95:d2:86:df:6e:74:3d:63:fc:d0:26:82: cd:02:e4:92:99:5d:f7:57:ce:fa:2a:e2:9e:c4:e4:f4:99:47: 06:04:c4:6e:25:47:31:59:fd:13:a5:93:0d:b2:1c:ea:b3:ba: d9:63:58:2f:23:b7:48:49:89:ec:4a:cd:86:83:d6:20:d9:60: f8:d7:f4:8b:92:83:9c:3c:75:0c:ec:71:b1:77:1c:b1:1b:49: d7:74:27:12:85:f8:05:ca:20:d6:37:79:b9:c7:94:fc:42:9e: 8b:51:65:43:a2:02:d0:f2:6d:c3:a6:c0:30:af:42:75:1c:09: cd:d6:91:34:07:12:c4:b4:2b:19:a1:d3:f6:77:01:04:f5:31: 51:52:a3:42:72:0e:90:75:43:b2:f3:33:b0:ed:99:19:99:57: d4:ee:1f:94:fd:28:4d:74:de:4f:b4:ee:29:db:d0:41:30:e4: 93:90:b0:c7:c8:71:b6:fb:7e:47:53:df:33:18:3a:1d:59:83: a4:6d:53:60:de:e0:de:b4:6c:e0:9f:1d:7c:03:20:37:fe:87: ea:b1:0c:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjUwNTE1MDMzNDUwWhcNMjUwNTIyMDMzNDUwWjAYMRYwFAYD VQQDEw02ODI1NjBkYS04ODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEp8fMhl79moWFvWgph2rTRv6TYUcaCSY+V7bHgdM+RrPsPN4+GXyo/h/hIQ QePxMrDov3s28ww1kgifpSUu2AX0vIqDHGLpQrTtXwfsdmPNgdW2kBTF0ozrmkLR hyl8KU6RBEkPnxHkkmCfDpOeR3Hq6tdy2YqJjPphvTj2nJn/5iJFmlbhgpArW1Rd z6PMR0F0FHenXyN0Ufawv4aK27wimLbtCMiECoVOL8uJ3i8WCg9oWLiCpd8R1wY5 8zAeb2mluAHXHiKNVhZO7tzCG4WOm+5ma32kxkPSeY901LJ5KsuvXtg/amJ5Lz8q izRI0EY7xl5Rql9/xaJ6b7xJmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINsFzAC kB2hgSNFYAtcR5eCA1ZYMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYedVHvxslm/EfK0GSCkXTxfav8Knn2ug9hJW86a2enLEj4vVANk+v z72V0obfbnQ9Y/zQJoLNAuSSmV33V876KuKexOT0mUcGBMRuJUcxWf0TpZMNshzq s7rZY1gvI7dISYnsSs2Gg9Yg2WD41/SLkoOcPHUM7HGxdxyxG0nXdCcShfgFyiDW N3m5x5T8Qp6LUWVDogLQ8m3DpsAwr0J1HAnN1pE0BxLEtCsZodP2dwEE9TFRUqNC cg6QdUOy8zOw7ZkZmVfU7h+U/ShNdN5PtO4p29BBMOSTkLDHyHG2+35HU98zGDod WYOkbVNg3uDetGzgnx18AyA3/ofqsQxx -----END CERTIFICATE-----Generated at Fri May 16 11:52:49 2025 by rpki-client